cisco-expc02.fanatics.com
- Fanatics Inc. -
Issued by GeoTrust SSL CA - G3
About this certificate
This digital certificate with serial number 36:fa:3c:40:5f:d3:77:1e:2f:ba:94:91:08:10:24:25 was issued on by GeoTrust Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Fanatics Inc.
Organization:
Fanatics Inc.
Organization unit: IT
Organization unit: IT
State / Province:
Florida
Locality: Jacksonville
Country: US
Locality: Jacksonville
Country: US
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 36:fa:3c:40:5f:d3:77:1e:2f:ba:94:91:08:10:24:25Serial Number (int): 73077608031854505856500724759195034661
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c
Fingerprint (sha1): 18:79:51:0a:77:5a:53:68:55:f9:d9:51:a7:24:71:8a:69:6f:f8:58
Fingerprint (sha256): 1a:2c:ec:90:d6:68:97:3f:62:e5:70:76:e1:a2:36:0e:e2:d5:76:16:14:f8:42:d8:3f:b7:3b:09:04:5e:f1:0f
Issuing Certificate URL: http://gn.symcb.com/gn.crt
Revocation information
OCSP Server: http://gn.symcd.comCRL Distribution Point: http://gn.symcb.com/gn.crl
Check the revocation status for certificate cisco-expc02.fanatics.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cisco-expc02.fanatics.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.cisco-expc.fanatics.com
cisco-expc02.fanatics.com
cisco-expc02.fanatics.com
Other certificates including the domain name fanatics.com
(limited to 100 certificates)
secure03.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
jira.fanatics.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
domains.returnly.com
cisco-expc02.fanatics.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
cisco-expe04.fanatics.com
na85-1.cdn.salesforce-communities.com
secure02.fanaticsretailgroup.com
smcq-edge-cluster.fanatics.com
adfs.fanatics.com
secure01.fanaticsretailgroup.com
na85-1.cdn.salesforce-communities.com
image.email-aaanational.com
okta-iwa.fanatics.com
secure02.fanaticsretailgroup.com
www.nflshop.com
gag.fanatics.com
na85-1.cdn.salesforce-communities.com
imp04.fanatics.com
image.email-aaanational.com
image.email-aaanational.com
secure01.fanaticsretailgroup.com
na85-1.cdn.salesforce-communities.com
na85-1.cdn.salesforce-communities.com
domains.returnly.com
secure02.fanaticsretailgroup.com
image.email-aaanational.com
na85-1.cdn.salesforce-communities.com
secure01.fanaticsretailgroup.com
imp01.fanatics.com
secure01.fanaticsretailgroup.com
domains.returnly.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
image.email-aaanational.com
plm.fanatics.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
www.nflshop.com
secure01.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
na85-1.cdn.salesforce-communities.com
cucm04.fanatics.com
secure02.teamfanshop.com
secure02.fanaticsretailgroup.com
returns.fanatics.com
san-2-s1.tlsprovisioning.exacttarget.com
cucm03.fanatics.com
image.email-aaanational.com
cisco-expc02.fanatics.com
domains.returnly.com
owa.fanatics.com
domains.returnly.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
cisco-expe02.fanatics.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
returns.fanatics.com
asrfanaticsmgr.fanatics.com
secure02.fanaticsretailgroup.com
image.email-aaanational.com
www.nflshop.com
san-2-s1.tlsprovisioning.exacttarget.com
secure01.fanaticsretailgroup.com
image.email-aaanational.com
domains.returnly.com
www.footballfanatics.com
www.nflshop.com
plm.fanatics.com
image.email-aaanational.com
cisco-expe03.fanatics.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
image.email-aaanational.com
secure02.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
cisco-expe04.fanatics.com
cucm03.fanatics.com
secure01.fanaticsretailgroup.com
www.nflshop.com
*.fanatics.com
secure01.fanaticsretailgroup.com
portal.wifi.fanatics.com
secure01.fanaticsretailgroup.com
plm.fanatics.com
image.email-aaanational.com
secure02.fanaticsretailgroup.com
jira.fanatics.com
image.email-aaanational.com
secure02.fanaticsretailgroup.com
jira.fanatics.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
domains.returnly.com
cisco-expc02.fanatics.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
cisco-expe04.fanatics.com
na85-1.cdn.salesforce-communities.com
secure02.fanaticsretailgroup.com
smcq-edge-cluster.fanatics.com
adfs.fanatics.com
secure01.fanaticsretailgroup.com
na85-1.cdn.salesforce-communities.com
image.email-aaanational.com
okta-iwa.fanatics.com
secure02.fanaticsretailgroup.com
www.nflshop.com
gag.fanatics.com
na85-1.cdn.salesforce-communities.com
imp04.fanatics.com
image.email-aaanational.com
image.email-aaanational.com
secure01.fanaticsretailgroup.com
na85-1.cdn.salesforce-communities.com
na85-1.cdn.salesforce-communities.com
domains.returnly.com
secure02.fanaticsretailgroup.com
image.email-aaanational.com
na85-1.cdn.salesforce-communities.com
secure01.fanaticsretailgroup.com
imp01.fanatics.com
secure01.fanaticsretailgroup.com
domains.returnly.com
secure01.fanaticsretailgroup.com
secure03.fanaticsretailgroup.com
secure02.teamfanshop.com
secure01.fanaticsretailgroup.com
image.email-aaanational.com
plm.fanatics.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
www.nflshop.com
secure01.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
secure02.fanaticsretailgroup.com
na85-1.cdn.salesforce-communities.com
cucm04.fanatics.com
secure02.teamfanshop.com
secure02.fanaticsretailgroup.com
returns.fanatics.com
san-2-s1.tlsprovisioning.exacttarget.com
cucm03.fanatics.com
image.email-aaanational.com
cisco-expc02.fanatics.com
domains.returnly.com
owa.fanatics.com
domains.returnly.com
secure01.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
cisco-expe02.fanatics.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
returns.fanatics.com
asrfanaticsmgr.fanatics.com
secure02.fanaticsretailgroup.com
image.email-aaanational.com
www.nflshop.com
san-2-s1.tlsprovisioning.exacttarget.com
secure01.fanaticsretailgroup.com
image.email-aaanational.com
domains.returnly.com
www.footballfanatics.com
www.nflshop.com
plm.fanatics.com
image.email-aaanational.com
cisco-expe03.fanatics.com
secure01.fanaticsretailgroup.com
secure02.teamfanshop.com
image.email-aaanational.com
secure02.fanaticsretailgroup.com
secure01.fanaticsretailgroup.com
cisco-expe04.fanatics.com
cucm03.fanatics.com
secure01.fanaticsretailgroup.com
www.nflshop.com
*.fanatics.com
secure01.fanaticsretailgroup.com
portal.wifi.fanatics.com
secure01.fanaticsretailgroup.com
plm.fanatics.com
image.email-aaanational.com
secure02.fanaticsretailgroup.com
jira.fanatics.com
image.email-aaanational.com
Certificate
The complete raw certificate details for cisco-expc02.fanatics.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGLDCCBRSgAwIBAgIQNvo8QF/Tdx4vupSRCBAkJTANBgkqhkiG9w0BAQsFADBE MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTYwNTE3MDAwMDAwWhcNMTgwNTE3MjM1 OTU5WjB/MQswCQYDVQQGEwJVUzEQMA4GA1UECAwHRmxvcmlkYTEVMBMGA1UEBwwM SmFja3NvbnZpbGxlMRYwFAYDVQQKDA1GYW5hdGljcyBJbmMuMQswCQYDVQQLDAJJ VDEiMCAGA1UEAwwZY2lzY28tZXhwYzAyLmZhbmF0aWNzLmNvbTCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBALJ8xpeHWqQVx19SPiP7RH2bdyNmeH2tIBF3 EaZBpIXfjM0EFiPRkMswbVKbEH+17rOy1QUVvctKFR4iTLniUbaZHklBn/2p74QL R6SHgOvFCpa+KTkONMVYL4hDcCCYpR0CgjFzbNBEgoDT5V5UYReHPxWVUZqyXL2E ZcQQf1EFi1b6oCmLfQJhYC25QQ7pYmrLKlk4b3uGq6TX4xYiw4hCrcO9IvSjietX mEakVoxerAPcSjQxSN7Bv6oSPQhQ5gYQm23KvwsrVzM72ypG8ABsHrNq14lDcMdH JvdpXinFpovt/ZErS/1Zgjmzj6CgEsBitjiUEOuaeuLpyhLPoWR5XgdzyPP5TAV6 9G3+Cq5vqy5v+Fj/xS5PbEazmcqsg1PhGNbQlS2dg9ALjrbAtXqkas6tbvsKsiQ8 VfZzzPHIGhD6vYTMoDtAvU4giRbQlbJLf+1U4qwltx4OOGlhvo97wIt61h2UM0uz Ps2PjFYD4aSWViVT3B0jo91B0yvXEn98i6MMxrjRRPwWos6cVx5C4KhF0ogyzNcD KAmhy7PGBkLOo2cjt+KSn/owq51DWPTQbFjISLNYwVFfP1pxV9pLXuZFLQ6r4kAN xsVML7ltA8mcE594lP2/wQQzOBa+lzTNHEbxz+XdkWnOBVBbpLkjSweVC6gIjCg6 7kntEKbHAgMBAAGjggHdMIIB2TBBBgNVHREEOjA4ght3d3cuY2lzY28tZXhwYy5m YW5hdGljcy5jb22CGWNpc2NvLWV4cGMwMi5mYW5hdGljcy5jb20wCQYDVR0TBAIw ADAOBgNVHQ8BAf8EBAMCBaAwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL2duLnN5 bWNiLmNvbS9nbi5jcmwwgZ0GA1UdIASBlTCBkjCBjwYGZ4EMAQICMIGEMD8GCCsG AQUFBwIBFjNodHRwczovL3d3dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL3JlcG9z aXRvcnkvbGVnYWwwQQYIKwYBBQUHAgIwNQwzaHR0cHM6Ly93d3cuZ2VvdHJ1c3Qu Y29tL3Jlc291cmNlcy9yZXBvc2l0b3J5L2xlZ2FsMB0GA1UdJQQWMBQGCCsGAQUF BwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBTSb/eW9IU/cjwwfSPahXibo3xafDBX BggrBgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9nbi5zeW1jZC5jb20w JgYIKwYBBQUHMAKGGmh0dHA6Ly9nbi5zeW1jYi5jb20vZ24uY3J0MBMGCisGAQQB 1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCYI5vtT/iQH42HaPN/6mbe GUGT1AbXmOq9SHBvjRX5eVfbPYv54GNHbBGLXV39F0Jhifjz4815yzxUy0jNjPgX Rzu6BxHwJDcPXE3uBZNO5xMUThmtPRcqfK4noQr8BgCMHnewzKoKehqFeZZPMGvX iuSUVssg3DO1PxMIK+a6ZeIApd/YRCiw8w6fdMPrEusshtcSPuzTc/xdEmffOoF6 ku2ZIxkc0FT4qab4j8UcDb1mcrtl4OnRWFySmLkMrvyiOUGVe5GMLBbJRPIk809X t72oiBDGNV4X5H8HOaxFPJ4GYKkPnny/ye7ts/zSR6MoS5HXAUU0OvgMYuy3fYK1 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsnzGl4dapBXHX1I+I/tE fZt3I2Z4fa0gEXcRpkGkhd+MzQQWI9GQyzBtUpsQf7Xus7LVBRW9y0oVHiJMueJR tpkeSUGf/anvhAtHpIeA68UKlr4pOQ40xVgviENwIJilHQKCMXNs0ESCgNPlXlRh F4c/FZVRmrJcvYRlxBB/UQWLVvqgKYt9AmFgLblBDuliassqWThve4arpNfjFiLD iEKtw70i9KOJ61eYRqRWjF6sA9xKNDFI3sG/qhI9CFDmBhCbbcq/CytXMzvbKkbw AGwes2rXiUNwx0cm92leKcWmi+39kStL/VmCObOPoKASwGK2OJQQ65p64unKEs+h ZHleB3PI8/lMBXr0bf4Krm+rLm/4WP/FLk9sRrOZyqyDU+EY1tCVLZ2D0AuOtsC1 eqRqzq1u+wqyJDxV9nPM8cgaEPq9hMygO0C9TiCJFtCVskt/7VTirCW3Hg44aWG+ j3vAi3rWHZQzS7M+zY+MVgPhpJZWJVPcHSOj3UHTK9cSf3yLowzGuNFE/BaizpxX HkLgqEXSiDLM1wMoCaHLs8YGQs6jZyO34pKf+jCrnUNY9NBsWMhIs1jBUV8/WnFX 2kte5kUtDqviQA3GxUwvuW0DyZwTn3iU/b/BBDM4Fr6XNM0cRvHP5d2Rac4FUFuk uSNLB5ULqAiMKDruSe0QpscCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 73077608031854505856500724759195034661 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-17 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-17 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Florida' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Jacksonville' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Fanatics Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'cisco-expc02.fanatics.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 728165084134424387520435983238615811289304023434186407338412521839366707505111437631500766010337784546780672106234425275780128399170577573990619200097984987441645280394428517807378314023319954133349040306860028620728989217513560554969420229959014388313568173818740112978521467351481660877875202625928166764897200916026569026344508709143114627758531466874083905240433404058580615455060568618410338146730493456350053129372412002168707514915332639358799626056725118068155842725316268029350963559072185342083688272544805981993846104923591283246182697344320603288660566647449262554161115436299981474699871230746994178416839062378151950525746081703903352830724364397931894397606027579308101773691758865057661232050242176468031009290816317127046242135647075867595570500903728910070907158629864714128352819760948925094813539443652788496873665336281085934760599832256339522018699627176835058180519505877085939263080602378685873629325301968186338082970954552492128310253845816605129751862584695428995547038172657390094741641439281217260888029872401370105422260504440158599531854686485844296746266034289975244712589766586903806495629540007645549646283346751859149884464378787966593355683936560872609844826677803672782190238101335328453800535751 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cisco-expc.fanatics.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cisco-expc02.fanatics.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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