www.jikn.go.id

- Arsip Nasional Republik Indonesia -

Issued by GeoTrust EV SSL CA - G4

About this certificate

This digital certificate with serial number 06:6d:d9:f5:5b:86:12:72:7b:62:1c:88:51:14:73:78 was issued on by GeoTrust Inc..

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Arsip Nasional Republik Indonesia

Company registration number: 19610516
Organization: Arsip Nasional Republik Indonesia
State / Province: Jakarta
Locality: Jakarta
Country: ID

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:6d:d9:f5:5b:86:12:72:7b:62:1c:88:51:14:73:78
Serial Number (int): 8545749054398818924164351039416595320
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: de:cf:5c:50:b7:ae:02:1f:15:17:aa:16:e8:0d:b5:28:9d:6a:5a:f3

Fingerprint (sha1): e2:bd:bb:44:f9:7e:df:51:f2:10:08:64:d5:0b:0b:d6:80:ab:21:bb
Fingerprint (sha256): 1b:49:67:d3:29:00:22:84:88:ac:63:79:1e:8e:0f:2e:99:67:3d:5d:cd:c6:fe:7a:18:68:39:df:a6:64:44:41

Issuing Certificate URL: http://gm.symcb.com/gm.crt

Revocation information

OCSP Server: http://gm.symcd.com
CRL Distribution Point: http://gm.symcb.com/gm.crl

Check the revocation status for certificate www.jikn.go.id

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.jikn.go.id

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

svc.jikn.go.id
sikn.jikn.go.id
diklat.jikn.go.id
helpdesk.jikn.go.id
services.jikn.go.id
mail.jikn.go.id
mobile.jikn.go.id
news.jikn.go.id
www.jikn.go.id
jikn.go.id

Other certificates including the domain name jikn.go.id

(limited to 100 certificates)
support.lazycoupons.in
sni207491.cloudflaressl.com
helpdesk.avoxis.com
support.netixsolutions.com
support.fanuccontrolrepair.com
support.fanuccontrolrepair.com
diklat.jikn.go.id
www.jikn.go.id
sni207491.cloudflaressl.com
support.fanuccontrolrepair.com
support.fanuccontrolrepair.com
sni207491.cloudflaressl.com
helpdesk.wrightwaytech.org
sni207491.cloudflaressl.com
helpdesk.avoxis.com
support.fanuccontrolrepair.com
sni207491.cloudflaressl.com
sni207491.cloudflaressl.com
www.jikn.go.id
support.fanuccontrolrepair.com
sni207491.cloudflaressl.com
helpdesk.avoxis.com
support.fanuccontrolrepair.com
www.jikn.go.id
testkb.infasme.org
diklat.jikn.go.id
jikn.go.id
support.fanuccontrolrepair.com
helpdesk.avoxis.com
www.jikn.go.id
support.fanuccontrolrepair.com
support.fanuccontrolrepair.com
sni207491.cloudflaressl.com
sikn.jikn.go.id
sni207491.cloudflaressl.com
helpdesk.avoxis.com
sni207491.cloudflaressl.com
sni207491.cloudflaressl.com
www.jikn.go.id
jikn.go.id
sni207491.cloudflaressl.com
support.fanuccontrolrepair.com
sni207491.cloudflaressl.com
sni207491.cloudflaressl.com
support.fanuccontrolrepair.com
support.fanuccontrolrepair.com
support.netixsolutions.com
www.jikn.go.id
www.jikn.go.id
sni207491.cloudflaressl.com
support.detect-measure.com
sni207491.cloudflaressl.com
www.jikn.go.id
www.jikn.go.id
sni207491.cloudflaressl.com
sni207491.cloudflaressl.com
sni207491.cloudflaressl.com
www.jikn.go.id
sni207491.cloudflaressl.com
www.jikn.go.id
www.jikn.go.id
support.fanuccontrolrepair.com
support.fanuccontrolrepair.com
sni207491.cloudflaressl.com
support.fanuccontrolrepair.com
www.jikn.go.id
sni207491.cloudflaressl.com
service.binmanager.com.au
www.jikn.go.id
www.jikn.go.id
jikn.go.id
support.fanuccontrolrepair.com
sni207491.cloudflaressl.com
sni207491.cloudflaressl.com
www.jikn.go.id
sni207491.cloudflaressl.com
sni207491.cloudflaressl.com
diklat.jikn.go.id
sni207491.cloudflaressl.com
sni207491.cloudflaressl.com
diklat.jikn.go.id
sni207491.cloudflaressl.com
support.fanuccontrolrepair.com
jikn.go.id
support.fanuccontrolrepair.com
sni207491.cloudflaressl.com
support.fanuccontrolrepair.com
sni207491.cloudflaressl.com
support.fanuccontrolrepair.com
jikn.go.id
www.jikn.go.id
support.fanuccontrolrepair.com
sikn.jikn.go.id
sni207491.cloudflaressl.com
support.fanuccontrolrepair.com
diklat.jikn.go.id
sni207491.cloudflaressl.com
support.nxtgentech.uk
sni207491.cloudflaressl.com
sni207491.cloudflaressl.com

Certificate

The complete raw certificate details for www.jikn.go.id in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysTF8SHYCe3IKp0k1R9D
NwF1lU9CivG3xy22EbKCfBuWUZIvP7zPYoWr1PxS1u85KrGgNgv7TJAYuMob/xZX
5giLXsFR/dw5ipoj7MfqGrloTTbEQoQdZ+CdIlFVjeDgG7DxE3h4aF8Ft8jw9t6r
SKbBLQef9GcSVhzlbAmdybuhUJwjShw6mr4UkGT+TpWAYg3CSldAyZzzmDqiBI8W
gVfBiCcSn5ZyIka40EzUUkC2/a38pa6GQ3g67qtKgXZCC56gn4Gx2gfEy/t3Wppf
0C8w8FBym11TXLAV4dNUC3xdbUXGvs+I1Lg7vST40iDE3VYv+uPIiKQK1bm9LqNX
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8545749054398818924164351039416595320
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust EV SSL CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ID'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '19610516'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ID'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Jakarta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Jakarta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Arsip Nasional Republik Indonesia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.jikn.go.id'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25597170089758468107687335350639349187475375443947366864377427346476833782986275835005105319923166879649883133905135639287327895456565252378507735951104909437837375058265119801058462574781859475152660969028429686086379204791526708123577300360278606421193153363996593167194293742684765477619180534607142911483338164331198181526030883468968755146793497405159064417062613944500264279608042788942989273161158845469715474679514284748791207851759892594425102096594503796640953670680196621706461199081985964496705396705586570674532382522604747828254378381043168133756930271053436916970177377322592247176094269239814571382659
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (178 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svc.jikn.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sikn.jikn.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diklat.jikn.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.jikn.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.jikn.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.jikn.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.jikn.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.jikn.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jikn.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jikn.go.id'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName decf5c50b7ae021f1517aa16e80db5289d6a5af3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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