ngcp-qa2.tomthumb.com

- Safeway Inc. -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 26:a2:71:0a:a0:fe:17:81:f8:08:de:b5:8f:dd:5c:c1 was issued on by GeoTrust Inc..

With 42 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Safeway Inc.

Organization: Safeway Inc.
Organization unit: Akamai SAN SSL OV
State / Province: California
Locality: Pleasanton
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 26:a2:71:0a:a0:fe:17:81:f8:08:de:b5:8f:dd:5c:c1
Serial Number (int): 51354108685301062769097088980137893057
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): d2:7d:1c:9c:4a:74:60:81:cb:b1:aa:38:79:55:50:63:0c:45:55:3c
Fingerprint (sha256): 1f:39:6c:f0:ad:d0:ad:ae:f2:b9:bc:2e:6f:e2:20:77:8c:d7:f9:38:c3:7b:e7:57:f3:b9:55:e8:10:47:ea:8d

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate ngcp-qa2.tomthumb.com

42

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ngcp-qa2.tomthumb.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mcomqa.safeway.com
ngcp-qa1.pavilions.com
peoplesoft-q1.safeway.com
peoplesoft-q3.safeway.com
ngcp-qac.tomthumb.com
shopecomqa.safeway.com
ngcp-qa1.vons.com
ngcp-qac.safeway.com
ngcp-prf.randalls.com
ngcp-qac.vons.com
ngcp-qa2.vons.com
ngcp-qa2.safeway.com
ngcp-qa1.carrsqc.com
ngcp-qa2.randalls.com
ngcp-prf.pavilions.com
ngcp-qac.carrsqc.com
shopecompreview.safeway.com
ngcp-prf.carrsqc.com
ngcp-qac.pavilions.com
ngcp-qa1.randalls.com
ngcp-qa2.carrsqc.com
ngcp-qa1.tomthumb.com
shopecomqa.albertsons.com
peoplesoft-q5.safeway.com
shopecompreview.albertsons.com
peoplesoft-q4.safeway.com
mcomqa.vons.com
ngcp-prf.tomthumb.com
mcompreview.vons.com
ngcp-qa1.safeway.com
ngcp-prf.vons.com
shopecomqa.vons.com
peoplesoft-q2.safeway.com
ngcp-qa2.pavilions.com
mcompreview.safeway.com
ngcp-qac.randalls.com
qa.partners.safeway.com
identity-qa.safeway.com
shopecompreview.vons.com
ngcp-prf.safeway.com
pwreset-qa.safeway.com
ngcp-qa2.tomthumb.com

Other certificates including the domain name tomthumb.com

(limited to 100 certificates)
peoplesoft-pr.safeway.com
incapsula.com
shop-qa3.safeway.com
shop-dev1-origin.safeway.com
www-qa1.albertsons.com
www-qa2.albertsons.com
local.pharmacy.tomthumb.com
local.tomthumb.com
auth.tomthumb.com
api-prod-origin.safeway.com
imperva.com
incapsula.com
ngcp-qi.tomthumb.com
imperva.com
shop-qa3-origin.safeway.com
shop-qa1.safeway.com
www-qa3.albertsons.com
shop-qa1.safeway.com
incapsula.com
embed-answers.cority.com.pagescdn.com
ngcp-qa2.tomthumb.com
www-dev1.albertsons.com
imperva.com
shop-qa1.safeway.com
api-qa1-origin.safeway.com
shop-dev1-origin.safeway.com
incapsula.com
peoplesoft-pr.safeway.com
www-dev2.albertsons.com
shop-qa1.safeway.com
peoplesoft-pr.safeway.com
shop-qa1.safeway.com
api-qa3-origin.safeway.com
ctsecure.mywebgrocer.com
api-stage-origin.safeway.com
www.tomthumb.com
api-dev1-origin.safeway.com
shop-dev2-origin.safeway.com
pharmacy.tomthumb.com
pharmacy.tomthumb.com
blog-hitchhikers.yext.com
shop-qa3.safeway.com
shop-prod-origin.safeway.com
shop-qa1.safeway.com
incapsula.com
auth.tomthumb.com
ngcp-qa2.safeway.com
shop-qa1-origin.safeway.com
www-qa2.albertsons.com
www-dev1-origin.safeway.com
peoplesoft-pr.safeway.com
san3.yext-cdn.com
imperva.com
www.safeway.com
shop-qa2-origin.safeway.com
www.tomthumb.com
shop-qa1-origin.safeway.com
www-beta.albertsons.com
shop-dev3-origin.safeway.com
peoplesoft-pr.safeway.com
api-qa1-origin.safeway.com
san2.yext-cdn.com
ecom-dev1-azweb.safeway.com
san2.yext-cdn.com
ngcp-qa2.safeway.com
pharmacy.tomthumb.com
delivery.tomthumb.com
www.tomthumb.com
imperva.com
pharmacy.tomthumb.com
www-stage-origin.safeway.com
local.tomthumb.com
www-qa1.albertsons.com
incapsula.com
shop-qa1.safeway.com
local.pharmacy.tomthumb.com
shop-dev3-origin.safeway.com
imperva.com
api-prod-origin.safeway.com
incapsula.com
local.tomthumb.com
www-dev3.albertsons.com
shop-qa3.safeway.com
imperva.com
auth-q.tomthumb.com
api-prod.safeway.com
shop-qa1.safeway.com
api-prod-origin.safeway.com
coupons.albertsons.com
ngcp-qa2.tomthumb.com
shop-qa3-origin.safeway.com
www.tomthumb.com
imperva.com
www-stage-origin.safeway.com
ngcp-qa2.safeway.com
shop-dev1-origin.safeway.com
www-qa1-origin.safeway.com
api-qa2-origin.safeway.com
shop-qa3-origin.safeway.com
shop-prod-origin.safeway.com

Certificate

The complete raw certificate details for ngcp-qa2.tomthumb.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwA73uvs8TwpTLPxXNSW
nfw1mX//qCPp+bLxSmchooP28Du34wn06w1O/Ki3iKPlY1g2EpyZrrURIic4sQlV
uibnklXRInFCnFQZDfJ3abOJPWLYq+jmwl2Vr0ymQMyf05edhC1e1nz3TbxcHOXA
m1O9yXLi93LQf6hDBJMuwB+SYYclLv2+iJyaKaCR6sYzzGmAHzp4OA0zhtwhteEd
+kcjUi/UoEV0rgtkI3girEBs8inrVMPEYlUKgwStwfCndXxO/a5Hf6el8Snw6pFX
iqRfNMtVrtryv5apXHsM9N4QUt/pCoQUA1uB9QK5z0LWY1YQ8DeZmxGyOQq9gjRd
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 51354108685301062769097088980137893057
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Pleasanton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Safeway Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Akamai SAN SSL OV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ngcp-qa2.tomthumb.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24616584794106577724064467369042257596744417982931790098235869362029947191085391572766706617610071190338515188093738312963355423504115446398336311529582468454334066649227016691679844940894312372459960348732297386822533882445247794205759182392654111155512142745659726649258797218983662903797431983843691588606576950877104972179355684676310450565636527019509662467741612999117104610818026425178535703074692820840554942947307181571476221771328623196670203275452546484419590677430533375598049459831309484967894789703035431954537150526106674167910343847425472665612012658046365474839100231567936700949889974798751334948321
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (988 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcomqa.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qa1.pavilions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peoplesoft-q1.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peoplesoft-q3.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qac.tomthumb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopecomqa.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qa1.vons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qac.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-prf.randalls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qac.vons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qa2.vons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qa2.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qa1.carrsqc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qa2.randalls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-prf.pavilions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qac.carrsqc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopecompreview.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-prf.carrsqc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qac.pavilions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qa1.randalls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qa2.carrsqc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qa1.tomthumb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopecomqa.albertsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peoplesoft-q5.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopecompreview.albertsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peoplesoft-q4.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcomqa.vons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-prf.tomthumb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcompreview.vons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qa1.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-prf.vons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopecomqa.vons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peoplesoft-q2.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qa2.pavilions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcompreview.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qac.randalls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.partners.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity-qa.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopecompreview.vons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-prf.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pwreset-qa.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngcp-qa2.tomthumb.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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