checkintest.continental.com

- United Airlines Inc -

Issued by GeoTrust SHA256 SSL CA

About this certificate

This digital certificate with serial number 3c:cd:43:f2:87:eb:4c:eb:8a:72:74:0c:6c:58:59:96 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

United Airlines Inc

Organization: United Airlines Inc
Organization unit: Technology
State / Province: Illinois
Locality: Chicago
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3c:cd:43:f2:87:eb:4c:eb:8a:72:74:0c:6c:58:59:96
Serial Number (int): 80819478739818302290270018737750432150
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 14:67:8e:ed:83:4f:d6:1e:9d:40:04:0c:04:46:a1:70:34:b2:0f:72

Fingerprint (sha1): a9:cc:28:6e:44:58:6e:07:a6:04:7a:f2:a2:66:59:c9:2d:d5:ae:c9
Fingerprint (sha256): 21:aa:5a:6f:81:03:55:14:01:4a:66:8d:34:a2:27:b2:4b:d4:0d:b7:cb:5f:87:1c:da:f6:84:81:b6:24:fa:74

Issuing Certificate URL: http://gj.symcb.com/gj.crt

Revocation information

OCSP Server: http://gj.symcd.com
CRL Distribution Point: http://gj.symcb.com/gj.crl

Check the revocation status for certificate checkintest.continental.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for checkintest.continental.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

checkintest.continental.com

Other certificates including the domain name continental.com

(limited to 100 certificates)
ocitest.continental.com
supplierdiversity.continental.com
cdn.continental.com
epcis.clap.continental.com
epca.clap.continental.com
secure.switchfly.com
clap.continental.com
www.united.com
ecr.clap.continental.com
secure.switchfly.com
agridur.continental.com
hotels.continental.com
stage.continental.com
oci.continental.com
mag.continental.com
dropsite.continental.com
video.continental.com
agridur.continental.com
checkinstage.continental.com
feedback.continental.com
media.continental.com
rewardone.continental.com
secure.switchfly.com
desto-accp.clap.continental.com
hotels.continental.com
media.continental.com
stage.united.com
sojern.continental.com
mna.clap.continental.com
secure.switchfly.com
www.united.com
webservices.continental.com
continental.com
smartphone.continental.com
www.united.com
www.united.com
checkintest.continental.com
stage.continental.com
www-int.continental.com
webcast.continental.com
video.continental.com
www.continental-tires.com
uat.continental.com
stage.united.com
oci.continental.com
stage.united.com
www.united.com
www.continental.com
epca-test.clap.continental.com
preprod.continental.com
checkinstage.continental.com
continental.com
synd-corporate.continental.com
secure.switchfly.com
webcast-tool.continental.com
f3-test.clap.continental.com
reslookup.continental.com
uastage.continental.com
mna-test.clap.continental.com
webserviceshq.continental.com
fuehrungen-regensburg.continental.com
continental.com
www.continental.com
rewardone.continental.com
video.continental.com
fuehrungen-regensburg.continental.com
video.continental.com
webcast.continental.com
reslookup.continental.com
pda.continental.com
mediacloud.continental.com
media.continental.com
stage.continental.com
authac.continental.com
palm.continental.com
dropsite.continental.com
start.clap.continental.com
media-webcast.continental.com
checkinstage.continental.com
secure.switchfly.com
www.continental-tires.com
www.continental-tires.com
www.continental.com
www.continental-tires.com
www.united.com
pda.continental.com
www.continental-tires.com
www.continental.com
palm.continental.com
webserviceshq.continental.com
secure.switchfly.com
apiac.continental.com
www.united.com
secure.switchfly.com
secure.switchfly.com
media.continental.com
clap.continental.com
events.continental.com
www.continental.com
image.continental.com

Certificate

The complete raw certificate details for checkintest.continental.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGFDCCBPygAwIBAgIQPM1D8ofrTOuKcnQMbFhZljANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEfMB0GA1UEAxMW
R2VvVHJ1c3QgU0hBMjU2IFNTTCBDQTAeFw0xNjExMTYwMDAwMDBaFw0xNzExMTYy
MzU5NTlaMIGLMQswCQYDVQQGEwJVUzERMA8GA1UECAwISWxsaW5vaXMxEDAOBgNV
BAcMB0NoaWNhZ28xHDAaBgNVBAoME1VuaXRlZCBBaXJsaW5lcyBJbmMxEzARBgNV
BAsMClRlY2hub2xvZ3kxJDAiBgNVBAMMG2NoZWNraW50ZXN0LmNvbnRpbmVudGFs
LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALMKXDqm8u0V4val
oQ3zKlCy2w1A0J7+F/rHzDVMiSiFWOIs1Z3c5CFe8jX9HuHCp/7+7O3ho9omEIuR
q68VdRQJZ1WbqJMxj5Zlp2qb1OguTxzrdziGwhWzyEqcNRYOkQwr5iRcpqpf09fo
K0Ti+e6qEQs/heppbqTE1ma+LU+fHJY7WV6H3NcP0cCiM+b/Me6SrNLRsZ2gd0IW
+Y+cqdrsXwBjzjEvTDY1Pc98wa/vYDQG1XA00j8ch/bKjL1SMOhY1XCkaIJTPwNM
WlXNDA7YMoSeYmskD2GS2zN8WhHm1TmH3cqb8z9VasZQXCGPXR2J9kgnKhmH1pKG
rMr66FUCAwEAAaOCArYwggKyMCYGA1UdEQQfMB2CG2NoZWNraW50ZXN0LmNvbnRp
bmVudGFsLmNvbTAJBgNVHRMEAjAAMA4GA1UdDwEB/wQEAwIFoDArBgNVHR8EJDAi
MCCgHqAchhpodHRwOi8vZ2ouc3ltY2IuY29tL2dqLmNybDCBnQYDVR0gBIGVMIGS
MIGPBgZngQwBAgIwgYQwPwYIKwYBBQUHAgEWM2h0dHBzOi8vd3d3Lmdlb3RydXN0
LmNvbS9yZXNvdXJjZXMvcmVwb3NpdG9yeS9sZWdhbDBBBggrBgEFBQcCAjA1DDNo
dHRwczovL3d3dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL3JlcG9zaXRvcnkvbGVn
YWwwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFBRn
ju2DT9YenUAEDARGoXA0sg9yMFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYT
aHR0cDovL2dqLnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL2dqLnN5bWNi
LmNvbS9nai5jcnQwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwDd6x0reg1PpiCL
ga2BaHB+Lo6dAdVciI09EcTNtuy+zAAAAVhuNMXsAAAEAwBIMEYCIQD7HZ7A628r
m+KJRRwlLpizGr+nq7NjCS8CQa/vVvuLPQIhAMO994M1q9SXM9ek3AP+0yAlV430
c65KeLOx7fErF0uwAHYAaPaY+B9kgr46jO65KB1M/HFRXWeT1ETRCmesu09P+8QA
AAFYbjTGDgAABAMARzBFAiBQ2k6m5gNQa+LMUpk8aRWm6KEqoLp985TEArxLAAGm
FwIhAJn0LY+0HcC8P8x/RywnGayUCNg/GcWFmQl83jw0pml/MA0GCSqGSIb3DQEB
CwUAA4IBAQBAIjRq/Gd6vlL6jpeVtTT7CMEbqXj+89SxHpMMr1F00ZHxCAWRM29t
ZUnXlL6fm0zibkg82oT0/DOgmP15QT2lJ1HkDqe4eTN+iReT72LLT7lgQ7UaNKJq
K0ovyGMuQJ/oHgPon7bnjhgU1HM1JVX9g3WF27yvEWfiahaEPOgY0JNB6NZQFg1r
ofGCkZ8ZUHcaPDBgwsfBcqjYcPWM3pJgmCzyeLG62Dg18vB7wf+QYXoJfN8uJJQ+
JdHs8NeCwWR7QR1NxCw9spzyGS+ZBvQtcz6eX+u/iRTdCL3fYtbNQ3vxD8NGjhl/
U/++gZGRTCbK4wCAGYl4eUgkkLl52BUd
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswpcOqby7RXi9qWhDfMq
ULLbDUDQnv4X+sfMNUyJKIVY4izVndzkIV7yNf0e4cKn/v7s7eGj2iYQi5GrrxV1
FAlnVZuokzGPlmWnapvU6C5PHOt3OIbCFbPISpw1Fg6RDCvmJFymql/T1+grROL5
7qoRCz+F6mlupMTWZr4tT58cljtZXofc1w/RwKIz5v8x7pKs0tGxnaB3Qhb5j5yp
2uxfAGPOMS9MNjU9z3zBr+9gNAbVcDTSPxyH9sqMvVIw6FjVcKRoglM/A0xaVc0M
DtgyhJ5iayQPYZLbM3xaEebVOYfdypvzP1VqxlBcIY9dHYn2SCcqGYfWkoasyvro
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 80819478739818302290270018737750432150
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'United Airlines Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'checkintest.continental.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22601765428451169956831064066150012422522043878080081223627052713506941981050680504447782323606876126686814840763284801490542569666418138040090897012425059326335870116508644931920638346327987862127550731408215505236465980478970918875373752027467414602652373428221984369597450825256824754067911991615206792648682848871447746265224254091108151072682282325432425870053539487292590444316577666552235872973251771988615304690677656426677518897746374613494552228713727822257868608812540510086702466749319605884792340268993936631104617866806628314604566131905915768952467717870498889217937986752225222556310037268045649078357
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkintest.continental.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcb.com/gj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 14678eed834fd61e9d40040c0446a17034b20f72
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcb.com/gj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc000001586e34c5ec0000040300483046022100fb1d9ec0eb6f2b9be289451c252e98b31abfa7abb363092f0241afef56fb8b3d022100c3bdf78335abd49733d7a4dc03fed32025578df473ae4a78b3b1edf12b174bb000760068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc4000001586e34c60e0000040300473045022050da4ea6e603506be2cc52993c6915a6e8a12aa0ba7df394c402bc4b0001a61702210099f42d8fb41dc0bc3fcc7f472c2719ac9408d83f19c58599097cde3c34a6697f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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