secure-api.scrippsnetworks.com

- Scripps Networks LLC -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 43:50:26:4b:3c:57:e9:ec:5f:bd:c2:48:19:bf:2d:9b was issued on by GeoTrust Inc..

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Scripps Networks LLC

Organization: Scripps Networks LLC
Organization unit: Akamai SAN SSL OV
State / Province: Tennessee
Locality: Knoxville
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 43:50:26:4b:3c:57:e9:ec:5f:bd:c2:48:19:bf:2d:9b
Serial Number (int): 89474436158624658835447112960067972507
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 49:43:7a:1f:13:eb:72:e2:4b:a0:b5:df:4d:15:78:3b:59:0a:90:c5
Fingerprint (sha256): 21:b1:aa:0c:43:70:04:7b:99:9a:60:fb:08:d8:2d:34:12:6c:a5:17:83:52:2c:b6:15:78:9b:9c:0d:a5:2c:6c

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate secure-api.scrippsnetworks.com

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure-api.scrippsnetworks.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure-api.hgtv.com
watch.cookingchanneltv.com
watch.hgtv.com
beta-api.foodnetwork.com
secure-api.diynetwork.com
watch.travelchannel.com
secure-api.food.com
statics.scrippsnetworks.com
api.foodnetworkinteractive.com
watch.foodnetwork.com
beta-api.food.com
beta-api.scrippsnetworks.com
secure-api.foodnetwork.com
watch.diynetwork.com
secure-api.scrippsnetworks.com

Other certificates including the domain name scrippsnetworks.com

(limited to 100 certificates)
peoplesoftdemo-ren.scrippsnetworks.com
mamcloud-int.scrippsnetworks.com
secure-api.scrippsnetworks.com
connect2vpn.scrippsnetworks.com
secure-api.scrippsnetworks.com
mediapulse.scrippsnetworks.com
san-6-s13.tlsprovisioning.exacttarget.com
mysite.insidesni.com
orders.scrippsnetworks.com
mam.scrippsnetworks.com
idmanager.scrippsnetworks.com
vpntest.scrippsnetworks.com
mysecure.qa2-cookingchanneltv.com
snkxs078.scrippsnetworks.com
myscripps.scrippsnetworks.com
jsseng.scrippsnetworks.com
secure-api.scrippsnetworks.com
mynewsletters.scrippsnetworks.com
san-6-s13.tlsprovisioning.exacttarget.com
securestatics.scrippsnetworks.com
*.scrippsnetworks.com
timereporting.scrippsnetworks.com
orders.scrippsnetworks.com
jssadmin.scrippsnetworks.com
sniidevices.scrippsnetworks.com
secure-api.scrippsnetworks.com
sales.scrippsnetworks.com
secure-api.scrippsnetworks.com
mamcloud-dev.scrippsnetworks.com
mynewsletters.discovery.com
alfintlqa2.scrippsnetworks.com
mam.scrippsnetworks.com
boecloud-qa.scrippsnetworks.com
snkxvoip-expe-cluster01.scrippsnetworks.com
secure-api.scrippsnetworks.com
secure-api.scrippsnetworks.com
secure-api.scrippsnetworks.com
mysecure.dev-travelchannel.com
secure-api.scrippsnetworks.com
audit.scrippsnetworks.com
secure-api.scrippsnetworks.com
fgs-qa.scrippsnetworks.com
faspexglobal.scrippsnetworks.com
peoplesoftdev-ren.scrippsnetworks.com
*.scrippsnetworks.com
faspex.scrippsnetworks.com
dev-apps.scrippsnetworks.com
sarbox404.scrippsnetworks.com
mynewsletters.discovery.com
sniforms.scrippsnetworks.com
sniforms.scrippsnetworks.com
mamcloud-int.scrippsnetworks.com
qa2-mysecure.scrippsnetworks.com
*.scrippsnetworks.com
idam.scrippsnetworks.com
hrapprovals.scrippsnetworks.com
orders.scrippsnetworks.com
orders.scrippsnetworks.com
fgs-int.scrippsnetworks.com
mediapulse.scrippsnetworks.com
mamcloud-dev.scrippsnetworks.com
doa.scrippsnetworks.com
mysecure.staging-foodnetwork.com
partnerweb.scrippsnetworks.com
pressreleases.scrippsnetworks.com
secure-api.scrippsnetworks.com
orders.scrippsnetworks.com
recognitionprograms.scrippsnetworks.com
vpntest.scrippsnetworks.com
snkxvoip-expc-cluster01.scrippsnetworks.com
qa1-moderation.scrippsnetworks.com
slate.scrippsnetworks.com
wiki.scrippsnetworks.com
san-6-s13.tlsprovisioning.exacttarget.com
snkxvoip-expe02.scrippsnetworks.com
mamcloud.scrippsnetworks.com
statics2.scrippsnetworks.com
jsseng.scrippsnetworks.com
sniidevices.scrippsnetworks.com
secure-api.scrippsnetworks.com
snkxise01-admin.scrippsnetworks.com
hmp.scrippsnetworks.com
apimami.scrippsnetworks.com
snkxvoip-expe-cluster01.scrippsnetworks.com
partner.scrippsnetworks.com
alfdomuat.scrippsnetworks.com
peoplesoftdemo-ren.scrippsnetworks.com
tableaucloud.scrippsnetworks.com
secure-api.scrippsnetworks.com
archerweb-uat.scrippsnetworks.com
secure-api.scrippsnetworks.com
adsremote.scrippsnetworks.com
*.scrippsnetworks.com
sarbox404.scrippsnetworks.com
peoplesoftdev2.scrippsnetworks.com
boecloud.scrippsnetworks.com
scrippsnetworks.com
mysecure.scrippsnetworks.com
connect2vpnc.scrippsnetworks.com
secure-api.scrippsnetworks.com

Certificate

The complete raw certificate details for secure-api.scrippsnetworks.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGkDCCBXigAwIBAgIQQ1AmSzxX6exfvcJIGb8tmzANBgkqhkiG9w0BAQsFADBE
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU
R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTYwODEyMDAwMDAwWhcNMTcwODEyMjM1
OTU5WjCBmTELMAkGA1UEBhMCVVMxEjAQBgNVBAgMCVRlbm5lc3NlZTESMBAGA1UE
BwwJS25veHZpbGxlMR0wGwYDVQQKDBRTY3JpcHBzIE5ldHdvcmtzIExMQzEaMBgG
A1UECwwRQWthbWFpIFNBTiBTU0wgT1YxJzAlBgNVBAMMHnNlY3VyZS1hcGkuc2Ny
aXBwc25ldHdvcmtzLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ALKZ0NhrmSpAJNv3fe1iRXR04l8C2NfXU/sx0yFkSKhT63XnUcsvkIv071IkC4Yh
ZWJypsAvKcfFq/Z1+pdEM3bcPdVTVDH+TE80mGRzUa7iUPn6Kci0r+SUXHgvtSul
JoBcqO68OD39pjJ2oQyc2ddj/DR+0V2WAqFvk8jIeZHhTphhQctVVNlIojNcbBAG
CYttO6FrcNnWtYT5b0iEGOHzt5d0RJd2xB3uZ6WW0OMxBXSTKwQSE2uoorXC0z8x
GGrsO5vju4GlCH2l7BnAVDkoVsOOkUM/+YlnZdUfwwab+iE2KK/Ja6lxfqV+whVo
sapfXx2UGtVJpvrHSSlS98UCAwEAAaOCAyYwggMiMIIBiAYDVR0RBIIBfzCCAXuC
E3NlY3VyZS1hcGkuaGd0di5jb22CGndhdGNoLmNvb2tpbmdjaGFubmVsdHYuY29t
gg53YXRjaC5oZ3R2LmNvbYIYYmV0YS1hcGkuZm9vZG5ldHdvcmsuY29tghlzZWN1
cmUtYXBpLmRpeW5ldHdvcmsuY29tghd3YXRjaC50cmF2ZWxjaGFubmVsLmNvbYIT
c2VjdXJlLWFwaS5mb29kLmNvbYIbc3RhdGljcy5zY3JpcHBzbmV0d29ya3MuY29t
gh5hcGkuZm9vZG5ldHdvcmtpbnRlcmFjdGl2ZS5jb22CFXdhdGNoLmZvb2RuZXR3
b3JrLmNvbYIRYmV0YS1hcGkuZm9vZC5jb22CHGJldGEtYXBpLnNjcmlwcHNuZXR3
b3Jrcy5jb22CGnNlY3VyZS1hcGkuZm9vZG5ldHdvcmsuY29tghR3YXRjaC5kaXlu
ZXR3b3JrLmNvbYIec2VjdXJlLWFwaS5zY3JpcHBzbmV0d29ya3MuY29tMAkGA1Ud
EwQCMAAwDgYDVR0PAQH/BAQDAgWgMCsGA1UdHwQkMCIwIKAeoByGGmh0dHA6Ly9n
bi5zeW1jYi5jb20vZ24uY3JsMIGdBgNVHSAEgZUwgZIwgY8GBmeBDAECAjCBhDA/
BggrBgEFBQcCARYzaHR0cHM6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9y
ZXBvc2l0b3J5L2xlZ2FsMEEGCCsGAQUFBwICMDUMM2h0dHBzOi8vd3d3Lmdlb3Ry
dXN0LmNvbS9yZXNvdXJjZXMvcmVwb3NpdG9yeS9sZWdhbDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwHwYDVR0jBBgwFoAU0m/3lvSFP3I8MH0j2oV4m6N8
WnwwVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8vZ24uc3ltY2Qu
Y29tMCYGCCsGAQUFBzAChhpodHRwOi8vZ24uc3ltY2IuY29tL2duLmNydDATBgor
BgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiq11osonf9EObyxn
tBXRz7AAU3KLooal2mIbSbSRqeQ2CYW4I+9KmzGp99MQZxjg/LAFuHWsL9g4uNsa
l5KepKGJFnJ8r0kgCzyK6Dr2ImnBFh3xiIb8u/YVgd1FLVDEJ7ydxIf09wLbIXtz
4zJr/PzS0NIfjT/V2H/9W6DM6FLIGpSYJbhTPztrQkPf/27LgV37//ypXKIdW65K
3cEC2AHSjJ1zZ7LWqCXr9TRYkE3jxwYYnL+x7eInUFBJKKLyhPkZBSwNmiUJ4DqB
VEx4SAIMwWiGw/5T+BzN5fENHu4C0AonQ4vcIKLbTGLkbYkZnEZdTfSbqj+KWaKJ
Ay+XIQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspnQ2GuZKkAk2/d97WJF
dHTiXwLY19dT+zHTIWRIqFPrdedRyy+Qi/TvUiQLhiFlYnKmwC8px8Wr9nX6l0Qz
dtw91VNUMf5MTzSYZHNRruJQ+fopyLSv5JRceC+1K6UmgFyo7rw4Pf2mMnahDJzZ
12P8NH7RXZYCoW+TyMh5keFOmGFBy1VU2UiiM1xsEAYJi207oWtw2da1hPlvSIQY
4fO3l3REl3bEHe5npZbQ4zEFdJMrBBITa6iitcLTPzEYauw7m+O7gaUIfaXsGcBU
OShWw46RQz/5iWdl1R/DBpv6ITYor8lrqXF+pX7CFWixql9fHZQa1Umm+sdJKVL3
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 89474436158624658835447112960067972507
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Tennessee'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Knoxville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Scripps Networks LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Akamai SAN SSL OV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'secure-api.scrippsnetworks.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22546267683024198392956270956187068992482989987740222199551388062290886682205154382226908276834116332251720850944450321787723219905897447639506913086591262858424702530863407439556375526110597116911971978598972646711644162415520691937841009924215638474092069996637018612757726132389674408485747288637556619247744262288978686258711200806588350074277689682883748225535541081920151306924864724104686164170877610089698666954172245580638813989658513358796515680940222992854886611913027485463050023001247803041557861042916007413312225842596224866303686054636768793115054276762012403692552729115110964215292223860556927530949
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (383 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-api.hgtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.cookingchanneltv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.hgtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-api.foodnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-api.diynetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.travelchannel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-api.food.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statics.scrippsnetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.foodnetworkinteractive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.foodnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-api.food.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-api.scrippsnetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-api.foodnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watch.diynetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-api.scrippsnetworks.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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