secure.universalstudios.com

- Universal City Studios -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 66:41:ea:e7:a6:96:5c:bd:d7:71:ba:86:12:cb:85:a2 was issued on by GeoTrust Inc..

With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Universal City Studios

Organization: Universal City Studios
Organization unit: Universal City Studios
State / Province: California
Locality: Universal City
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 66:41:ea:e7:a6:96:5c:bd:d7:71:ba:86:12:cb:85:a2
Serial Number (int): 135923519302975266580944914373958927778
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 22:64:ba:c0:6d:e4:f4:9d:12:50:2f:1c:1d:cc:9d:6f:78:af:63:65
Fingerprint (sha256): 25:14:45:43:e4:5e:6c:b8:b7:cb:6a:21:ba:21:f0:47:d5:e0:e9:3b:c1:8f:d8:56:f9:47:bc:03:d4:f4:f2:85

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate secure.universalstudios.com

28

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure.universalstudios.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

b2b.universalorlando.com
media.universalorlando.com
site.universalorlando.com
secure.universalorlando.com
www.universalorlando.co.uk
www.uomeetingsandevents.com
www.universalorlandoresort.com
espanol.universalorlando.com
rtuap.universalorlando.com
app.tickets2.universalorlando.com
tickets-services.universalorlando.com
hhntickets.universalorlando.com
tickets2.universalorlando.com
purchase.universalorlando.com
tickets.universalorlando.com
hhnap.universalorlando.com
www.universalorlando.com
prod.universaltravelagents.com
harrypotternews.universalorlando.com
www.universalevents.com
portuguese.universalorlando.com
www.universaltravelagents.com
www.universalorlandoyouth.com
ww2.universalorlando.com
universalorlando.com
shop.universalorlando.com
rtutickets.universalorlando.com
secure.universalstudios.com

Other certificates including the domain name universalstudios.com

(limited to 100 certificates)
www.universalorlando.com
secure.universalstudios.com
secure.universalstudios.com
secure.universalstudios.com
www.universalpictures.com
www.universalorlando.com
www.universalpictures.com
secure.universalstudios.com
www.universalorlando.com
propsstg.universalstudios.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.seeso.com
secure.universalstudios.com
web2.sourceaudio.com
www.universalorlando.com
www.universalpictures.com
www.seeso.com
www.seeso.com
www.universalpictures.com
secure.universalstudios.com
studio.florida.universalstudios.com
www.universalpictures.com
www.universalorlando.com
oltsuat.secure.universalstudios.com
secure.universalstudios.com
www.universalorlando.com
www.universalpictures.com
props.universalstudios.com
www.universalpictures.com
twuat.secure.universalstudios.com
www.universalorlando.com
www.universalorlando.com
www.seeso.com
www.seeso.com
propsstg.universalstudios.com
san-3-s6.tlsprovisioning.exacttarget.com
secure.universalstudios.com
www.universalpictures.com
secure.universalstudios.com
www.universalpictures.com
www.seeso.com
secure.universalstudios.com
www.universalorlando.com
www.universalorlando.com
www.universalpictures.com
www.seeso.com
studioopsportal.universalstudios.com
studio.florida.universalstudios.com
san-3-s6.tlsprovisioning.exacttarget.com
etds.universalstudios.com
web2.sourceaudio.com
etdsuat.universalstudios.com
www.universalorlando.com
www.universalpictures.com
www.universalpictures.com
studioopsportal.universalstudios.com
www.seeso.com
san-3-s6.tlsprovisioning.exacttarget.com
www.seeso.com
www.universalpictures.com
www.universalpictures.com
secure.universalstudios.com
studio.florida.universalstudios.com
web2.sourceaudio.com
www.universalpictures.com
www.universalorlando.com
signup.universalstudios.com
nbcuat.secure.universalstudios.com
www.universalpictures.com
secure.universalstudios.com
www.universalorlando.com
www.universalpictures.com
www.universalorlando.com
secure.universalstudios.com
www.universalorlando.com
props.universalstudios.com
secure.universalstudios.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalorlando.com
www.universalpictures.com
www.universalpictures.com
www.universalorlando.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
web2.sourceaudio.com
www.universalpictures.com
etdsuat-o.ucdp.net
www.universalpictures.com
www.universalpictures.com
www.universalorlando.com
propsstg.universalstudios.com

Certificate

The complete raw certificate details for secure.universalstudios.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRmsp7J01FWuHay1ZvjR
9Uh22aQlC9DE+PaxBLQrmMqPoPaInWdRXnjW38gi5OwRv7s5zfeFys3mk44Ng6TN
aDtQaQatN1Na64paI92r8X3YJsJCOnw7bnzzD2zzydwpqbc5xUNpSuROVQmUNd43
HjFHE3QYfri6GA2te5WWliyB9NOzco/JqI8CSiXDSMDw247znR8KcVuwKo6ilCnE
4g6NI6WPX7/zZoW6UKnYc82D1U/IPEXiGtQrnq9XI44cgOxMhLtJ9yu9VAsyVc1f
+jsI22bII6FAFe7ka8MlBDrEy/xPB+9J1ivSWW77iOEadfENy1I4zmkYsvcEg07I
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 135923519302975266580944914373958927778
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Universal City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Universal City Studios'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Universal City Studios'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'secure.universalstudios.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24881606613511861504094346278559113113546215724894438365019594472495907087336392334049355761478861252315354466583174378172783864212406980897405489171502851187135667394298273967689213379916027401357653683874567880581302257564169260535243531610387857758935640834326003101493014238762637512616114737849800008687807055161603742912909145832463189219652657735999947677019417364505371524858312825816979212850277540492191382598076274669461297550276898037063941950715300708734614988043889420147024983332106047862439328319993167103751998602280026617361805688150301140236304173775002637758394001279670521467640491279333024778463
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (841 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2b.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'site.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalorlando.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uomeetingsandevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalorlandoresort.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espanol.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtuap.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.tickets2.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets-services.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hhntickets.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets2.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purchase.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hhnap.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.universaltravelagents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harrypotternews.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalevents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portuguese.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universaltravelagents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalorlandoyouth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww2.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtutickets.universalorlando.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.universalstudios.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015a66ad123d000004030047304502200892f8e778f6c6b5eb505541b79c0b0e7910098f51a5446e02becd0c069a5a8d022100e40774f5f1fea4e60a66f8c489b0f65931999e38b1592916d2010c1bafa98142007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015a66ad125c000004030047304502203a8f44007575b06b208b97b5c62379aa4586f0e6a2f855271a9a018ce66abfa6022100ae701624fec7f9596ff724f7f29da0b40a3e8d942e4a7a39eedfadf7477240af
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00d79cb44b59b18772e175051a64c929728b6c28212313d364d490ca61b846898f3dc474b2240c52b2ee2cdc68d7ab95282cd438873dd6fb5b9d3066d89b35d8f9c93d4a1ebc9258aaf27c990b9c25741baea8d192c03cbd6a4735d611af37e4552fbea95ef87a04632715ec3cf7127ea4a9c3613d0c54fd2b92f468b716f56f89120705a2ef6f53b17151de7ff4efeca1c80a827973f14d8ed2147a4f442f7c5fe87df11bd8a9fe18dc0cf13ee1dbd9f3468705c123d8be9476edad3d1b6b744dbae4b7500ebe72e0c68b212179a4e02e32f5b622e519d47391357e40487683e55b738bce2370b1f76096308794813b051209a3a6720d02456389e371549cfff3