ics2wsa.ic3.com
- VISA INTERNATIONAL SERVICE ASSOCIATION -
Issued by GeoTrust SSL CA - G3
About this certificate
This digital certificate with serial number 45:b5:30:4f:c8:9f:6d:c4:ad:28:36:72:91:31:ae:61 was issued on by GeoTrust Inc..
With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
VISA INTERNATIONAL SERVICE ASSOCIATION
Organization:
VISA INTERNATIONAL SERVICE ASSOCIATION
State / Province:
California
Locality: Foster City
Country: US
Locality: Foster City
Country: US
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 45:b5:30:4f:c8:9f:6d:c4:ad:28:36:72:91:31:ae:61Serial Number (int): 92657517317329552473763220008421404257
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c
Fingerprint (sha1): 14:1c:35:78:37:02:80:51:5d:0e:64:28:15:2e:5c:e5:21:0d:43:74
Fingerprint (sha256): 26:cf:7f:7d:3a:09:9d:6a:50:f4:f5:3b:e5:23:41:25:44:b2:24:35:34:9c:82:6f:23:09:70:34:f7:79:e1:09
Issuing Certificate URL: http://gn.symcb.com/gn.crt
Revocation information
OCSP Server: http://gn.symcd.comCRL Distribution Point: http://gn.symcb.com/gn.crl
Check the revocation status for certificate ics2wsa.ic3.com
14
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ics2wsa.ic3.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
rtmclientcenter.visa.com
ics2a.ic3.com
ebc.cybersource.com
storedvalue.ic3.com
apply.cybersource.com
ebc2.cybersource.com
pnr.ic3.com
ump.cybersource.com
secureacceptancea.cybersource.com
trialpay.visa.com
businesscenter.cybersource.com
wfgateway.cybersource.com
secureacceptance.cybersource.com
ics2wsa.ic3.com
ics2a.ic3.com
ebc.cybersource.com
storedvalue.ic3.com
apply.cybersource.com
ebc2.cybersource.com
pnr.ic3.com
ump.cybersource.com
secureacceptancea.cybersource.com
trialpay.visa.com
businesscenter.cybersource.com
wfgateway.cybersource.com
secureacceptance.cybersource.com
ics2wsa.ic3.com
Other certificates including the domain name ic3.com
(limited to 100 certificates)
ics2ws.in.ic3.com
ics2wstesta.ic3.com
cybsgatekeepertest.ic3.com
auth.ic3.com
ics2wstesta.ic3.com
ics2wsa.ic3.com
ics2wstest.ic3.com
paypal.ic3.com
Cashprosit.sso.ic3.com
mobile.ic3.com
sbobsamlsit.ic3.com
ics2ws.ic3.com
ics2wsa.ic3.com
ics2wsa.ic3.com
paypaltest.ic3.com
mobile.ic3.com
ics2wsc.ic3.com
*.ic3.com
reportingrestservice.ic3.com
svtest.ic3.com
reportingrestservice.ic3.com
ics2wsitest.ic3.com
*.ic3.com
paypaltest.ic3.com
svtest.ic3.com
sni.cloudflaressl.com
*.ic3.com
paypal.ic3.com
ics2wstest.ic3.com
mobiletest.ic3.com
reportingrestservicetest.ic3.com
mobile.ic3.com
paypaltest.ic3.com
authtest.ic3.com
reportingrestservice.ic3.com
ics2wsa.ic3.com
ics2wstest.ic3.com
ics2ws.ic3.com
authtest.ic3.com
auth.ic3.com
paypal.ic3.com
paypaltest.ic3.com
ics2wstesta.ic3.com
smartreg.ic3.com
pnrstage.ic3.com
ics2testc.ic3.com
mobiletest.ic3.com
auth.ic3.com
ics2wstesta.ic3.com
ics2wstest.ic3.com
reportingrestservicetest.ic3.com
mobiletest.ic3.com
ics2wstesta.ic3.com
ics2testc.ic3.com
ics2wsa.ic3.com
reportingrestservicetest.ic3.com
ics2wstest.ic3.com
mobile.ic3.com
cashpro.sso.ic3.com
authtest.ic3.com
security.ic3.com
ics2ws.ic3.com
ics2wstest.ic3.com
paypal.ic3.com
authtest.ic3.com
authtest.ic3.com
paypaltest.ic3.com
mobiletest.ic3.com
cashprosamltest.ic3.com
ics2wsc.ic3.com
paypaltest.ic3.com
processorcallbacktest.ic3.com
ics2wstesta.ic3.com
ics2wstesta.ic3.com
authtest.ic3.com
ics2wstesta.ic3.com
ics2wstest.ic3.com
ics2wsa.ic3.com
ics2testc.ic3.com
cashpro.sso.ic3.com
ics2ws.ic3.com
reportingrestservicetest.ic3.com
mobile.ic3.com
authtest.ic3.com
ics2wsc.ic3.com
paypaltest.ic3.com
paypal.ic3.com
authtest.ic3.com
auth.ic3.com
ics2wsa.ic3.com
reportingrestservicetest.ic3.com
auth.ic3.com
reportingrestservice.ic3.com
mobiletest.ic3.com
svtest.ic3.com
reportingrestservicetest.ic3.com
ics2wsitest.ic3.com
cashprosamltest.ic3.com
ics2wstesta.ic3.com
ics2wsa.ic3.com
ics2wstesta.ic3.com
cybsgatekeepertest.ic3.com
auth.ic3.com
ics2wstesta.ic3.com
ics2wsa.ic3.com
ics2wstest.ic3.com
paypal.ic3.com
Cashprosit.sso.ic3.com
mobile.ic3.com
sbobsamlsit.ic3.com
ics2ws.ic3.com
ics2wsa.ic3.com
ics2wsa.ic3.com
paypaltest.ic3.com
mobile.ic3.com
ics2wsc.ic3.com
*.ic3.com
reportingrestservice.ic3.com
svtest.ic3.com
reportingrestservice.ic3.com
ics2wsitest.ic3.com
*.ic3.com
paypaltest.ic3.com
svtest.ic3.com
sni.cloudflaressl.com
*.ic3.com
paypal.ic3.com
ics2wstest.ic3.com
mobiletest.ic3.com
reportingrestservicetest.ic3.com
mobile.ic3.com
paypaltest.ic3.com
authtest.ic3.com
reportingrestservice.ic3.com
ics2wsa.ic3.com
ics2wstest.ic3.com
ics2ws.ic3.com
authtest.ic3.com
auth.ic3.com
paypal.ic3.com
paypaltest.ic3.com
ics2wstesta.ic3.com
smartreg.ic3.com
pnrstage.ic3.com
ics2testc.ic3.com
mobiletest.ic3.com
auth.ic3.com
ics2wstesta.ic3.com
ics2wstest.ic3.com
reportingrestservicetest.ic3.com
mobiletest.ic3.com
ics2wstesta.ic3.com
ics2testc.ic3.com
ics2wsa.ic3.com
reportingrestservicetest.ic3.com
ics2wstest.ic3.com
mobile.ic3.com
cashpro.sso.ic3.com
authtest.ic3.com
security.ic3.com
ics2ws.ic3.com
ics2wstest.ic3.com
paypal.ic3.com
authtest.ic3.com
authtest.ic3.com
paypaltest.ic3.com
mobiletest.ic3.com
cashprosamltest.ic3.com
ics2wsc.ic3.com
paypaltest.ic3.com
processorcallbacktest.ic3.com
ics2wstesta.ic3.com
ics2wstesta.ic3.com
authtest.ic3.com
ics2wstesta.ic3.com
ics2wstest.ic3.com
ics2wsa.ic3.com
ics2testc.ic3.com
cashpro.sso.ic3.com
ics2ws.ic3.com
reportingrestservicetest.ic3.com
mobile.ic3.com
authtest.ic3.com
ics2wsc.ic3.com
paypaltest.ic3.com
paypal.ic3.com
authtest.ic3.com
auth.ic3.com
ics2wsa.ic3.com
reportingrestservicetest.ic3.com
auth.ic3.com
reportingrestservice.ic3.com
mobiletest.ic3.com
svtest.ic3.com
reportingrestservicetest.ic3.com
ics2wsitest.ic3.com
cashprosamltest.ic3.com
ics2wstesta.ic3.com
ics2wsa.ic3.com
Certificate
The complete raw certificate details for ics2wsa.ic3.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIQRbUwT8ifbcStKDZykTGuYTANBgkqhkiG9w0BAQsFADBE MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTYwNzA2MDAwMDAwWhcNMTcwOTA0MjM1 OTU5WjCBgzELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExFDASBgNV BAcMC0Zvc3RlciBDaXR5MS8wLQYDVQQKDCZWSVNBIElOVEVSTkFUSU9OQUwgU0VS VklDRSBBU1NPQ0lBVElPTjEYMBYGA1UEAwwPaWNzMndzYS5pYzMuY29tMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubrnF54meG6wlg5A/SnrXz8oZymZ Wdc3TgEL8Abx2Ty3xRNvsSQBNTCQsnmgMM8Hy3zMj97/2d7uFWOk+l5SZyhqS6tn 6K4h/f3L5hVeeqd46g+2tIhlheuaZelRf2bqQKyb08LccoqxvlHqKSeiS6RN3TYk qrT1QoQWX+uyb4cTEIeRR3aq8CArqWP8FHIqnTTKXwdQ81XmV9Fam9VICuAPht6S gn1LVGSW9D+zSiAtl2+bgq4ueT5KN+Va4niIpN87VDWgdbSaSqQVBcyvRohXKwxt G2tk0MY9kxIR7M9xeQRb9WnOz4geodhDvvnNUP0lwu5ALt7wbmd36PajHQIDAQAB o4IC8TCCAu0wggFTBgNVHREEggFKMIIBRoIYcnRtY2xpZW50Y2VudGVyLnZpc2Eu Y29tgg1pY3MyYS5pYzMuY29tghNlYmMuY3liZXJzb3VyY2UuY29tghNzdG9yZWR2 YWx1ZS5pYzMuY29tghVhcHBseS5jeWJlcnNvdXJjZS5jb22CFGViYzIuY3liZXJz b3VyY2UuY29tggtwbnIuaWMzLmNvbYITdW1wLmN5YmVyc291cmNlLmNvbYIhc2Vj dXJlYWNjZXB0YW5jZWEuY3liZXJzb3VyY2UuY29tghF0cmlhbHBheS52aXNhLmNv bYIeYnVzaW5lc3NjZW50ZXIuY3liZXJzb3VyY2UuY29tghl3ZmdhdGV3YXkuY3li ZXJzb3VyY2UuY29tgiBzZWN1cmVhY2NlcHRhbmNlLmN5YmVyc291cmNlLmNvbYIP aWNzMndzYS5pYzMuY29tMAkGA1UdEwQCMAAwDgYDVR0PAQH/BAQDAgWgMCsGA1Ud HwQkMCIwIKAeoByGGmh0dHA6Ly9nbi5zeW1jYi5jb20vZ24uY3JsMIGdBgNVHSAE gZUwgZIwgY8GBmeBDAECAjCBhDA/BggrBgEFBQcCARYzaHR0cHM6Ly93d3cuZ2Vv dHJ1c3QuY29tL3Jlc291cmNlcy9yZXBvc2l0b3J5L2xlZ2FsMEEGCCsGAQUFBwIC MDUMM2h0dHBzOi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvcmVwb3NpdG9y eS9sZWdhbDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHwYDVR0jBBgw FoAU0m/3lvSFP3I8MH0j2oV4m6N8WnwwVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUF BzABhhNodHRwOi8vZ24uc3ltY2QuY29tMCYGCCsGAQUFBzAChhpodHRwOi8vZ24u c3ltY2IuY29tL2duLmNydDATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0B AQsFAAOCAQEAoSr3hyqgo2LKZ6nRDuZS3QMw6kHaokvV5d7WvI/oh2lE0CUXsztO lu6IVP2sBwl5q2EAFy2ZQG0m6pEPHlYfZR2+L8I7e9u4/XCaDHHQNwru9qLOxIP8 C2R1BnpmtW6rfhLwN3/YEkg5SikPMRz0b5ajHSo8Wk0Wa0la3RXD8L+gdA9Wblyv Wdn6Hy/0elwfLXeBWK/5mNIQqjp6ky/aeZPqqpS3Hg4AE/Rp4Q+hJXP0qVYU1ABa YTh4PArPe48PQ5sI6UfJj2MDvQahQT1endzaeYhQsR10GSoN0OCFG2UXDpHtJ3Ep uQFDo89rFErOj6TsFhNgFeBC2wZX4hl7bQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubrnF54meG6wlg5A/Snr Xz8oZymZWdc3TgEL8Abx2Ty3xRNvsSQBNTCQsnmgMM8Hy3zMj97/2d7uFWOk+l5S ZyhqS6tn6K4h/f3L5hVeeqd46g+2tIhlheuaZelRf2bqQKyb08LccoqxvlHqKSei S6RN3TYkqrT1QoQWX+uyb4cTEIeRR3aq8CArqWP8FHIqnTTKXwdQ81XmV9Fam9VI CuAPht6Sgn1LVGSW9D+zSiAtl2+bgq4ueT5KN+Va4niIpN87VDWgdbSaSqQVBcyv RohXKwxtG2tk0MY9kxIR7M9xeQRb9WnOz4geodhDvvnNUP0lwu5ALt7wbmd36Paj HQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 92657517317329552473763220008421404257 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-04 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Foster City' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'VISA INTERNATIONAL SERVICE ASSOCIATION' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ics2wsa.ic3.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23446251577169174048091101681569729595413321909105141259817613685537477167851614941674863975247254919078926537928993713368884789040695723319192829134902074892281864644782743023312224938881911958750999154772249380790497782776633074503868071273785494729051758116323306338051952545757610160766300668735769585585260929123809884797867362506749918064536326266505236523561106592172186418082920135052925116283367096918423567621835930466146707845899337035047641429188840900669652337384094099203651024241720094017557014324643679802325061937019674604440142637770277611799890331687290136131425677825867616082006459610589151273757 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (330 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtmclientcenter.visa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ics2a.ic3.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebc.cybersource.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storedvalue.ic3.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apply.cybersource.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebc2.cybersource.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pnr.ic3.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ump.cybersource.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureacceptancea.cybersource.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trialpay.visa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businesscenter.cybersource.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wfgateway.cybersource.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureacceptance.cybersource.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ics2wsa.ic3.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00a12af7872aa0a362ca67a9d10ee652dd0330ea41daa24bd5e5ded6bc8fe8876944d02517b33b4e96ee8854fdac070979ab6100172d99406d26ea910f1e561f651dbe2fc23b7bdbb8fd709a0c71d0370aeef6a2cec483fc0b6475067a66b56eab7e12f0377fd81248394a290f311cf46f96a31d2a3c5a4d166b495add15c3f0bfa0740f566e5caf59d9fa1f2ff47a5c1f2d778158aff998d210aa3a7a932fda7993eaaa94b71e0e0013f469e10fa12573f4a95614d4005a6138783c0acf7b8f0f439b08e947c98f6303bd06a1413d5e9ddcda798850b11d74192a0dd0e0851b65170e91ed277129b90143a3cf6b144ace8fa4ec16136015e042db0657e2197b6d