www.vr.com.br

- VR Beneficios e Servicos de Processamento Ltda -

Issued by GeoTrust SSL CA - G2

About this certificate

This digital certificate with serial number e3:f1:e3:4c:d2:10:d3:3b:76:d1:38:bd:88:2b:bd was issued on by GeoTrust Inc..

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

VR Beneficios e Servicos de Processamento Ltda

Organization: VR Beneficios e Servicos de Processamento Ltda
State / Province: Sao Paulo
Locality: Barueri
Country: BR

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): e3:f1:e3:4c:d2:10:d3:3b:76:d1:38:bd:88:2b:bd
Serial Number (int): 1183557456169591285206092642697882557
Serial Number lenght: 120 bits, 15 octets

SubjectKeyId:
AuthorityKeyId: 11:4a:d0:73:39:d5:5b:69:08:5c:ba:3d:bf:64:9a:a8:8b:1c:55:bc

Fingerprint (sha1): 94:04:b8:46:64:94:3b:4e:9c:0f:0d:14:13:a9:fe:01:7c:91:f3:ee
Fingerprint (sha256): 28:ff:bc:b4:ff:01:58:b3:96:f9:b2:b2:82:8e:dd:49:55:31:e8:ee:ec:f0:8a:f2:2e:76:2e:c4:75:b2:02:db

Issuing Certificate URL: http://gb.symcb.com/gb.crt

Revocation information

OCSP Server: http://gb.symcd.com
CRL Distribution Point: http://gb.symcb.com/gb.crl

Check the revocation status for certificate www.vr.com.br

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.vr.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bsadmin.vr.com.br
educacao.vr.com.br
capta.vr.com.br
captaadmin.vr.com.br
capitis.vr.com.br
capitisadmin.vr.com.br
bens.vr.com.br
bensadmin.vr.com.br
optmix.vr.com.br
optmixadmin.vr.com.br
topbeneficios.vr.com.br
topbeneficiosadmin.vr.com.br
lupa.vr.com.br
lupaadmin.vr.com.br
ismarketing.vr.com.br
ismarketingadmin.vr.com.br
holden.vr.com.br
holdenadmin.vr.com.br
harmonia.vr.com.br
harmoniaadmin.vr.com.br
www.vr.com.br
vr.com.br

Other certificates including the domain name vr.com.br

(limited to 100 certificates)
incapsula.com
www.vr.com.br
incapsula.com
incapsula.com
adm.parceiro.vr.com.br
indique.vr.com.br
*.vr.com.br
incapsula.com
blog.vr.com.br
transporte.vr.com.br
fs.vr.com.br
image.em.shopmo.com
fs.vr.com.br
san-3-s11.tlsprovisioning.exacttarget.com
*.vr.com.br
incapsula.com
fs.vr.com.br
incapsula.com
parceirovr.blog.vr.com.br
api.parceiro.vr.com.br
transporte.vr.com.br
incapsula.com
incapsula.com
crm.vr.com.br
incapsula.com
incapsula.com
*.vr.com.br
*.vr.com.br
incapsula.com
*.vr.com.br
facilita.vr.com.br
image.em.shopmo.com
blog.vr.com.br
easy-prize.online
api.vr.com.br
*.vr.com.br
*.vr.com.br
incapsula.com
transporte.vr.com.br
image.em.shopmo.com
fs.vr.com.br
blog.vr.com.br
blog.vr.com.br
*.parceiro.vr.com.br
www2.vr.com.br
incapsula.com
image.em.shopmo.com
fs.vr.com.br
incapsula.com
www.vr.com.br
www.vr.com.br
image.em.shopmo.com
vt.vr.com.br
crm.vr.com.br
incapsula.com
incapsula.com
image.em.shopmo.com
blog.vr.com.br
incapsula.com
incapsula.com
view.vendavr.vr.com.br
incapsula.com
acessoexterno.vr.com.br
*.vr.com.br
incapsula.com
www.vr.com.br
incapsula.com
web.parceiro.vr.com.br
hudko.world
*.parceiro.vr.com.br
fs.vr.com.br
incapsula.com
incapsula.com
incapsula.com
incapsula.com
www.vr.com.br
blog.vr.com.br
incapsula.com
incapsula.com
transporte.vr.com.br
tenne.co.jp
parceirovr.blog.vr.com.br
blog.vr.com.br
transporte.vr.com.br
image.em.shopmo.com
image.em.shopmo.com
www.vr.com.br
www.coda4.com
incapsula.com
acessoexterno.vr.com.br
image.em.shopmo.com
fs.vr.com.br
www.vr.com.br
cloud.vendavr.vr.com.br
crm.vr.com.br
incapsula.com
image.em.shopmo.com
facilita.vr.com.br
www2.vr.com.br
*.vr.com.br

Certificate

The complete raw certificate details for www.vr.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjt+0puR92JCUlgCB3bq
99bGjsujEcFDH0u4n92ZRxmiJIam674/iY2FIQ0pMu4w7Bh75mDJ9IyZNO724DOm
Lty0GA05hhGaLfTLVudl43qktsgTPc5rGFfxp9WOBaoJuAEEn50pIfgiat6CMyx4
Xp5mwy17m6iZZfxGSuG1FfIagVJXog5qM+/1cRSKYS3kIGCA1fulZgAKQvWaK+SR
lZqCiXpAH44WX0giHiPM9gsHKD3R6RK67jWVIwAEJeolqQliM+6DIbdfDx63Oa9/
3pyXNEkojXLoi535JCp1ZkE5R27MaemPK/mLMdG0S42WF8LEzhvGcjWix3WYl0S5
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1183557456169591285206092642697882557
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sao Paulo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Barueri'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'VR Beneficios e Servicos de Processamento Ltda'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'www.vr.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25024522659023605794332320610962622304413115908263841612106978956242523260272983531069675888923394661320340121868194762367533525685220697894269874709698847611122589661954328256351358675629631193256101998500335466372678325053517937492503974252025698282568861253807253512542185221427564504000072979268997975533330527129862542278799193642803865283662699310577397433608296106201687623336715581524085442150517142584599941937237825871570164706987386284497966614348219852660890025566318105597656296153317520588588228253845642384246474922157681005701609921440878771660212522665086114591751751532611654002121754089195282151697
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (458 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsadmin.vr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'educacao.vr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capta.vr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captaadmin.vr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitis.vr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitisadmin.vr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bens.vr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bensadmin.vr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optmix.vr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optmixadmin.vr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topbeneficios.vr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topbeneficiosadmin.vr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lupa.vr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lupaadmin.vr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ismarketing.vr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ismarketingadmin.vr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holden.vr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holdenadmin.vr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harmonia.vr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harmoniaadmin.vr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vr.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vr.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gb.symcb.com/gb.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (153 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 114ad07339d55b69085cba3dbf649aa88b1c55bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gb.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gb.symcb.com/gb.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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