stage.united.com
- United Airlines Inc -
Issued by GeoTrust SSL CA - G3
About this certificate
This digital certificate with serial number 4e:fa:57:50:32:80:05:49:b3:b0:4a:7f:38:bc:56:b7 was issued on by GeoTrust Inc..
With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
United Airlines Inc
Organization:
United Airlines Inc
State / Province:
Illinois
Locality: Arlington Heights
Country: US
Locality: Arlington Heights
Country: US
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 4e:fa:57:50:32:80:05:49:b3:b0:4a:7f:38:bc:56:b7Serial Number (int): 104979628809374681797474054217137936055
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c
Fingerprint (sha1): 18:ef:28:2f:55:c7:7c:07:1c:85:7f:5c:0c:88:a1:8f:e6:76:73:89
Fingerprint (sha256): 2a:ba:80:5e:ae:72:33:39:4d:7f:cd:6c:0b:25:cb:62:e1:36:12:8e:20:81:12:7c:c0:d8:35:e2:1b:37:51:2d
Issuing Certificate URL: http://gn.symcb.com/gn.crt
Revocation information
OCSP Server: http://gn.symcd.comCRL Distribution Point: http://gn.symcb.com/gn.crl
Check the revocation status for certificate stage.united.com
12
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for stage.united.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
checkinstage.united.com
mobile-stage.united.com
stage.unitedairlines.co.uk
smartphone-stage.continental.com
perf.united.com
mweb-dev.united.com
stage.unitedairlines.de
stage.unitedairlines.jp
smartphone-stage.united.com
stage.unitedairlines.ca
smartphone-dev.united.com
stage.united.com
mobile-stage.united.com
stage.unitedairlines.co.uk
smartphone-stage.continental.com
perf.united.com
mweb-dev.united.com
stage.unitedairlines.de
stage.unitedairlines.jp
smartphone-stage.united.com
stage.unitedairlines.ca
smartphone-dev.united.com
stage.united.com
Other certificates including the domain name united.com
(limited to 100 certificates)
eres.app.stage.auth.united.com
vss.united.com
rebelmouse.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
rebelmouse.map.fastly.net
wheelchair.united.com
wftest.united.com
trk.notify.hotels.united.com
gofly.united.com
partnergw-csmc.united.com
business2.united.com
cardmemberoffers.united.com
iot-qa.united.com
api-qa.united.com
packages.united.com
commerce.united.com
svcgw.qa.aws.united.com
skyfi.united.com
meetings.united.com
checkin.united.com
rebelmouse.map.fastly.net
meetings.united.com
accessedge.united.com
cardmemberoffers.united.com
alpha.vacations.united.com
rebelmouse.map.fastly.net
rebelmouse.map.fastly.net
aws.qa.webauth.united.com
wheelchair-qa.united.com
rebelmouse.map.fastly.net
rebelmouse.map.fastly.net
ndcxway1.united.com
classified.united.com
vacations.united.com
premierevents.united.com
cardmemberoffers.united.com
uma.united.com
ebso.ual.com
rebelmouse.map.fastly.net
luxury.vacations.united.com
stage.united.com
businesstravel.united.com
qa7.united.com
ivr-qa.ual.com
newsroom.united.com
dns-vetting1-jeffg-noah.map.fastly.net
rebelmouse.map.fastly.net
qa.united.com
lyncdiscover.united.com
offers.united.com
crreport-dev.united.com
rebelmouse.map.fastly.net
san-14-s12.tlsprovisioning.exacttarget.com
rebelmouse.map.fastly.net
vacations.united.com
united.com
schedulep.united.com
qol-mffqa.united.com
eres.app.stage.auth.united.com
meetings.united.com
vacations.united.com
xml.united.com
san-34-s12.tlsprovisioning.exacttarget.com
rebelmouse.map.fastly.net
inflight-mff.united.com
dns-vetting1-jeffg-noah.map.fastly.net
rebelmouse.map.fastly.net
ualapi.united.com
eservicetest.united.com
dns-vetting1-jeffg-noah.map.fastly.net
assets.mystatus.united.com
wf.united.com
signatures.united.com
unitedperksplus.united.com
svcgw.prd.aws.united.com
rebelmouse.map.fastly.net
mobile-test.united.com
view.enews.united.com
uabusiness.united.com
vacations.united.com
dtm.cc.cruises.united.com
ucbadm.stage.united.com
click.e.united.com
alg-prod.actioniq.mr-in.com
booking.vacations.united.com
rebelmouse.map.fastly.net
walletservices.united.com
rebelmouse.map.fastly.net
api-qa.united.com
cruises.united.com
easyupdate.united.com
united.com
united.com
connections.united.com
cargo-iot.dev.ual.com
smartphone.united.com
packages.united.com
uabusiness.united.com
ndc.auth.united.com
media.united.com
vss.united.com
rebelmouse.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
rebelmouse.map.fastly.net
wheelchair.united.com
wftest.united.com
trk.notify.hotels.united.com
gofly.united.com
partnergw-csmc.united.com
business2.united.com
cardmemberoffers.united.com
iot-qa.united.com
api-qa.united.com
packages.united.com
commerce.united.com
svcgw.qa.aws.united.com
skyfi.united.com
meetings.united.com
checkin.united.com
rebelmouse.map.fastly.net
meetings.united.com
accessedge.united.com
cardmemberoffers.united.com
alpha.vacations.united.com
rebelmouse.map.fastly.net
rebelmouse.map.fastly.net
aws.qa.webauth.united.com
wheelchair-qa.united.com
rebelmouse.map.fastly.net
rebelmouse.map.fastly.net
ndcxway1.united.com
classified.united.com
vacations.united.com
premierevents.united.com
cardmemberoffers.united.com
uma.united.com
ebso.ual.com
rebelmouse.map.fastly.net
luxury.vacations.united.com
stage.united.com
businesstravel.united.com
qa7.united.com
ivr-qa.ual.com
newsroom.united.com
dns-vetting1-jeffg-noah.map.fastly.net
rebelmouse.map.fastly.net
qa.united.com
lyncdiscover.united.com
offers.united.com
crreport-dev.united.com
rebelmouse.map.fastly.net
san-14-s12.tlsprovisioning.exacttarget.com
rebelmouse.map.fastly.net
vacations.united.com
united.com
schedulep.united.com
qol-mffqa.united.com
eres.app.stage.auth.united.com
meetings.united.com
vacations.united.com
xml.united.com
san-34-s12.tlsprovisioning.exacttarget.com
rebelmouse.map.fastly.net
inflight-mff.united.com
dns-vetting1-jeffg-noah.map.fastly.net
rebelmouse.map.fastly.net
ualapi.united.com
eservicetest.united.com
dns-vetting1-jeffg-noah.map.fastly.net
assets.mystatus.united.com
wf.united.com
signatures.united.com
unitedperksplus.united.com
svcgw.prd.aws.united.com
rebelmouse.map.fastly.net
mobile-test.united.com
view.enews.united.com
uabusiness.united.com
vacations.united.com
dtm.cc.cruises.united.com
ucbadm.stage.united.com
click.e.united.com
alg-prod.actioniq.mr-in.com
booking.vacations.united.com
rebelmouse.map.fastly.net
walletservices.united.com
rebelmouse.map.fastly.net
api-qa.united.com
cruises.united.com
easyupdate.united.com
united.com
united.com
connections.united.com
cargo-iot.dev.ual.com
smartphone.united.com
packages.united.com
uabusiness.united.com
ndc.auth.united.com
media.united.com
Certificate
The complete raw certificate details for stage.united.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIQTvpXUDKABUmzsEp/OLxWtzANBgkqhkiG9w0BAQsFADBE MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTcwNTMxMDAwMDAwWhcNMTgwNzMwMjM1 OTU5WjB1MQswCQYDVQQGEwJVUzERMA8GA1UECAwISWxsaW5vaXMxGjAYBgNVBAcM EUFybGluZ3RvbiBIZWlnaHRzMRwwGgYDVQQKDBNVbml0ZWQgQWlybGluZXMgSW5j MRkwFwYDVQQDDBBzdGFnZS51bml0ZWQuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA1dhWZP6Hl63HZWwJnWQdXjnpdHtEjykKHhHfjPmsaAa+LI39 PkgDudde3aZcqp/7C15mfoiiYnGpa6D276Dk1Js3DAcWRga5LH8+Mkwky4g/oQRV zGje2TakpIpdKfyX8Y9eVw6mgdOP0ktbPfQWAnpb3rtulwKJBgg0NA/vXLdAOMPI j+b+OzXGpQQpeW7bWygw7vYLq0ZTKYZNvTqchLcUyLYk7d++k0WY1NhA7Us6vavY ekI0pVAskZPCu75lpT/oFQpbXpWb+Vr5u0kmV8uzxw71Zrk5zdd8PMzmtXSU3x/T NvQqtfAEzbasYw3jK/EbjjEp+g1PQ7FDVK818QIDAQABo4IDyTCCA8UwggE4BgNV HREEggEvMIIBK4IXY2hlY2tpbnN0YWdlLnVuaXRlZC5jb22CF21vYmlsZS1zdGFn ZS51bml0ZWQuY29tghpzdGFnZS51bml0ZWRhaXJsaW5lcy5jby51a4Igc21hcnRw aG9uZS1zdGFnZS5jb250aW5lbnRhbC5jb22CD3BlcmYudW5pdGVkLmNvbYITbXdl Yi1kZXYudW5pdGVkLmNvbYIXc3RhZ2UudW5pdGVkYWlybGluZXMuZGWCF3N0YWdl LnVuaXRlZGFpcmxpbmVzLmpwghtzbWFydHBob25lLXN0YWdlLnVuaXRlZC5jb22C F3N0YWdlLnVuaXRlZGFpcmxpbmVzLmNhghlzbWFydHBob25lLWRldi51bml0ZWQu Y29tghBzdGFnZS51bml0ZWQuY29tMAkGA1UdEwQCMAAwDgYDVR0PAQH/BAQDAgWg MCsGA1UdHwQkMCIwIKAeoByGGmh0dHA6Ly9nbi5zeW1jYi5jb20vZ24uY3JsMIGd BgNVHSAEgZUwgZIwgY8GBmeBDAECAjCBhDA/BggrBgEFBQcCARYzaHR0cHM6Ly93 d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9yZXBvc2l0b3J5L2xlZ2FsMEEGCCsG AQUFBwICMDUMM2h0dHBzOi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvcmVw b3NpdG9yeS9sZWdhbDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHwYD VR0jBBgwFoAU0m/3lvSFP3I8MH0j2oV4m6N8WnwwVwYIKwYBBQUHAQEESzBJMB8G CCsGAQUFBzABhhNodHRwOi8vZ24uc3ltY2QuY29tMCYGCCsGAQUFBzAChhpodHRw Oi8vZ24uc3ltY2IuY29tL2duLmNydDCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2 AN3rHSt6DU+mIIuBrYFocH4ujp0B1VyIjT0RxM227L7MAAABXGAX/UIAAAQDAEcw RQIgFaYCK6TcTKx5AKdmnQqVKHmzT9EEsZZ2sDUZcZpaAi8CIQDlQkNSDJN1vnR4 /ynzBTLv3PQ2oDMgOf2x5llRSuXi+AB2AKS5CZC0GFgUh7sTosxncAo8NZgE+Rvf uON3zQ7IDdwQAAABXGAX/VgAAAQDAEcwRQIgPRz0tSX6Q5qeInazSpieu4XHWFPu nRxtKlgE+lOEO/gCIQDeAAEwHcrmDcR7v4yHlC4Fb+DJpBqy3O99A3q1vkBW2zAN BgkqhkiG9w0BAQsFAAOCAQEA0wa0IrglMdGfrs2TMkDlnd3FX2Xeua4dIGEXN253 +5KVSgZHYOEdouYYVlA+yOtgIx5Ihz9K0q8G+ze8I0+N4yogaD5NaVrh36ZcIAzC 1wiOq/+A6/YB8i/VmMkX8CIU4FNB8fNYViBZ1+Cq2vR5zpl8S2yF3r6Syy2GDVkR m/3HZ+rOONvd0XOvxVtQrUaABGYSz5yy1jecBS9fVvZqgIaDlU/891E47AuP8gkB SZeAiAeQE5QnQmQ6hZxHB+AkY4RGp2Tm6tNpQ2oJf88ij3CmUAZm+aLGHZzZI72H UXjcmFiTgqPP8iPIaoEKvmB56MVx7OUGOK72a2JtDoZ5YQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dhWZP6Hl63HZWwJnWQd XjnpdHtEjykKHhHfjPmsaAa+LI39PkgDudde3aZcqp/7C15mfoiiYnGpa6D276Dk 1Js3DAcWRga5LH8+Mkwky4g/oQRVzGje2TakpIpdKfyX8Y9eVw6mgdOP0ktbPfQW Anpb3rtulwKJBgg0NA/vXLdAOMPIj+b+OzXGpQQpeW7bWygw7vYLq0ZTKYZNvTqc hLcUyLYk7d++k0WY1NhA7Us6vavYekI0pVAskZPCu75lpT/oFQpbXpWb+Vr5u0km V8uzxw71Zrk5zdd8PMzmtXSU3x/TNvQqtfAEzbasYw3jK/EbjjEp+g1PQ7FDVK81 8QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 104979628809374681797474054217137936055 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-31 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-30 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Illinois' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Arlington Heights' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'United Airlines Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'stage.united.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26995438944461073062788613709540800235673928697964903808516001911613441086858415079994050006868311369639806258390275569432933650627660057017576335580265386614779384697527228575616784197012200380376802002843561028308069789466837988626724396037298375065335564241088482994458929463906284008983773243099778152874974419906136593596794518971575497618109203753834436198648551858027256789584181136035997953108515790072096463121002473191016365849757567462701901847246316343008289825412811496238175915553106670641762561446636491988666044850167504442432595244928023956123073507072645942312305315891400092383046832818176476001777 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (303 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkinstage.united.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-stage.united.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.unitedairlines.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartphone-stage.continental.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf.united.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mweb-dev.united.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.unitedairlines.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.unitedairlines.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartphone-stage.united.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.unitedairlines.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartphone-dev.united.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.united.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015c6017fd420000040300473045022015a6022ba4dc4cac7900a7669d0a952879b34fd104b19676b03519719a5a022f022100e54243520c9375be7478ff29f30532efdcf436a0332039fdb1e659514ae5e2f8007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015c6017fd58000004030047304502203d1cf4b525fa439a9e2276b34a989ebb85c75853ee9d1c6d2a5804fa53843bf8022100de0001301dcae60dc47bbf8c87942e056fe0c9a41ab2dcef7d037ab5be4056db . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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