gtlbmllyd0100.bagmail.net
- Bertelsmann SE & Co. KGaA -
Issued by GeoTrust SSL CA - G3
About this certificate
This digital certificate with serial number 20:64:9d:0c:38:7e:d0:cc:55:0f:a7:de:64:09:09:3a was issued on by GeoTrust Inc..
With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Bertelsmann SE & Co. KGaA
Organization:
Bertelsmann SE & Co. KGaA
State / Province:
Nordrhein-Westfalen
Locality: Guetersloh
Country: DE
Locality: Guetersloh
Country: DE
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 20:64:9d:0c:38:7e:d0:cc:55:0f:a7:de:64:09:09:3aSerial Number (int): 43057710857500985403963783641903466810
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c
Fingerprint (sha1): df:8d:49:ac:f3:de:d2:c9:c8:d1:b0:9a:a8:7a:f1:ca:4d:b9:cf:5a
Fingerprint (sha256): 2c:1e:41:92:e5:bc:e2:c1:f1:3b:da:bf:e7:8a:60:de:58:48:45:70:55:2b:35:2b:e5:36:db:bd:69:50:80:ec
Issuing Certificate URL: http://gn.symcb.com/gn.crt
Revocation information
OCSP Server: http://gn.symcd.comCRL Distribution Point: http://gn.symcb.com/gn.crl
Check the revocation status for certificate gtlbmllyd0100.bagmail.net
13
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for gtlbmllyd0100.bagmail.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
sipinternal.bertelsmann.de
sip.bertelsmann.de
gtlbmllyd0150.bagmail.net
dialin.arvato.com
sip.arvato.com
dialin.bertelsmann.de
sipinternal.arvato.com
csweb.bertelsmann.de
cswebd1.bertelsmann.de
meet.bertelsmann.de
gtlbmllyd0101.bagmail.net
gtlbmllyd0102.bagmail.net
gtlbmllyd0100.bagmail.net
sip.bertelsmann.de
gtlbmllyd0150.bagmail.net
dialin.arvato.com
sip.arvato.com
dialin.bertelsmann.de
sipinternal.arvato.com
csweb.bertelsmann.de
cswebd1.bertelsmann.de
meet.bertelsmann.de
gtlbmllyd0101.bagmail.net
gtlbmllyd0102.bagmail.net
gtlbmllyd0100.bagmail.net
Other certificates including the domain name bagmail.net
(limited to 100 certificates)
um.bagmail.net
owasemea.bertelsmann.de
um.bagmail.net
gtlbmllyd0100.bagmail.net
*.bagmail.net
devccgtlp02.vc.bertelsmann.de
gtlbml3lf0200.bagmail.net
gtlbmlske0200.bertelsmann.de
owasemea.bertelsmann.de
gtlbml3lf0100.bagmail.net
owasemea.bertelsmann.de
gtlbmlske0100.bertelsmann.de
gtlbml3lf0200.bagmail.net
devccgtlp02.vc.bertelsmann.de
connect.bagmail.net
owasemea.bertelsmann.de
*.bagmail.net
gtlbml3lf0200.bagmail.net
gtlbmllyf0100.bagmail.net
um.bagmail.net
gtlbml3lf0200.bagmail.net
gtlbml3le0100.bagmail.net
connect.bagmail.net
*.bagmail.net
gtlbmllyf0100.bagmail.net
dubbmlskf0001.bagmail.net
gtlbmlske0100.bertelsmann.de
gtlbmllyd0100.bagmail.net
gtlbml3lf0200.bagmail.net
gtlbmllyf0100.bagmail.net
*.bagmail.net
gtlbml3lf0100.bagmail.net
gtlbmlske0200.bertelsmann.de
gtlbmlske0100.bertelsmann.de
mucbmllys0001.bagmail.net
gtlbmllyd0100.bagmail.net
devccgtlp02.vc.bertelsmann.de
devccgtlp02.vc.bertelsmann.de
nycbml3lf0100.bagmail.net
*.bagmail.net
gtlbmllyd0100.bagmail.net
gtlbml3le0100.bagmail.net
nycbml3le0100.bagmail.net
owasemea.bertelsmann.de
um.bagmail.net
gtlbmllyd0100.bagmail.net
*.bagmail.net
devccgtlp02.vc.bertelsmann.de
gtlbml3lf0200.bagmail.net
gtlbmlske0200.bertelsmann.de
owasemea.bertelsmann.de
gtlbml3lf0100.bagmail.net
owasemea.bertelsmann.de
gtlbmlske0100.bertelsmann.de
gtlbml3lf0200.bagmail.net
devccgtlp02.vc.bertelsmann.de
connect.bagmail.net
owasemea.bertelsmann.de
*.bagmail.net
gtlbml3lf0200.bagmail.net
gtlbmllyf0100.bagmail.net
um.bagmail.net
gtlbml3lf0200.bagmail.net
gtlbml3le0100.bagmail.net
connect.bagmail.net
*.bagmail.net
gtlbmllyf0100.bagmail.net
dubbmlskf0001.bagmail.net
gtlbmlske0100.bertelsmann.de
gtlbmllyd0100.bagmail.net
gtlbml3lf0200.bagmail.net
gtlbmllyf0100.bagmail.net
*.bagmail.net
gtlbml3lf0100.bagmail.net
gtlbmlske0200.bertelsmann.de
gtlbmlske0100.bertelsmann.de
mucbmllys0001.bagmail.net
gtlbmllyd0100.bagmail.net
devccgtlp02.vc.bertelsmann.de
devccgtlp02.vc.bertelsmann.de
nycbml3lf0100.bagmail.net
*.bagmail.net
gtlbmllyd0100.bagmail.net
gtlbml3le0100.bagmail.net
nycbml3le0100.bagmail.net
Certificate
The complete raw certificate details for gtlbmllyd0100.bagmail.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGJDCCBQygAwIBAgIQIGSdDDh+0MxVD6feZAkJOjANBgkqhkiG9w0BAQsFADBE MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTUwMjA0MDAwMDAwWhcNMTgwMjE5MjM1 OTU5WjCBiDELMAkGA1UEBhMCREUxHDAaBgNVBAgTE05vcmRyaGVpbi1XZXN0ZmFs ZW4xEzARBgNVBAcUCkd1ZXRlcnNsb2gxIjAgBgNVBAoUGUJlcnRlbHNtYW5uIFNF ICYgQ28uIEtHYUExIjAgBgNVBAMUGWd0bGJtbGx5ZDAxMDAuYmFnbWFpbC5uZXQw ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu5LL8/DxTmImbmiZW0eH9 afXEhORrLqgJBxwaUlBCIWbSTW5tVwAeqiZVS9CRsMZ1V+/ka/b7F/ktttcKVyUu ORONe5MrmYvol7Y0AqsNrOqD0R6y73TzZv8gLf4CnhTAfYQGsCmlgB07yHo9ygXM v4cOx+yytADqu2Q5UFoU/UCWvI0fAHn4q+oOMUqCctrlu8mwK/OnTf38ifgZvoNY HPuhcFMH3KQmprM1Vd9DvbCqffgCaINHdOXeJhAJ0NVcg3wvgB+98Y+HtUd+7aAL bMgB5KvDQxOhT11A/vGp0PSZN5VGsdyllfUjDOfWQklTTxCARaVQPmQeUREEZpxX AgMBAAGjggLLMIICxzCCAT4GA1UdEQSCATUwggExghpzaXBpbnRlcm5hbC5iZXJ0 ZWxzbWFubi5kZYISc2lwLmJlcnRlbHNtYW5uLmRlghlndGxibWxseWQwMTUwLmJh Z21haWwubmV0ghFkaWFsaW4uYXJ2YXRvLmNvbYIOc2lwLmFydmF0by5jb22CFWRp YWxpbi5iZXJ0ZWxzbWFubi5kZYIWc2lwaW50ZXJuYWwuYXJ2YXRvLmNvbYIUY3N3 ZWIuYmVydGVsc21hbm4uZGWCFmNzd2ViZDEuYmVydGVsc21hbm4uZGWCE21lZXQu YmVydGVsc21hbm4uZGWCGWd0bGJtbGx5ZDAxMDEuYmFnbWFpbC5uZXSCGWd0bGJt bGx5ZDAxMDIuYmFnbWFpbC5uZXSCGWd0bGJtbGx5ZDAxMDAuYmFnbWFpbC5uZXQw CQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwKwYDVR0fBCQwIjAgoB6gHIYaaHR0 cDovL2duLnN5bWNiLmNvbS9nbi5jcmwwgaEGA1UdIASBmTCBljCBkwYKYIZIAYb4 RQEHNjCBhDA/BggrBgEFBQcCARYzaHR0cHM6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jl c291cmNlcy9yZXBvc2l0b3J5L2xlZ2FsMEEGCCsGAQUFBwICMDUMM2h0dHBzOi8v d3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvcmVwb3NpdG9yeS9sZWdhbDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHwYDVR0jBBgwFoAU0m/3lvSFP3I8 MH0j2oV4m6N8WnwwVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8v Z24uc3ltY2QuY29tMCYGCCsGAQUFBzAChhpodHRwOi8vZ24uc3ltY2IuY29tL2du LmNydDANBgkqhkiG9w0BAQsFAAOCAQEAYuX+5oKiViG16l2CtiW2EZXvXq5EX6C0 xSXsBfOIScNTCkRw5Od1R4kkoq0cTc1frj/hI8pWClGu6+6qdvt+6QtLRenSNTRE P/MIIt+MH61PQ8sFyOVu95iwxwCdbNd2XWWZUYCC5/jz8O1KI2l5o6ag9/sJf1Q5 GpBeuLy/IKVvBQyk/Tv+pcBzLbErL58jAcrf9FYX/UwHC2MorNLXNUBCbNnnnXiP 3+RdGWmLAG8CJRH+M8+PS0MPwbcopqaA+Uoe+v3tz7Uje8FXcNBDgbahiTlqeynB iZuTTUkFZY8gHLGMqUK1TdJjvGyXFiOVsDqXnRd9KXVhpx4/Rg85Ow== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruSy/Pw8U5iJm5omVtHh /Wn1xITkay6oCQccGlJQQiFm0k1ubVcAHqomVUvQkbDGdVfv5Gv2+xf5LbbXClcl LjkTjXuTK5mL6Je2NAKrDazqg9Eesu9082b/IC3+Ap4UwH2EBrAppYAdO8h6PcoF zL+HDsfssrQA6rtkOVBaFP1AlryNHwB5+KvqDjFKgnLa5bvJsCvzp039/In4Gb6D WBz7oXBTB9ykJqazNVXfQ72wqn34AmiDR3Tl3iYQCdDVXIN8L4AfvfGPh7VHfu2g C2zIAeSrw0MToU9dQP7xqdD0mTeVRrHcpZX1Iwzn1kJJU08QgEWlUD5kHlERBGac VwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 43057710857500985403963783641903466810 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-02-04 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-19 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Guetersloh' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Bertelsmann SE & Co. KGaA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'gtlbmllyd0100.bagmail.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22078240829387194103889936337161520299015143607497930426371734360674627261169869889847278370326090046409759752402298958682229228200115644534847500578943100054674254316873368140814450130843056700125386146392879810529472829420192369166133087462615024875767330196118369088591440272793381010057992520300572110554394945310003230611955074533098342370487333998204223086238876971347055860796429675740940039778485642310560055875935235895905630896701376359279123073311586453136916348471585296339054354001357319396172215633422358411952053719914917776929194412907711603175218073011008879019445087526192139254853863601956800863319 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (309 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipinternal.bertelsmann.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.bertelsmann.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtlbmllyd0150.bagmail.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.arvato.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.arvato.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.bertelsmann.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipinternal.arvato.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csweb.bertelsmann.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cswebd1.bertelsmann.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.bertelsmann.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtlbmllyd0101.bagmail.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtlbmllyd0102.bagmail.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtlbmllyd0100.bagmail.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (153 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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