elan.dfg.de

- Deutsche Forschungsgemeinschaft e.V. -

Issued by GeoTrust EV SSL CA - G4

About this certificate

This digital certificate with serial number 11:81:e6:30:25:ab:5f:3d:05:82:1e:07:b0:10:ca:dd was issued on by GeoTrust Inc..

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Deutsche Forschungsgemeinschaft e.V.

Company registration number: VR 2030
Organization: Deutsche Forschungsgemeinschaft e.V.
Organization unit: Informationstechnik Infrastruktur
State / Province: North Rhine-Westphalia
Locality: Bonn
Country: DE

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 11:81:e6:30:25:ab:5f:3d:05:82:1e:07:b0:10:ca:dd
Serial Number (int): 23271350991913324601338909388939774685
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: de:cf:5c:50:b7:ae:02:1f:15:17:aa:16:e8:0d:b5:28:9d:6a:5a:f3

Fingerprint (sha1): d3:0d:9b:dc:ee:00:45:a3:68:be:f5:31:41:b8:f2:1d:89:e0:ac:70
Fingerprint (sha256): 2e:9f:f2:19:fb:ba:7c:0c:d6:19:5b:9d:66:04:e0:b7:e5:95:18:42:7c:77:8a:2c:1c:84:57:e2:1d:b2:da:f3

Issuing Certificate URL: http://gm.symcb.com/gm.crt

Revocation information

OCSP Server: http://gm.symcd.com
CRL Distribution Point: http://gm.symcb.com/gm.crl

Check the revocation status for certificate elan.dfg.de

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for elan.dfg.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

konten.dfg.de
elan-ci-t.dfg.de
elan-t.dfg.de
elan-ci.dfg.de
elfin-t.dfg.de
konten-t.dfg.de
elan.dfg.de

Other certificates including the domain name dfg.de

(limited to 100 certificates)
fta.dfg.de
remote.dfg.de
dfg.de
mediathek.dfg.de
mail.dfg.de
remote.dfg.de
elan-t.dfg.de
elan.dfg.de
wlan.dfg.de
mbx.t.dfg.de
remote.dfg.de
konten-entw.dfg.de
mediant.dfg.de
jira.dfg.de
mx2.dfg.de
mediathek.dfg.de
ai-initiative.dfg.de
elan-entw.dfg.de
log-t.dfg.de
oos.dfg.de
log-t.dfg.de
jobs.dfg.de
autodiscover.t.dfg.de
ot.dfg.de
mediant.dfg.de
dfg.de
log.dfg.de
spamverdacht.dfg.de
fta-eval.dfg.de
elan.dfg.de
remote.dfg.de
log-t.dfg.de
telearbeit.int.dfg.de
srwgp319.dfg.de
jobs.dfg.de
captiveportal.dfg.de
uc.dfg.de
instrumentenkasten.dfg.de
mediant.dfg.de
elan-ci-entw.dfg.de
srlgp042.dfg.de
elan.dfg.de
dfg.de
dfggast.dfg.de
meeting.dfg.de
jobs.dfg.de
ics.t.dfg.de
dfg.de
konten-entw.dfg.de
log.dfg.de
wlan.dfg.de
remote.dfg.de
fta.dfg.de
www.sites.dfg.de
elan-entw-en.dfg.de
da.dfg.de
autodiscover.dfg.de
www.sites.dfg.de
uc.dfg.de
autodiscover.dfg.de
wlan.dfg.de
log-t.dfg.de
dfg.de
dfggast.dfg.de
itsm-web.int.dfg.de
elan.dfg.de
www.events.dfg.de
mediathek.dfg.de
*.dfg.de
elan.dfg.de
remote.dfg.de
eduroam.dfg.de
quicklink-t.dfg.de
elan-entw.en.dfg.de
konten-entw.dfg.de
www.sites.dfg.de
wlan.dfg.de
uc.t.dfg.de
elan.dfg.de
dfg.de
*.dfg.de
remote.dfg.de
itsm-web.int.dfg.de
ai-initiative.dfg.de
wlan.dfg.de
quicklink-t.dfg.de
log.dfg.de
vpn-tau.dfg.de
fta.dfg.de
ai-initiative.dfg.de
dfggast.dfg.de
groupware.dfg.de
remote-entw.dfg.de
dfg.de
dfg.de
wlan.dfg.de
dfggast.dfg.de
konten-entw.dfg.de
quicklink-t.dfg.de
dfg.de

Certificate

The complete raw certificate details for elan.dfg.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv246mDS6PDo1sPLmmRLs
mBNKCo1c0bbVei1dic5Cdc94WaMWrkbTrl7Dd358jgwO2TaB96UuuLRIefQ9jqqT
tIYZIjPF2zEG78HZg3tYvZPZ7NzgCm5fnP+10UhBpb1Pu2pXINH/nYrAQPAWLUvZ
CuwdZtlmi4lk+369inVcYlk2KFAW8WyyaG3BYsoigBNXF1bg87mqem3vKIz6fTR2
mpO12V4Cuapg1/02GTIAJfq/0TRA8duSIqNoRZomkT+aqswtVP2t7a4Y11GF6ySI
vU5k1EcURI02NczPNC7qGig2QYSzMMcehlrhuPQnhWgZsSSyF16CN5eoYyjADtfA
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 23271350991913324601338909388939774685
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust EV SSL CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'North Rhine-Westphalia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bonn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VR 2030'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'North Rhine-Westphalia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bonn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Deutsche Forschungsgemeinschaft e.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Informationstechnik Infrastruktur'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'elan.dfg.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24165872137571942231612927837370681937512965640807887835050206982668807228573726339846864083686948597005286288714237443777950640566894251287894776222454450753665560961866155248336997311992948323253731907087869066754515539810171806687581276611881792108120413241006613415872181127971121634086548748754860851547338186759123602372358434756109106243476048307145851230169124896951744455344353554124912786313709511691281209158559188969081254166865414582766855740152410036208613289702330308132617128976781819251698641740407932902135892448146324493011828859466437945683268782241448694648278010656660154963740594044257210712269
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konten.dfg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elan-ci-t.dfg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elan-t.dfg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elan-ci.dfg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elfin-t.dfg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konten-t.dfg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elan.dfg.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName decf5c50b7ae021f1517aa16e80db5289d6a5af3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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