secure-api.scrippsnetworks.com

- Scripps Networks LLC -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 77:f5:e1:17:72:da:3e:70:f7:93:35:bb:0e:c0:bc:e2 was issued on by GeoTrust Inc..

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Scripps Networks LLC

Organization: Scripps Networks LLC
Organization unit: Akamai SAN SSL OV
State / Province: Tennessee
Locality: Knoxville
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 77:f5:e1:17:72:da:3e:70:f7:93:35:bb:0e:c0:bc:e2
Serial Number (int): 159454809628699712917374427351721491682
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): e2:a1:de:f7:65:20:13:ce:f2:ce:6d:39:84:dc:fd:77:6a:34:e0:da
Fingerprint (sha256): 30:af:3e:b3:e5:be:92:10:89:a3:48:36:12:8b:8c:55:a3:c5:41:9f:26:ce:c2:8e:dc:0b:16:ec:4d:29:f4:9e

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate secure-api.scrippsnetworks.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure-api.scrippsnetworks.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

beta-api.food.com
secure-api.food.com
beta-api.foodnetwork.com
secure-api.diynetwork.com
secure-api.hgtv.com
api.foodnetworkinteractive.com
secure-api.foodnetwork.com
statics.scrippsnetworks.com
beta-api.scrippsnetworks.com
secure-api.scrippsnetworks.com

Other certificates including the domain name scrippsnetworks.com

(limited to 100 certificates)
peoplesoftdemo-ren.scrippsnetworks.com
mamcloud-int.scrippsnetworks.com
secure-api.scrippsnetworks.com
connect2vpn.scrippsnetworks.com
secure-api.scrippsnetworks.com
mediapulse.scrippsnetworks.com
san-6-s13.tlsprovisioning.exacttarget.com
mysite.insidesni.com
orders.scrippsnetworks.com
mam.scrippsnetworks.com
idmanager.scrippsnetworks.com
vpntest.scrippsnetworks.com
mysecure.qa2-cookingchanneltv.com
snkxs078.scrippsnetworks.com
myscripps.scrippsnetworks.com
jsseng.scrippsnetworks.com
secure-api.scrippsnetworks.com
mynewsletters.scrippsnetworks.com
san-6-s13.tlsprovisioning.exacttarget.com
securestatics.scrippsnetworks.com
*.scrippsnetworks.com
timereporting.scrippsnetworks.com
orders.scrippsnetworks.com
jssadmin.scrippsnetworks.com
sniidevices.scrippsnetworks.com
secure-api.scrippsnetworks.com
sales.scrippsnetworks.com
secure-api.scrippsnetworks.com
mamcloud-dev.scrippsnetworks.com
mynewsletters.discovery.com
alfintlqa2.scrippsnetworks.com
mam.scrippsnetworks.com
boecloud-qa.scrippsnetworks.com
snkxvoip-expe-cluster01.scrippsnetworks.com
secure-api.scrippsnetworks.com
secure-api.scrippsnetworks.com
secure-api.scrippsnetworks.com
mysecure.dev-travelchannel.com
secure-api.scrippsnetworks.com
audit.scrippsnetworks.com
secure-api.scrippsnetworks.com
fgs-qa.scrippsnetworks.com
faspexglobal.scrippsnetworks.com
peoplesoftdev-ren.scrippsnetworks.com
*.scrippsnetworks.com
faspex.scrippsnetworks.com
dev-apps.scrippsnetworks.com
sarbox404.scrippsnetworks.com
mynewsletters.discovery.com
sniforms.scrippsnetworks.com
sniforms.scrippsnetworks.com
mamcloud-int.scrippsnetworks.com
qa2-mysecure.scrippsnetworks.com
*.scrippsnetworks.com
idam.scrippsnetworks.com
hrapprovals.scrippsnetworks.com
orders.scrippsnetworks.com
orders.scrippsnetworks.com
fgs-int.scrippsnetworks.com
mediapulse.scrippsnetworks.com
mamcloud-dev.scrippsnetworks.com
doa.scrippsnetworks.com
mysecure.staging-foodnetwork.com
partnerweb.scrippsnetworks.com
pressreleases.scrippsnetworks.com
secure-api.scrippsnetworks.com
orders.scrippsnetworks.com
recognitionprograms.scrippsnetworks.com
vpntest.scrippsnetworks.com
snkxvoip-expc-cluster01.scrippsnetworks.com
qa1-moderation.scrippsnetworks.com
slate.scrippsnetworks.com
wiki.scrippsnetworks.com
san-6-s13.tlsprovisioning.exacttarget.com
snkxvoip-expe02.scrippsnetworks.com
mamcloud.scrippsnetworks.com
statics2.scrippsnetworks.com
jsseng.scrippsnetworks.com
sniidevices.scrippsnetworks.com
secure-api.scrippsnetworks.com
snkxise01-admin.scrippsnetworks.com
hmp.scrippsnetworks.com
apimami.scrippsnetworks.com
snkxvoip-expe-cluster01.scrippsnetworks.com
partner.scrippsnetworks.com
alfdomuat.scrippsnetworks.com
peoplesoftdemo-ren.scrippsnetworks.com
tableaucloud.scrippsnetworks.com
secure-api.scrippsnetworks.com
archerweb-uat.scrippsnetworks.com
secure-api.scrippsnetworks.com
adsremote.scrippsnetworks.com
*.scrippsnetworks.com
sarbox404.scrippsnetworks.com
peoplesoftdev2.scrippsnetworks.com
boecloud.scrippsnetworks.com
scrippsnetworks.com
mysecure.scrippsnetworks.com
connect2vpnc.scrippsnetworks.com
secure-api.scrippsnetworks.com

Certificate

The complete raw certificate details for secure-api.scrippsnetworks.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHizCCBnOgAwIBAgIQd/XhF3LaPnD3kzW7DsC84jANBgkqhkiG9w0BAQsFADBE
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU
R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTYwNTAzMDAwMDAwWhcNMTcwODAyMjM1
OTU5WjCBmTELMAkGA1UEBhMCVVMxEjAQBgNVBAgTCVRlbm5lc3NlZTESMBAGA1UE
BwwJS25veHZpbGxlMR0wGwYDVQQKDBRTY3JpcHBzIE5ldHdvcmtzIExMQzEaMBgG
A1UECwwRQWthbWFpIFNBTiBTU0wgT1YxJzAlBgNVBAMMHnNlY3VyZS1hcGkuc2Ny
aXBwc25ldHdvcmtzLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AKuRzSa05VJ+4LkBdomqiB75HA2kMaLXGtxG00hguGaCabrQ2Wjzimz20dwD8FlN
wPXOkqf1oqLpcgy8iM2loguxsajfbyGaD2mlnjoJTRiAG9mlUFhpj5yiYDRv8S9e
Sl/NBfPNnurk8vvn229qYY4fqE+XH9F4uh2q00Hb3bYr15t4JcpC/W9L+wlmlDC/
2ktdlHPgUbgx+BdX1qZl+HxAahA0qYVLglZTbvuaRk/NI6nCoi74kR0LNWFCGH8b
ij700Dw5rh8xPw6sqzIGMqqsiq4Jdvc1vYFyssBACzyhOOW7TVDSRY4J1KfsXbGp
3Za3NyyCXy3a1ruCchu5a9sCAwEAAaOCBCEwggQdMIIBFgYDVR0RBIIBDTCCAQmC
EWJldGEtYXBpLmZvb2QuY29tghNzZWN1cmUtYXBpLmZvb2QuY29tghhiZXRhLWFw
aS5mb29kbmV0d29yay5jb22CGXNlY3VyZS1hcGkuZGl5bmV0d29yay5jb22CE3Nl
Y3VyZS1hcGkuaGd0di5jb22CHmFwaS5mb29kbmV0d29ya2ludGVyYWN0aXZlLmNv
bYIac2VjdXJlLWFwaS5mb29kbmV0d29yay5jb22CG3N0YXRpY3Muc2NyaXBwc25l
dHdvcmtzLmNvbYIcYmV0YS1hcGkuc2NyaXBwc25ldHdvcmtzLmNvbYIec2VjdXJl
LWFwaS5zY3JpcHBzbmV0d29ya3MuY29tMAkGA1UdEwQCMAAwDgYDVR0PAQH/BAQD
AgWgMCsGA1UdHwQkMCIwIKAeoByGGmh0dHA6Ly9nbi5zeW1jYi5jb20vZ24uY3Js
MIGdBgNVHSAEgZUwgZIwgY8GBmeBDAECAjCBhDA/BggrBgEFBQcCARYzaHR0cHM6
Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9yZXBvc2l0b3J5L2xlZ2FsMEEG
CCsGAQUFBwICMDUMM2h0dHBzOi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMv
cmVwb3NpdG9yeS9sZWdhbDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
HwYDVR0jBBgwFoAU0m/3lvSFP3I8MH0j2oV4m6N8WnwwVwYIKwYBBQUHAQEESzBJ
MB8GCCsGAQUFBzABhhNodHRwOi8vZ24uc3ltY2QuY29tMCYGCCsGAQUFBzAChhpo
dHRwOi8vZ24uc3ltY2IuY29tL2duLmNydDCCAX4GCisGAQQB1nkCBAIEggFuBIIB
agFoAHYA3esdK3oNT6Ygi4GtgWhwfi6OnQHVXIiNPRHEzbbsvswAAAFUd7AAcgAA
BAMARzBFAiEAnbHOGJnnDvp10M0zr0EZALNDfEk1+92ujHAo+QhYaIUCICXdf3s7
hVMFJyb7O4aA4c0Jn7sJTzpJFlSpNQxfzUN7AHYApLkJkLQYWBSHuxOizGdwCjw1
mAT5G9+443fNDsgN3BAAAAFUd7AAnQAABAMARzBFAiByHUY3810yqgy1cXIPsX3I
7Br9RcphZrUL3UlPye+MSAIhAMNQzLm+0IV4H3+POrEZkGXy/Qz59vpgZcaoc7x+
aN4yAHYAaPaY+B9kgr46jO65KB1M/HFRXWeT1ETRCmesu09P+8QAAAFUd7AAmQAA
BAMARzBFAiEAyo9blNK0KhvCSCpdcoCMGt+IUc/RTbxmvmg/d/NQ6j4CIHCCjdnk
lqPztxQT8V3xD20XOD7Ad302N6PfjI35iEzMMA0GCSqGSIb3DQEBCwUAA4IBAQAQ
UE9BUmp0WoLTpO5JC3wBNakdzMcyNVuy45eSec8ekB1DbGeSdLbAkm/FDYAN9rUb
3F68mgYpmJbQlqVQjDNLyh+f4h5glraMJnZFLtBQHODE/CeM+xjq8B9ajj74eI3o
qZiE5078KKxBaW26rZY8/AOmTeyl7ElwCcJoMDCxObaLdEvQ5OG/IH+P4zv4BK1f
8OelZ1VEJWSfwLkUiJJTDZemRYSn5+KnnHoLNEh8vPfG7ZzRjSVdE17sFtRdBzY8
1IAuzhwQ8N2ajQWv0I/lIVSQ+kEKk7LTbc4752cwaR+WeXtjk6Aw0BiLjZZfRQJf
mSGgDi9LXNndSNRUTZaO
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5HNJrTlUn7guQF2iaqI
HvkcDaQxotca3EbTSGC4ZoJputDZaPOKbPbR3APwWU3A9c6Sp/WioulyDLyIzaWi
C7GxqN9vIZoPaaWeOglNGIAb2aVQWGmPnKJgNG/xL15KX80F882e6uTy++fbb2ph
jh+oT5cf0Xi6HarTQdvdtivXm3glykL9b0v7CWaUML/aS12Uc+BRuDH4F1fWpmX4
fEBqEDSphUuCVlNu+5pGT80jqcKiLviRHQs1YUIYfxuKPvTQPDmuHzE/DqyrMgYy
qqyKrgl29zW9gXKywEALPKE45btNUNJFjgnUp+xdsandlrc3LIJfLdrWu4JyG7lr
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 159454809628699712917374427351721491682
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tennessee'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Knoxville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Scripps Networks LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Akamai SAN SSL OV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'secure-api.scrippsnetworks.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21658647485313668167500820188856064539538459633555211299898982495404036977786283068461986025267445698924521002776660019821512813893846248630250380810102996499496869524377516591313389438820765468475722759696366546328843672237212903604638888987374993310054503193975188599073908100598069833624110114367995179772429996016376358219875238643065072731141487153958750383518352773447972075821282087663963382170871826570814244837796259019754038374547964897907604992959511139424902169029623713654324693511456989156436602960731840331160802645235767471734125780511297761776758580022017177599004438209975425947726558387447164136411
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (269 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-api.food.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-api.food.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-api.foodnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-api.diynetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-api.hgtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.foodnetworkinteractive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-api.foodnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statics.scrippsnetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-api.scrippsnetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-api.scrippsnetworks.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0010504f41526a745a82d3a4ee490b7c0135a91dccc732355bb2e3979279cf1e901d436c679274b6c0926fc50d800df6b51bdc5ebc9a06299896d096a5508c334bca1f9fe21e6096b68c2676452ed0501ce0c4fc278cfb18eaf01f5a8e3ef8788de8a99884e74efc28ac41696dbaad963cfc03a64deca5ec497009c2683030b139b68b744bd0e4e1bf207f8fe33bf804ad5ff0e7a567554425649fc0b9148892530d97a64584a7e7e2a79c7a0b34487cbcf7c6ed9cd18d255d135eec16d45d07363cd4802ece1c10f0dd9a8d05afd08fe5215490fa410a93b2d36dce3be76730691f96797b6393a030d0188b8d965f45025f9921a00e2f4b5cd9dd48d4544d968e