www.gs1-germany.de

- GS1 Germany GmbH -

Issued by GeoTrust Extended Validation SHA256 SSL CA

About this certificate

This digital certificate with serial number 17:e3:2b:16:76:71:4b:8a:fe:76:24:cb:6f:0f:7b:ee was issued on by GeoTrust Inc..

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

GS1 Germany GmbH

Company registration number: HRB 6276
Organization: GS1 Germany GmbH
Organization unit: IT
State / Province: Nordrhein-Westfalen
Locality: Köln
Country: DE

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 17:e3:2b:16:76:71:4b:8a:fe:76:24:cb:6f:0f:7b:ee
Serial Number (int): 31751769213229199802115593833574005742
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 17:b8:dc:aa:b1:53:22:19:41:95:7b:3c:81:ea:88:9b:49:c3:a2:8b

Fingerprint (sha1): 04:76:45:ad:dc:9e:3f:44:54:c0:d0:75:f1:5b:dc:a2:b9:40:f4:9b
Fingerprint (sha256): 30:b0:a4:a4:6b:a9:89:f7:d2:67:35:0a:4c:22:4e:e6:19:5c:a2:a0:d4:81:9b:06:45:63:6a:36:1a:9c:b9:7d

Issuing Certificate URL: http://gk.symcb.com/gk.crt

Revocation information

OCSP Server: http://gk.symcd.com
CRL Distribution Point: http://gk.symcb.com/gk.crl

Check the revocation status for certificate www.gs1-germany.de

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.gs1-germany.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ecrtag.de
jira.ftrace.com
confluence.ftrace.com
www.smartdataone.de
www.gs1-complete.de
www.lei.direct
mdm.gs1-germany.de
seg.gs1-germany.de
jira.gs1-germany.de
confluence.gs1-germany.de
service.gs1-germany.de
innovation.gs1-germany.de
www.gs1-germany.de
gs1-germany.de

Other certificates including the domain name gs1-germany.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.gs1-germany.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAu3NdPyj38HNdv9Tb7/YQ
mgJLEfkUXNpt7Ljk6SWiFf0uKZBaSxFMU9gUJNFNwdZZf33+xzCFdT0NzeufQ2eN
zOve+YT7PXNeK5erle9W/dG3DWtXgfZoGP5BBJHPrUU/rXnRvHBf4UkkBXQPpVlj
DZqH3vRxUiOoeGnx+Kb0naMWkfXXjHGQLPMKlmYVaR/q3fitkr0OTQfPgP6NZuqd
kJB1dZOKR96mEqqFVaBQ9d3cz12jqYtDkNynEv7/uoLG6WeKclDZxvJOTG7owAOv
Pdl67zBRjiKLKjhxOt+bk0bMQfC7L7Opp2iOP/+RjfCdM0Z22pKkBx6oEeI6CBpw
yYuNy6IFbC3am9DNgJHiEWRoCAFRx1CGPdZdyK6nI8YCNUzVrjlcpynTBp+jpoC8
vY70vDfJjguDGl8enznDed2P7MOBJK8FCKt1I1howct8S+DUwWH62yliPnH+Gbl4
n+ji5Zs7kW4TtMCH6cJhipjZ6eLwaEY/pRmLLbIHOwOmfTqT4ZCRlCVK9olfdAwP
cTF8fyPbFGabyCcFez06uX0u2LI0jWnIcRW1Ilj+7dm7fX3sslN9ifBK1wum9g5L
tSQdW0Azfm3i0Vk2PzjIJkVWOSniu4RMtzwYjViOMLqlyKdIIBsRBpLB8j6ehHEX
dSJ2Y1tAjK+MQmjwjF61lacCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 31751769213229199802115593833574005742
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Extended Validation SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Köln'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 6276'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Köln'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'GS1 Germany GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.gs1-germany.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 764731897976631012553594981186266662737331835443118472156844952899133682629350287123466402767332769090486583281972503553287067776696023594912184415640645189036178886337580595525874411948401564761815521021802259238040929406500049672815552152862926871649389950787613848762863322305541019338501021253349544361053426440587690311348587585654642392548255315463943398326982225106152173574518838736278898131421914778628718473019192149410671369193903658613194063609185218387226359037504696295136286753225476322175780522227627064459155664299090162917391529183972646784915915795650663652060615566786792188558069928920823802254962365628625612045866154104647188475969736958961909973506484124974830860527497998708151817098547427738969900111979502301867599027039325743977672934081787809332673994384981814116561235168391564292406755828114087942254353809668400038825823639446474644956388041532351314844718138095891292700585272099734832098647828958668783368184755033026998553670896710042606955608611060079303660204419966586762231388639138209563030663239938086793325408536024458591189190507985373821318913266946656385723798731114612900785104064347290414619254950819079444791222115674576004411692283334148670296037231164569005452851988094379527972951463
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (292 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecrtag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jira.ftrace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'confluence.ftrace.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smartdataone.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gs1-complete.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lei.direct'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdm.gs1-germany.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seg.gs1-germany.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jira.gs1-germany.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'confluence.gs1-germany.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.gs1-germany.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovation.gs1-germany.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gs1-germany.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gs1-germany.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gk.symcb.com/gk.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17b8dcaab153221941957b3c81ea889b49c3a28b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gk.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gk.symcb.com/gk.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000153329f333d00000403004730450221009c8718d51b0bcf3c767b27c615d855bba83ba048fa022ccec70e7f74b2dc2b9d022046795dda94f8e58b530e55a5d96e734eee1c995e1300ae09af25b47e83636b1f007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000153329f335f0000040300483046022100acaddde8f32bf60d28ebd92ab8a391875d4613ef5e0134b337a826685e9a4643022100ccfcf956997f40d98b1d51187827dd54dadbfdd72c1418c9db4e3a86446b2635
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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