www.horsedeals.com.au

- AGRICULTURAL PUBLISHERS PTY. LIMITED -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 51:8d:c6:99:38:1d:05:30:84:4c:d9:6b:ed:61:0a:44 was issued on by GeoTrust Inc..

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

AGRICULTURAL PUBLISHERS PTY. LIMITED

Organization: AGRICULTURAL PUBLISHERS PTY. LIMITED
State / Province: New South Wales
Locality: Pyrmont
Country: AU

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 51:8d:c6:99:38:1d:05:30:84:4c:d9:6b:ed:61:0a:44
Serial Number (int): 108403609572008228019592276782849526340
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): cb:2b:c8:2b:37:72:93:2e:06:ea:4c:d8:e6:47:fa:5a:a4:82:1e:b5
Fingerprint (sha256): 31:b2:51:5a:a2:5e:ad:2b:a0:8b:6b:3d:93:33:76:0a:56:0b:7e:dc:2e:f7:ac:86:33:cd:6b:52:db:75:0e:7f

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate www.horsedeals.com.au

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.horsedeals.com.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

agtrader.com.au
dev.agtrader.co.nz
stage.agtrader.com.au
stage.agtrader.co.nz
agtrader.co.nz
stage.horsedeals.com.au
www.agtrader.com.au
uat.agtrader.co.nz
uat.agtrader.com.au
dev.agtrader.com.au
uat.horsedeals.com.au
www.agtrader.co.nz
dev.horsedeals.com.au
www.horsedeals.com.au
horsedeals.com.au

Other certificates including the domain name horsedeals.com.au

(limited to 100 certificates)
fairfaxmedia.com.au
host.horsedeals.com.au
www.horsedeals.com.au
fairfaxregional.com.au
fairfaxmedia.com.au
*.fairfaxmedia.com.au
agtrader.com.au
austcommunitymedia.com.au
agtrader.com.au
www.horsedeals.com.au
horsedeals.com.au
austcommunitymedia.com.au
agtrader.com.au
fairfaxregional.com.au
fairfaxregional.com.au
fairfaxregional.com.au
fairfaxmedia.com.au
fairfaxregional.com.au
*.fairfaxmedia.com.au
mail.horsedeals.com.au
fairfaxregional.com.au
austcommunitymedia.com.au
fairfaxregional.com.au
agtrader.com.au
fairfaxregional.com.au
host.horsedeals.com.au
mail.horsedeals.com.au
fairfaxregional.com.au
agtrader.com.au
fairfaxregional.com.au
fairfaxregional.com.au
austcommunitymedia.com.au
fairfaxmedia.com.au
fairfaxregional.com.au
fairfaxmedia.com.au
horsedeals.com.au
fairfaxmedia.com.au
mail.horsedeals.com.au
fairfaxregional.com.au
fairfaxregional.com.au
host2.horsedeals.com.au
fairfaxregional.com.au
mail.horsedeals.com.au
*.fairfaxmedia.com.au
shop.horsedeals.com.au
fairfaxregional.com.au
fairfaxmedia.com.au
fairfaxmedia.com.au
fairfaxmedia.com.au
agtrader.com.au
mail.horsedeals.com.au
fairfaxmedia.com.au
fairfaxregional.com.au
austcommunitymedia.com.au
shop.horsedeals.com.au
*.fairfaxmedia.com.au
horsedeals.com.au
fairfaxmedia.com.au

Certificate

The complete raw certificate details for www.horsedeals.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIQUY3GmTgdBTCETNlr7WEKRDANBgkqhkiG9w0BAQsFADBE
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU
R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTUwNTA1MDAwMDAwWhcNMTcwNTA0MjM1
OTU5WjCBiDELMAkGA1UEBhMCQVUxGDAWBgNVBAgTD05ldyBTb3V0aCBXYWxlczEQ
MA4GA1UEBxQHUHlybW9udDEtMCsGA1UEChQkQUdSSUNVTFRVUkFMIFBVQkxJU0hF
UlMgUFRZLiBMSU1JVEVEMR4wHAYDVQQDFBV3d3cuaG9yc2VkZWFscy5jb20uYXUw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHuW63yD6f5KbxVkPZP8Wa
R0bAEIyRnoABVw6O8ORD2oCvdcetYLGEWxZywXAMjQ+fsXArU3G88lcrIs4bMv1L
57/L0eFHH9zS+bC3SkjprsPrs4MddVA4UPuBo+E+GTMET3ZbKg1RL7DzF1FH2Trj
q60u5fIjeaCzFys5y3eSxG8EsGzGL1WEumuvEIjh0WQSa8P/9t68OOmtHYETkl4P
qXEjClDiq8AMJRNx2tfIRkz0th/jjc3ZHI+U1svm1NpDqA2HZPhOwpr2igLelK/x
xRP05cUt7VsQdUy7jDTpVzJD15IOCYF9bU2MLgSK3ChbJm5s/25foipTJi6kwYHd
AgMBAAGjggLQMIICzDCCAUcGA1UdEQSCAT4wggE6gg9hZ3RyYWRlci5jb20uYXWC
EmRldi5hZ3RyYWRlci5jby5ueoIVc3RhZ2UuYWd0cmFkZXIuY29tLmF1ghRzdGFn
ZS5hZ3RyYWRlci5jby5ueoIOYWd0cmFkZXIuY28ubnqCF3N0YWdlLmhvcnNlZGVh
bHMuY29tLmF1ghN3d3cuYWd0cmFkZXIuY29tLmF1ghJ1YXQuYWd0cmFkZXIuY28u
bnqCE3VhdC5hZ3RyYWRlci5jb20uYXWCE2Rldi5hZ3RyYWRlci5jb20uYXWCFXVh
dC5ob3JzZWRlYWxzLmNvbS5hdYISd3d3LmFndHJhZGVyLmNvLm56ghVkZXYuaG9y
c2VkZWFscy5jb20uYXWCFXd3dy5ob3JzZWRlYWxzLmNvbS5hdYIRaG9yc2VkZWFs
cy5jb20uYXUwCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwKwYDVR0fBCQwIjAg
oB6gHIYaaHR0cDovL2duLnN5bWNiLmNvbS9nbi5jcmwwgZ0GA1UdIASBlTCBkjCB
jwYGZ4EMAQICMIGEMD8GCCsGAQUFBwIBFjNodHRwczovL3d3dy5nZW90cnVzdC5j
b20vcmVzb3VyY2VzL3JlcG9zaXRvcnkvbGVnYWwwQQYIKwYBBQUHAgIwNQwzaHR0
cHM6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9yZXBvc2l0b3J5L2xlZ2Fs
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBTSb/eW
9IU/cjwwfSPahXibo3xafDBXBggrBgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0
dHA6Ly9nbi5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9nbi5zeW1jYi5j
b20vZ24uY3J0MA0GCSqGSIb3DQEBCwUAA4IBAQC4qqzW6rJyu6m8SuGHeaPhOZ96
ZB2wkFW63wkENFXM5Gmscf/wi8XWQZIz4/DjyUgOu1jkJ7iVQwQDNnf2QjhoW1M/
PvR6p5OgyuEkVG8vQtypIQ297oPDSIsfL5LoS8xQqFA47vEf5/7RCxqXPC0ZkPNJ
Vm65g5og5h3sVLGJaV/vND8uu+OX9tRLlWIU4b3QSaeEPiMc9zYOHsysWvaO4xKE
mVa2EVz8HyVv/MVaa94nT7ZlUocrVFgYhJUGN8vm/9e+Fwf2UpyPUqKEUrLsmXtf
Jrs7P4FynvSW5QdYQBjCW6BfDvHjwCE+4k/fNiYRIk7G3VFkGA5na0VkHwQF
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7lut8g+n+Sm8VZD2T/F
mkdGwBCMkZ6AAVcOjvDkQ9qAr3XHrWCxhFsWcsFwDI0Pn7FwK1NxvPJXKyLOGzL9
S+e/y9HhRx/c0vmwt0pI6a7D67ODHXVQOFD7gaPhPhkzBE92WyoNUS+w8xdRR9k6
46utLuXyI3mgsxcrOct3ksRvBLBsxi9VhLprrxCI4dFkEmvD//bevDjprR2BE5Je
D6lxIwpQ4qvADCUTcdrXyEZM9LYf443N2RyPlNbL5tTaQ6gNh2T4TsKa9ooC3pSv
8cUT9OXFLe1bEHVMu4w06VcyQ9eSDgmBfW1NjC4EitwoWyZubP9uX6IqUyYupMGB
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 108403609572008228019592276782849526340
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New South Wales'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Pyrmont'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'AGRICULTURAL PUBLISHERS PTY. LIMITED'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'www.horsedeals.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25212862857971039115389274944559393073076556202496802648144614603019590737338745859160112736173981064304716803504492322915078406703704062561084977143178901102717142220315514817309198960873360314272280802605487741195486475742326625986794617836354841796381348634780496461094092993242220808415510975635857608297451366791668341486279909178297117308958219383772016394755432117532919410154134274206357756264509513618821838543353373710067629948390492582917466131770319116468304297139478970136535222651531072577114437741018965279963476396614169333409904570558765741183537155662081834055952454807886273241933666079503926002141
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (318 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agtrader.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.agtrader.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.agtrader.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.agtrader.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agtrader.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.horsedeals.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agtrader.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.agtrader.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.agtrader.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.agtrader.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.horsedeals.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agtrader.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.horsedeals.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.horsedeals.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horsedeals.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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