studionews.hofa.de

- HOFA GmbH -

Issued by GeoTrust SHA256 SSL CA

About this certificate

This digital certificate with serial number 3e:1d:bc:7b:c9:64:17:bd:1e:32:99:96:0a:4e:25:f6 was issued on by GeoTrust Inc..

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

HOFA GmbH

Organization: HOFA GmbH
State / Province: Baden-Württemberg
Locality: Karlsdorf-Neuthard
Country: DE

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3e:1d:bc:7b:c9:64:17:bd:1e:32:99:96:0a:4e:25:f6
Serial Number (int): 82566535247959261548908176323843597814
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 14:67:8e:ed:83:4f:d6:1e:9d:40:04:0c:04:46:a1:70:34:b2:0f:72

Fingerprint (sha1): 85:2f:ec:cf:62:75:7c:b0:eb:58:28:e0:0b:4f:74:f9:26:e4:b1:41
Fingerprint (sha256): 34:87:52:b7:7b:32:5c:5f:8e:32:9f:15:52:cd:45:ae:7d:fd:00:51:f5:74:be:97:a0:d6:87:5b:8f:d3:66:5c

Issuing Certificate URL: http://gj.symcb.com/gj.crt

Revocation information

OCSP Server: http://gj.symcd.com
CRL Distribution Point: http://gj.symcb.com/gj.crl

Check the revocation status for certificate studionews.hofa.de

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for studionews.hofa.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

campus.hofa-college.de
forum.hofa.de
www.songcheck.hofa.de
tv.hofa.de
songcheck.hofa.de
studionews.hofa.de

Other certificates including the domain name hofa.de

(limited to 100 certificates)
dev.hofa.de
hofa.de
tv.hofa.de
studionews.hofa.de
studionews.hofa.de
www.hofa.de
dev.hofa.de
www.hofa.de
studionews.hofa.de
hofa-college.test.hofa.de
hofa-wp.srv.hofa.de
hofa.de
hofa-wp.srv.hofa.de
dev.hofa.de
hofa.de
hofa-wp.srv.hofa.de
www.hofa.de
www.hofa.de
www.hofa.de
hofa-wp.srv.hofa.de
hofa-wp.srv.hofa.de
hofa-wp.srv.hofa.de
hofa-wp.srv.hofa.de
hofa.de
hofa-wp.srv.hofa.de
songcheck.hofa.de
studionews.hofa.de
hofa-college.test.hofa.de
hofa-wp.srv.hofa.de
hofa-wp.srv.hofa.de
www.hofa.de
studionews.hofa.de
hofa-wp.srv.hofa.de
studionews.hofa.de
hofa-wp.srv.hofa.de
studionews.hofa.de
studionews.hofa.de
hofa.de
dev.hofa.de
studionews.hofa.de

Certificate

The complete raw certificate details for studionews.hofa.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGzjCCBbagAwIBAgIQPh28e8lkF70eMpmWCk4l9jANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEfMB0GA1UEAxMW
R2VvVHJ1c3QgU0hBMjU2IFNTTCBDQTAeFw0xNzA2MTQwMDAwMDBaFw0xOTA1MjQy
MzU5NTlaMHgxCzAJBgNVBAYTAkRFMRswGQYDVQQIDBJCYWRlbi1Xw7xydHRlbWJl
cmcxGzAZBgNVBAcMEkthcmxzZG9yZi1OZXV0aGFyZDESMBAGA1UECgwJSE9GQSBH
bWJIMRswGQYDVQQDDBJzdHVkaW9uZXdzLmhvZmEuZGUwggEiMA0GCSqGSIb3DQEB
AQUAA4IBDwAwggEKAoIBAQCyvqMop1Ww0zwnA4HjbVh+UmNnpgJ19WzSmigP4jqY
QmonMOQ0iQKj8kr5pH9Wux+zPepcQgiUKGBbUqWV2aRGjRy4t9xAUnz4vsUHTygW
CSnCeicbFNs51Div+fnA3s5tCcNRYfyk0CkIQN7T7i7EncPnxM+H1849QQ3OXU2N
Wi551YILI6Fy3rFG7WcMbPBjqeIPOxyY1MKAyajJrqXTGKsA/eniJWFKM0QZLgFu
qY//ZJGBAuHGYvtToQcCCZKbrJx7NVGsJdAechkjRyMM544bTKgsnzokuO707XC+
cGG7Cmo1V4SVBT1gsMsFF4xUyBB7Ne2RMMdHziTrsbs9AgMBAAGjggOEMIIDgDB6
BgNVHREEczBxghZjYW1wdXMuaG9mYS1jb2xsZWdlLmRlgg1mb3J1bS5ob2ZhLmRl
ghV3d3cuc29uZ2NoZWNrLmhvZmEuZGWCCnR2LmhvZmEuZGWCEXNvbmdjaGVjay5o
b2ZhLmRlghJzdHVkaW9uZXdzLmhvZmEuZGUwCQYDVR0TBAIwADAOBgNVHQ8BAf8E
BAMCBaAwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL2dqLnN5bWNiLmNvbS9nai5j
cmwwgZ0GA1UdIASBlTCBkjCBjwYGZ4EMAQICMIGEMD8GCCsGAQUFBwIBFjNodHRw
czovL3d3dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL3JlcG9zaXRvcnkvbGVnYWww
QQYIKwYBBQUHAgIwNQwzaHR0cHM6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNl
cy9yZXBvc2l0b3J5L2xlZ2FsMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjAfBgNVHSMEGDAWgBQUZ47tg0/WHp1ABAwERqFwNLIPcjBXBggrBgEFBQcBAQRL
MEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9nai5zeW1jZC5jb20wJgYIKwYBBQUHMAKG
Gmh0dHA6Ly9nai5zeW1jYi5jb20vZ2ouY3J0MIIBfwYKKwYBBAHWeQIEAgSCAW8E
ggFrAWkAdgDd6x0reg1PpiCLga2BaHB+Lo6dAdVciI09EcTNtuy+zAAAAVyl2ViX
AAAEAwBHMEUCIHVQLjDqKTA10YO7IGDYyKI546zcba+dDLU9ONPGfBuFAiEAjTjz
d1mBroXTVi0JIva9Octlv/5OBHfca164u82cnWkAdwCkuQmQtBhYFIe7E6LMZ3AK
PDWYBPkb37jjd80OyA3cEAAAAVyl2VjGAAAEAwBIMEYCIQC9AxQ9r63Z9VWZPF37
LDUOshkxqQ0nfm4gKg3WLRxuMAIhAOEGLKiB4PonSCnSB9zeKs+oXuZrSbUNWFUb
EOfYgYisAHYA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo/csAAAFcpdla
jAAABAMARzBFAiEAxwFgy04u7dKLDu7wRqOtyHsRS5Sxm4aZwF1kT0YyI0YCIBRh
NpUUxDQsciwXmh3pZYbHB6micwVofe8mhTGpR2TTMA0GCSqGSIb3DQEBCwUAA4IB
AQBFMTazSoAVyug+1HrIQEPYv7deF2DhIYYA+AB9aY3jD3oX/JlcoAVdGBNXDFBV
YFIa3BpA308i7FYykfCN14hKIRmcv437cL+mYx1KwqS3g/X2fpVN0VL++Ka4umlf
tHbtFYv8oZoGknA9oYJKH3nZisKd0MW1o+jZ5JDS5Hs53Rs705f+9kgDeLsjIDXl
uGCcbqZzHVCXXmhV+GbfXbSFJzu6sQYYRmqjFJ8tu6aw9x2pLgRikOnlT/UQkwyW
60HtGyFEClO8WqXNkEPDjt1RNkXWwnOtNBf9zrO7uZby772znGpIHFq4Rb4rbnIg
2zcRrVX7E6TkGHK2kBUk4hm8
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr6jKKdVsNM8JwOB421Y
flJjZ6YCdfVs0pooD+I6mEJqJzDkNIkCo/JK+aR/Vrsfsz3qXEIIlChgW1Klldmk
Ro0cuLfcQFJ8+L7FB08oFgkpwnonGxTbOdQ4r/n5wN7ObQnDUWH8pNApCEDe0+4u
xJ3D58TPh9fOPUENzl1NjVouedWCCyOhct6xRu1nDGzwY6niDzscmNTCgMmoya6l
0xirAP3p4iVhSjNEGS4BbqmP/2SRgQLhxmL7U6EHAgmSm6ycezVRrCXQHnIZI0cj
DOeOG0yoLJ86JLju9O1wvnBhuwpqNVeElQU9YLDLBReMVMgQezXtkTDHR84k67G7
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 82566535247959261548908176323843597814
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Karlsdorf-Neuthard'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'HOFA GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'studionews.hofa.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22564425059537065938325766985393228582880919827174758923981397415846908182650101831408438523001711943160515143025417175749846701528899618622233588748935525855474828144489260044710791845858744975126289288778426186729021870716223212911302703948799261644743152844457668454680393944253923717374767180266773066691998606239892260049798842336937763363616242980003518625250476381461687241474787050659236298670879964743488078980897850781561874986041063738762450922436593693560073447815328469419007887639232703166776328075477296742145826211747336341734407879201057964907232485565869470428209041986944224263075677916891934997309
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campus.hofa-college.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.hofa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.songcheck.hofa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv.hofa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'songcheck.hofa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studionews.hofa.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcb.com/gj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 14678eed834fd61e9d40040c0446a17034b20f72
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcb.com/gj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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