www.branzone.com
- Branzone, Inc. -
Issued by GeoTrust EV SSL CA - G4
About this certificate
This digital certificate with serial number 6c:a5:8b:f7:a4:d8:ca:8c:d2:d5:d5:9c:74:59:29:86 was issued on by GeoTrust Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Branzone, Inc.
Company registration number:
800319602
Organization: Branzone, Inc.
Organization unit: Hosting
Organization: Branzone, Inc.
Organization unit: Hosting
State / Province:
Texas
Locality: The Woodlands
Country: US
Locality: The Woodlands
Country: US
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 6c:a5:8b:f7:a4:d8:ca:8c:d2:d5:d5:9c:74:59:29:86Serial Number (int): 144416191401737835541302353624101890438
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: de:cf:5c:50:b7:ae:02:1f:15:17:aa:16:e8:0d:b5:28:9d:6a:5a:f3
Fingerprint (sha1): c2:0d:7c:9c:28:e4:b4:e1:d8:c1:60:0f:3a:db:9f:9b:f3:cc:9e:56
Fingerprint (sha256): 36:ec:dd:2d:1b:0c:c7:7d:d8:e0:4d:33:e9:96:41:e9:33:4e:e0:72:6f:15:2e:39:36:6c:b4:a0:c0:c7:d7:cd
Issuing Certificate URL: http://gm.symcb.com/gm.crt
Revocation information
OCSP Server: http://gm.symcd.comCRL Distribution Point: http://gm.symcb.com/gm.crl
Check the revocation status for certificate www.branzone.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.branzone.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.branzone.com
branzone.com
branzone.com
Other certificates including the domain name branzone.com
(limited to 100 certificates)
branzone.com
ronihenderson.com
robert.branzone.com
t2.branzone.com
t2.branzone.com
control.branzone.com
branzone.com
control.branzone.com
t2.branzone.com
robert.branzone.com
t2.branzone.com
mail.branzone.com
robert.branzone.com
ns1.branzone.com
branzone.com
ccfwichita.com
branzone.com
branzone.com
gavinmiller.branzone.com
robert.branzone.com
proton.branzone.com
secure.branzone.com
branzone.com
branzone.com
t2.branzone.com
branzone.com
robert.branzone.com
tca.branzone.com
robert.branzone.com
electron.branzone.com
dev.branzone.com
branzone.com
www.branzone.com
forum.branzone.com
nucleus.branzone.com
t2.branzone.com
branzone.com
dev.branzone.com
branzone.com
control.branzone.com
t2.branzone.com
www.branzone.com
dev.branzone.com
t2.branzone.com
robert.branzone.com
branzone.com
ccfwichita.branzone.com
proton.branzone.com
branzone.com
dev.branzone.com
dev.branzone.com
control.branzone.com
dev.branzone.com
secure.branzone.com
t2.branzone.com
ccfwichita.com
ronihenderson.com
ccfwichita.com
rhrealty.com
t2.branzone.com
ronihenderson.com
ssl6962.cloudflare.com
control.branzone.com
forum.branzone.com
forum.branzone.com
branzone.com
control.branzone.com
forum.branzone.com
gavinmiller.branzone.com
tca.branzone.com
tca.branzone.com
control.branzone.com
t2.branzone.com
tca.branzone.com
proton.branzone.com
ccfwichita.com
web.branzone.com
ccfwichita.com
gavinmiller.branzone.com
t2.branzone.com
dev.branzone.com
ssl6962.cloudflare.com
forum.branzone.com
branzone.com
branzone.com
gavinmiller.branzone.com
ns2.branzone.com
t2.branzone.com
control.branzone.com
branzone.com
rhrealty.com
t2.branzone.com
dev.branzone.com
www.branzone.com
branzone.com
ccfwichita.com
vm.branzone.com
t2.branzone.com
dev.branzone.com
t2.branzone.com
ronihenderson.com
robert.branzone.com
t2.branzone.com
t2.branzone.com
control.branzone.com
branzone.com
control.branzone.com
t2.branzone.com
robert.branzone.com
t2.branzone.com
mail.branzone.com
robert.branzone.com
ns1.branzone.com
branzone.com
ccfwichita.com
branzone.com
branzone.com
gavinmiller.branzone.com
robert.branzone.com
proton.branzone.com
secure.branzone.com
branzone.com
branzone.com
t2.branzone.com
branzone.com
robert.branzone.com
tca.branzone.com
robert.branzone.com
electron.branzone.com
dev.branzone.com
branzone.com
www.branzone.com
forum.branzone.com
nucleus.branzone.com
t2.branzone.com
branzone.com
dev.branzone.com
branzone.com
control.branzone.com
t2.branzone.com
www.branzone.com
dev.branzone.com
t2.branzone.com
robert.branzone.com
branzone.com
ccfwichita.branzone.com
proton.branzone.com
branzone.com
dev.branzone.com
dev.branzone.com
control.branzone.com
dev.branzone.com
secure.branzone.com
t2.branzone.com
ccfwichita.com
ronihenderson.com
ccfwichita.com
rhrealty.com
t2.branzone.com
ronihenderson.com
ssl6962.cloudflare.com
control.branzone.com
forum.branzone.com
forum.branzone.com
branzone.com
control.branzone.com
forum.branzone.com
gavinmiller.branzone.com
tca.branzone.com
tca.branzone.com
control.branzone.com
t2.branzone.com
tca.branzone.com
proton.branzone.com
ccfwichita.com
web.branzone.com
ccfwichita.com
gavinmiller.branzone.com
t2.branzone.com
dev.branzone.com
ssl6962.cloudflare.com
forum.branzone.com
branzone.com
branzone.com
gavinmiller.branzone.com
ns2.branzone.com
t2.branzone.com
control.branzone.com
branzone.com
rhrealty.com
t2.branzone.com
dev.branzone.com
www.branzone.com
branzone.com
ccfwichita.com
vm.branzone.com
t2.branzone.com
dev.branzone.com
t2.branzone.com
Certificate
The complete raw certificate details for www.branzone.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG4zCCBcugAwIBAgIQbKWL96TYyozS1dWcdFkphjANBgkqhkiG9w0BAQsFADBH MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEgMB4GA1UEAxMX R2VvVHJ1c3QgRVYgU1NMIENBIC0gRzQwHhcNMTUwODE0MDAwMDAwWhcNMTcwOTEy MjM1OTU5WjCB2zETMBEGCysGAQQBgjc8AgEDEwJVUzEWMBQGCysGAQQBgjc8AgEC FAVUZXhhczEdMBsGA1UEDxMUUHJpdmF0ZSBPcmdhbml6YXRpb24xEjAQBgNVBAUT CTgwMDMxOTYwMjELMAkGA1UEBhMCVVMxDjAMBgNVBAgUBVRleGFzMRYwFAYDVQQH FA1UaGUgV29vZGxhbmRzMRcwFQYDVQQKFA5CcmFuem9uZSwgSW5jLjEQMA4GA1UE CxQHSG9zdGluZzEZMBcGA1UEAxQQd3d3LmJyYW56b25lLmNvbTCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBAMyrUfW01CkQH01mffpu4xFtpfAnSlOuyCH/ ahQxpOXXvHz5SLK2MA3tQ8eElmy/w1A053Se5S0RHN5r1DR3D/XPb4C1uRtHp/Jf 9WtgdKTI8Mop+Rxet1QnLCKaqf5480gZstK1HY1piZQiB5ItEu1gu42oUfeUGVrT qrKBJvG99ew1Kv3oZnbZpDNXpde3kYbDSSwkOhbeMHg4qw0Cqz9GKJCTJtpeOYwS S/JWYkzqcwzZYWDw33lu8MUdTvDufY9qA2SHyCCKOzViwXQyYGqg6bhhAqnHPzP+ iuaIgLWAt3stKvoDEeVZ/oGAfy8BSXjjEMdQQNeTv4pNnebNwGECAwEAAaOCAzQw ggMwMCkGA1UdEQQiMCCCEHd3dy5icmFuem9uZS5jb22CDGJyYW56b25lLmNvbTAJ BgNVHRMEAjAAMA4GA1UdDwEB/wQEAwIFoDArBgNVHR8EJDAiMCCgHqAchhpodHRw Oi8vZ20uc3ltY2IuY29tL2dtLmNybDCBoAYDVR0gBIGYMIGVMIGSBgkrBgEEAfAi AQYwgYQwPwYIKwYBBQUHAgEWM2h0dHBzOi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNv dXJjZXMvcmVwb3NpdG9yeS9sZWdhbDBBBggrBgEFBQcCAjA1DDNodHRwczovL3d3 dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL3JlcG9zaXRvcnkvbGVnYWwwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFN7PXFC3rgIfFReq FugNtSidalrzMFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDovL2dt LnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL2dtLnN5bWNiLmNvbS9nbS5j cnQwggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB2AKS5CZC0GFgUh7sTosxncAo8 NZgE+RvfuON3zQ7IDdwQAAABTy3Ho8wAAAQDAEcwRQIgZLuZ0xfyLW2VeZE4FmIZ WLDZvwxl2D1WA3ucA5FhrPsCIQCpxWGWDfQsVdri92sdtIWDX7D9y97aZqUDV4cI J98QwgB1AFYUBpov18Ls0/XhvUSyPsdGdrm8mRFcwO+UmFXWidDdAAABTy3HpIkA AAQDAEYwRAIgDH6KJBie93noSmgF4I6NplM2vJ5Ml+qO5rEs0Spk2y4CIAYR6MV1 lGnQD00fSTAruPG3wkcq2uejz6u+AoIlSdUfAHYAaPaY+B9kgr46jO65KB1M/HFR XWeT1ETRCmesu09P+8QAAAFPLcej0AAABAMARzBFAiEA6oJAf814V+LjwIZ4nGGY 1ZYxMVPL6AS2Zw9QvTO36GECIEUq2Ga8hKbHWOn1BhZRFDuZ7iXcXfIpyI7ML6C0 blEFMA0GCSqGSIb3DQEBCwUAA4IBAQB2UF09U+kNxPC1Ih3GOACCvhhNWNmuhJMj kzFQFuJWWb3u+ha21esZJdBn6y4gUOi+WACrBKtg6QPv5B5NwooEdRBfwuwAVrJe bnQNv6nd4gvq6zqMK2D8c3/pykY+B28K/TTvQN4xDZLH9RupG3yH9FSSepkwwPlc ZR3M/KPU1WJmget6osQ5xvj9eK+aNxgaZa0VkTttfYFdW2WWMkHk3N7B3lEtItGy 1zQftKez2mLGSfUVjGV/yGzrwWIYIK6Nx7lwYyYOulGAhU3EIfegRNbCONe4YD0E 1pAtwZRpToRyhJyDUha/1n3MmmUoJhX05PN8fyKeDwNLyQvSL4IY -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKtR9bTUKRAfTWZ9+m7j EW2l8CdKU67IIf9qFDGk5de8fPlIsrYwDe1Dx4SWbL/DUDTndJ7lLREc3mvUNHcP 9c9vgLW5G0en8l/1a2B0pMjwyin5HF63VCcsIpqp/njzSBmy0rUdjWmJlCIHki0S 7WC7jahR95QZWtOqsoEm8b317DUq/ehmdtmkM1el17eRhsNJLCQ6Ft4weDirDQKr P0YokJMm2l45jBJL8lZiTOpzDNlhYPDfeW7wxR1O8O59j2oDZIfIIIo7NWLBdDJg aqDpuGECqcc/M/6K5oiAtYC3ey0q+gMR5Vn+gYB/LwFJeOMQx1BA15O/ik2d5s3A YQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 144416191401737835541302353624101890438 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust EV SSL CA - G4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-08-14 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-12 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Texas' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '800319602' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Texas' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'The Woodlands' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Branzone, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Hosting' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'www.branzone.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25837095330373619313945234385930502467326702580620950238352012026309324210263934110725799778758432344341278411854848176211429321156549228555006195170411993432371980550015720302819555069640401580205532901356149068281136700829578679114148964325621613713178867394024653572452789842195489118281712605451088664330514822811169610712062714475580491317759732251303503647642502159265599584823109665559584264793716860430367136434087971949850898009637661326818538074955513821766833338409171672292190699778717523606287406443082402515647284196095024067925570435455378610368141058272892553953629177145862652574432087281529869156449 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.branzone.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'branzone.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (152 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName decf5c50b7ae021f1517aa16e80db5289d6a5af3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 0167007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000014f2dc7a3cc0000040300473045022064bb99d317f22d6d9579913816621958b0d9bf0c65d83d56037b9c039161acfb022100a9c561960df42c55dae2f76b1db485835fb0fdcbdeda66a50357870827df10c20075005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000014f2dc7a489000004030046304402200c7e8a24189ef779e84a6805e08e8da65336bc9e4c97ea8ee6b12cd12a64db2e02200611e8c5759469d00f4d1f49302bb8f1b7c2472adae7a3cfabbe02822549d51f00760068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc40000014f2dc7a3d00000040300473045022100ea82407fcd7857e2e3c086789c6198d596313153cbe804b6670f50bd33b7e8610220452ad866bc84a6c758e9f5061651143b99ee25dc5df229c88ecc2fa0b46e5105 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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