www.jikn.go.id

- Arsip Nasional Republik Indonesia -

Issued by GeoTrust EV SSL CA - G4

About this certificate

This digital certificate with serial number 1e:73:26:63:b9:8b:34:32:13:9d:40:22:e2:44:77:d9 was issued on by GeoTrust Inc..

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Arsip Nasional Republik Indonesia

Company registration number: 19610516
Organization: Arsip Nasional Republik Indonesia
State / Province: Jakarta
Locality: Jakarta
Country: ID

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1e:73:26:63:b9:8b:34:32:13:9d:40:22:e2:44:77:d9
Serial Number (int): 40474732644855023032723691095701354457
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: de:cf:5c:50:b7:ae:02:1f:15:17:aa:16:e8:0d:b5:28:9d:6a:5a:f3

Fingerprint (sha1): 5a:d8:95:81:ed:b0:d8:e4:38:d5:20:78:20:44:ba:bf:d6:d5:f1:8d
Fingerprint (sha256): 3a:93:09:11:bd:69:f0:c6:bf:64:ae:d6:2b:1d:24:02:6f:cf:d4:b7:06:22:02:e9:16:b1:25:a7:a9:55:a8:64

Issuing Certificate URL: http://gm.symcb.com/gm.crt

Revocation information

OCSP Server: http://gm.symcd.com
CRL Distribution Point: http://gm.symcb.com/gm.crl

Check the revocation status for certificate www.jikn.go.id

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.jikn.go.id

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sikn.jikn.go.id
mail.jikn.go.id
mobile.jikn.go.id
services.jikn.go.id
helpdesk.jikn.go.id
diklat.jikn.go.id
svc.jikn.go.id
news.jikn.go.id
www.jikn.go.id
jikn.go.id

Other certificates including the domain name jikn.go.id

(limited to 100 certificates)
support.lazycoupons.in
sni207491.cloudflaressl.com
helpdesk.avoxis.com
support.netixsolutions.com
support.fanuccontrolrepair.com
support.fanuccontrolrepair.com
diklat.jikn.go.id
www.jikn.go.id
sni207491.cloudflaressl.com
support.fanuccontrolrepair.com
support.fanuccontrolrepair.com
sni207491.cloudflaressl.com
helpdesk.wrightwaytech.org
sni207491.cloudflaressl.com
helpdesk.avoxis.com
support.fanuccontrolrepair.com
sni207491.cloudflaressl.com
sni207491.cloudflaressl.com
www.jikn.go.id
support.fanuccontrolrepair.com
sni207491.cloudflaressl.com
helpdesk.avoxis.com
support.fanuccontrolrepair.com
www.jikn.go.id
testkb.infasme.org
diklat.jikn.go.id
jikn.go.id
support.fanuccontrolrepair.com
helpdesk.avoxis.com
www.jikn.go.id
support.fanuccontrolrepair.com
support.fanuccontrolrepair.com
sni207491.cloudflaressl.com
sikn.jikn.go.id
sni207491.cloudflaressl.com
helpdesk.avoxis.com
sni207491.cloudflaressl.com
sni207491.cloudflaressl.com
www.jikn.go.id
jikn.go.id
sni207491.cloudflaressl.com
support.fanuccontrolrepair.com
sni207491.cloudflaressl.com
sni207491.cloudflaressl.com
support.fanuccontrolrepair.com
support.fanuccontrolrepair.com
support.netixsolutions.com
www.jikn.go.id
www.jikn.go.id
sni207491.cloudflaressl.com
support.detect-measure.com
sni207491.cloudflaressl.com
www.jikn.go.id
www.jikn.go.id
sni207491.cloudflaressl.com
sni207491.cloudflaressl.com
sni207491.cloudflaressl.com
www.jikn.go.id
sni207491.cloudflaressl.com
www.jikn.go.id
www.jikn.go.id
support.fanuccontrolrepair.com
support.fanuccontrolrepair.com
sni207491.cloudflaressl.com
support.fanuccontrolrepair.com
www.jikn.go.id
sni207491.cloudflaressl.com
service.binmanager.com.au
www.jikn.go.id
www.jikn.go.id
jikn.go.id
support.fanuccontrolrepair.com
sni207491.cloudflaressl.com
sni207491.cloudflaressl.com
www.jikn.go.id
sni207491.cloudflaressl.com
sni207491.cloudflaressl.com
diklat.jikn.go.id
sni207491.cloudflaressl.com
sni207491.cloudflaressl.com
diklat.jikn.go.id
sni207491.cloudflaressl.com
support.fanuccontrolrepair.com
jikn.go.id
support.fanuccontrolrepair.com
sni207491.cloudflaressl.com
support.fanuccontrolrepair.com
sni207491.cloudflaressl.com
support.fanuccontrolrepair.com
jikn.go.id
www.jikn.go.id
support.fanuccontrolrepair.com
sikn.jikn.go.id
sni207491.cloudflaressl.com
support.fanuccontrolrepair.com
diklat.jikn.go.id
sni207491.cloudflaressl.com
support.nxtgentech.uk
sni207491.cloudflaressl.com
sni207491.cloudflaressl.com

Certificate

The complete raw certificate details for www.jikn.go.id in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ygTkk4IreW/z8yCP0aW
Q1G6HYtcHpbz66uFUbCbWkJGgXzhxmvSs4+GOeA7iSUnK9PlDg8s8OBmLJwciaqv
xsOrou+XDYLXAYri2c0XcXSuk3njcVofsOkWWT3+l+zRGurwlcrkcZqOT5miUoER
gaf+QZiIkX+ldC+PYuSj8amdRlm3uoSdOwbHxSRIYYRur2ZbCYAJYUQXfgooa0Wj
xq6PA/4BRYcUVlyDi9u0xWWz8CLcbIr8Y7GxLYV7ELK/93UPBaM8SKMelEdEWHGw
Wd7G3qlPg6+kbqdShWYXQr99EHTJH2nvL1Nh8Jv4QnqrCmk+eNO5FVjqcZVHlgV9
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 40474732644855023032723691095701354457
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust EV SSL CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ID'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '19610516'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ID'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Jakarta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Jakarta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Arsip Nasional Republik Indonesia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.jikn.go.id'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27160998002337650307604155509348106889468267689137207463219393397906252834360378964065183818281233627835181762152910941479454575875017827900786813026238155910176259105382353409882221153943502696215976336395576274601657292163159622410505834291667535562511831574739981690119653890798477326702490675138835450319451935438425398137201337674832495633508147138149750420349238601955133082483183651541510811850244145657779077007058757171331437422242782560194927031125187328712181613950559947077822719833059212472699944100592444626324560738476762344894411764562883890739670141380694503613216227556391285658866331398033893588313
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (178 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sikn.jikn.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.jikn.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.jikn.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.jikn.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpdesk.jikn.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diklat.jikn.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svc.jikn.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.jikn.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jikn.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jikn.go.id'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName decf5c50b7ae021f1517aa16e80db5289d6a5af3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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