bms.envisionpharma.com

- Bristol-Myers Squibb -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 04:6b:12:d8:33:62:8d:35:ff:8e:77:53:f5:fc:75:70 was issued on by GeoTrust Inc..

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Bristol-Myers Squibb

Organization: Bristol-Myers Squibb
Organization unit: Global Development & Regulatory IT
State / Province: New York
Locality: New York
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:6b:12:d8:33:62:8d:35:ff:8e:77:53:f5:fc:75:70
Serial Number (int): 5872869959561735940009682423888246128
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): b9:77:a8:77:c1:ee:15:ef:d8:f2:35:26:b0:92:34:b5:9d:8d:3b:87
Fingerprint (sha256): 3c:23:13:62:f8:00:d3:ee:81:f3:e2:e5:2e:d9:fc:91:54:ed:7e:82:f3:50:26:ce:b2:26:56:0e:f8:3c:0e:66

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate bms.envisionpharma.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bms.envisionpharma.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

na3.author-it.com
na3files2.author-it.com
na3gw2.author-it.com
na3gw1.author-it.com
na3files1.author-it.com
amylin.envisionpharma.com
bms-stg.envisionpharma.com
amylin-stg.envisionpharma.com
bms.envisionpharma.com

Other certificates including the domain name envisionpharma.com

(limited to 100 certificates)
suport.staff.utcluj.app
helpdesk.centurionukrs.com
www.envisionpharma.com
www.envisionpharma.com
*.envisionpharma.com
support.ecctis.com
servicedesk.cheaperwaste.co.uk
www.envisionpharma.com
support.tuxexpert.com
support.ecctis.com
servicedesk.cheaperwaste.co.uk
*.envisionpharma.com
servicedesk.cheaperwaste.co.uk
*.envisionpharma.com
ithelpdesk.uteco.com
sd.sch1584.su
www.envisionpharma.com
*.production.etsaws.envisionpharma.com
www.envisionpharma.com
*.envisionpharma.com
*.staging.etsaws.envisionpharma.com
support-services.gruener-punkt.de
servicedesk.quorumdev.com
www.envisionpharma.com
dsi.alivetravel.com
www.envisionpharma.com
*.envisionpharma.com
*.envisionpharma.com
suport.staff.utcluj.app
bms.envisionpharma.com
www.envisionpharma.com
servicedesk.cheaperwaste.co.uk
helpdesk.zultys.com
sd.sch1584.su
support-services.gruener-punkt.de
support.tuxexpert.com
*.envisionpharma.com
*.envisionpharma.com
www.envisionpharma.com
bms.envisionpharma.com
*.envisionpharma.com
envisionpharma.com
OneLogin.envisionpharma.com
helpdesk.derbigum.com
support-services.gruener-punkt.de
*.envisionpharma.com
servicedesk.quorumdev.com
ithelpdesk.uteco.com
*.implementation.etsaws.envisionpharma.com
*.envisionpharma.com
envisionpharma.com
techteam.awayresorts.co.uk
support.gjesdal.kommune.no
*.envisionpharma.com
ithelpdesk.uteco.com
*.envisionpharma.com
www.envisionpharma.com
ithelpdesk.uteco.com
dsi.alivetravel.com
servicedesk.envisionpharma.com
*.envisionpharma.com
*.envisionpharma.com
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
bms.envisionpharma.com
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
epukhovmweb01.envisionpharma.com
*.envisionpharma.com
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
servicedesk.beauchamps.ie
filesafe.envisionpharma.com
bms.envisionpharma.com
*.envisionpharma.com
*.envisionpharma.com
support-services.gruener-punkt.de
helpdesk.derbigum.com
*.envisionpharma.com
servicedesk.chsgroup.org.uk
*.envisionpharma.com
servicedesk.cheaperwaste.co.uk
servicedesk.beauchamps.ie
bms.envisionpharma.com
envisionpharma.com
suport.staff.utcluj.app
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
sd.sch1584.su
*.envisionpharma.com
www.envisionpharma.com
helpdesk.pgzinternational.com
techteam.awayresorts.co.uk
envisionpharma.com
companycentral-new.smarttuna.com
support.languagelink.ru
*.envisionpharma.com
servicedesk.cheaperwaste.co.uk
*.envisionpharma.com
*.envisionpharma.com

Certificate

The complete raw certificate details for bms.envisionpharma.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIQBGsS2DNijTX/jndT9fx1cDANBgkqhkiG9w0BAQsFADBE
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU
R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTcwMzI4MDAwMDAwWhcNMTgwMTAyMjM1
OTU5WjCBoDELMAkGA1UEBhMCVVMxETAPBgNVBAgMCE5ldyBZb3JrMREwDwYDVQQH
DAhOZXcgWW9yazEdMBsGA1UECgwUQnJpc3RvbC1NeWVycyBTcXVpYmIxKzApBgNV
BAsMIkdsb2JhbCBEZXZlbG9wbWVudCAmIFJlZ3VsYXRvcnkgSVQxHzAdBgNVBAMM
FmJtcy5lbnZpc2lvbnBoYXJtYS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDgbyJngsD8Ey1tBrz1KeOIeDJoWzcNo+yri2BUiyaxdVhVHzCJXX8H
C4KNKgR779o991lPiNHwSN3j73DpDjx81vZIKlHNxMKx1MZj2bNVRnGQmU6yOUAH
JiowKa/6+LJe7fLfhIGTvxj+lIZ5ocimkS4JE8dNjfLttnTG6dhJ2EQ0p7HVtm1o
kgfHKSoNZjUEdEVN9W49qQoc18kzKXX0BJ5VhuXFLSZD5qjaCFzbiDwHr/Ektjwg
5bcuH1iZi/uNT1A90C3wYbon3UgqODvCAN40VJc2XVcpHCPNjsn3UBGeOHXnayvh
LiCylGpY2/EkQCjpH1s0fw6ot1QmRVmpAgMBAAGjggKHMIICgzCB6gYDVR0RBIHi
MIHfghFuYTMuYXV0aG9yLWl0LmNvbYIXbmEzZmlsZXMyLmF1dGhvci1pdC5jb22C
FG5hM2d3Mi5hdXRob3ItaXQuY29tghRuYTNndzEuYXV0aG9yLWl0LmNvbYIXbmEz
ZmlsZXMxLmF1dGhvci1pdC5jb22CGWFteWxpbi5lbnZpc2lvbnBoYXJtYS5jb22C
GmJtcy1zdGcuZW52aXNpb25waGFybWEuY29tgh1hbXlsaW4tc3RnLmVudmlzaW9u
cGhhcm1hLmNvbYIWYm1zLmVudmlzaW9ucGhhcm1hLmNvbTAJBgNVHRMEAjAAMA4G
A1UdDwEB/wQEAwIFoDArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8vZ24uc3ltY2Iu
Y29tL2duLmNybDCBnQYDVR0gBIGVMIGSMIGPBgZngQwBAgIwgYQwPwYIKwYBBQUH
AgEWM2h0dHBzOi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvcmVwb3NpdG9y
eS9sZWdhbDBBBggrBgEFBQcCAjA1DDNodHRwczovL3d3dy5nZW90cnVzdC5jb20v
cmVzb3VyY2VzL3JlcG9zaXRvcnkvbGVnYWwwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMB8GA1UdIwQYMBaAFNJv95b0hT9yPDB9I9qFeJujfFp8MFcGCCsG
AQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDovL2duLnN5bWNkLmNvbTAmBggr
BgEFBQcwAoYaaHR0cDovL2duLnN5bWNiLmNvbS9nbi5jcnQwEwYKKwYBBAHWeQIE
AwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAMKiEu2SyWbACRN8JD5Iw122lbff
6unLXFO3WiJwWZ4QqABBrXTisKEcCsuLyQTRqFFGnMUK2HqMQ0NaTLVbbyXG1/yr
4t13hlDipsge+4egXIdyxd8llZzOwVJubveJL+kQ92lh75FI8C6zpspn22gJpbnk
s0pb4bf3sUsv7NeK/yUkisTNWl/cB49JJiigJWx0IFTbsSxaXS0E+V0fworO4ehY
0fngYBvvg8UVdFsPgiKwXj08Fa6blThjvKC7wcgSc0Qe9wHuJXuMdzACWH9Y5mhU
ArxqqQAEifa7KKSIOpa30qPRB6m+V3BKMPhYK6GmbfzaH2Bhufq0TH/wMmc=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4G8iZ4LA/BMtbQa89Snj
iHgyaFs3DaPsq4tgVIsmsXVYVR8wiV1/BwuCjSoEe+/aPfdZT4jR8Ejd4+9w6Q48
fNb2SCpRzcTCsdTGY9mzVUZxkJlOsjlAByYqMCmv+viyXu3y34SBk78Y/pSGeaHI
ppEuCRPHTY3y7bZ0xunYSdhENKex1bZtaJIHxykqDWY1BHRFTfVuPakKHNfJMyl1
9ASeVYblxS0mQ+ao2ghc24g8B6/xJLY8IOW3Lh9YmYv7jU9QPdAt8GG6J91IKjg7
wgDeNFSXNl1XKRwjzY7J91ARnjh152sr4S4gspRqWNvxJEAo6R9bNH8OqLdUJkVZ
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5872869959561735940009682423888246128
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bristol-Myers Squibb'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Global Development & Regulatory IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'bms.envisionpharma.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28332182723580925790973782731620022056418425616804288518347195840947366251845560677053806174943583190855091639148091259751763796764536627258106241425065186298026055807526059346212739369166150230303536388570674529342552165549442426398097479614242245284075465176448149215838371924534956110169552704989105641895182721105516857909068635523387807778591920254599384709027185868432881933465213751388035018645082760810168328175113784757368314969055325555696280051996167592598363921534857609926997319986990273895855330957586575468805629291452373270299688980954901367855138590624740260527764396088657636929192993441330147711401
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (226 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'na3.author-it.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'na3files2.author-it.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'na3gw2.author-it.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'na3gw1.author-it.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'na3files1.author-it.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amylin.envisionpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bms-stg.envisionpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amylin-stg.envisionpharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bms.envisionpharma.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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