lavg.nl
Issued by RapidSSL SHA256 CA
About this certificate
This digital certificate with serial number 33:e4:1a:f9:38:9c:db:5b:d4:93:77:8d:55:73:14:e8 was issued on by GeoTrust Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Certificate Subject
CN=lavg.nl
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 33:e4:1a:f9:38:9c:db:5b:d4:93:77:8d:55:73:14:e8Serial Number (int): 68975018556759600082736580024574612712
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f
Fingerprint (sha1): 84:e8:0a:78:d3:61:01:ac:b4:53:fc:88:a5:36:1f:8f:09:0f:22:e9
Fingerprint (sha256): 3c:ce:61:05:b1:79:b6:48:af:b6:c9:95:4d:c0:9a:13:a4:06:a4:36:d9:d1:2e:55:6b:7d:23:36:f7:59:51:63
Issuing Certificate URL: http://gp.symcb.com/gp.crt
Revocation information
OCSP Server: http://gp.symcd.comCRL Distribution Point: http://gp.symcb.com/gp.crl
Check the revocation status for certificate lavg.nl
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for lavg.nl
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
lavg.nl
www.lavg.nl
www.lavg.nl
Other certificates including the domain name lavg.nl
(limited to 100 certificates)
webmail.lavg.nl
lavg.nl
payportaal.nl
acg-incasso.nl
veilig.lavg.nl
login.nieuwegein.lavg.nl
portal.bosincasso.nl
alles.lavg.nl
lavg.nl
achmea.lavg.nl
lavg.nl
lavg.nl
betalen.lavg.nl
achmea.lavg.nl
payportaal.nl
acg-incasso.nl
achmea.lavg.nl
lavg.nl
alles.lavg.nl
menzis.lavg.nl
alles.lavg.nl
lavg.nl
veilig.lavg.nl
acg-incasso.nl
veilig.lavg.nl
menzis.lavg.nl
betaal.lavg.nl
payportaal.nl
menzis.lavg.nl
menzis.lavg.nl
transactions.lavg.nl
veilig.lavg.nl
login.roosendaal.lavg.nl
acg-incasso.nl
achmea.lavg.nl
menzis.lavg.nl
webmail.lavg.nl
cotg.lavg.nl
mijn.lavg.nl
lavg.nl
portal.bosincasso.nl
achmea.lavg.nl
menzis.lavg.nl
lavg.nl
cotg.lavg.nl
menzis.lavg.nl
menzis.lavg.nl
webmail.lavg.nl
alles.lavg.nl
lavg.nl
lavg.nl
lavg.nl
lavg.nl
alles.lavg.nl
betalen.lavg.nl
payportaal.nl
webmail.lavg.nl
alles.lavg.nl
alles.lavg.nl
support.bosincasso.nl
webmail.lavg.nl
menzis.lavg.nl
transactions.lavg.nl
transactions.lavg.nl
veilig.lavg.nl
veilig.lavg.nl
lavg.nl
betalen.lavg.nl
portal.bosincasso.nl
lavg.nl
lavg.nl
betalen.lavg.nl
portal.bosincasso.nl
mijn.lavg.nl
achmea.lavg.nl
betalen.lavg.nl
payportaal.nl
menzis.lavg.nl
betalen.lavg.nl
webmail.lavg.nl
betalen.lavg.nl
achmea.lavg.nl
acg-incasso.nl
veilig.lavg.nl
menzis.lavg.nl
menzis.lavg.nl
webmail.lavg.nl
betalen.lavg.nl
betalen.lavg.nl
lavg.nl
payportaal.nl
acg-incasso.nl
veilig.lavg.nl
login.nieuwegein.lavg.nl
portal.bosincasso.nl
alles.lavg.nl
lavg.nl
achmea.lavg.nl
lavg.nl
lavg.nl
betalen.lavg.nl
achmea.lavg.nl
payportaal.nl
acg-incasso.nl
achmea.lavg.nl
lavg.nl
alles.lavg.nl
menzis.lavg.nl
alles.lavg.nl
lavg.nl
veilig.lavg.nl
acg-incasso.nl
veilig.lavg.nl
menzis.lavg.nl
betaal.lavg.nl
payportaal.nl
menzis.lavg.nl
menzis.lavg.nl
transactions.lavg.nl
veilig.lavg.nl
login.roosendaal.lavg.nl
acg-incasso.nl
achmea.lavg.nl
menzis.lavg.nl
webmail.lavg.nl
cotg.lavg.nl
mijn.lavg.nl
lavg.nl
portal.bosincasso.nl
achmea.lavg.nl
menzis.lavg.nl
lavg.nl
cotg.lavg.nl
menzis.lavg.nl
menzis.lavg.nl
webmail.lavg.nl
alles.lavg.nl
lavg.nl
lavg.nl
lavg.nl
lavg.nl
alles.lavg.nl
betalen.lavg.nl
payportaal.nl
webmail.lavg.nl
alles.lavg.nl
alles.lavg.nl
support.bosincasso.nl
webmail.lavg.nl
menzis.lavg.nl
transactions.lavg.nl
transactions.lavg.nl
veilig.lavg.nl
veilig.lavg.nl
lavg.nl
betalen.lavg.nl
portal.bosincasso.nl
lavg.nl
lavg.nl
betalen.lavg.nl
portal.bosincasso.nl
mijn.lavg.nl
achmea.lavg.nl
betalen.lavg.nl
payportaal.nl
menzis.lavg.nl
betalen.lavg.nl
webmail.lavg.nl
betalen.lavg.nl
achmea.lavg.nl
acg-incasso.nl
veilig.lavg.nl
menzis.lavg.nl
menzis.lavg.nl
webmail.lavg.nl
betalen.lavg.nl
betalen.lavg.nl
Certificate
The complete raw certificate details for lavg.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIQM+Qa+Tic21vUk3eNVXMU6DANBgkqhkiG9w0BAQsFADBC MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEbMBkGA1UEAxMS UmFwaWRTU0wgU0hBMjU2IENBMB4XDTE3MDYxMjAwMDAwMFoXDTE4MDcxMjIzNTk1 OVowEjEQMA4GA1UEAwwHbGF2Zy5ubDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCC AgoCggIBAMJokL6Ld3Urir2Hfl/CZ6wVdARkROfEFlR9fg7uzxu3iwnPxp6+4ZU5 VzK8izeGN0Z2j356yFgtnVA3njWeqZCg/7MvI3nasmGimmqfIS6wzmh7CsR1q0XS +gbMt6Se/DzCVJgtmwqrLROeG1+rtLMWRpYFEpYUw4lTyyU5i8IvUsGm9pgul8Z2 uIIwQaqlqoBwIra/Mu07KzNpPVs12SrKBkfcjX42raqPYhQKQ5rwOjOWeHV5hvJw mmJmeU90f2KW3mCJvFiUnMZdncGFfGMLcswNQpcdLWEsFXnlrYVJkYOtl/6w6kK4 hpPS2b3U3UzNviKrliAongfqtypRmmVDtQKKIJFc5SqcNXfU9ricH5w0j71PKOxt nK/pPwNSdYnb+RFzB+gFwuES92044jNqAq/in46H2TL/wCVWv1VCyFBt6LY2Xfbv swvIww0CqSikeYu1fZbZHTyoj9NymvqZ6oDvIPPYIrF1IGT0J845R6ZraVBq3NxJ XmmaPSagMOGlATyX3YNr1wUbhvJY73ubWDPsDLviK5S7Sa/nPsA0+84dK8x5JRuA DHS9+F2H7jN0e8BwqHD06r/KSsIoWrD+51N2+Gs69sGQtC4cgDkzFTZbSJi0ln/+ 4Bi5MAgCYLi40aS3ixHIqP9LfFcovllp1tPPcC5xM/D63j0SfQObAgMBAAGjggJ+ MIICejAfBgNVHREEGDAWggdsYXZnLm5sggt3d3cubGF2Zy5ubDAJBgNVHRMEAjAA MCsGA1UdHwQkMCIwIKAeoByGGmh0dHA6Ly9ncC5zeW1jYi5jb20vZ3AuY3JsMG8G A1UdIARoMGYwZAYGZ4EMAQIBMFowKgYIKwYBBQUHAgEWHmh0dHBzOi8vd3d3LnJh cGlkc3NsLmNvbS9sZWdhbDAsBggrBgEFBQcCAjAgDB5odHRwczovL3d3dy5yYXBp ZHNzbC5jb20vbGVnYWwwHwYDVR0jBBgwFoAUl8InUJ7CyewMiDLIfK3ipgFP2m8w DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBX BggrBgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9ncC5zeW1jZC5jb20w JgYIKwYBBQUHMAKGGmh0dHA6Ly9ncC5zeW1jYi5jb20vZ3AuY3J0MIIBAwYKKwYB BAHWeQIEAgSB9ASB8QDvAHYA3esdK3oNT6Ygi4GtgWhwfi6OnQHVXIiNPRHEzbbs vswAAAFcnd+XmAAABAMARzBFAiBxmDciDpM/FF3drr0YZCH9Gb70+HfS080/Xmv5 bBu+YQIhAKT8CGOpENSkezzk1CBlsIxhF0zsqIO6FuepaSdVeSySAHUApLkJkLQY WBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFcnd+XsgAABAMARjBEAiBM2I6z qiXYb857FkSPHSoPk4XxhIeuNeeoZdhf3zwh5gIgSYZNVtt4tegvZh6VNYx5iyth 3rVYJ64ICLRpZNvbbSgwDQYJKoZIhvcNAQELBQADggEBAKUlJBPgYB7nxMxaLNmW 6yoQJA/SZPb3xc6x4p5c2j+5w1CdrRnBC32rtnre3SApmMvdQlyEL8fGTvkR9eJB UygNubHu7nuPafXAkNgmPCh8EouDi1tZMg4fyvU4BwOCslfkXomNVNHUNs/l0OG6 /MSL3utJNEsE5QIFtpQXq1TLhVuU7hOfMlqkNBLf1qIjS1FdoQtEqLu4SYjRRmvL 9hm9WMkQB+GtC0dDf26MyDuNYqhK+O/tMg9Mx8sa7WzSyiTspo9Mmx32j1YiJjfm oXtq61w98zfQp5UDIEKQxT0CvKR/uOW+fyBw0iB2z+Kq6KjwDhsONVFum+BLTRng GR4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwmiQvot3dSuKvYd+X8Jn rBV0BGRE58QWVH1+Du7PG7eLCc/Gnr7hlTlXMryLN4Y3RnaPfnrIWC2dUDeeNZ6p kKD/sy8jedqyYaKaap8hLrDOaHsKxHWrRdL6Bsy3pJ78PMJUmC2bCqstE54bX6u0 sxZGlgUSlhTDiVPLJTmLwi9Swab2mC6Xxna4gjBBqqWqgHAitr8y7TsrM2k9WzXZ KsoGR9yNfjatqo9iFApDmvA6M5Z4dXmG8nCaYmZ5T3R/YpbeYIm8WJScxl2dwYV8 YwtyzA1Clx0tYSwVeeWthUmRg62X/rDqQriGk9LZvdTdTM2+IquWICieB+q3KlGa ZUO1AoogkVzlKpw1d9T2uJwfnDSPvU8o7G2cr+k/A1J1idv5EXMH6AXC4RL3bTji M2oCr+KfjofZMv/AJVa/VULIUG3otjZd9u+zC8jDDQKpKKR5i7V9ltkdPKiP03Ka +pnqgO8g89gisXUgZPQnzjlHpmtpUGrc3EleaZo9JqAw4aUBPJfdg2vXBRuG8ljv e5tYM+wMu+IrlLtJr+c+wDT7zh0rzHklG4AMdL34XYfuM3R7wHCocPTqv8pKwiha sP7nU3b4azr2wZC0LhyAOTMVNltImLSWf/7gGLkwCAJguLjRpLeLEcio/0t8Vyi+ WWnW089wLnEz8PrePRJ9A5sCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 68975018556759600082736580024574612712 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-12 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-12 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'lavg.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 793117314994175081404195276815099019456008768599853133449760347335414419646482891066988855213230419092336161594962962381636044064288645149865415933075542245338143805626590376384435717637339648005562515221303520687216025416882071978603470752907398239742390742728465045797807984942878381453295998795989594899525521694819971830295407902689055694344489092134011474490254262700579155479098759693000539119984422974239941816997096251836275335523908006122518431562326674927940945045683041457878096651443053872137927730851347620274269335871329741235680682468949590540418832260905612582960180170838353665916732712151301174033597054917088424089019195275090194574630540673903341833553627338698304406525147641184803699117301528030522793887488039811892878323081293296734870542889928125489991195676739712085032454315615294959841356970500437899263694589156449926537459291794215592073299813551618162335693512522360295406321757366962249119794518848419557967367031547560111266242336902436303097811092493862454923895229842249980318748213448726471625386118453305745143000117035194430335188968022440982022274844995039632863163872882021133949196029485361869847615738672335400789799876819038000125016700985260693356196908622548329240548881417184258215969691 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lavg.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lavg.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015c9ddf979800000403004730450220719837220e933f145dddaebd186421fd19bef4f877d2d3cd3f5e6bf96c1bbe61022100a4fc0863a910d4a47b3ce4d42065b08c61174ceca883ba16e7a9692755792c92007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015c9ddf97b2000004030046304402204cd88eb3aa25d86fce7b16448f1d2a0f9385f18487ae35e7a865d85fdf3c21e6022049864d56db78b5e82f661e95358c798b2b61deb55827ae0808b46964dbdb6d28 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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