usil-expressway-core-01.usil.edu.pe

- UNIVERSIDAD SAN IGNACIO DE LOYOLA -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 40:13:a3:fe:ba:b3:3f:81:ae:c3:94:18:08:e9:5d:0f was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

UNIVERSIDAD SAN IGNACIO DE LOYOLA

Organization: UNIVERSIDAD SAN IGNACIO DE LOYOLA
Organization unit: SOPORTE DE SISTEMAS
State / Province: LIMA
Locality: LIMA
Country: PE

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 40:13:a3:fe:ba:b3:3f:81:ae:c3:94:18:08:e9:5d:0f
Serial Number (int): 85172571585046360885999262965590220047
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 7f:cf:bb:24:6f:0b:48:21:3b:3e:8e:e7:ac:24:f9:8d:05:23:22:33
Fingerprint (sha256): 42:42:3f:29:85:11:c4:5f:4a:15:3c:ad:26:42:5b:03:54:99:6a:ce:63:91:dc:45:2e:0d:18:e8:24:7b:98:67

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate usil-expressway-core-01.usil.edu.pe

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for usil-expressway-core-01.usil.edu.pe

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

usil-expressway-edge-01.usil.edu.pe
usil-expressway-core-01.usil.edu.pe

Other certificates including the domain name usil.edu.pe

(limited to 100 certificates)
*.usil.edu.pe
soypregrado.usil.edu.pe
bolsalaboral.usil.edu.pe
lucianadelafuente.com
site3.usil.edu.pe
site1.usil.edu.pe
*.usil.edu.pe
m.infosil.usil.edu.pe
m.infosil.usil.edu.pe
micarrera.usil.edu.pe
yoelijo.usil.edu.pe
paulbocuse.usil.edu.pe
m.infosil.usil.edu.pe
limanorte.usil.edu.pe
mail.usil.edu.pe
email.usil.edu.pe
revistas.usil.edu.pe
incapsula.com
marketingdigitalusil.com
ssl276933.cloudflaressl.com
graduacion.usil.edu.pe
repositorio.usil.edu.pe
revistas.usil.edu.pe
*.usil.edu.pe
sni48083.cloudflaressl.com
mktpregrado.usil.edu.pe
juanmanuelostoja.pe
cge.usil.edu.pe
mkt.usil.edu.pe
bolsalaboral.usil.edu.pe
blogpregrado.usil.edu.pe
revistas.usil.edu.pe
ssl276933.cloudflaressl.com
labvirtual.usil.edu.pe
graduacion.usil.edu.pe
paulbocuseblog.usil.edu.pe
nutriblog.usil.edu.pe
email.usil.edu.pe
*.usil.edu.pe
lucianadelafuente.com
site2.usil.edu.pe
site2.usil.edu.pe
ssl6462.cloudflare.com
infosil.usil.edu.pe
todoesposible.pe
yoelijo.usil.edu.pe
usil-expressway-edge-01.usil.edu.pe
ssl276933.cloudflaressl.com
mkt.usil.edu.pe
m.infosil.usil.edu.pe
marketing.usil.edu.pe
bolsalaboral.usil.edu.pe
ssl276931.cloudflaressl.com
paulbocuse.usil.edu.pe
nutriblog.usil.edu.pe
lyncext.usil.edu.pe
email.usil.edu.pe
*.usilvirtual.usil.edu.pe
lyncext.usil.edu.pe
paulbocuseblog.usil.edu.pe
micarrera.usil.edu.pe
mkt.usil.edu.pe
todoesposible.pe
mkt.usil.edu.pe
labvirtual.usil.edu.pe
ssl276933.cloudflaressl.com
kandeo.usil.edu.pe
soypregrado.usil.edu.pe
institutpaulbocuse.usil.edu.pe
institutpaulbocuse.usil.edu.pe
mkt.usil.edu.pe
inboundmarketing.usil.edu.pe
juanmanuelostoja.pe
sgab.usil.edu.pe
repositorio.usil.edu.pe
site1.usil.edu.pe
paulbocuseblog.usil.edu.pe
usil-expressway-core-01.usil.edu.pe
email.usil.edu.pe
cris.usil.edu.pe
paulbocuseblog.usil.edu.pe
mktpregrado.usil.edu.pe
global.usil.edu.pe
*.usil.edu.pe
revistas.usil.edu.pe
micarrera.usil.edu.pe
m.infosil.usil.edu.pe
institutpaulbocuse.usil.edu.pe
sgab.usil.edu.pe
*.epg.usil.edu.pe
rauldiezcansecoterry.com
cris.usil.edu.pe
usil-expressway-core-01.usil.edu.pe
inboundmarketing.usil.edu.pe
kandeo.usil.edu.pe
*.usilvirtual.usil.edu.pe
ssl276933.cloudflaressl.com
*.usil.edu.pe
ferialaboral.usil.edu.pe
micarrera.usil.edu.pe

Certificate

The complete raw certificate details for usil-expressway-core-01.usil.edu.pe in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGYzCCBUugAwIBAgIQQBOj/rqzP4Guw5QYCOldDzANBgkqhkiG9w0BAQsFADBE
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU
R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTYwMzExMDAwMDAwWhcNMTkwMzExMjM1
OTU5WjCBozELMAkGA1UEBhMCUEUxDTALBgNVBAgTBExJTUExDTALBgNVBAcUBExJ
TUExKjAoBgNVBAoUIVVOSVZFUlNJREFEIFNBTiBJR05BQ0lPIERFIExPWU9MQTEc
MBoGA1UECxQTU09QT1JURSBERSBTSVNURU1BUzEsMCoGA1UEAxQjdXNpbC1leHBy
ZXNzd2F5LWNvcmUtMDEudXNpbC5lZHUucGUwggIiMA0GCSqGSIb3DQEBAQUAA4IC
DwAwggIKAoICAQCnXl2Pc9jNCH0L9uaPHHJ6mhKM60iG73hO/hJ5BJxLRFqamLu9
sQtAfC+BKUbYINXdLzCVA0sEYirXNQvkNMgRPCv08hyylhiTUveRZm4zRk8rSy9G
Mw3hUjEvqcZ+vruXICANmI1f8oZHfb4BxEX1R+chOGFbGV+MJshDXF63+/vqPLmp
mcZbXXtqrHJPq5S2I0P+l7SUZnfPpjkfMszqDxfEhj1Ra6fSfsfGdwdQLejCyPhD
haOUy56oOhYxrH8Z9vm8F2RqpvtHyTTwjNoTmY8EF/lV76H/yUAiPTPSi9zM2Ttv
MWk/zsa7llx8Wu14ur1ghEYu+QuVtqxHt7SXn4A7ZCHgLRN0uTxvPIPOgnlnmvo/
UpDuD4BcOJwYnWyvHHhDSyTsqCQYDaCBUC+Yap5E9N5078MlxnMY8yptrL0cwM0J
mgmLQhePCd/U5n+j6/CV+YqzCPJB1grpacnP006n5x7OG05z+Sx5lc/EfisjrLKJ
csb1AMIaE1wQEQ7wvJtg2kr0WCzPas0abHhTCyd3moFU2qV7bfm9tQZOKfOHu5Yn
cgEVHXT22r7XSXY/oW/ZZnvfqB806ll1RedC+3IRPzaxiH96LM69Q/TMqirzuXJa
4AlcsMoUZOtFmyUBvleq3xu/EQnIJGKCJd+4FovFIrfNsPzZRlgE9qXlAQIDAQAB
o4IB7zCCAeswUwYDVR0RBEwwSoIjdXNpbC1leHByZXNzd2F5LWVkZ2UtMDEudXNp
bC5lZHUucGWCI3VzaWwtZXhwcmVzc3dheS1jb3JlLTAxLnVzaWwuZWR1LnBlMAkG
A1UdEwQCMAAwDgYDVR0PAQH/BAQDAgWgMCsGA1UdHwQkMCIwIKAeoByGGmh0dHA6
Ly9nbi5zeW1jYi5jb20vZ24uY3JsMIGdBgNVHSAEgZUwgZIwgY8GBmeBDAECAjCB
hDA/BggrBgEFBQcCARYzaHR0cHM6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNl
cy9yZXBvc2l0b3J5L2xlZ2FsMEEGCCsGAQUFBwICMDUMM2h0dHBzOi8vd3d3Lmdl
b3RydXN0LmNvbS9yZXNvdXJjZXMvcmVwb3NpdG9yeS9sZWdhbDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwHwYDVR0jBBgwFoAU0m/3lvSFP3I8MH0j2oV4
m6N8WnwwVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8vZ24uc3lt
Y2QuY29tMCYGCCsGAQUFBzAChhpodHRwOi8vZ24uc3ltY2IuY29tL2duLmNydDAT
BgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEASenjA4E9HQDI
GQnetpJHgl6OZ7DdI+Twlga2d97+TgDI1qCNx/336QS71zKf6R+eHEYGn/1rLVG3
iCzeWSSSWCMYgSkBnyXiXRu3JGUHR02rYGW3XS+TQeInIy0RSHi/PXCCOB5pT8nB
5uwXtnRKvfyybbvoPmi4PKKCv42EAaWTwV+fFAT+PedQEJJ4OGZE4nP1uevzCQFh
ySDPZEPtlMPRtilKt6jJlnnQ/EiXpFYvmViSbWyNLGy5z0hPyg9EXbEoEaPLjy+6
ej54JdoMMMXNqwa3ALaP9fLh4O+tZlFEz5KdwIQ9/p61mfMEVu3HdNi+FCST7+68
poUwhwghNw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 85172571585046360885999262965590220047
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LIMA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'LIMA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'UNIVERSIDAD SAN IGNACIO DE LOYOLA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'SOPORTE DE SISTEMAS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'usil-expressway-core-01.usil.edu.pe'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 682804377838156961055351341870888586304997091136843164664870676500547597416901248411533616618301109406356298443337622852941293110240857645025428132498851456274702203913057526812555360341335578449832337514443635914872101001963820279087543750451949867045610281618701707713972873140743657315264832181824411944027365444878570594388966322476277382903194526491742007957989219251108533388616642445019121277885258992731274780092760414806627384931010357605900989673639510254934258033206166928781031113781752744409181422859363946145597471085265633944087606271003768045471107500477456006198633515711924097371339995176084175045461583337562057404108377178928654019243809397572886140303130338890392199472499904805482797591361732900761577502699685566151915866978842448896585938052548349640428949061987885305180443526720362269272151299653909995832994071822539412792894890350787443550019075693074922455544983211297902066720255963239947471226817312573578215732684221237880585817361892379234761977914405962135136586509195636123552248844067006722025222602145389369907103533297166728052921188154242894645623800969142196425429800610837468625608919767901705592813220239082080020737884473269969761154629510184027289867402118720121985273716413159499735885057
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usil-expressway-edge-01.usil.edu.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usil-expressway-core-01.usil.edu.pe'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0049e9e303813d1d00c81909deb69247825e8e67b0dd23e4f09606b677defe4e00c8d6a08dc7fdf7e904bbd7329fe91f9e1c46069ffd6b2d51b7882cde5924925823188129019f25e25d1bb7246507474dab6065b75d2f9341e227232d114878bf3d7082381e694fc9c1e6ec17b6744abdfcb26dbbe83e68b83ca282bf8d8401a593c15f9f1404fe3de750109278386644e273f5b9ebf3090161c920cf6443ed94c3d1b6294ab7a8c99679d0fc4897a4562f9958926d6c8d2c6cb9cf484fca0f445db12811a3cb8f2fba7a3e7825da0c30c5cdab06b700b68ff5f2e1e0efad665144cf929dc0843dfe9eb599f30456edc774d8be142493efeebca6853087082137