www.bellamagazine.co.uk
Issued by RapidSSL SHA256 CA - G2
About this certificate
This digital certificate with serial number 04:e4:91:0f:40:7f:b8:eb:3f:52:71:c9:fb:a8:2c:9c was issued on by GeoTrust Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Certificate Subject
CN=www.bellamagazine.co.uk
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:e4:91:0f:40:7f:b8:eb:3f:52:71:c9:fb:a8:2c:9cSerial Number (int): 6503697824662018859734399783621110940
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 4c:f4:bf:e8:3b:be:c2:24:f3:1b:47:3b:b5:6e:48:8e:16:ab:af:12
Fingerprint (sha1): ca:af:bc:75:5d:5d:90:fd:30:d6:23:09:3d:74:96:db:59:4a:4d:62
Fingerprint (sha256): 44:05:cb:fa:d8:ba:d9:1e:78:e7:62:d9:5d:96:99:68:c0:da:e8:12:a5:1e:3f:c5:7a:c5:88:0f:22:aa:60:5d
Issuing Certificate URL: http://gs.symcb.com/gs.crt
Revocation information
OCSP Server: http://gs.symcd.comCRL Distribution Point: http://gs.symcb.com/gs.crl
Check the revocation status for certificate www.bellamagazine.co.uk
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.bellamagazine.co.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.bellamagazine.co.uk
bellamagazine.co.uk
bellamagazine.co.uk
Other certificates including the domain name bellamagazine.co.uk
(limited to 100 certificates)
shop.bellamagazine.co.uk
cmp.am-online.com
winit.bauerpublishing.com
winit.bauerpublishing.com
bellamagazine.co.uk
bellamagazine.co.uk
bellamagazine.co.uk
www.bellamagazine.co.uk
winit.bauerpublishing.com
www.bellamagazine.co.uk
*.bellamagazine.co.uk
www.bellamagazine.co.uk
winit.bauerpublishing.com
winit.bauerpublishing.com
www.bellamagazine.co.uk
winit.bauerpublishing.com
www.bauermedia.co.uk
bellamagazine.co.uk
www.bauermedia.co.uk
winit.bauerpublishing.com
winit-stage.bauerpublishing.com
winit.bauerpublishing.com
dating.bellamagazine.co.uk
winit.bauerpublishing.com
clickswin-stage.bellamagazine.co.uk
winit.bauerpublishing.com
bellamagazine.co.uk
www.bauermedia.co.uk
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
bellamagazine.co.uk
winit.bauerpublishing.com
bellamagazine.co.uk
winit.bauerpublishing.com
winit.bauerpublishing.com
bellamagazine.co.uk
clickswin.eatinmagazine.co.uk
clickswin-stage.bellamagazine.co.uk
www.bellamagazine.co.uk
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
bellamagazine.co.uk
winit.bauerpublishing.com
www.bellamagazine.co.uk
bellamagazine.co.uk
winit.bauerpublishing.com
www.bellamagazine.co.uk
winit.bauerpublishing.com
clickswin.bellamagazine.co.uk
www.bellamagazine.co.uk
dating.bellamagazine.co.uk
www.bauermedia.co.uk
dating.bellamagazine.co.uk
bellamagazine.co.uk
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
dating.bellamagazine.co.uk
bellamagazine.co.uk
www.bellamagazine.co.uk
www.bauermedia.co.uk
winit.bauerpublishing.com
winit-stage.bauerpublishing.com
clickswin-stage-uk.bellamagazine.co.uk
winit.bauerpublishing.com
bellamagazine.co.uk
winit.bauerpublishing.com
winit.bauerpublishing.com
clickswin.bellamagazine.co.uk
bellamagazine.co.uk
www.bauermedia.co.uk
www.bauermedia.co.uk
winit.bauerpublishing.com
dating.bellamagazine.co.uk
www.bellamagazine.co.uk
www.bellamagazine.co.uk
bellamagazine.co.uk
shop.bellamagazine.co.uk
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
www.bellamagazine.co.uk
winit.bauerpublishing.com
bellamagazine.co.uk
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
clickswin.bellamagazine.co.uk
dating.bellamagazine.co.uk
cmp.am-online.com
winit.bauerpublishing.com
winit.bauerpublishing.com
bellamagazine.co.uk
bellamagazine.co.uk
bellamagazine.co.uk
www.bellamagazine.co.uk
winit.bauerpublishing.com
www.bellamagazine.co.uk
*.bellamagazine.co.uk
www.bellamagazine.co.uk
winit.bauerpublishing.com
winit.bauerpublishing.com
www.bellamagazine.co.uk
winit.bauerpublishing.com
www.bauermedia.co.uk
bellamagazine.co.uk
www.bauermedia.co.uk
winit.bauerpublishing.com
winit-stage.bauerpublishing.com
winit.bauerpublishing.com
dating.bellamagazine.co.uk
winit.bauerpublishing.com
clickswin-stage.bellamagazine.co.uk
winit.bauerpublishing.com
bellamagazine.co.uk
www.bauermedia.co.uk
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
bellamagazine.co.uk
winit.bauerpublishing.com
bellamagazine.co.uk
winit.bauerpublishing.com
winit.bauerpublishing.com
bellamagazine.co.uk
clickswin.eatinmagazine.co.uk
clickswin-stage.bellamagazine.co.uk
www.bellamagazine.co.uk
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
bellamagazine.co.uk
winit.bauerpublishing.com
www.bellamagazine.co.uk
bellamagazine.co.uk
winit.bauerpublishing.com
www.bellamagazine.co.uk
winit.bauerpublishing.com
clickswin.bellamagazine.co.uk
www.bellamagazine.co.uk
dating.bellamagazine.co.uk
www.bauermedia.co.uk
dating.bellamagazine.co.uk
bellamagazine.co.uk
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
dating.bellamagazine.co.uk
bellamagazine.co.uk
www.bellamagazine.co.uk
www.bauermedia.co.uk
winit.bauerpublishing.com
winit-stage.bauerpublishing.com
clickswin-stage-uk.bellamagazine.co.uk
winit.bauerpublishing.com
bellamagazine.co.uk
winit.bauerpublishing.com
winit.bauerpublishing.com
clickswin.bellamagazine.co.uk
bellamagazine.co.uk
www.bauermedia.co.uk
www.bauermedia.co.uk
winit.bauerpublishing.com
dating.bellamagazine.co.uk
www.bellamagazine.co.uk
www.bellamagazine.co.uk
bellamagazine.co.uk
shop.bellamagazine.co.uk
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
www.bellamagazine.co.uk
winit.bauerpublishing.com
bellamagazine.co.uk
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
winit.bauerpublishing.com
clickswin.bellamagazine.co.uk
dating.bellamagazine.co.uk
Certificate
The complete raw certificate details for www.bellamagazine.co.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgIQBOSRD0B/uOs/UnHJ+6gsnDANBgkqhkiG9w0BAQsFADBH MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEgMB4GA1UEAxMX UmFwaWRTU0wgU0hBMjU2IENBIC0gRzIwHhcNMTcwMTA4MDAwMDAwWhcNMTgwMjA3 MjM1OTU5WjAiMSAwHgYDVQQDDBd3d3cuYmVsbGFtYWdhemluZS5jby51azCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOPOYDzxosIWgXLiUMptz2+WnETd bnWFqDfg6iE8mWT3/XtJbIf1ChqfMetDH4f7o/vedVPhVs2pYPKCMd5d6BhsBr2Q LIy9EQBKy+6jd5ViwejqoQtkGTLil9L3S7wrZwuf6zBpq4BXVNSqkBBvEZFEWRn/ dzDNCZxqmh/AI+18ph+64UPwIAXsGpo/h2sYG6PcQY0rbYs6fc7y4NdR08R+TBRQ BwZCJlbGXsAacODIE86YnGII4krE9ZKuXz2DxCMzMcV/+zSJxQcrQuZaJAoMAm4J X9f0CMiAJzpXTAWMfHVL0JaawSr78z5bJpWmix7NXF+3Q/eI1cUpWEt2g4ECAwEA AaOCApgwggKUMDcGA1UdEQQwMC6CF3d3dy5iZWxsYW1hZ2F6aW5lLmNvLnVrghNi ZWxsYW1hZ2F6aW5lLmNvLnVrMAkGA1UdEwQCMAAwKwYDVR0fBCQwIjAgoB6gHIYa aHR0cDovL2dzLnN5bWNiLmNvbS9ncy5jcmwwbwYDVR0gBGgwZjBkBgZngQwBAgEw WjAqBggrBgEFBQcCARYeaHR0cHM6Ly93d3cucmFwaWRzc2wuY29tL2xlZ2FsMCwG CCsGAQUFBwICMCAMHmh0dHBzOi8vd3d3LnJhcGlkc3NsLmNvbS9sZWdhbDAfBgNV HSMEGDAWgBRM9L/oO77CJPMbRzu1bkiOFquvEjAOBgNVHQ8BAf8EBAMCBaAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMFcGCCsGAQUFBwEBBEswSTAfBggr BgEFBQcwAYYTaHR0cDovL2dzLnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDov L2dzLnN5bWNiLmNvbS9ncy5jcnQwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdgDd 6x0reg1PpiCLga2BaHB+Lo6dAdVciI09EcTNtuy+zAAAAVl89NRhAAAEAwBHMEUC IEJZTAaVM0tnyTmCajTH0SY6hfbwzleodJOubcHhUSWgAiEAkToUAVHWCeRuN277 Xhqxh0jFrMtssM8JFnx4J0Rs/EsAdwDuS723dc5guuFCaR+r4Z5mow9+X7By2IMA xHuJeqj9ywAAAVl89NSoAAAEAwBIMEYCIQC2yy5yrprbZlt/nlKSARO55xGK5sw+ 0LjZSFgkiI07IAIhALq678AVM7MD1F91FacnKy5KnGlhnqRY4Jbe5uBTS/QmMA0G CSqGSIb3DQEBCwUAA4IBAQCyo+gXvhQZs1VpRSM4/2molFxKfOFm5C05vckIrVTb V00hgSL6IWzyfYnyzdOPGPmT1oRbE7bm05Qij5P2SModbERP6TZis1lrzxEEm8AM z1SDUPSHUY4Ic3G4qOhEXMipAQhej/eIu6cfzBqAvQzEnVCj5bhMYqwjoSwrjfJ1 8NN4CmpYrGOziwgKcP2+654dXoddvxAQ00Fa7saFSpT8SFj16NPcpANSH63sCLTD d3Qu+8+T5Osortamudvn4YmSBOXpxuFAJ4BfG44Y8/D+JiVttDZfzyECYMcbxy/2 FDJQabws12ec7rvqGl3FWL+9UBEJ6La1cnpPW5NbHrI/ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA485gPPGiwhaBcuJQym3P b5acRN1udYWoN+DqITyZZPf9e0lsh/UKGp8x60Mfh/uj+951U+FWzalg8oIx3l3o GGwGvZAsjL0RAErL7qN3lWLB6OqhC2QZMuKX0vdLvCtnC5/rMGmrgFdU1KqQEG8R kURZGf93MM0JnGqaH8Aj7XymH7rhQ/AgBewamj+Haxgbo9xBjSttizp9zvLg11HT xH5MFFAHBkImVsZewBpw4MgTzpicYgjiSsT1kq5fPYPEIzMxxX/7NInFBytC5lok CgwCbglf1/QIyIAnOldMBYx8dUvQlprBKvvzPlsmlaaLHs1cX7dD94jVxSlYS3aD gQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 6503697824662018859734399783621110940 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-08 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-07 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.bellamagazine.co.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28757862991280276051468205838629654993302508755921406889566961514563444849493549754936869900538950962111797246981182433965148719433971498899753107104936798392497637694934884179378835872080845953424306445100491761869911617256982753713956739592467627593611316337531669877067309989407201673896139021262812373678481599653585334124272514553151481857626067576659973987287740440530741714978630028996030451234728135169411921485737299439074807855863419959248975972723087681150014951457451066245125910804764960086190154462498144783074864897289584334385932739771982939126919868489175099522403569203620967849795528185527670309761 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bellamagazine.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bellamagazine.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcb.com/gs.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4cf4bfe83bbec224f31b473bb56e488e16abaf12 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gs.symcb.com/gs.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc000001597cf4d4610000040300473045022042594c0695334b67c939826a34c7d1263a85f6f0ce57a87493ae6dc1e15125a0022100913a140151d609e46e376efb5e1ab18748c5accb6cb0cf09167c7827446cfc4b007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb000001597cf4d4a80000040300483046022100b6cb2e72ae9adb665b7f9e52920113b9e7118ae6cc3ed0b8d9485824888d3b20022100babaefc01533b303d45f7515a7272b2e4a9c69619ea458e096dee6e0534bf426 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00b2a3e817be1419b35569452338ff69a8945c4a7ce166e42d39bdc908ad54db574d218122fa216cf27d89f2cdd38f18f993d6845b13b6e6d394228f93f648ca1d6c444fe93662b3596bcf11049bc00ccf548350f487518e087371b8a8e8445cc8a901085e8ff788bba71fcc1a80bd0cc49d50a3e5b84c62ac23a12c2b8df275f0d3780a6a58ac63b38b080a70fdbeeb9e1d5e875dbf1010d3415aeec6854a94fc4858f5e8d3dca403521fadec08b4c377742efbcf93e4eb28aed6a6b9dbe7e1899204e5e9c6e14027805f1b8e18f3f0fe26256db4365fcf210260c71bc72ff614325069bc2cd7679ceebbea1a5dc558bfbd501109e8b6b5727a4f5b935b1eb23f