gate.idgesg.net

- IDG Communications, Inc. -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 24:6a:d7:71:c4:07:da:32:9d:cd:4f:d9:92:38:e5:74 was issued on by GeoTrust Inc..

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

IDG Communications, Inc.

Organization: IDG Communications, Inc.
State / Province: Massachusetts
Locality: Framingham
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 24:6a:d7:71:c4:07:da:32:9d:cd:4f:d9:92:38:e5:74
Serial Number (int): 48406961046777367189494821082956883316
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 57:0b:3f:7d:e7:dd:fd:ff:19:72:f3:46:88:fa:72:15:74:8a:dc:93
Fingerprint (sha256): 44:89:1f:ec:ed:e3:e7:a2:80:cf:db:6b:c6:99:12:3f:48:5d:7b:bd:4d:bd:e3:2e:98:bf:fd:81:05:1a:32:cd

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate gate.idgesg.net

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gate.idgesg.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cms-gate.idgesg.net
cms-images-mw.idgesg.net
cms-images-pcw.idgesg.net
cms-images.idgesg.net
sam.idgesg.net
secure.idgesg.cfoworld.com
secure.idgesg.cio.com
secure.idgesg.citeworld.com
secure.idgesg.computerworld.com
secure.idgesg.csoonline.com
secure.idgesg.greenbot.com
secure.idgesg.idgns.com
secure.idgesg.infoworld.com
secure.idgesg.itnews.com
secure.idgesg.itworld.com
secure.idgesg.javaworld.com
secure.idgesg.macworld.com
secure.idgesg.networkworld.com
secure.idgesg.pcworld.com
secure.idgesg.techhive.com
www.idgapollo.com
www.idgharmony.com
gate.idgesg.net

Other certificates including the domain name idgesg.net

(limited to 100 certificates)
dns-vetting1e.map.fastly.net
*.cfoworld.com
idgesg.net
prospective.shared.global.fastly.net
dns-vetting1e.map.fastly.net
gate.idgesg.net
*.idgesg.net
dns-vetting1e.map.fastly.net
prospective.shared.global.fastly.net
idg.map.fastly.net
prospective.shared.global.fastly.net
gate.idgesg.net
prospective.shared.global.fastly.net
dns-vetting1e.map.fastly.net
idg.map.fastly.net
idg.map.fastly.net
idg.map.fastly.net
gate.idgesg.net
idg.map.fastly.net
dns-vetting1e.map.fastly.net
dns-vetting1e.map.fastly.net
idg.map.fastly.net
dns-vetting1e.map.fastly.net
idg.map.fastly.net
prospective.shared.global.fastly.net
idg.map.fastly.net
*.idg.com
idg.map.fastly.net
gate.idgesg.net
*.idgesg.net
dns-vetting1e.map.fastly.net
idg.map.fastly.net
idg.map.fastly.net
dns-vetting1e.map.fastly.net
idg.map.fastly.net
dns-vetting1e.map.fastly.net
idg.map.fastly.net
idg.map.fastly.net
dns-vetting1e.map.fastly.net
dns-vetting1e.map.fastly.net
idg.map.fastly.net
prospective.shared.global.fastly.net
gate.idgesg.net
dns-vetting1e.map.fastly.net
dns-vetting1e.map.fastly.net
dns-vetting1e.map.fastly.net
dns-vetting1e.map.fastly.net
dns-vetting1e.map.fastly.net
idg.map.fastly.net
dns-vetting1e.map.fastly.net
gate.idgesg.net
idg.map.fastly.net
*.cfoworld.com
idg.map.fastly.net
idg.map.fastly.net
idg.map.fastly.net
dns-vetting1e.map.fastly.net
dns-vetting1e.map.fastly.net
dns-vetting1e.map.fastly.net
dns-vetting1e.map.fastly.net
bamboo.idgesg.net
prospective.shared.global.fastly.net
idg.map.fastly.net
dns-vetting1e.map.fastly.net
prospective.shared.global.fastly.net
idg.map.fastly.net
idg.map.fastly.net
idg.map.fastly.net
dns-vetting1e.map.fastly.net
idg.map.fastly.net
dns-vetting1e.map.fastly.net
idgesg.net
dns-vetting1e.map.fastly.net
dns-vetting1e.map.fastly.net
idg.map.fastly.net
dns-vetting1e.map.fastly.net
*.idgesg.net
dns-vetting1e.map.fastly.net
gate.idgesg.net
idg.map.fastly.net
prospective.shared.global.fastly.net
idg.map.fastly.net
idg.map.fastly.net
idg.map.fastly.net
dns-vetting1e.map.fastly.net
dns-vetting1e.map.fastly.net
idg.map.fastly.net
dns-vetting1e.map.fastly.net
dns-vetting1e.map.fastly.net
idg.map.fastly.net
dns-vetting1e.map.fastly.net
dns-vetting1e.map.fastly.net
idg.map.fastly.net
idg.map.fastly.net
dns-vetting1e.map.fastly.net
idg.map.fastly.net
dns-vetting1e.map.fastly.net
dns-vetting1e.map.fastly.net
idgesg.net
bamboo.idgesg.net

Certificate

The complete raw certificate details for gate.idgesg.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Iv6Wyk8WqijGHL0TLjU
zJDeBNWneIq1a2JKbzX+EvlM2ujxfdn7Igg0j79BWwh/jeWz+XnR54FcSH+gHsme
ai8h39qMyxUPb0fVFBvKKxaDT/+dfZykT7l+f/8dZMLcLRNjRYh2/sw8ZC7vwdoR
7yVm0q/xL1+bTxXfUidSzvuolQNDjgqaoSmPBr1OF8RAhTFdFvz0XX5F3RX17O4V
uVqH4cJRuBpsE/Askf5NVXQBU/Yjf5GMJPKAJ5B9kAPH7vCJRinm0tZyJPqmnvfu
Go6i7tSqFqxMokXKdwM7kAGK8+zHZH8uTmEvtps7dBgasRtqLzl6h0TT5aUuv5pi
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 48406961046777367189494821082956883316
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Framingham'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IDG Communications, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'gate.idgesg.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29861265673487581611920385610767533343964870808188481001526823410579703453823691317773605607575272774481625004291170936733185285601731198595245315123467052824765909194426112186588199074210524844045481975751793962556681506901275198262094370121941895717770598225162681646515501622934643704259886217104770775111950152415171198298242264406512437826262291169029896092997969382552228851386198606239065069639150130048776227384121477272544756046018831157750987176391581440259688289253779512150257282141146555934765476294610228563579606409622953648902645929432262644666829098093953062589379775464157334436246580382849446863451
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (594 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms-gate.idgesg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms-images-mw.idgesg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms-images-pcw.idgesg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms-images.idgesg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sam.idgesg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.idgesg.cfoworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.idgesg.cio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.idgesg.citeworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.idgesg.computerworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.idgesg.csoonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.idgesg.greenbot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.idgesg.idgns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.idgesg.infoworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.idgesg.itnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.idgesg.itworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.idgesg.javaworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.idgesg.macworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.idgesg.networkworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.idgesg.pcworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.idgesg.techhive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idgapollo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idgharmony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gate.idgesg.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (153 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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