stage.lululemon.com

- lululemon athletica canada inc. -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 25:77:cc:7d:85:d1:85:36:5a:70:61:3d:bb:24:f0:7e was issued on by GeoTrust Inc..

With 47 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

lululemon athletica canada inc.

Organization: lululemon athletica canada inc.
Organization unit: IT Infrastructure
State / Province: British Columbia
Locality: Vancouver
Country: CA

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 25:77:cc:7d:85:d1:85:36:5a:70:61:3d:bb:24:f0:7e
Serial Number (int): 49803466726701791888966243585410527358
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): d6:a5:65:b8:97:d1:39:ee:1a:87:38:04:94:ea:e1:cf:2e:f1:bc:79
Fingerprint (sha256): 44:c0:7e:6b:02:97:88:fb:d1:17:ca:74:06:f1:ee:8d:16:da:f1:47:c7:be:6b:dd:c5:30:9e:98:56:15:3e:e3

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate stage.lululemon.com

47

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stage.lululemon.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stage-fr.info.lululemon.com
stage.lululemon.com.hk
stagegsr.lululemon.co.nz
stage.lululemon.cn
fr.stage.info.lululemon.com
stage-search-gsr.lululemon.com
stage10.lululemon.co.nz
stage.lululemon.co.uk
stagegsr.eu.lululemon.com
stage-gsr.lululemon.com
stage.info.lululemon.com.au
test-shop.ivivva.com
stage10.lululemon.com.au
stage.info.lululemon.cn
stage-partners.lululemon.com.au
stage.lululemon.com.au
stagegsr-partners.lululemon.com.au
stagegsr.partners.lululemon.com.au
stage.eu.lululemon.com
stage-mobileapi-gsr.lululemon.com
stagegsr.lululemon.com.au
stage.info.lululemon.co.nz
stagefailover-partners.lululemon.com.au
stage.info.eu.lululemon.com
stagefailover-intl.lululemon.com
stagegsr.lululemon.com.hk
stagegsr.lululemon.co.uk
stage-preview.lululemon.cn
stage10.lululemon.com
stage.info.lululemon.com.hk
fr.stage.lululemon.com
stagefailover.ivivva.com
stage-preview-gsr.lululemon.com
stage.info.ivivva.com
stage.info.lululemon.com
stage.info.lululemon.co.uk
stage-globalstaticassets.lululemon.com
stage10.ivivva.com
stage.info.lululemon.ch
stage.lululemon.co.nz
stage-pnimages.lululemon.com
stage.ivivva.com
stage.partners.lululemon.com.au
fr.stage-gsr.lululemon.com
stage.lululemon.ch
stagegsr.lululemon.ch
stage.lululemon.com

Other certificates including the domain name lululemon.com

(limited to 100 certificates)
vanity22.jiveon.com
*.strategicsales.lululemon.com
lululemon.com
stage.lululemon.com
lululemon.com
vanity22.jiveon.com
stage.lululemon.com
eu.lululemon.com
*.lululemon.com
leapfrog-ssl-28.gcs-web.com
whatwelove.lululemon.com
secure5s.scene7.com
*.lululemon.com
imperva.com
cdn.lululemon.com.au
test.preprod-apis.lululemon.com
smetrics.lululemon.com
vanity22.jiveon.com
cdn.lululemon.com.au
preview.apis.lululemon.com
grin.lululemon.com
sso-signing.lululemon.com
sni.cloudflaressl.com
lululemon.com.au
lululemon.com
stage.lululemon.com
sni.cloudflaressl.com
ehc-dev.lululemon.com
*.lululemon.com
imperva.com
akamai-san90.exacttarget.com
imperva.com
stage.lululemon.com
vanity22.jiveon.com
leapfrog-ssl-28.gcs-web.com
leapfrog-ssl-28.gcs-web.com
click.e.lululemon.com
stage.lululemon.com
whatwelove.lululemon.com
whatwelove.lululemon.com
akamai-san90.exacttarget.com
*.lllatg.com
vanity22.jiveon.com
investor.lululemon.com
lululemon.com
lululemon.ca
ehc-dev.lululemon.com
delivery.lululemon.com
lululemon.com
cdn.lululemon.com.au
eu.lululemon.com
vanity22.jiveon.com
smetrics.lululemon.com
secure5s.scene7.com
secure5s.scene7.com
ehc-dev.lululemon.com
akamai-san90.exacttarget.com
cloudflare-sandbox.lululemon.com
lll.flow.anaplan.qa.lululemon.com
sni.cloudflaressl.com
www.lululemon.com
repair.lululemon.com
secure5s.scene7.com
lululemon.com
ehc-dev.lululemon.com
test.preprod-apis.lululemon.com
vanity22.jiveon.com
leapfrog-ssl-28.gcs-web.com
*.atg.lululemon.com
leapfrog-ssl-28.gcs-web.com
*.lululemon.com
apim-stage.tokenapi.lululemon.com
cdn.lululemon.com.au
stage.lululemon.com
theghostrace.lululemon.com
grin.lululemon.com
vanity22.jiveon.com
prod.apis.lllext.com
lululemon.com
owa.lululemon.com
leapfrog-ssl-28.gcs-web.com
www.lululemon.com
ehc-dev.lululemon.com
cdn.lululemon.com.au
vanity22.jiveon.com
lululemon.ca
vanity22.jiveon.com
ehc-dev.lululemon.com
sso-encryption.lululemon.com
www.lululemon.com
eu.lululemon.com
lululemon.com
apim-stage.tokenapi.lululemon.com
prod.apis.lllext.com
vanity22.jiveon.com
www.lululemon.com
sni.cloudflaressl.com
www.lululemon.com
cloud.e.lululemon.com
view.e.lululemon.com

Certificate

The complete raw certificate details for stage.lululemon.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Mo4pC/7X9IOKLBJXKsP
5JFazYDLtCdKKJrTT9Yc5MG2SR0wRZpD0pTvNbkLAjLSpXceV2JbTwsh5l+jFxaj
d3FHlcIku0EYwPomoMzWB2b9vUX8aYqtJLY8nKgGXHZJQsszbZchpAXPyBWFYm6Y
J3n063iIMn0bulALDpepDmmdp6eF76vGilmsPuprh2cHOaaUpIaz59FJppp15GRI
uCj2y94P1sXOrXu1qfIRMNJ5ByZTbNbH+sVvqdWWg4FEPansjT8E3eu0oXsJuix4
3x2yObg9YXdPxww+ThMckWXDUw2IcaKa7U42jBALwHEXpGHJRuuYFHBMWqiSfOZO
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 49803466726701791888966243585410527358
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'British Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Vancouver'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'lululemon athletica canada inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT Infrastructure'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'stage.lululemon.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30901865429286082338182613152871326481097973575143954249574853727240354515219555569573340053789012865895796777787905919069256187640881006911579915304189147690877435929145497954427305368429631843942401464439880606482080204095679635833225270624304612424306855673469551901126475417741994839457556891522399386157035033871378378987632455816493748041923940274031174727294199571083552314561655875640396378815313101140433490781733771494838912013780731415544167915857579942895386866469195220872854841927597621370499727628757996445945927560890493860134494981814354447011004136947799398207040747372720564184617604680774085660251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1287 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-fr.info.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.lululemon.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagegsr.lululemon.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.lululemon.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.stage.info.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-search-gsr.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage10.lululemon.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.lululemon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagegsr.eu.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-gsr.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.info.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-shop.ivivva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage10.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.info.lululemon.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-partners.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagegsr-partners.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagegsr.partners.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.eu.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-mobileapi-gsr.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagegsr.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.info.lululemon.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagefailover-partners.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.info.eu.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagefailover-intl.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagegsr.lululemon.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagegsr.lululemon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-preview.lululemon.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage10.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.info.lululemon.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.stage.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagefailover.ivivva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-preview-gsr.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.info.ivivva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.info.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.info.lululemon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-globalstaticassets.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage10.ivivva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.info.lululemon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.lululemon.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-pnimages.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.ivivva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.partners.lululemon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.stage-gsr.lululemon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.lululemon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagegsr.lululemon.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.lululemon.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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