www.mci-group.com
- MCI Group Holding SA -
Issued by GeoTrust SSL CA - G3
About this certificate
This digital certificate with serial number 76:47:92:2b:ed:ef:59:97:dc:64:d0:6d:74:db:55:74 was issued on by GeoTrust Inc..
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
MCI Group Holding SA
Organization:
MCI Group Holding SA
State / Province:
Genève
Locality: Satigny
Country: CH
Locality: Satigny
Country: CH
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 76:47:92:2b:ed:ef:59:97:dc:64:d0:6d:74:db:55:74Serial Number (int): 157220521291826470712026366717172864372
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c
Fingerprint (sha1): a0:6f:3f:a4:23:3a:07:a1:ea:2f:52:d1:9a:30:4f:9e:a1:86:24:7c
Fingerprint (sha256): 45:c0:22:b8:61:ab:ab:5c:04:88:42:fd:04:36:e7:dd:7c:28:51:b7:92:ce:21:f4:7c:3e:b2:3a:53:2e:25:cd
Issuing Certificate URL: http://gn.symcb.com/gn.crt
Revocation information
OCSP Server: http://gn.symcd.comCRL Distribution Point: http://gn.symcb.com/gn.crl
Check the revocation status for certificate www.mci-group.com
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.mci-group.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.mci-zuerich.ch
www.mci-group.com
mci-group.com
www.mci-group.com
mci-group.com
Other certificates including the domain name mci-group.com
(limited to 100 certificates)
b-com.mci-group.com
teams-sbc.mci-group.com
vita.mci-group.com
appli-expenses-staging.mci-group.com
www.mci-group.com
vita.mci-group.com
www.mci-group.com
supporttest.mci-group.com
lync.mci-group.com
*.mci-group.com
aedubsbc001p.mci-group.com
www.mci-group.com
www.scandinavia.mci-group.com
www.mci-group.com
*.mci-group.com
support.mci-group.com
lync.mci-group.com
cvs.mci-group.com
remote.mci-group.com
simone-preprod.coccinet.eu
citrix.mci-group.com
b-com.mci-group.com
*.mci-group.com
supporttest.mci-group.com
supporttest.mci-group.com
www.mci-group.com
www.mci-group.com
careers.mci-group.com
lync.mci-group.com
association.mci-group.com
skype.mci-group.com
fs.mci-group.com
supportdev.mci-group.com
association.mci-group.com
association.mci-group.com
b-com.mci-group.com
www.mci-group.com
b-com.mci-group.com
registration.mci-group.com
reghk.mci-group.com
vita.mci-group.com
www.mci-group.com
comms.mci-group.com
skype.mci-group.com
skype.mci-group.com
images.mci-group.com
skype.mci-group.com
*.mci-group.com
reghk.mci-group.com
images.mci-group.com
reghk.mci-group.com
sip.mci-group.com
www.mci-group.com
association.mci-group.com
vita.mci-group.com
careers.mci-group.com
b-com.mci-group.com
appli-expenses-staging.mci-group.com
supportdev.mci-group.com
www.mci-group.com
B-COM.NOVARTIS.NGIT.CH
skype.mci-group.com
b-com.mci-group.com
comms.mci-group.com
*.mci-group.com
cvs.mci-group.com
fs.mci-group.com
supportdev.mci-group.com
fs.mci-group.com
remote.mci-group.com
citrix.mci-group.com
support.mci-group.com
support.mci-group.com
*.mci-group.com
b-com.mci-group.com
images.mci-group.com
teams-sbc.mci-group.com
vita.mci-group.com
appli-expenses-staging.mci-group.com
www.mci-group.com
vita.mci-group.com
www.mci-group.com
supporttest.mci-group.com
lync.mci-group.com
*.mci-group.com
aedubsbc001p.mci-group.com
www.mci-group.com
www.scandinavia.mci-group.com
www.mci-group.com
*.mci-group.com
support.mci-group.com
lync.mci-group.com
cvs.mci-group.com
remote.mci-group.com
simone-preprod.coccinet.eu
citrix.mci-group.com
b-com.mci-group.com
*.mci-group.com
supporttest.mci-group.com
supporttest.mci-group.com
www.mci-group.com
www.mci-group.com
careers.mci-group.com
lync.mci-group.com
association.mci-group.com
skype.mci-group.com
fs.mci-group.com
supportdev.mci-group.com
association.mci-group.com
association.mci-group.com
b-com.mci-group.com
www.mci-group.com
b-com.mci-group.com
registration.mci-group.com
reghk.mci-group.com
vita.mci-group.com
www.mci-group.com
comms.mci-group.com
skype.mci-group.com
skype.mci-group.com
images.mci-group.com
skype.mci-group.com
*.mci-group.com
reghk.mci-group.com
images.mci-group.com
reghk.mci-group.com
sip.mci-group.com
www.mci-group.com
association.mci-group.com
vita.mci-group.com
careers.mci-group.com
b-com.mci-group.com
appli-expenses-staging.mci-group.com
supportdev.mci-group.com
www.mci-group.com
B-COM.NOVARTIS.NGIT.CH
skype.mci-group.com
b-com.mci-group.com
comms.mci-group.com
*.mci-group.com
cvs.mci-group.com
fs.mci-group.com
supportdev.mci-group.com
fs.mci-group.com
remote.mci-group.com
citrix.mci-group.com
support.mci-group.com
support.mci-group.com
*.mci-group.com
b-com.mci-group.com
images.mci-group.com
Certificate
The complete raw certificate details for www.mci-group.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG/DCCBeSgAwIBAgIQdkeSK+3vWZfcZNBtdNtVdDANBgkqhkiG9w0BAQsFADBE MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTcwMzAyMDAwMDAwWhcNMjAwMzAxMjM1 OTU5WjBsMQswCQYDVQQGEwJDSDEQMA4GA1UECAwHR2Vuw6h2ZTEQMA4GA1UEBwwH U2F0aWdueTEdMBsGA1UECgwUTUNJIEdyb3VwIEhvbGRpbmcgU0ExGjAYBgNVBAMM EXd3dy5tY2ktZ3JvdXAuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqjpUN2ru5c/IQoxpCAGshP+gwCpa9fkpDpsqSS/TIZePtYWR2ER1GbCiDZrT OMSAdTOuHKp58fbIKmLwyLEfg2Brm2ntiUSthl/TzALM+0sXIEc7C3EaxKIwcJHD 4mUvAtfYBOWfFrP8NaHHMhicLxf7urMQiOSkxDcvV5Z+kRTIRHNgUJVy59RTkqu8 zl7XsUP5MkyMVOGuLB/pJhkDwvJxAp3SLu4AYhJqiL9WA/JIi52mqCXoF/fYJ+r7 Ocvg00glIzV8C+U8v/OubXczZPusleiQ6P28JMTKMVsg2zdkCXYCzIJEi6K19QtK h6BM9gBan0Enj7uPME634IQy3QIDAQABo4IDwDCCA7wwPwYDVR0RBDgwNoISd3d3 Lm1jaS16dWVyaWNoLmNoghF3d3cubWNpLWdyb3VwLmNvbYINbWNpLWdyb3VwLmNv bTAJBgNVHRMEAjAAMA4GA1UdDwEB/wQEAwIFoDArBgNVHR8EJDAiMCCgHqAchhpo dHRwOi8vZ24uc3ltY2IuY29tL2duLmNybDCBnQYDVR0gBIGVMIGSMIGPBgZngQwB AgIwgYQwPwYIKwYBBQUHAgEWM2h0dHBzOi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNv dXJjZXMvcmVwb3NpdG9yeS9sZWdhbDBBBggrBgEFBQcCAjA1DDNodHRwczovL3d3 dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL3JlcG9zaXRvcnkvbGVnYWwwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFNJv95b0hT9yPDB9 I9qFeJujfFp8MFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDovL2du LnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL2duLnN5bWNiLmNvbS9nbi5j cnQwggH2BgorBgEEAdZ5AgQCBIIB5gSCAeIB4AB2AN3rHSt6DU+mIIuBrYFocH4u jp0B1VyIjT0RxM227L7MAAABWo4/bAsAAAQDAEcwRQIhALLi70bkAK5Fi4BOkqKk aXHLe11GFplTvhe/fdmXzalMAiAhPwFq1VeRlZ/2ls5GPFdr44UxvBwyejsmg0zb 7J/y2AB2AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABWo4/bDUA AAQDAEcwRQIgQWrf31lmuzHSYH/WUWY00MIPzbh4uUFH+MCGOliStakCIQCxmoCU k6U00KPYudJoWB9gR//pafXySFbGeoMf2m5S2QB2AO5Lvbd1zmC64UJpH6vhnmaj D35fsHLYgwDEe4l6qP3LAAABWo4/bf4AAAQDAEcwRQIhAKtUdSnUJSU5W1+CR9fq sFAbp90VYmB7ea8nzEGdqvfhAiBrUwboEV/ZQ6qiqmyM3cFjjmSPR1KKZpZgJG9w IBUHsgB2ALx44d/F9jxoRkkzTaEPoV8JeWkgCcCBtPP2kX8+2bilAAABWo4/bPsA AAQDAEcwRQIhAJ7LpAQ5lVrsszcHouSCtbJ6YmVLz0mL13juaIhI0C8eAiATqd/y WQmfGvojHGpl4W/cwIcliRQNJV0E/kPhU3M5hDANBgkqhkiG9w0BAQsFAAOCAQEA d73gKeR/bfsNEUY2X0EBSanc7X15+1/O2K8uQf4ls6bmNskGBzMkgUIiuHNApidC XTLfLanh2KuJ7DFxFqoqNu8ahm+i9jcie4XRCdMVale5mjKQAhvmlbMRZsqax+xg pTFGZQmGo3suZKXvZKJ40Ry2NVuZQ0F+oLDLvlb0hp9mZqK6FerF17rRemJicItq YDpkGclhvbnfnxt89D70PTYjLdHhpAXK2dL+3Ier3/Gp5sUELP6pFzpFxZnLPLNT fkrDTKHo0Oz5sDwA/DzeAtjRL57J7cZXwWvf49vWBcmS91uuV76ZcWdipHmlImtF x9/xF4o7YfHCPbp4gjJPgA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjpUN2ru5c/IQoxpCAGs hP+gwCpa9fkpDpsqSS/TIZePtYWR2ER1GbCiDZrTOMSAdTOuHKp58fbIKmLwyLEf g2Brm2ntiUSthl/TzALM+0sXIEc7C3EaxKIwcJHD4mUvAtfYBOWfFrP8NaHHMhic Lxf7urMQiOSkxDcvV5Z+kRTIRHNgUJVy59RTkqu8zl7XsUP5MkyMVOGuLB/pJhkD wvJxAp3SLu4AYhJqiL9WA/JIi52mqCXoF/fYJ+r7Ocvg00glIzV8C+U8v/OubXcz ZPusleiQ6P28JMTKMVsg2zdkCXYCzIJEi6K19QtKh6BM9gBan0Enj7uPME634IQy 3QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 157220521291826470712026366717172864372 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-02 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-01 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Genève' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Satigny' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'MCI Group Holding SA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.mci-group.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21489274931651282434909092185599646297949921278408622859325987630500879331898148352030080069196569317739246085355109172735462469019261155082151945022810935533300279269708676323845781798522238613979613830891350799890013849557884174581296400590295105787507000025894001311565308142798916326662742854888328556782524407465133731127823097686499134129432587955850464164501757611993515832872079381455039587714840826652813432881216275975255621810695881794199054527982198179799261153431141270326194373023565777166268020760040218000703841966321283285213709785834212858612037980043582025869700007518287030223753691943863559926493 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mci-zuerich.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mci-group.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mci-group.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0077bde029e47f6dfb0d1146365f410149a9dced7d79fb5fced8af2e41fe25b3a6e636c906073324814222b87340a627425d32df2da9e1d8ab89ec317116aa2a36ef1a866fa2f637227b85d109d3156a57b99a3290021be695b31166ca9ac7ec60a53146650986a37b2e64a5ef64a278d11cb6355b9943417ea0b0cbbe56f4869f6666a2ba15eac5d7bad17a6262708b6a603a6419c961bdb9df9f1b7cf43ef43d36232dd1e1a405cad9d2fedc87abdff1a9e6c5042cfea9173a45c599cb3cb3537e4ac34ca1e8d0ecf9b03c00fc3cde02d8d12f9ec9edc657c16bdfe3dbd605c992f75bae57be99716762a479a5226b45c7dff1178a3b61f1c23dba7882324f80