www.fsec.or.kr

- Financial Security Institute -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 38:3c:64:69:6d:60:33:65:f6:44:70:0a:e7:ba:5e:8e was issued on by GeoTrust Inc..

With 26 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Financial Security Institute

Organization: Financial Security Institute
State / Province: Gyeonggi-do
Locality: Yongin-si
Country: KR

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 38:3c:64:69:6d:60:33:65:f6:44:70:0a:e7:ba:5e:8e
Serial Number (int): 74750342169234973375889693514925760142
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 85:50:29:33:bd:69:5a:90:90:ab:e0:17:b8:a8:ab:66:fc:13:e3:e3
Fingerprint (sha256): 46:d9:d4:19:4d:a5:36:e7:c1:5b:4e:90:77:ab:20:56:bb:28:3a:26:0c:36:21:7e:db:88:7d:78:17:ea:b8:aa

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate www.fsec.or.kr

26

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.fsec.or.kr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dhp.dongbuib.com
www.ajucapital.co.kr
www.dgbfnlife.com
www.educar.co.kr
ir.dongbuhappy.com
zero.co.kr
certify.fsb.or.kr
stock.bnksb.com
fgs.dgbfnlife.com
mo.dongbuhappy.com
new.dongbuhappy.com
www.dongbuhappy.com
m.dongbuhappy.com
stockloan.ajucapital.co.kr
www.hanwhalife.com
www.dongbuib.com
www.fsb.or.kr
dhp.dongbuhappy.com
ssl.koreanre.co.kr
www.bnksb.com
www.hyundailife.com
www.futures.co.kr
fsb.or.kr
m.ajucapital.co.kr
www.fsec.or.kr
fsec.or.kr

Other certificates including the domain name fsec.or.kr

(limited to 100 certificates)
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
medu.fsec.or.kr
medu.fsec.or.kr
edu.fsec.or.kr
www.fsec.or.kr
medu.fsec.or.kr
privacy.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
edu.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
privacy.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
privacy.fsec.or.kr
www.fsec.or.kr
mail.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
kms.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
malware.fsec.or.kr
www.fsec.or.kr
malware.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
edu.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
data.fsec.or.kr
www.fsec.or.kr
*.fsec.or.kr
edu.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
kms.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
privacy.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
kms.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
data.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
privacy.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
edu.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
*.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
medu.fsec.or.kr
regtech.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr
www.fsec.or.kr

Certificate

The complete raw certificate details for www.fsec.or.kr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzs1dTuQXKTL8O4b4yvGB
vs764endxuunZFrRZYDbhbfa9fEu/zJBbLtMb+I4y6kA3II1VUjDygbnNAgkEJkD
wI1PgC+sFkUzcc7F1/YjP6il+U4AFngRJ6LVNNPnTWUi2kqTNX2KnsILQ8L4WoCI
y1vjGjn0Ecxnt2frt27CYwUjZvx/Dm3EnLGlhaqyx7K1V1vn2/oQswyPCOyitEOP
YTbA8KaKADNYOpNnDKjXpOO25JKmzUI38ThRhaz8awWTPuVYK4ISi2JpzGIa4DRC
3vNcgQWYefTmgaR+Hn2ctvyZ6BS+5HV0sVzK+lmqnep2HwyLhiVJGQbQ9RnrEBNy
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 74750342169234973375889693514925760142
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Gyeonggi-do'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Yongin-si'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Financial Security Institute'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.fsec.or.kr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26106359824924152424415889213663077849089947423321484422879284610197320168847999114123488864494398594165708646734891396097474866406874050454867792718602778656388313005154568655510883340872618737040188531857862218901298728441092098226462711801662084884705988195258761475674737991218975165518876601639969138236852230415276654122412363911488717049998544840284234477016899586019760232962303449228952508418099369252338310517390999085297320778700605279209892152541678352412084196045088184247683939006987074240678641738686250179809029742743578363172354182950738943264435920045486219540337854254521355715242125391742536741407
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dhp.dongbuib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ajucapital.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dgbfnlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.educar.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.dongbuhappy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zero.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'certify.fsb.or.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stock.bnksb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fgs.dgbfnlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mo.dongbuhappy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new.dongbuhappy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dongbuhappy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.dongbuhappy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stockloan.ajucapital.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hanwhalife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dongbuib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fsb.or.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dhp.dongbuhappy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.koreanre.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnksb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hyundailife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.futures.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsb.or.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ajucapital.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fsec.or.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsec.or.kr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015e1325ebfd0000040300483046022100aed5c34d2e002d0ab7b78340fd7cd27b77664a8d8559bc2cf3134f9900a8612d022100b000a3683e0a8f34529dd1f9ab1c7cd80c900717557cce5a3864c401b458d2f9007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015e1325ec160000040300483046022100c7ecaf366089aa8ee4e5b9b7b56a652bf3bf3bb4bbcb78805501620b9ae6f3c602210087317b390aa5d72da60b3497bc4410d92d03b7577957d57877c1661a12d57e9c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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