phnsdcounty.us

- DXC Technology Company -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 5f:4b:4f:0c:5a:c5:b7:2c:fe:1a:c9:8b:fb:8b:4a:ff was issued on by GeoTrust Inc..

With 37 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

DXC Technology Company

Organization: DXC Technology Company
State / Province: Virginia
Locality: Tysons
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5f:4b:4f:0c:5a:c5:b7:2c:fe:1a:c9:8b:fb:8b:4a:ff
Serial Number (int): 126667685153146432944555412265731050239
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): af:91:4b:c4:a2:0a:42:5d:06:15:c6:08:33:0a:b0:6c:25:e8:a5:c3
Fingerprint (sha256): 47:63:65:68:1b:72:43:38:80:ee:c9:be:a3:a4:74:8c:57:6d:38:a9:1e:01:8f:4b:8b:f5:f2:f1:f6:0c:56:67

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate phnsdcounty.us

37

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for phnsdcounty.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.sddac.com
arcc.sdcounty.ca.gov
www.sddcss.org
sdrrc.sdcounty.ca.gov
arcc-acclaim.sdcounty.ca.gov
sdhcd-renters.sdcounty.ca.gov
www.aiswebreferral.org
bcmstmo.sdcounty.ca.gov
www.sdapcd.org
pswp.sdcounty.ca.gov
sddcss.org
permitcenterqueues.sdcounty.ca.gov
fcphn.com
rptdistrib.sdcounty.ca.gov
iqcsp.sdcounty.ca.gov
crd.sdcounty.ca.gov
www.fcphn.com
sdapcd.org
bcmspmob.sdcounty.ca.gov
publicservices.sdcounty.ca.gov
preprod.sdapcd.org
bcmstaga.sdcounty.ca.gov
www.sdctp.org
dehpay.com
sddac.com
sdctp.org
phirms.sdcounty.ca.gov
preprod.sddac.com
aiswebreferral.org
www.dehpay.com
sdhcd-rentportal.sdcounty.ca.gov
erm.sdttc.com
dhr-lo.sdcounty.ca.gov
www.phnsdcounty.us
mysdttc.com
buynet.sdcounty.ca.gov
phnsdcounty.us

Other certificates including the domain name phnsdcounty.us

(limited to 100 certificates)

Certificate

The complete raw certificate details for phnsdcounty.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnWI2h843mEDiRFA5MF/
7gLGKPEm8OovPr8YoawmgtuyymPlJCYXki9J2o1TkdSXcZfI93J01lvZnDN0C5aK
C3Nfpv52Eep3Zr96UlWdK3Sc8mGeK4qEAC5hP9V4IfuI8Jz5C847wlVs98B3eouV
Cbz3yN6vJxXZVZf/Z0BY/fjB+IBfqu0mzP5tf/lZ+rdSnrYJ+KXLlHPt5tZ7a87x
ZSaMX4EP3RkuW7Y7pdFUXBM+RN4nNwmsB4WYKx+Rn0cxs5mk7/MjWpubteF3OqNM
ZCPYtZ5ZwxJGGl3/Zf6MghcZl9WbqqIEWZcbM1HXSeasK1vLvLln/V2ClGfHo92U
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 126667685153146432944555412265731050239
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Virginia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Tysons'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DXC Technology Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'phnsdcounty.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23033329964512470280725622073817525336767707439657492390680963326908781102124462302568669840768564130122814467532227338206317085762847327435944778736275472343888456228112853437137273774164170752884783755949904748247378375380470398119231703019034195260623568316217372093034685227326386079836391498518506318515840205078507850674280631362877017002913811507146325413691129981136858997518660950419572514912287769574113613998595495347990567227551847519245390157906592886688750952116373033889142343911180990164223963992073996611263516618562535466805899206391933756217649423723682728959754701831420535076741907921821945926851
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (764 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sddac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arcc.sdcounty.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sddcss.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdrrc.sdcounty.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arcc-acclaim.sdcounty.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdhcd-renters.sdcounty.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aiswebreferral.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcmstmo.sdcounty.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sdapcd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pswp.sdcounty.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sddcss.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'permitcenterqueues.sdcounty.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcphn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rptdistrib.sdcounty.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iqcsp.sdcounty.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crd.sdcounty.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fcphn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdapcd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcmspmob.sdcounty.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publicservices.sdcounty.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.sdapcd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcmstaga.sdcounty.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sdctp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dehpay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sddac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdctp.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phirms.sdcounty.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.sddac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aiswebreferral.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dehpay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdhcd-rentportal.sdcounty.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erm.sdttc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dhr-lo.sdcounty.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phnsdcounty.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysdttc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buynet.sdcounty.ca.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phnsdcounty.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015f78eb37d30000040300483046022100c15fed8cfa51b276a941cc57ee65c9c5391f01e35e936f0368731e6d432ee19b022100cf1613c20b4f0dc117c4dbf9b710fd6642ec4775d65f091efc98f47137f44f81007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015f78eb380e000004030046304402206b19f33c96c3e03584a78b2f8376ac434fbff82ec8e94d7cd78b1ff31ee446f902200b3c0da5bcabdd57741afb51dbb21a25ed8fcc4df8456d8d091b6ec91f2db374
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008d74193dfaebbd07fc15cb0448e710c3f36497ca7fb79fd72cbe227205a43d1cf517b3947a15d97e0fd84883d05b55b9aa132971e2f4ba3d5db65d82c31f097259b24e949e2f3e30a201dbf9be91c22d06375dd69dc2ef5ead5e495911d623bd1b297c9c7c545a4a6b893b6b48456f654022f23f34e91bd685fe80c7dc639dbd5d824f0ed7d32a0a963409c5facfe20c3ff1af2b1173e6c7e324896327867405555574ca4d1d738d8f3e9685dfebf0bed589bf8bdba3337aff0e074915512ba2428878f875a2f6e5eaaa1fd2ac054d72f2a19a05c94d3bdc310259a3967bfe106c0b85baa2e584cc05e7f3f3d9d6a8ea394a6e4a347808792a990fae3a15a3d3