www.universalpictures.com

- Universal City Studios -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 5f:82:d1:9c:b1:70:5d:b8:43:84:70:fb:79:78:1a:1d was issued on by GeoTrust Inc..

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Universal City Studios

Organization: Universal City Studios
Organization unit: Akamai SAN SSL OV
State / Province: California
Locality: Universal City
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5f:82:d1:9c:b1:70:5d:b8:43:84:70:fb:79:78:1a:1d
Serial Number (int): 126955909629291739951249774612066081309
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 0d:7e:a7:e9:c1:50:79:ea:a2:70:11:cb:5b:5b:78:de:58:f5:8f:13
Fingerprint (sha256): 48:ae:38:59:d1:d8:e8:e7:bc:e7:27:f5:27:e5:d4:13:4c:26:8b:b7:23:c3:6d:3a:f7:08:f3:33:31:79:71:ce

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate www.universalpictures.com

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.universalpictures.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.pitchperfectmovie.com
www.wizardingworldhollywood.com
bannerassets.universalstudios.com
www.dreamworkstrollmate.com
www.magicmoviecard.com
www.fiftyshadessweeps.com
www.barbieparty.org
www.upheoffer.com
jointhewinterswar.com
www.jointhewinterswar.com
www.vdayprintablecards.com
www.bttfmovie.com
www.jurassicworld.com
www.jurassicworldsweeps.com
www.eastereggwraps.com
www.muttcutts.com
monsterhighmask.com
www.monsterhighmask.com
www.pitch2smash.com
staging.freetheminions.com
www.freetheminions.com
freetheminions.com
www.mybigfatmoment.com
assets.conflagrationmovie.com
www.conflagrationmovie.com
www.mypetmoji.com
prodapp.mypetmoji.com
stageapp.mypetmoji.com
mypetmoji.com
www.splitfilmtickets.co.uk
splitfilmtickets.co.uk
www.seattleindependentpress.net
staging.seattleindependentpress.net
workingtitlefilms.com
www.workingtitlefilms.com
www.pumpkinprintables.com
www.universalscreenings.com
jointhewinterswar.upqa.com
wizardingworldholllywood.upqa.com
moviesuniversalpictures.upqa.com
newuniversalpictures.upqa.com
adminuniversalpictures.upqa.com
www.cantstopthefunk.com
www.ouijaknowsall.com
ouijaknowsall.com
tablet.universalpictures.com
universalpictures.com
movies.universalpictures.com
admin.universalpictures.com
prod.universalpictures.com
www.universalpictures.com

Other certificates including the domain name universalpictures.com

(limited to 100 certificates)
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
san-2-s6.tlsprovisioning.exacttarget.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
san-2-s6.tlsprovisioning.exacttarget.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
san-2-s6.tlsprovisioning.exacttarget.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
san-2-s6.tlsprovisioning.exacttarget.com
image.partnerapp1.myworld.com
www.universalpictures.com
universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
www.universalpictures.com
image.partnerapp1.myworld.com
www.universalpictures.com
www.universalpictures.com
image.partnerapp1.myworld.com

Certificate

The complete raw certificate details for www.universalpictures.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCV5L77gU1rHl5n8Ftu1
8qudhKhRiUKcmRhMrU2brGlCTwbzuQI9aZU8JeLLCSegcIxIFFWzwrbH7JIxHv5J
PaQxIlYfVRRssf3594crMZtItydQkvmS5MNBnkUNXotJnRCALTupi5fETTffpva7
GiFFzE+qEqt3mjTTeS6g17K08cLQbiLZA9WYfjyKHPOupmhK6DXIIc1fbmUc83xc
UqB8Oi9LaGZgnq4scVL73IsZPiwps3aSsVftddnzFSo23ls5eWzQxZaaU5LJUWi+
zem5VjefUb3J+/BIa5p9/EqgWIuYvctqzoG5dSI4vR/DJqm/4cZ+lBxkwQDecB7F
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 126955909629291739951249774612066081309
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Universal City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Universal City Studios'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Akamai SAN SSL OV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.universalpictures.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23246326928509690865237300241114257344641808937410381242611335146617877772892556692028746356770696090074848461507674415145183611303454495600506355077388084206476174676970199714317813973693178731891660248508862788861497273536858849615515153516236555482893497562160354308099799603233595613364590421087665818366830456081244260185162875209118801499597868325510802082543205396202494223419699528187455291002443894830656040074986231495230997541338083311043128422374796489835613182331620957877835113060982394286617004165679210171051686359043699974776816439377682927682189944174462025999237494956390538951357216364883976570221
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1337 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pitchperfectmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wizardingworldhollywood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bannerassets.universalstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dreamworkstrollmate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magicmoviecard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fiftyshadessweeps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barbieparty.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.upheoffer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointhewinterswar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jointhewinterswar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vdayprintablecards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bttfmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jurassicworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jurassicworldsweeps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastereggwraps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.muttcutts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monsterhighmask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monsterhighmask.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pitch2smash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.freetheminions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freetheminions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freetheminions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mybigfatmoment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.conflagrationmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.conflagrationmovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mypetmoji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodapp.mypetmoji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stageapp.mypetmoji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypetmoji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.splitfilmtickets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'splitfilmtickets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seattleindependentpress.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.seattleindependentpress.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workingtitlefilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.workingtitlefilms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pumpkinprintables.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalscreenings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jointhewinterswar.upqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wizardingworldholllywood.upqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moviesuniversalpictures.upqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newuniversalpictures.upqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminuniversalpictures.upqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cantstopthefunk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ouijaknowsall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ouijaknowsall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tablet.universalpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movies.universalpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.universalpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.universalpictures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalpictures.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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