mail.ojc.com.br
- J CAMARA e IRMAOS SA -
Issued by GeoTrust SSL CA - G3
About this certificate
This digital certificate with serial number 20:1f:36:27:ad:ab:67:b5:1d:97:51:4f:f3:b4:b8:b7 was issued on by GeoTrust Inc..
With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
J CAMARA e IRMAOS SA
Organization:
J CAMARA e IRMAOS SA
Organization unit: Departamento de TI
Organization unit: Departamento de TI
State / Province:
Goias
Locality: Goiania
Country: BR
Locality: Goiania
Country: BR
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 20:1f:36:27:ad:ab:67:b5:1d:97:51:4f:f3:b4:b8:b7Serial Number (int): 42697355461496945594905804360524282039
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c
Fingerprint (sha1): 8f:81:d7:59:db:62:b3:64:17:2b:76:9f:d0:53:a5:22:c8:5c:02:6e
Fingerprint (sha256): 4c:4e:ff:62:29:78:ae:1f:e9:f7:ff:d8:79:83:26:52:bb:36:52:0f:b1:1e:4a:bc:ae:73:9d:ea:f0:7a:59:1b
Issuing Certificate URL: http://gn.symcb.com/gn.crt
Revocation information
OCSP Server: http://gn.symcd.comCRL Distribution Point: http://gn.symcb.com/gn.crl
Check the revocation status for certificate mail.ojc.com.br
21
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mail.ojc.com.br
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
autodiscover.radioexecutiva.com.br
autodiscover.opopular.com.br
autodiscover.cbngoiania.com.br
autodiscover.ludovica.com.br
autodiscover.fundacaojaimecamara.com.br
autodiscover.institutojaimecamara.com.br
autodiscover.jornalopopular.com.br
autodiscover.cbntocantins.com.br
autodiscover.radioaraguaia.com.br
autodiscover.tvanhanguera.com.br
autodiscover.jdaqui.com.br
autodiscover.jornaldotocantins.com.br
autodiscover.gjccorp.com.br
autodiscover.radiodaqui.com.br
pool01.ojc.com.br
outlook.ojc.com.br
exchcas2.ojc.com.br
exchcas1.ojc.com.br
autodiscover.ojc.com.br
lync01.ojc.com.br
mail.ojc.com.br
autodiscover.opopular.com.br
autodiscover.cbngoiania.com.br
autodiscover.ludovica.com.br
autodiscover.fundacaojaimecamara.com.br
autodiscover.institutojaimecamara.com.br
autodiscover.jornalopopular.com.br
autodiscover.cbntocantins.com.br
autodiscover.radioaraguaia.com.br
autodiscover.tvanhanguera.com.br
autodiscover.jdaqui.com.br
autodiscover.jornaldotocantins.com.br
autodiscover.gjccorp.com.br
autodiscover.radiodaqui.com.br
pool01.ojc.com.br
outlook.ojc.com.br
exchcas2.ojc.com.br
exchcas1.ojc.com.br
autodiscover.ojc.com.br
lync01.ojc.com.br
mail.ojc.com.br
Other certificates including the domain name ojc.com.br
(limited to 100 certificates)
popstore.opopular.com.br
mail.ojc.com.br
*.ojc.com.br
*.ojc.com.br
*.ojc.com.br
mail.ojc.com.br
*.ojc.com.br
acesso.ojc.com.br
*.ojc.com.br
srv-crm.ojc.com.br
fb.opopular.com.br
*.ojc.com.br
srv-adfs.ojc.com.br
*.ojc.com.br
lgpdtvanhanguera.nuvemx.com.br
mail.ojc.com.br
*.ojc.com.br
*.ojc.com.br
sip.ojc.com.br
sip.ojc.com.br
*.ojc.com.br
sip.ojc.com.br
*.ojc.com.br
cdn.ojc.com.br
crm.ojc.com.br
sts.ojc.com.br
*.ojc.com.br
mail.ojc.com.br
store.jornaldotocantins.com.br
*.ojc.com.br
mail.ojc.com.br
*.ojc.com.br
*.ojc.com.br
*.ojc.com.br
mail.ojc.com.br
*.ojc.com.br
acesso.ojc.com.br
*.ojc.com.br
srv-crm.ojc.com.br
fb.opopular.com.br
*.ojc.com.br
srv-adfs.ojc.com.br
*.ojc.com.br
lgpdtvanhanguera.nuvemx.com.br
mail.ojc.com.br
*.ojc.com.br
*.ojc.com.br
sip.ojc.com.br
sip.ojc.com.br
*.ojc.com.br
sip.ojc.com.br
*.ojc.com.br
cdn.ojc.com.br
crm.ojc.com.br
sts.ojc.com.br
*.ojc.com.br
mail.ojc.com.br
store.jornaldotocantins.com.br
*.ojc.com.br
Certificate
The complete raw certificate details for mail.ojc.com.br in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIXzCCB0egAwIBAgIQIB82J62rZ7Udl1FP87S4tzANBgkqhkiG9w0BAQsFADBE MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTYwMzAxMDAwMDAwWhcNMTcwNDMwMjM1 OTU5WjCBhTELMAkGA1UEBhMCQlIxDjAMBgNVBAgTBUdvaWFzMRAwDgYDVQQHFAdH b2lhbmlhMR0wGwYDVQQKFBRKIENBTUFSQSBlIElSTUFPUyBTQTEbMBkGA1UECxQS RGVwYXJ0YW1lbnRvIGRlIFRJMRgwFgYDVQQDFA9tYWlsLm9qYy5jb20uYnIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw0eRyKvvGDAf/H2abjwlTQcW5 Ude5eDbKx24xb6TQpCFkZliPGs9y9tKHweVXjsV3YFq+Xnx192S8dz3+W7VQEwF9 CxKxZq8B/AW+u1hjP+BfDX1WTuTd2ttofph9NEB94h9FkW5hQAUyc1E73P1TXfeG HQBFVF5bMcRRzu2y3LJe73/nF+ut7hc4Yffl6IxTPAPasPVNk2j44pmNCmSYcL/X tZBL+tER/MeJxsouggJ3S5Kxd4dRVg2RXtdGh7MC+ai3VckyYX+fAJrxrvIBBFAr XI/1xcSWB9wuwbmrei24Y9FK1OyY4EnQFddktNo1luT3XFRl984egaEbuIJXAgMB AAGjggUJMIIFBTCCAnkGA1UdEQSCAnAwggJsgiJhdXRvZGlzY292ZXIucmFkaW9l eGVjdXRpdmEuY29tLmJyghxhdXRvZGlzY292ZXIub3BvcHVsYXIuY29tLmJygh5h dXRvZGlzY292ZXIuY2JuZ29pYW5pYS5jb20uYnKCHGF1dG9kaXNjb3Zlci5sdWRv dmljYS5jb20uYnKCJ2F1dG9kaXNjb3Zlci5mdW5kYWNhb2phaW1lY2FtYXJhLmNv bS5icoIoYXV0b2Rpc2NvdmVyLmluc3RpdHV0b2phaW1lY2FtYXJhLmNvbS5icoIi YXV0b2Rpc2NvdmVyLmpvcm5hbG9wb3B1bGFyLmNvbS5icoIgYXV0b2Rpc2NvdmVy LmNibnRvY2FudGlucy5jb20uYnKCIWF1dG9kaXNjb3Zlci5yYWRpb2FyYWd1YWlh LmNvbS5icoIgYXV0b2Rpc2NvdmVyLnR2YW5oYW5ndWVyYS5jb20uYnKCGmF1dG9k aXNjb3Zlci5qZGFxdWkuY29tLmJygiVhdXRvZGlzY292ZXIuam9ybmFsZG90b2Nh bnRpbnMuY29tLmJyghthdXRvZGlzY292ZXIuZ2pjY29ycC5jb20uYnKCHmF1dG9k aXNjb3Zlci5yYWRpb2RhcXVpLmNvbS5icoIRcG9vbDAxLm9qYy5jb20uYnKCEm91 dGxvb2sub2pjLmNvbS5icoITZXhjaGNhczIub2pjLmNvbS5icoITZXhjaGNhczEu b2pjLmNvbS5icoIXYXV0b2Rpc2NvdmVyLm9qYy5jb20uYnKCEWx5bmMwMS5vamMu Y29tLmJygg9tYWlsLm9qYy5jb20uYnIwCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMC BaAwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL2duLnN5bWNiLmNvbS9nbi5jcmww gZ0GA1UdIASBlTCBkjCBjwYGZ4EMAQICMIGEMD8GCCsGAQUFBwIBFjNodHRwczov L3d3dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL3JlcG9zaXRvcnkvbGVnYWwwQQYI KwYBBQUHAgIwNQwzaHR0cHM6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9y ZXBvc2l0b3J5L2xlZ2FsMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAf BgNVHSMEGDAWgBTSb/eW9IU/cjwwfSPahXibo3xafDBXBggrBgEFBQcBAQRLMEkw HwYIKwYBBQUHMAGGE2h0dHA6Ly9nbi5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0 dHA6Ly9nbi5zeW1jYi5jb20vZ24uY3J0MIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDv AHUA3esdK3oNT6Ygi4GtgWhwfi6OnQHVXIiNPRHEzbbsvswAAAFTM+QgVgAABAMA RjBEAiA3WdiBqk5wNHWiaz3mX0k32xHpo1PwbMv5FDoBVoGpDgIgcRPEFMPXCWRD kqfdWV7VwAHSqwtA86triuhxvl0Hsx0AdgCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb 37jjd80OyA3cEAAAAVMz5CCVAAAEAwBHMEUCIQCJ46Z5icSSF59bY/IMyOEIQX9R 1py4Klqli9laNidm/QIgQSqf82rflHvO9zA+qpMXC0abQcZSYUqbqVnwwaeI/VEw DQYJKoZIhvcNAQELBQADggEBAKhjnCei5FKIeEUU/GK6ZpPVcLtuAf8nGQ5Iagkz yAa7dTXgAN1aB5nq0T/0Kp5BcZrTr52nucyA4zGvmmS1oDzjDic5TAsikaxWd1Fo RPD00i4HPPUh80H9ZK27s2JHFHKgHtBff327HNwc1IFOrm6yHnw3jhgHSSMjD/2V N7XYUqTGt1zn9m44Mu5qJh5rK02AAsCc3279s3QnJl2C9VpGYUYdMMXei1ZmW6Wg /dGc07fP6CeEwgwxSnf3R5GkLZOsk5pq+TYOwqzq0kRZ++RSTR6BWjBv8wtmO7kP WX8VUgD3YmdL/AcBan3Mw/4Gzxu0SKk7EMlvOCOdhOezz7Y= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNHkcir7xgwH/x9mm48J U0HFuVHXuXg2ysduMW+k0KQhZGZYjxrPcvbSh8HlV47Fd2Bavl58dfdkvHc9/lu1 UBMBfQsSsWavAfwFvrtYYz/gXw19Vk7k3drbaH6YfTRAfeIfRZFuYUAFMnNRO9z9 U133hh0ARVReWzHEUc7tstyyXu9/5xfrre4XOGH35eiMUzwD2rD1TZNo+OKZjQpk mHC/17WQS/rREfzHicbKLoICd0uSsXeHUVYNkV7XRoezAvmot1XJMmF/nwCa8a7y AQRQK1yP9cXElgfcLsG5q3otuGPRStTsmOBJ0BXXZLTaNZbk91xUZffOHoGhG7iC VwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 42697355461496945594905804360524282039 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-01 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-30 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Goias' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Goiania' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'J CAMARA e IRMAOS SA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Departamento de TI' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'mail.ojc.com.br' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22321443457789869137496098026896223162219432929027887395073744328068540894907156753357332380404987854081935704012770857550394694351575405005664538899009142769302127786934216016348064650492539062734598446365152719439770546176754609180222363256473003778626609417481072505760118763522970564495795113614632799347512222220394184654735218480791250085942078576243196634214090297463702833214644686516290095664067728507554545430053864377370193175044491865013669154245377320646362571451764264165112850024130914726435313681277681561078570102690553259435230402673857930355911378367575226132381187904859777124547606871038370546263 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (624 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.radioexecutiva.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.opopular.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.cbngoiania.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ludovica.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.fundacaojaimecamara.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.institutojaimecamara.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.jornalopopular.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.cbntocantins.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.radioaraguaia.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.tvanhanguera.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.jdaqui.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.jornaldotocantins.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.gjccorp.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.radiodaqui.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pool01.ojc.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outlook.ojc.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchcas2.ojc.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchcas1.ojc.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ojc.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lync01.ojc.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ojc.com.br' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015333e42056000004030046304402203759d881aa4e703475a26b3de65f4937db11e9a353f06ccbf9143a015681a90e02207113c414c3d709644392a7dd595ed5c001d2ab0b40f3ab6b8ae871be5d07b31d007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015333e42095000004030047304502210089e3a67989c492179f5b63f20cc8e108417f51d69cb82a5aa58bd95a362766fd0220412a9ff36adf947bcef7303eaa93170b469b41c652614a9ba959f0c1a788fd51 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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