www.cityfirstbank.com

- City First Bank of DC, NA -

Issued by GeoTrust EV SSL CA - G4

About this certificate

This digital certificate with serial number 24:8e:bd:4d:54:c1:24:ce:e1:fa:32:05:71:b6:33:e0 was issued on by GeoTrust Inc..

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

City First Bank of DC, NA

Company registration number: 2697963
Organization: City First Bank of DC, NA
Organization unit: IT
State / Province: District Of Columbia
Locality: Washington
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 24:8e:bd:4d:54:c1:24:ce:e1:fa:32:05:71:b6:33:e0
Serial Number (int): 48593353504382758041537159478889559008
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: de:cf:5c:50:b7:ae:02:1f:15:17:aa:16:e8:0d:b5:28:9d:6a:5a:f3

Fingerprint (sha1): 8a:28:cb:c8:0e:d2:fa:53:12:a2:b8:ee:ed:99:f5:a6:fe:80:8c:4d
Fingerprint (sha256): 4c:b4:9d:49:fd:cd:17:92:8d:1a:a7:01:e3:80:2a:dd:65:93:38:85:c2:ca:aa:f3:40:b9:4b:8f:56:cf:0d:16

Issuing Certificate URL: http://gm.symcb.com/gm.crt

Revocation information

OCSP Server: http://gm.symcd.com
CRL Distribution Point: http://gm.symcb.com/gm.crl

Check the revocation status for certificate www.cityfirstbank.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cityfirstbank.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev.cityfirstbank.com
dev.cityfirstfoundation.org
cityfirstfoundation.org
www.cityfirstfoundation.org
www.cityfirstbank.com
cityfirstbank.com

Other certificates including the domain name cityfirstbank.com

(limited to 100 certificates)
helpdesk.ejplastics.com
ssc-sd.oshco.com
servicedesk.primeenergy.ph
cfbhelpdesk.cityfirstbank.com
ithelp.newhopechurch.tv
servicedesk.towermsa.com
atendimento.escrimig.com.br
sf.cityfirstbank.com
hd.gsp.bl.it
helpdesk.americanassets.com
helpdesk.worldvision.org.uk
helpdesk.maruservices.com
hd.gsp.bl.it
olb.cityfirstbank.com
hd.gsp.bl.it
desk.kavasa.in
hd.gsp.bl.it
hd.gsp.bl.it
hd.gsp.bl.it
helpdesk.riversidecc.org
helpdesk.charlesignatius.co.in
helpdesk.endemolshine.com.au
hd.gsp.bl.it
mail.cityfirstbank.com
ssc-sd.oshco.com
support.axelliant.com
ssc-sd.oshco.com
olb.cityfirstbank.com
servicedesk.gourmetegypt.com
hd.gsp.bl.it
hd.thehackettgroup.com
hd.gsp.bl.it
servicedesk.towermsa.com
hd.gsp.bl.it
servicedesk.ibsagroup.com
helpdesk.endemolshine.com.au
hd.gsp.bl.it
cfbhelpdesk.cityfirstbank.com
helpdesk.maruservices.com
hd.gsp.bl.it
desktop.cityfirstbank.com
hd.gsp.bl.it
olb.cityfirstbank.com
helpdesk.charlesignatius.co.in
hd.gsp.bl.it
cfbhelpdesk.cityfirstbank.com
support.axelliant.com
helpdesk.americanassets.com
helpdesk.riversidecc.org
mesadeayuda.pffsa.com
ssc-sd.oshco.com
support.cortacgroup.com
hd.gsp.bl.it
atendimento.escrimig.com.br
atendimento.escrimig.com.br
helpdesk.worldvision.org.uk
atendimento.escrimig.com.br
esupport.infimedia.co.id
www.cityfirstbank.com
helpdesk.ejplastics.com
sos.olanet.mx
owa.cityfirstbank.com
sos.olanet.mx
atendimento.escrimig.com.br
desk.kavasa.in
servicedesk.zip.co
hd.gsp.bl.it
hd.gsp.bl.it
atendimento.escrimig.com.br
esupport.infimedia.co.id
hd.gsp.bl.it
owa.cityfirstbank.com
cfbhelpdesk.cityfirstbank.com
hd.thehackettgroup.com
servicedesk.ibsagroup.com
helpdesk.ejplastics.com
cityfirstbank.com
help.truno.com
hd.gsp.bl.it
helpdesk.americanassets.com
cloud.cityfirstbank.com
hd.gsp.bl.it
www.cityfirstbank.com
mesadeayuda.pffsa.com
ssc-sd.oshco.com
servicedesk.zip.co
servicedesk.etlsystems.com
hd.gsp.bl.it
cityfirstbank.com
servicedesk.gourmetegypt.com
esupport.infimedia.co.id
cfbhelpdesk.cityfirstbank.com
ssc-sd.oshco.com
atendimento.escrimig.com.br
atendimento.escrimig.com.br
helpdesk.maruservices.com
servicedesk.etlsystems.com
atendimento.escrimig.com.br
hd.gsp.bl.it
hd.gsp.bl.it

Certificate

The complete raw certificate details for www.cityfirstbank.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoX3BnN3FMI9RAEEw1taF
DBbh2tosGcd8iEiF7xhR6UfNkEYel7dP5k5lnf/NiYCvwk15UplAjCf/dWzIWqE7
XRpC3laAHw9zlk3YctcKZ77cCnwSHuIJ/d7K2aRRI9tC2WV0SR5SyvZWi2Fj6lfY
Wfu59KWp5DA9g2tgLPpjWm42XpxKeZMWXoRTaeZDawIMkqfyZYXNnS5+bhualuKr
/4AW75mn7q5cwoiyMNDBCHdcsyQrAKYxVKw/xgE8zg+gRe1sqzp+I0E8EY6ETBhg
C6BWaJDYoXU9prjpTIaND/0LgbiG/6s9U3bMxkRoLyBHoVIz/FB1HY7LPChlY3+0
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 48593353504382758041537159478889559008
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust EV SSL CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2697963'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'District Of Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'City First Bank of DC, NA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'www.cityfirstbank.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20386379842232932635881962297070125770688999860321471836365531984055577521859761570293182872452961467414500060984199813172545100908576750529905407739176937355880790297097373438907186130487304294616184065369271347034207061660334815085178711349644368059306910106050124760219283272405500553888711159845882927665254283917240547085452678737630142510885882510277793284882393860364708734716382634548713251558235832588874679530559593799810583276550244675028201661708039473172647802824230572789783048317814337752041261803087080636606171845841243565735754565131295097548157383308692870946035832194623231396299240115348478866619
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cityfirstbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cityfirstfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityfirstfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityfirstfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cityfirstbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityfirstbank.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (152 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName decf5c50b7ae021f1517aa16e80db5289d6a5af3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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