san3.premiumtv.co.uk

- PERFORM MEDIA SERVICES LIMITED -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 53:73:d9:49:d2:12:0e:fc:c2:9b:10:08:5f:b8:1c:78 was issued on by GeoTrust Inc..

With 48 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

PERFORM MEDIA SERVICES LIMITED

Organization: PERFORM MEDIA SERVICES LIMITED
Organization unit: Akamai SAN SSL OV
State / Province: Middlesex
Locality: Feltham
Country: GB

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 53:73:d9:49:d2:12:0e:fc:c2:9b:10:08:5f:b8:1c:78
Serial Number (int): 110927444920433062085044247963454938232
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 7a:f1:b6:8a:89:ea:dc:3f:13:e0:c2:6f:28:be:70:d2:38:83:1e:76
Fingerprint (sha256): 4e:7b:d9:e3:52:99:2e:70:e4:30:bd:38:bd:c0:06:e4:d9:be:ce:31:ae:04:e7:b7:81:eb:74:d1:a1:cf:1f:87

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate san3.premiumtv.co.uk

48

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san3.premiumtv.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure.centrobasketwomenschampionship.livebasketball.tv
secure.madrid-open.tennistv.com
secure.fibaasiacup.livebasketball.tv
secure.bnpparibasmasters.tennistv.com
secure.ligastavokretail.performgroup.com
secure.es.rogerscup.tennistv.com
secure.stanleybetretail.performgroup.com
secure.es.monte-carlorolexmasters.tennistv.com
secure.cincytennis.tennistv.com
secure.es.cincytennis.tennistv.com
secure.es.bnpparibasmasters.tennistv.com
secure.es.internazionalibnlditalia.tennistv.com
secure.betcart.performgroup.com
secure.olympicwomensqualifiers.livebasketball.tv
secure.shanghairolexmasters.tennistv.com
secure.bilyoner.performgroup.com
secure.mobile.bilyoner.performgroup.com
secure.tennistv.com
secure.wtatennis.tennistv.com
secure.southamericanchampionship.livebasketball.tv
secure.es.bnpparibasopen.tennistv.com
secure.bnpparibasopen.tennistv.com
secure.en.jsportslive.jp
secure.stsretail.performgroup.com
secure.es.shanghairolexmasters.tennistv.com
secure.olybetretail.performgroup.com
secure.rogerscup.tennistv.com
secure.fonbetretail.performgroup.com
secure.centrobasketchampionship.livebasketball.tv
secure.olympicqualifiers.livebasketball.tv
secure.es.tennistv.com
secure.southamericanwomenschampionship.livebasketball.tv
secure.es.wtatennis.tennistv.com
secure.caliente.performgroup.com
secure.internazionalibnlditalia.tennistv.com
secure.es.madrid-open.tennistv.com
secure.ekasaretail.performgroup.com
secure.retaretail.performgroup.com
secure.monte-carlorolexmasters.tennistv.com
secure.es.sonyericssonopen.tennistv.com
secure.mobile.caliente.performgroup.com
secure.mobile.racingpostcoral.performgroup.com
secure.sonyericssonopen.tennistv.com
secure.mobile.racingpostpaddypower.performgroup.com
secure.es.atpworldtour.tennistv.com
secure.mobile.betcart.performgroup.com
secure.betologicretail.performgroup.com
san3.premiumtv.co.uk

Other certificates including the domain name premiumtv.co.uk

(limited to 100 certificates)
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san4.premiumtv.co.uk
san12.performgroup.com
san7.premiumtv.co.uk
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san12.performgroup.com
san9.performgroup.com
san3.premiumtv.co.uk
san11.performgroup.com
san12.performgroup.com
san5.premiumtv.co.uk
san7.premiumtv.co.uk
san8.premiumtv.co.uk
san4.premiumtv.co.uk
san9.performgroup.com
san10.performgroup.com
san3.premiumtv.co.uk
san11.performgroup.com
san5.premiumtv.co.uk
san11.performgroup.com
san3.premiumtv.co.uk
san5.premiumtv.co.uk
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san7.premiumtv.co.uk
san7.premiumtv.co.uk
san5.premiumtv.co.uk
san5.premiumtv.co.uk
san7.premiumtv.co.uk
san12.performgroup.com
san7.premiumtv.co.uk
san12.performgroup.com
san3.premiumtv.co.uk
san11.performgroup.com
san5.premiumtv.co.uk
san10.performgroup.com
san4.premiumtv.co.uk
san3.premiumtv.co.uk
san3.premiumtv.co.uk
san5.premiumtv.co.uk
san11.performgroup.com
san7.premiumtv.co.uk
san3.premiumtv.co.uk
san10.performgroup.com
san10.performgroup.com
san3.premiumtv.co.uk
san4.premiumtv.co.uk
san8.premiumtv.co.uk
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san4.premiumtv.co.uk
san9.performgroup.com
san5.premiumtv.co.uk
san12.performgroup.com
san10.performgroup.com
san5.premiumtv.co.uk
san7.premiumtv.co.uk
level3-01.performgroup.com
san4.premiumtv.co.uk
san3.premiumtv.co.uk
san12.performgroup.com
san5.premiumtv.co.uk
san3.premiumtv.co.uk
san10.performgroup.com
san7.premiumtv.co.uk
san9.performgroup.com
*.premiumtv.co.uk
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san5.premiumtv.co.uk
san5.premiumtv.co.uk
san10.performgroup.com
san3.premiumtv.co.uk
san7.premiumtv.co.uk
san10.performgroup.com
san3.premiumtv.co.uk
san10.performgroup.com
san8.premiumtv.co.uk
san8.premiumtv.co.uk
san4.premiumtv.co.uk
san8.premiumtv.co.uk
san4.premiumtv.co.uk
san9.performgroup.com
san3.premiumtv.co.uk
san12.performgroup.com
san4.premiumtv.co.uk
*.premiumtv.co.uk
san4.premiumtv.co.uk
san4.premiumtv.co.uk
san7.premiumtv.co.uk
san7.premiumtv.co.uk
san8.premiumtv.co.uk
san4.premiumtv.co.uk
san4.premiumtv.co.uk
san5.premiumtv.co.uk
san4.premiumtv.co.uk
san9.performgroup.com
san3.premiumtv.co.uk

Certificate

The complete raw certificate details for san3.premiumtv.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7aPpKrEYd4PasouGjMyb
KY6vHVCt0WyQD/BVc1TukVf9eUBQNYTxLSH1cDDOf1tF/DCSqaXuepNKjpYlKUA1
DJv0XuMOaHU3BxA5VNouqyjgWV4x1xb5nyCphgjM82ass+LaW2kS2cS4UnsC/oFP
qv70n+mgeaX8aT3+/lZq1hZBOqVEgQrfaQ4LlPsRdpKtOyA7kfM1fJOipNRBM+VW
YeTqKTbmdQqi+LPhW59rHF+qCm/zPXI+8tD0KwrIRydO7xrON0J6XLJArwP+jaxN
HlD3XspmF5MZlUQvxI+GZXvszcwTMgbC3EIA9nItPlWB+aiJl4laS1jKzigLoTK5
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 110927444920433062085044247963454938232
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Middlesex'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Feltham'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'PERFORM MEDIA SERVICES LIMITED'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Akamai SAN SSL OV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'san3.premiumtv.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29999305708700002388209317085481212223253713404467152545077448704255680590092165104985936930760111023310853605616656752522420477930756368090488421186448995793953738441125142837928555887323630090154298797406282369112781853125586499611430378814628374082117787663997247865653936387212989732549965869716554970760938715471412143983751414918765449006520229448890970825501084482229983270590574826432196807308756993040465514350409589977484379811852082225911193129230274567454159033378548889346744286754324169327066422155326065017344116314490718999807399283012428244501486246327791940227310016172210770308136297808167341046233
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1895 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.centrobasketwomenschampionship.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.madrid-open.tennistv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fibaasiacup.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.bnpparibasmasters.tennistv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.ligastavokretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.es.rogerscup.tennistv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.stanleybetretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.es.monte-carlorolexmasters.tennistv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.cincytennis.tennistv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.es.cincytennis.tennistv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.es.bnpparibasmasters.tennistv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.es.internazionalibnlditalia.tennistv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.betcart.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.olympicwomensqualifiers.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.shanghairolexmasters.tennistv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.bilyoner.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.bilyoner.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.tennistv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.wtatennis.tennistv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.southamericanchampionship.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.es.bnpparibasopen.tennistv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.bnpparibasopen.tennistv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.en.jsportslive.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.stsretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.es.shanghairolexmasters.tennistv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.olybetretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.rogerscup.tennistv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.fonbetretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.centrobasketchampionship.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.olympicqualifiers.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.es.tennistv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.southamericanwomenschampionship.livebasketball.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.es.wtatennis.tennistv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.caliente.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.internazionalibnlditalia.tennistv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.es.madrid-open.tennistv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.ekasaretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.retaretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.monte-carlorolexmasters.tennistv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.es.sonyericssonopen.tennistv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.caliente.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.racingpostcoral.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.sonyericssonopen.tennistv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.racingpostpaddypower.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.es.atpworldtour.tennistv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mobile.betcart.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.betologicretail.performgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san3.premiumtv.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003685aa08c47b650fe75af1c9be64f783ba27852292a9a27054acc25c25c11555842128ff449280907d789126c148953b4bc847d09cc9b155ed5e17e1af63cd6db3a90ad23eafe34939be8b8b723763ab5e043f6c9c6fb1b8b10e4feee1632e4b33ec197191fa0df40cc324a13615417bee7a748088fbba4641a0ba3a22994e2d81fc6971057d41a511b52a83d2b63427625cbcbf6f426d8a0cd34097b403928c526f02275461bfe07853c864459eb319251939e9cb4d64f218fa0bc1eb79cf9f437bcd39612c71e7e6b089d1a1c3789499172f4a878d5126cc8060d0b21bc792e2f66fa6b3f56bdffef651e0706bec18b0826763926be1901f7e619e3269fdb5