www.whatgoesaroundnyc.com

Issued by GeoTrust DV SSL CA - G3

About this certificate

This digital certificate with serial number 08:40:9e:dc:ec:d5:9e:8a:f7:b4:28:c1:48:0a:bd:ef was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=www.whatgoesaroundnyc.com

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:40:9e:dc:ec:d5:9e:8a:f7:b4:28:c1:48:0a:bd:ef
Serial Number (int): 10969353089435398268356926335586319855
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: ad:65:22:85:90:d0:3b:e3:a1:49:8b:37:f9:f1:0b:1d:5f:17:a0:77

Fingerprint (sha1): 93:22:c9:25:a8:f5:1e:40:0c:be:d6:60:d9:c5:80:34:eb:b9:dd:48
Fingerprint (sha256): 54:48:07:0f:dd:12:5a:97:df:11:a3:86:b0:a5:57:c6:ac:06:8b:a1:26:f1:2b:82:3d:8d:54:5e:eb:17:95:96

Issuing Certificate URL: http://gt.symcb.com/gt.crt

Revocation information

OCSP Server: http://gt.symcd.com
CRL Distribution Point: http://gt.symcb.com/gt.crl

Check the revocation status for certificate www.whatgoesaroundnyc.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.whatgoesaroundnyc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.whatgoesaroundnyc.com
whatgoesaroundnyc.com

Other certificates including the domain name whatgoesaroundnyc.com

(limited to 100 certificates)
status.pipeimob.com.br
status.markiiieb.com
san-6-s10.tlsprovisioning.exacttarget.com
status.ngxnetworks.com
iq.syncd.tech
status.quarklink.io
status.anywhere.asolvi.app
san-6-s10.tlsprovisioning.exacttarget.com
status.mapworks.io
www.whatgoesaroundnyc.com
status.pipeimob.com.br
status.lenderdock.com
iq.syncd.tech
kjpiug.whatgoesaroundnyc.com
san-6-s10.tlsprovisioning.exacttarget.com
status.whatgoesaroundnyc.com
host.connect.whatgoesaroundnyc.com
status.bozic.io
status.buyerlink.com
status.zeasn.io
status.dealerexpert.ca
status.zeasn.io
san-6-s10.tlsprovisioning.exacttarget.com
status.orangecityfl.gov
san-6-s10.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
www.whatgoesaroundnyc.com
shw.rmt.status.descartes.com
status.anywhere.asolvi.app
status.whatgoesaroundnyc.com
status.anywhere.asolvi.app
san-6-s10.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
www.whatgoesaroundnyc.com
status.mapworks.io
status.lenderdock.com
status.facm.cl
status.ngxnetworks.com
status.apptrana.com
www.whatgoesaroundnyc.com
shw.rmt.status.descartes.com
status.apptrana.com
www.whatgoesaroundnyc.com
status.canadianblackbook.com
status.zeasn.io
shw.rmt.status.descartes.com
san-6-s10.tlsprovisioning.exacttarget.com
status.anywhere.asolvi.app
san-6-s10.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
status.canadianblackbook.com
status.canadianblackbook.com
status.orangecityfl.gov
status.lenderdock.com
san-6-s10.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
www.whatgoesaroundnyc.com
status.buyerlink.com
status.orangecityfl.gov
status.anywhere.asolvi.app
san-6-s10.tlsprovisioning.exacttarget.com
shw.rmt.status.descartes.com
iq.syncd.tech
status.buyerlink.com
status.bozic.io
san-6-s10.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
shw.rmt.status.descartes.com
status.ngxnetworks.com
status.lenderdock.com
san-6-s10.tlsprovisioning.exacttarget.com
status.anywhere.asolvi.app
status.apptrana.com
san-6-s10.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
www.whatgoesaroundnyc.com
iq.syncd.tech
status.whatgoesaroundnyc.com
kjpiug.whatgoesaroundnyc.com
status.anywhere.asolvi.app
status.markiiieb.com
www.whatgoesaroundnyc.com
status.anywhere.asolvi.app
iq.syncd.tech
san-6-s10.tlsprovisioning.exacttarget.com
status.anywhere.asolvi.app
whatgoesaroundnyc.com
san-6-s10.tlsprovisioning.exacttarget.com
status.ngxnetworks.com
san-6-s10.tlsprovisioning.exacttarget.com
www.whatgoesaroundnyc.com
shw.rmt.status.descartes.com
shw.rmt.status.descartes.com
iq.syncd.tech
san-6-s10.tlsprovisioning.exacttarget.com
status.mapworks.io
www.whatgoesaroundnyc.com

Certificate

The complete raw certificate details for www.whatgoesaroundnyc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWjCCBUKgAwIBAgIQCECe3OzVnor3tCjBSAq97zANBgkqhkiG9w0BAQsFADBm
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UECxMU
RG9tYWluIFZhbGlkYXRlZCBTU0wxIDAeBgNVBAMTF0dlb1RydXN0IERWIFNTTCBD
QSAtIEczMB4XDTE3MDkxMjAwMDAwMFoXDTE4MTIxMjIzNTk1OVowJDEiMCAGA1UE
AwwZd3d3LndoYXRnb2VzYXJvdW5kbnljLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALb60nqw68gOr9AdGUUz3FpwMmD9K9HyqVdnruVlbSvvG447
DEba54W6AzZPhnhc/7dYj1oonnAFGLjom5dsstgshCBW3Fh5VCptb3FdVuMOV3po
Y+k2v4oPfJPUeZmXpptPuroKcEVbBabHsYt2/NhADFJYaWAL+qnHcDOGGbU09S8j
wrfc89RrSfQUot10Y9qp8UKVil5DuiNNU1MkOvRcbLKng1Ifvcy6STBx15PHFYmZ
mzID4lXJtoWtEfwYUeQpx2VeUlG7lHQmCbBd1RmJCOWhAyBDKiVaHc3KpeeIA1pN
czfx/v/WQlljEgXJrfS71AdZHj2fl07HNKSzVXkCAwEAAaOCA0QwggNAMDsGA1Ud
EQQ0MDKCGXd3dy53aGF0Z29lc2Fyb3VuZG55Yy5jb22CFXdoYXRnb2VzYXJvdW5k
bnljLmNvbTAJBgNVHRMEAjAAMCsGA1UdHwQkMCIwIKAeoByGGmh0dHA6Ly9ndC5z
eW1jYi5jb20vZ3QuY3JsMIGdBgNVHSAEgZUwgZIwgY8GBmeBDAECATCBhDA/Bggr
BgEFBQcCARYzaHR0cHM6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9yZXBv
c2l0b3J5L2xlZ2FsMEEGCCsGAQUFBwICMDUMM2h0dHBzOi8vd3d3Lmdlb3RydXN0
LmNvbS9yZXNvdXJjZXMvcmVwb3NpdG9yeS9sZWdhbDAfBgNVHSMEGDAWgBStZSKF
kNA746FJizf58QsdXxegdzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0
cDovL2d0LnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL2d0LnN5bWNiLmNv
bS9ndC5jcnQwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB1AN3rHSt6DU+mIIuB
rYFocH4ujp0B1VyIjT0RxM227L7MAAABXneWcbcAAAQDAEYwRAIgL3AZpZaSK2fV
yUtFfUABkYH+NPteN6U7E+izNkR1J1MCIBwxC2sSN/kcQYpdAWctFXIcgCEmJTVn
Xb5DesQcn89lAHcApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFe
d5Zx6AAABAMASDBGAiEAk9mJ8RaxfPAe8abgWvOizC7Aoa+CNCMt5V5rYsfdGIYC
IQCrsrLiWH9O/RCpxWMIBsupTnR7hOH92/FFcSSbZyoo5AB2AO5Lvbd1zmC64UJp
H6vhnmajD35fsHLYgwDEe4l6qP3LAAABXneWc7EAAAQDAEcwRQIgFOXJ7wMLH6yv
WfOVPP8IiTrBr0EQPn8uxX5VOh9zjmYCIQCDPgg1j8+WyL8mvNwmRVaYGkILJ22w
cHAXW3Hb4z8u6TANBgkqhkiG9w0BAQsFAAOCAQEAMPi7b70XCtlztL8VYu/moHvx
5afdjHinGhzFr2eMGl2HrhA2aWiEt899UcZsjIjBrWyuRpiF102Hj2cmqd4IxlJl
G9ur21+gMRadbN6yq5nL7XOQg8JTD6gw2JSSeAC7kbpwAABd/L5kzRZwpgvaw3YD
+3g2h9qP16MQqGv5Y57GbW7xMcfQFKmYUOwt+bMmPCHVWy6gUnonzS4/NMCZa9il
JtG85IT3nUb8zqpVzq8YYXwGku8yGM4a4SFWD9YVTc72Fm0V6PCNqJjv5hYTHzuE
jmg1ntmRfV0jO3CbJpGQ6ofiJ05Ekc8j2zLgVB/fPkyIwSSwiNG8FjakIADpSA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvrSerDryA6v0B0ZRTPc
WnAyYP0r0fKpV2eu5WVtK+8bjjsMRtrnhboDNk+GeFz/t1iPWiiecAUYuOibl2yy
2CyEIFbcWHlUKm1vcV1W4w5Xemhj6Ta/ig98k9R5mZemm0+6ugpwRVsFpsexi3b8
2EAMUlhpYAv6qcdwM4YZtTT1LyPCt9zz1GtJ9BSi3XRj2qnxQpWKXkO6I01TUyQ6
9FxssqeDUh+9zLpJMHHXk8cViZmbMgPiVcm2ha0R/BhR5CnHZV5SUbuUdCYJsF3V
GYkI5aEDIEMqJVodzcql54gDWk1zN/H+/9ZCWWMSBcmt9LvUB1kePZ+XTsc0pLNV
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10969353089435398268356926335586319855
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.whatgoesaroundnyc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23099056532861759699884528794992760504604367163138882027579554254057907526969743667451287826497734277177046347352068520159163114404596450558902297469025586434326361892027327729906669202715472600653277529682803852519206799869435053043233161063976243374194472385593124013580452428385796182560363925321916325266706806658014272611665325669221781713204973307785762980536726131909557605566891082521623286003962076274628192051002261755595081362196738861943967009171650694577675889529907105760140140179293091234041112395110074541585830005464426711491996070781806678530659604004968509591494274876949819808050728770524023051641
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whatgoesaroundnyc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatgoesaroundnyc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcb.com/gt.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ad65228590d03be3a1498b37f9f10b1d5f17a077
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcb.com/gt.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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