gate.idgesg.net

- IDG Communications, Inc. -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 0d:e4:2a:e2:3e:ae:b7:85:3b:5f:45:46:a3:d2:6d:f8 was issued on by GeoTrust Inc..

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Compliant certificates must not encode explicitTest as an IA5String (RFC 6818: 3)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

IDG Communications, Inc.

Organization: IDG Communications, Inc.
State / Province: Massachusetts
Locality: Framingham
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:e4:2a:e2:3e:ae:b7:85:3b:5f:45:46:a3:d2:6d:f8
Serial Number (int): 18464677415117218993250427898696986104
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): fd:b8:92:4a:fd:85:cb:cd:fb:54:8d:b0:83:67:ad:ce:4a:e2:f0:5a
Fingerprint (sha256): 54:98:27:e5:6b:f0:c4:3e:4e:c5:fb:db:a5:d9:2a:b4:f4:04:c9:ce:2b:44:7d:ae:a1:77:6a:80:7f:97:62:3b

Issuing Certificate URL: http://gn1.symcb.com/gn1.crt

Revocation information

OCSP Server: http://gn2.symcb.com
CRL Distribution Point: http://gn1.symcb.com/gn1.crl

Check the revocation status for certificate gate.idgesg.net

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gate.idgesg.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure.idgesg.citeworld.com
secure.idgesg.macworld.com
secure.idgesg.cio.com
secure.idgesg.techhive.com
secure.idgesg.idgns.com
www.idgharmony.com
secure.idgesg.networkworld.com
secure.idgesg.pcworld.com
secure.idgesg.javaworld.com
secure.idgesg.greenbot.com
sam.idgesg.net
secure.idgesg.cfoworld.com
secure.idgesg.infoworld.com
secure.idgesg.itnews.com
secure.idgesg.itworld.com
secure.idgesg.computerworld.com
cms-gate.idgesg.net
cms-images.idgesg.net
secure.idgesg.csoonline.com
cms-images-pcw.idgesg.net
cms-images-mw.idgesg.net
gate.idgesg.net

Other certificates including the domain name idgesg.net

(limited to 100 certificates)
dns-vetting1e.map.fastly.net
*.cfoworld.com
idgesg.net
prospective.shared.global.fastly.net
dns-vetting1e.map.fastly.net
gate.idgesg.net
*.idgesg.net
dns-vetting1e.map.fastly.net
prospective.shared.global.fastly.net
idg.map.fastly.net
prospective.shared.global.fastly.net
gate.idgesg.net
prospective.shared.global.fastly.net
dns-vetting1e.map.fastly.net
idg.map.fastly.net
idg.map.fastly.net
idg.map.fastly.net
gate.idgesg.net
idg.map.fastly.net
dns-vetting1e.map.fastly.net
dns-vetting1e.map.fastly.net
idg.map.fastly.net
dns-vetting1e.map.fastly.net
idg.map.fastly.net
prospective.shared.global.fastly.net
idg.map.fastly.net
*.idg.com
idg.map.fastly.net
gate.idgesg.net
*.idgesg.net
dns-vetting1e.map.fastly.net
idg.map.fastly.net
idg.map.fastly.net
dns-vetting1e.map.fastly.net
idg.map.fastly.net
dns-vetting1e.map.fastly.net
idg.map.fastly.net
idg.map.fastly.net
dns-vetting1e.map.fastly.net
dns-vetting1e.map.fastly.net
idg.map.fastly.net
prospective.shared.global.fastly.net
gate.idgesg.net
dns-vetting1e.map.fastly.net
dns-vetting1e.map.fastly.net
dns-vetting1e.map.fastly.net
dns-vetting1e.map.fastly.net
dns-vetting1e.map.fastly.net
idg.map.fastly.net
dns-vetting1e.map.fastly.net
gate.idgesg.net
idg.map.fastly.net
*.cfoworld.com
idg.map.fastly.net
idg.map.fastly.net
idg.map.fastly.net
dns-vetting1e.map.fastly.net
dns-vetting1e.map.fastly.net
dns-vetting1e.map.fastly.net
dns-vetting1e.map.fastly.net
bamboo.idgesg.net
prospective.shared.global.fastly.net
idg.map.fastly.net
dns-vetting1e.map.fastly.net
prospective.shared.global.fastly.net
idg.map.fastly.net
idg.map.fastly.net
idg.map.fastly.net
dns-vetting1e.map.fastly.net
idg.map.fastly.net
dns-vetting1e.map.fastly.net
idgesg.net
dns-vetting1e.map.fastly.net
dns-vetting1e.map.fastly.net
idg.map.fastly.net
dns-vetting1e.map.fastly.net
*.idgesg.net
dns-vetting1e.map.fastly.net
gate.idgesg.net
idg.map.fastly.net
prospective.shared.global.fastly.net
idg.map.fastly.net
idg.map.fastly.net
idg.map.fastly.net
dns-vetting1e.map.fastly.net
dns-vetting1e.map.fastly.net
idg.map.fastly.net
dns-vetting1e.map.fastly.net
dns-vetting1e.map.fastly.net
idg.map.fastly.net
dns-vetting1e.map.fastly.net
dns-vetting1e.map.fastly.net
idg.map.fastly.net
idg.map.fastly.net
dns-vetting1e.map.fastly.net
idg.map.fastly.net
dns-vetting1e.map.fastly.net
dns-vetting1e.map.fastly.net
idgesg.net
bamboo.idgesg.net

Certificate

The complete raw certificate details for gate.idgesg.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG5DCCBcygAwIBAgIQDeQq4j6ut4U7X0VGo9Jt+DANBgkqhkiG9w0BAQsFADBE
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU
R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTQwNTAyMDAwMDAwWhcNMTUwMzAyMjM1
OTU5WjB3MQswCQYDVQQGEwJVUzEWMBQGA1UECAwNTWFzc2FjaHVzZXR0czETMBEG
A1UEBwwKRnJhbWluZ2hhbTEhMB8GA1UECgwYSURHIENvbW11bmljYXRpb25zLCBJ
bmMuMRgwFgYDVQQDDA9nYXRlLmlkZ2VzZy5uZXQwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDsi/pbKTxaqKMYcvRMuNTMkN4E1ad4irVrYkpvNf4S+Uza
6PF92fsiCDSPv0FbCH+N5bP5edHngVxIf6AeyZ5qLyHf2ozLFQ9vR9UUG8orFoNP
/519nKRPuX5//x1kwtwtE2NFiHb+zDxkLu/B2hHvJWbSr/EvX5tPFd9SJ1LO+6iV
A0OOCpqhKY8GvU4XxECFMV0W/PRdfkXdFfXs7hW5WofhwlG4GmwT8CyR/k1VdAFT
9iN/kYwk8oAnkH2QA8fu8IlGKebS1nIk+qae9+4ajqLu1KoWrEyiRcp3AzuQAYrz
7Mdkfy5OYS+2mzt0GBqxG2ovOXqHRNPlpS6/mmJbAgMBAAGjggOdMIIDmTCCAkgG
A1UdEQSCAj8wggI7ghtzZWN1cmUuaWRnZXNnLmNpdGV3b3JsZC5jb22CGnNlY3Vy
ZS5pZGdlc2cubWFjd29ybGQuY29tghVzZWN1cmUuaWRnZXNnLmNpby5jb22CGnNl
Y3VyZS5pZGdlc2cudGVjaGhpdmUuY29tghdzZWN1cmUuaWRnZXNnLmlkZ25zLmNv
bYISd3d3LmlkZ2hhcm1vbnkuY29tgh5zZWN1cmUuaWRnZXNnLm5ldHdvcmt3b3Js
ZC5jb22CGXNlY3VyZS5pZGdlc2cucGN3b3JsZC5jb22CG3NlY3VyZS5pZGdlc2cu
amF2YXdvcmxkLmNvbYIac2VjdXJlLmlkZ2VzZy5ncmVlbmJvdC5jb22CDnNhbS5p
ZGdlc2cubmV0ghpzZWN1cmUuaWRnZXNnLmNmb3dvcmxkLmNvbYIbc2VjdXJlLmlk
Z2VzZy5pbmZvd29ybGQuY29tghhzZWN1cmUuaWRnZXNnLml0bmV3cy5jb22CGXNl
Y3VyZS5pZGdlc2cuaXR3b3JsZC5jb22CH3NlY3VyZS5pZGdlc2cuY29tcHV0ZXJ3
b3JsZC5jb22CE2Ntcy1nYXRlLmlkZ2VzZy5uZXSCFWNtcy1pbWFnZXMuaWRnZXNn
Lm5ldIIbc2VjdXJlLmlkZ2VzZy5jc29vbmxpbmUuY29tghljbXMtaW1hZ2VzLXBj
dy5pZGdlc2cubmV0ghhjbXMtaW1hZ2VzLW13LmlkZ2VzZy5uZXSCD2dhdGUuaWRn
ZXNnLm5ldDAJBgNVHRMEAjAAMA4GA1UdDwEB/wQEAwIFoDAtBgNVHR8EJjAkMCKg
IKAehhxodHRwOi8vZ24xLnN5bWNiLmNvbS9nbjEuY3JsMGUGA1UdIAReMFwwWgYK
YIZIAYb4RQEHNjBMMCMGCCsGAQUFBwIBFhdodHRwczovL2Quc3ltY2IuY29tL2Nw
czAlBggrBgEFBQcCAjAZFhdodHRwczovL2Quc3ltY2IuY29tL3JwYTAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHwYDVR0jBBgwFoAU0m/3lvSFP3I8MH0j
2oV4m6N8WnwwWgYIKwYBBQUHAQEETjBMMCAGCCsGAQUFBzABhhRodHRwOi8vZ24y
LnN5bWNiLmNvbTAoBggrBgEFBQcwAoYcaHR0cDovL2duMS5zeW1jYi5jb20vZ24x
LmNydDANBgkqhkiG9w0BAQsFAAOCAQEAK4mcMfOpahZ1SC54B8+VqTK0MVZknF4I
JMYpmSpjHn+6dRtHjIbzLGWfAiyJxK5YrbzBgTjBGIISl56Q03oAR9WRgfgdnop/
NTaPXkGqdmquWvfUT91AzYvPULoZ+6fPG9YBBoejBou4YQehd4ys1Y77LW9KgyQk
UKzJoYrCXfjzVNeZo8DTTljSUbdQXYDAzS/q+iN3SAJ9vqoIBU2YzFmjWPyWMSaU
N/GsgMFfD8tHd3RX0b0EbgZnqrYbcwsq7G44ra3gWz6u9CF8pHfc4H4TQboIWDYF
e5DwrvELuYOqxYyxzIHz6o4I04/G6PBMI/RH+vGQdhR6A/jw3R5I4Q==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Iv6Wyk8WqijGHL0TLjU
zJDeBNWneIq1a2JKbzX+EvlM2ujxfdn7Igg0j79BWwh/jeWz+XnR54FcSH+gHsme
ai8h39qMyxUPb0fVFBvKKxaDT/+dfZykT7l+f/8dZMLcLRNjRYh2/sw8ZC7vwdoR
7yVm0q/xL1+bTxXfUidSzvuolQNDjgqaoSmPBr1OF8RAhTFdFvz0XX5F3RX17O4V
uVqH4cJRuBpsE/Askf5NVXQBU/Yjf5GMJPKAJ5B9kAPH7vCJRinm0tZyJPqmnvfu
Go6i7tSqFqxMokXKdwM7kAGK8+zHZH8uTmEvtps7dBgasRtqLzl6h0TT5aUuv5pi
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18464677415117218993250427898696986104
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-05-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Framingham'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IDG Communications, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'gate.idgesg.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29861265673487581611920385610767533343964870808188481001526823410579703453823691317773605607575272774481625004291170936733185285601731198595245315123467052824765909194426112186588199074210524844045481975751793962556681506901275198262094370121941895717770598225162681646515501622934643704259886217104770775111950152415171198298242264406512437826262291169029896092997969382552228851386198606239065069639150130048776227384121477272544756046018831157750987176391581440259688289253779512150257282141146555934765476294610228563579606409622953648902645929432262644666829098093953062589379775464157334436246580382849446863451
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (575 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.idgesg.citeworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.idgesg.macworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.idgesg.cio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.idgesg.techhive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.idgesg.idgns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idgharmony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.idgesg.networkworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.idgesg.pcworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.idgesg.javaworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.idgesg.greenbot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sam.idgesg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.idgesg.cfoworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.idgesg.infoworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.idgesg.itnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.idgesg.itworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.idgesg.computerworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms-gate.idgesg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms-images.idgesg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.idgesg.csoonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms-images-pcw.idgesg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms-images-mw.idgesg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gate.idgesg.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn1.symcb.com/gn1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn2.symcb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn1.symcb.com/gn1.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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