aacdn.jp

- All About Inc. -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 6f:74:24:1f:60:5f:0e:c7:82:77:5b:75:88:0c:aa:8a was issued on by GeoTrust Inc..

With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

All About Inc.

Organization: All About Inc.
Organization unit: SYSTEM GROUP
State / Province: Tokyo
Locality: Shibuya-ku
Country: JP

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 6f:74:24:1f:60:5f:0e:c7:82:77:5b:75:88:0c:aa:8a
Serial Number (int): 148147346620359949988708279286137399946
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 45:27:3b:38:af:a5:f3:af:39:98:23:72:60:5c:02:7f:a3:ba:26:b7
Fingerprint (sha256): 56:8f:53:cb:a8:f2:e9:8b:d5:69:e6:9e:44:4b:e2:4a:7f:94:a5:4d:b7:da:6a:f2:95:08:66:f4:25:07:c3:6b

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate aacdn.jp

19

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aacdn.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

patric.allabout.co.jp
img.allabout.co.jp
pts.aacdn.jp
adcontents.primead.jp
aoe.aacdn.jp
img01.allabout.co.jp
img.aacdn.jp
imgcp.allabout.co.jp
ad.primead.jp
focus.allabout.co.jp
imgcp.aacdn.jp
img08.allabout.co.jp
svg.aacdn.jp
s.f.aacdn.jp
f.aacdn.jp
img09.allabout.co.jp
pts.allabout.co.jp
img02.allabout.co.jp
aacdn.jp

Other certificates including the domain name aacdn.jp

(limited to 100 certificates)
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aoe.aacdn.jp
aacdn.jp
ix.aacdn.jp
aacdn.jp
aacdn.jp
ix-stg.aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
ix.aacdn.jp
aacdn.jp
aacdn.jp
ix.aacdn.jp
ix.aacdn.jp
aacdn.jp
ix.aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
ix-stg.aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aoe.aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
ix-stg.aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aoe.aacdn.jp
aacdn.jp
stg.aacdn.jp
ix-stg.aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
stg.aacdn.jp
aoe.aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
ix.aacdn.jp
aoe.aacdn.jp

Certificate

The complete raw certificate details for aacdn.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHOTCCBiGgAwIBAgIQb3QkH2BfDseCd1t1iAyqijANBgkqhkiG9w0BAQsFADBE
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU
R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTYwNjA4MDAwMDAwWhcNMTcwNjA4MjM1
OTU5WjB1MQswCQYDVQQGEwJKUDEOMAwGA1UECAwFVG9reW8xEzARBgNVBAcMClNo
aWJ1eWEta3UxFzAVBgNVBAoMDkFsbCBBYm91dCBJbmMuMRUwEwYDVQQLDAxTWVNU
RU0gR1JPVVAxETAPBgNVBAMMCGFhY2RuLmpwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAu3Cg0G6lYDtkLNvOcK3MRf19zh5SLoWNYf+pTRr8Vwqq8ZPD
f73LzB4p4rA9cbopSnaw5ykhNS5xiwEpS7Ykb8z3elsw39MqIC3x4LO6GX2hxriD
gRtMyHX27NpZxg4COfMni2o8hYaRpQGAwCnZtH/jw55n+HvM1Ck1qSx1SrOCorlI
gAaph8JrWHRmbQInK2XK04kRd/XRCTNUnbsMYa/LDk5nJ/G3u2oSc0gTmQ2nTXup
18Wi42jgTyJeuJcfu3oUfc3sA2VCGk+V0LM0dHMATit7E9hfaF45ZBlgN/apzDD7
BH1SOAJnBjp0F0vLJjWu8gnog1gSQe2Uh4WVMwIDAQABo4ID9DCCA/AwggFiBgNV
HREEggFZMIIBVYIVcGF0cmljLmFsbGFib3V0LmNvLmpwghJpbWcuYWxsYWJvdXQu
Y28uanCCDHB0cy5hYWNkbi5qcIIVYWRjb250ZW50cy5wcmltZWFkLmpwggxhb2Uu
YWFjZG4uanCCFGltZzAxLmFsbGFib3V0LmNvLmpwggxpbWcuYWFjZG4uanCCFGlt
Z2NwLmFsbGFib3V0LmNvLmpwgg1hZC5wcmltZWFkLmpwghRmb2N1cy5hbGxhYm91
dC5jby5qcIIOaW1nY3AuYWFjZG4uanCCFGltZzA4LmFsbGFib3V0LmNvLmpwggxz
dmcuYWFjZG4uanCCDHMuZi5hYWNkbi5qcIIKZi5hYWNkbi5qcIIUaW1nMDkuYWxs
YWJvdXQuY28uanCCEnB0cy5hbGxhYm91dC5jby5qcIIUaW1nMDIuYWxsYWJvdXQu
Y28uanCCCGFhY2RuLmpwMAkGA1UdEwQCMAAwDgYDVR0PAQH/BAQDAgWgMCsGA1Ud
HwQkMCIwIKAeoByGGmh0dHA6Ly9nbi5zeW1jYi5jb20vZ24uY3JsMIGdBgNVHSAE
gZUwgZIwgY8GBmeBDAECAjCBhDA/BggrBgEFBQcCARYzaHR0cHM6Ly93d3cuZ2Vv
dHJ1c3QuY29tL3Jlc291cmNlcy9yZXBvc2l0b3J5L2xlZ2FsMEEGCCsGAQUFBwIC
MDUMM2h0dHBzOi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvcmVwb3NpdG9y
eS9sZWdhbDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHwYDVR0jBBgw
FoAU0m/3lvSFP3I8MH0j2oV4m6N8WnwwVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUF
BzABhhNodHRwOi8vZ24uc3ltY2QuY29tMCYGCCsGAQUFBzAChhpodHRwOi8vZ24u
c3ltY2IuY29tL2duLmNydDCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2AN3rHSt6
DU+mIIuBrYFocH4ujp0B1VyIjT0RxM227L7MAAABVS3vPOkAAAQDAEcwRQIgN23V
8NgIAjrVHP5QGSqYPODocnKUhbfZRZ++L2lG9ZACIQDqTraahbqvu14AU7139pI1
+NkxbzxLicGqwVuFRKTmjQB3AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7I
DdwQAAABVS3vPSYAAAQDAEgwRgIhAIoYzFxYXJuVdzLod2lHouQEKuK1LZWULFKt
XJzTFDoSAiEA3njAY5d8ZuGnHLlutR81jG92lvFTS+VAupx5Pf0p5DAwDQYJKoZI
hvcNAQELBQADggEBADL8CwxljlJ//IEa7PcuYKy17+8q4R57wGhdMoJqAxgq3pUD
uNys+5mXmxzdSJh6xsjodFYvkOrdqssv0ar4QDmUfVqvjsLavYHJxdHTAjszzKuW
euWVp7XJZJdvW52u0xq97udHGLy0z3Dvj6+etqkCqqF/1jFPmmkcZWsZS+zeIz7J
hdy7PEqCeME3qJe5oI/diKDzaWtk+NkHfXiNI+CM6JzZfgmJZoVJI6F+5gcfvPJ7
DcThw0WeM4Jl7UOD7mkXopEZCZtJAmbpzsErdlgx9trWAIsKoiDXhbPhvPIDlmWl
PTM6eIEGsPQpBhJttDMasOzQfck+3TB1+S4vO7c=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3Cg0G6lYDtkLNvOcK3M
Rf19zh5SLoWNYf+pTRr8Vwqq8ZPDf73LzB4p4rA9cbopSnaw5ykhNS5xiwEpS7Yk
b8z3elsw39MqIC3x4LO6GX2hxriDgRtMyHX27NpZxg4COfMni2o8hYaRpQGAwCnZ
tH/jw55n+HvM1Ck1qSx1SrOCorlIgAaph8JrWHRmbQInK2XK04kRd/XRCTNUnbsM
Ya/LDk5nJ/G3u2oSc0gTmQ2nTXup18Wi42jgTyJeuJcfu3oUfc3sA2VCGk+V0LM0
dHMATit7E9hfaF45ZBlgN/apzDD7BH1SOAJnBjp0F0vLJjWu8gnog1gSQe2Uh4WV
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 148147346620359949988708279286137399946
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Shibuya-ku'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'All About Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SYSTEM GROUP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'aacdn.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23662102054387449412574034108192781094102334906717117723263842833083801099701423971093085892425332980506972377243413629353974225735771400935324258271472759388264751234241841656638467421346894025254511554551981039208297350785919656541912609173679000981237091294059727506797057718539640119030658890948720627835752307113352579162995610254155088259596484446461212992691734957270262182213333232235217659198728653250877320331024732378027098730961315088965215486006530941208443719222988200339385427292336346694367731257141190337287991974438648383281592777824079842913219235439262299858619553144773152304874083843484898661683
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (345 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patric.allabout.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.allabout.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pts.aacdn.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adcontents.primead.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aoe.aacdn.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img01.allabout.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.aacdn.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imgcp.allabout.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ad.primead.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'focus.allabout.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imgcp.aacdn.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img08.allabout.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svg.aacdn.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.f.aacdn.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.aacdn.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img09.allabout.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pts.allabout.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img02.allabout.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aacdn.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc000001552def3ce900000403004730450220376dd5f0d808023ad51cfe50192a983ce0e872729485b7d9459fbe2f6946f590022100ea4eb69a85baafbb5e0053bd77f69235f8d9316f3c4b89c1aac15b8544a4e68d007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001552def3d2600000403004830460221008a18cc5c585c9b957732e8776947a2e4042ae2b52d95942c52ad5c9cd3143a12022100de78c063977c66e1a71cb96eb51f358c6f7696f1534be540ba9c793dfd29e430
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0032fc0b0c658e527ffc811aecf72e60acb5efef2ae11e7bc0685d32826a03182ade9503b8dcacfb99979b1cdd48987ac6c8e874562f90eaddaacb2fd1aaf84039947d5aaf8ec2dabd81c9c5d1d3023b33ccab967ae595a7b5c964976f5b9daed31abdeee74718bcb4cf70ef8faf9eb6a902aaa17fd6314f9a691c656b194becde233ec985dcbb3c4a8278c137a897b9a08fdd88a0f3696b64f8d9077d788d23e08ce89cd97e098966854923a17ee6071fbcf27b0dc4e1c3459e338265ed4383ee6917a29119099b490266e9cec12b765831f6dad6008b0aa220d785b3e1bcf2039665a53d333a788106b0f42906126db4331ab0ecd07dc93edd3075f92e2f3bb7