ssl.logitravel.co.uk

- Logitravel Limited -

Issued by GeoTrust EV SSL CA - G4

About this certificate

This digital certificate with serial number 28:8e:b1:33:99:eb:95:f9:a5:c0:db:18:16:f1:c3:99 was issued on by GeoTrust Inc..

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Logitravel Limited

Company registration number: 08344290
Organization: Logitravel Limited
Organization unit: Information Technology
State / Province: LONDON
Locality: London
Country: GB

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 28:8e:b1:33:99:eb:95:f9:a5:c0:db:18:16:f1:c3:99
Serial Number (int): 53910020060080727320614111234241971097
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: de:cf:5c:50:b7:ae:02:1f:15:17:aa:16:e8:0d:b5:28:9d:6a:5a:f3

Fingerprint (sha1): 4e:24:05:7f:9e:b0:92:e7:ec:84:91:e0:f4:fa:b2:06:a9:f9:5d:be
Fingerprint (sha256): 56:a2:24:7e:ea:57:5b:c2:b3:24:2c:d0:d3:5d:c4:8f:3b:7d:58:b5:5a:07:77:ca:da:bd:ea:27:59:d0:57:e9

Issuing Certificate URL: http://gm.symcb.com/gm.crt

Revocation information

OCSP Server: http://gm.symcd.com
CRL Distribution Point: http://gm.symcb.com/gm.crl

Check the revocation status for certificate ssl.logitravel.co.uk

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl.logitravel.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ssl.logitravel.fi
ssl.logitravel.fr
ssl.logitravel.it
ssl.logitravel.co.uk

Other certificates including the domain name logitravel.co.uk

(limited to 100 certificates)
grupoeci.viajeselcorteingles.es
blog.logitravel.com
*.logitravel.com
*.logitravel.com
logitravel.com
*.logitravel.com
*.logitravel.com
providers.ssl.logitravel.co.uk
logitravel.com
*.logitravel.com
grupoeci.viajeselcorteingles.es
www.logitravel.com
www.logitravel.com
www.logitravel.com
*.logitravel.com
ssl.logitravel.co.uk
blog.logitravel.com
*.logitravel.com
TravelConcept SL
www.logitravel.com
*.logitravel.com
ssl.logitravel.co.uk
*.logitravel.com
blog.logitravel.com
www.logitravel.com
ssl.logitravel.co.uk
TravelConcept SL
TravelConcept SL
ssl.logitravel.co.uk
*.logitravel.com
logitravel.com
*.logitravel.com
logitravel.com
providers.ssl.logitravel.co.uk
grupoeci.viajeselcorteingles.es
*.logitravel.com
*.logitravel.com
*.logitravel.com
blog.logitravel.com
TravelConcept SL
*.logitravel.com
TravelConcept SL
*.logitravel.com
www.logitravel.com
*.logitravel.com
blog.logitravel.com
grupoeci.viajeselcorteingles.es
grupoeci.viajeselcorteingles.es
*.logitravel.com
*.logitravel.com
blog.logitravel.com
TravelConcept SL
logitravel.com
*.logitravel.com
providers.ssl.logitravel.co.uk
*.logitravel.com
www.logitravel.com
providers.ssl.logitravel.co.uk
blog.logitravel.com
providers.ssl.logitravel.co.uk
*.logitravel.com
grupoeci.viajeselcorteingles.es
*.logitravel.com
*.logitravel.com
blog.logitravel.com
*.logitravel.com
ssl.logitravel.co.uk
www.logitravel.com
*.logitravel.com
grupoeci.viajeselcorteingles.es
*.logitravel.com

Certificate

The complete raw certificate details for ssl.logitravel.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHCTCCBfGgAwIBAgIQKI6xM5nrlfmlwNsYFvHDmTANBgkqhkiG9w0BAQsFADBH
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEgMB4GA1UEAxMX
R2VvVHJ1c3QgRVYgU1NMIENBIC0gRzQwHhcNMTUwNTIwMDAwMDAwWhcNMTYxMDEy
MjM1OTU5WjCB0zETMBEGCysGAQQBgjc8AgEDEwJHQjELMAkGA1UEBhMCR0IxDzAN
BgNVBAgMBkxPTkRPTjEPMA0GA1UEBwwGTG9uZG9uMR0wGwYDVQQPExRQcml2YXRl
IE9yZ2FuaXphdGlvbjERMA8GA1UEBRMIMDgzNDQyOTAxGzAZBgNVBAoMEkxvZ2l0
cmF2ZWwgTGltaXRlZDEfMB0GA1UECwwWSW5mb3JtYXRpb24gVGVjaG5vbG9neTEd
MBsGA1UEAwwUc3NsLmxvZ2l0cmF2ZWwuY28udWswggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCh6LexGwROY0mm+gMuzZtoayvI7HzcGlk1HfvdCVYYAFC9
UcoHbyq+PI6IrJFj7nH60JK0knbCyvbLj349dzZVJO2DAkcrjplJ28eaz1jwtLKs
X83TcOMWNvnIx1+MT3bKrPpXbyJlYDV9wnAaVPdjuKmeCY+VxaoDt4FCgLNuYvji
uk6PwMLUgy4oPAvEODDLweVMrFQf55WT22VICNJfRxy9FVW/lHekPxPfam2/iOUL
qX6ZyzPX5U9FkzmcF08kCZztswcPorYxxV0xKXwxJtUMpeLXhuPN7HmBjf48mzmp
7a7YpKX87vjcKsS3gB4t4xKAbimsQN877DSrghp1AgMBAAGjggNiMIIDXjBYBgNV
HREEUTBPghFzc2wubG9naXRyYXZlbC5maYIRc3NsLmxvZ2l0cmF2ZWwuZnKCEXNz
bC5sb2dpdHJhdmVsLml0ghRzc2wubG9naXRyYXZlbC5jby51azAJBgNVHRMEAjAA
MA4GA1UdDwEB/wQEAwIFoDArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8vZ20uc3lt
Y2IuY29tL2dtLmNybDCBoAYDVR0gBIGYMIGVMIGSBgkrBgEEAfAiAQYwgYQwPwYI
KwYBBQUHAgEWM2h0dHBzOi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvcmVw
b3NpdG9yeS9sZWdhbDBBBggrBgEFBQcCAjA1DDNodHRwczovL3d3dy5nZW90cnVz
dC5jb20vcmVzb3VyY2VzL3JlcG9zaXRvcnkvbGVnYWwwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFN7PXFC3rgIfFReqFugNtSidalrz
MFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDovL2dtLnN5bWNkLmNv
bTAmBggrBgEFBQcwAoYaaHR0cDovL2dtLnN5bWNiLmNvbS9nbS5jcnQwggF8Bgor
BgEEAdZ5AgQCBIIBbASCAWgBZgB1AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3
zQ7IDdwQAAABTXCog3cAAAQDAEYwRAIgNxcMQ9WyI+B6SWHbyA19pjrqeK3Pgr6R
v1FYxwSeuScCIE4LMawr72ehIN73EA8tHDS45sVvhRFWRM9sLWnYSQzkAHUAVhQG
mi/XwuzT9eG9RLI+x0Z2ubyZEVzA75SYVdaJ0N0AAAFNcKiEdgAABAMARjBEAiA9
9XOvhvK4dLkO1v+djH4Xl2wfdoFGNi51HlBg2GQoFwIgeczeHgn7oqn0pSSM4oQv
wkXPYmJ2Wp87BP89WZYvF7cAdgBo9pj4H2SCvjqM7rkoHUz8cVFdZ5PURNEKZ6y7
T0/7xAAAAU1wqIOTAAAEAwBHMEUCIBLnhqG4ODVr7i+5G8p9rbgr0t4zrBy/Cv2c
j8iTWHjHAiEA0Ss25wWFocF1HbUvj4Ez5A0gYa6QsrIkeuXV0JnP1SAwDQYJKoZI
hvcNAQELBQADggEBAFsPlrHIRDQ8w17OTzQhOaWcwYVKJyu80FsM9qrOSoYBoQZY
6vQDG45AMMC22LcY5rpYyoCiD3blaWu2A0x7ztzn6mq2AwlyRn2EFWfZm2y+lnBV
zrkolDjadnGLCKjQ3tNMRHkCDNN6oK3EUmygoZYccFO1uJFKF7wXGxJfIBiHJNyg
hBdxQb4JLRBHqr6IhVQ8sGsNvJBWMt1Wsr/gEzrrJokmEfZyfPuWfW21L3BGlDwE
izRmm6D4gBsEyNuROfsrYuqoQVUkSM+fShNj8uQF2JB6boiRcG0vmgFVZguiNVNq
7NpF7oOZEwIz4ZJIiopJimTiSCeTpy8Bp7zp7D8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoei3sRsETmNJpvoDLs2b
aGsryOx83BpZNR373QlWGABQvVHKB28qvjyOiKyRY+5x+tCStJJ2wsr2y49+PXc2
VSTtgwJHK46ZSdvHms9Y8LSyrF/N03DjFjb5yMdfjE92yqz6V28iZWA1fcJwGlT3
Y7ipngmPlcWqA7eBQoCzbmL44rpOj8DC1IMuKDwLxDgwy8HlTKxUH+eVk9tlSAjS
X0ccvRVVv5R3pD8T32ptv4jlC6l+mcsz1+VPRZM5nBdPJAmc7bMHD6K2McVdMSl8
MSbVDKXi14bjzex5gY3+PJs5qe2u2KSl/O743CrEt4AeLeMSgG4prEDfO+w0q4Ia
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 53910020060080727320614111234241971097
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust EV SSL CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'LONDON'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '08344290'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Logitravel Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Information Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ssl.logitravel.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20439124398612998089940740455239022958306767394947694205220749339168416460562781612929680968539828274045400080375441342538449248756880543170226959486116770080219293237136700116091515769610317162370610511277371052040246676379458000081508847556115705174158597911448504970551468804627712324477091390246649004355775729544760545965117075694203646865442014507788431841099341202985645487655846952549607341243758564796626565798824547880180177500397897506881957996883286348502891577899771051225999144917351557597579200092547507170364465555950931125578578695375770422149276276951145628060218526054561070219402112704109837687413
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (81 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.logitravel.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.logitravel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.logitravel.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.logitravel.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (152 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName decf5c50b7ae021f1517aa16e80db5289d6a5af3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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