mx-cluster.omc-mail.de

- OMCnet Internet Service GmbH -

Issued by GeoTrust SHA256 SSL CA

About this certificate

This digital certificate with serial number 7e:f1:5b:ff:af:b9:ae:c9:91:61:7c:d1:8f:4c:6f:3b was issued on by GeoTrust Inc..

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

OMCnet Internet Service GmbH

Organization: OMCnet Internet Service GmbH
Organization unit: Technik
State / Province: Schleswig-Holstein
Locality: Quickborn
Country: DE

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7e:f1:5b:ff:af:b9:ae:c9:91:61:7c:d1:8f:4c:6f:3b
Serial Number (int): 168735936968646020289173667770018852667
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 14:67:8e:ed:83:4f:d6:1e:9d:40:04:0c:04:46:a1:70:34:b2:0f:72

Fingerprint (sha1): 37:7a:67:56:18:00:d1:76:af:98:28:bc:fb:32:82:2a:bd:74:09:3f
Fingerprint (sha256): 58:2d:84:6c:f2:0b:b2:51:ea:5b:9c:5c:58:cd:25:8f:b7:05:72:ee:58:42:7c:7e:48:ad:aa:6a:ac:e3:c2:ca

Issuing Certificate URL: http://gj.symcb.com/gj.crt

Revocation information

OCSP Server: http://gj.symcd.com
CRL Distribution Point: http://gj.symcb.com/gj.crl

Check the revocation status for certificate mx-cluster.omc-mail.de

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mx-cluster.omc-mail.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mx10.omc.net
mx05.omc.net
mx11.omcnet.de
mx2.omc-mail.com
mx1.omc-mail.com
mx5.omc-mail.com
mx6.omc-mail.com
mx4.omc-mail.com
mx3.omc-mail.com
mx5.omc-mail.de
mx4.omc-mail.de
mx2.omc-mail.de
mx1.omc-mail.de
mx6.omc-mail.de
mx3.omc-mail.de
backup-mx.omc-mail.de
relay.omc-mail.de
mx-cluster.omc-mail.de

Other certificates including the domain name omc-mail.de

(limited to 100 certificates)
mx-cluster.omc-mail.de
mail-cluster.omc-mail.de
mc01.omc.net
mc01.omc.net
mx-cluster.omc-mail.de
mx-cluster.omc-mail.de
mc01.omc.net
mx-cluster.omc-mail.de

Certificate

The complete raw certificate details for mx-cluster.omc-mail.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHVjCCBj6gAwIBAgIQfvFb/6+5rsmRYXzRj0xvOzANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEfMB0GA1UEAxMW
R2VvVHJ1c3QgU0hBMjU2IFNTTCBDQTAeFw0xNjExMTcwMDAwMDBaFw0xNzEyMTcy
MzU5NTlaMIGYMQswCQYDVQQGEwJERTEbMBkGA1UECAwSU2NobGVzd2lnLUhvbHN0
ZWluMRIwEAYDVQQHDAlRdWlja2Jvcm4xJTAjBgNVBAoMHE9NQ25ldCBJbnRlcm5l
dCBTZXJ2aWNlIEdtYkgxEDAOBgNVBAsMB1RlY2huaWsxHzAdBgNVBAMMFm14LWNs
dXN0ZXIub21jLW1haWwuZGUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoIC
AQDSBfggGQFeAu5e5PfmdtFB0CKq7Wic3SQZjImCiIA0DyafpjQBSYeetJDCqVhI
EiWAjPjBGuelPTTdr/5vq1hhOn+6R1giPU4zvokMq+lAcZUcFv3w2dreqWtkWa6N
9fU6m2pv4cETnqiIn6J2sHw2+gqUzdSTCb+579zfZ8HDhJNvoWQNSbimS1eZwlw3
yfwkoSovbaNu2+7E1rWn8mWWupxt0mBGEyASqLz0GPI4oqrUOQ2jeOxzikufDGoN
tab6ZiamChgVB/dD6kyftpuia2Ompy+ZGSMfDNjG6PttNG8cgXNqss+8DcaSS3FC
ABjRu0M4pQHXl/CEyXi/zZKrRL0ftpA8M3xbdU93BNC+Fg4HtSknEy1zIpnDPwl9
r6N2MGyaYF+UFhaPPOZtWpxEkaotCIKlLKfXeiIy43voMqqQactByesi3AkW/x/Y
HVRt7TmzI9AjrHpvgJeby1FxFtWUDi7AIMI48weSO3JQLEcKDSP5GRY/3/o41V1d
6PO856uZW+TXnf7gtN612FvYZbr68jECUikTTTBeYLMNGTqgX9hla9pzEsLITr+1
55ZYRhVtCs2/KmbmGo7CNKLg/W6sGj+Um28teoPTewft1EAOSyD71brHztuf2e5I
WQ5pVV1zXxUcaebc9PLkTr0zHsvRcZ17s34tpp+dw0V2/wIDAQABo4IC6zCCAucw
ggFNBgNVHREEggFEMIIBQIIMbXgxMC5vbWMubmV0ggxteDA1Lm9tYy5uZXSCDm14
MTEub21jbmV0LmRlghBteDIub21jLW1haWwuY29tghBteDEub21jLW1haWwuY29t
ghBteDUub21jLW1haWwuY29tghBteDYub21jLW1haWwuY29tghBteDQub21jLW1h
aWwuY29tghBteDMub21jLW1haWwuY29tgg9teDUub21jLW1haWwuZGWCD214NC5v
bWMtbWFpbC5kZYIPbXgyLm9tYy1tYWlsLmRlgg9teDEub21jLW1haWwuZGWCD214
Ni5vbWMtbWFpbC5kZYIPbXgzLm9tYy1tYWlsLmRlghViYWNrdXAtbXgub21jLW1h
aWwuZGWCEXJlbGF5Lm9tYy1tYWlsLmRlghZteC1jbHVzdGVyLm9tYy1tYWlsLmRl
MAkGA1UdEwQCMAAwDgYDVR0PAQH/BAQDAgWgMCsGA1UdHwQkMCIwIKAeoByGGmh0
dHA6Ly9nai5zeW1jYi5jb20vZ2ouY3JsMIGdBgNVHSAEgZUwgZIwgY8GBmeBDAEC
AjCBhDA/BggrBgEFBQcCARYzaHR0cHM6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291
cmNlcy9yZXBvc2l0b3J5L2xlZ2FsMEEGCCsGAQUFBwICMDUMM2h0dHBzOi8vd3d3
Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvcmVwb3NpdG9yeS9sZWdhbDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHwYDVR0jBBgwFoAUFGeO7YNP1h6dQAQM
BEahcDSyD3IwVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8vZ2ou
c3ltY2QuY29tMCYGCCsGAQUFBzAChhpodHRwOi8vZ2ouc3ltY2IuY29tL2dqLmNy
dDATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJoWRJ4cI
5zb0JlRkw1aNDEQ+uLkjQS5GFSvp0c1nupE8kruO6pRpsOTQ6UtvhVHsaYx1UGQ0
R3UDW7ArZzDVI2klA/ldw0ggF5UVhWsHYZuXD6Cdv0VGMS1BR9pd3xsgScJcU5fn
/Au/PSlNENchI7ZEUzY0rZYuCWZFwSCeDvr8O+/rT8vYhjEsHsV4jCK7wF2c85Lx
p0nTINTxX/nB/QFvx5XNnjGOURq+jM1emvO4hzDI1DCHGZTkQ6p0PF/lSNKw/02n
T0KbaavMqYIOo4b0jbwMd6xo6YV51rABukTZpm/cOoe+0EDX59s/nCSTe8jAxQ2m
6WXd90Kb+Qu+Qw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 168735936968646020289173667770018852667
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Schleswig-Holstein'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Quickborn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'OMCnet Internet Service GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Technik'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mx-cluster.omc-mail.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 856820380743699877737708863946844492282000131054049400680800529213400778763908695021500496256835583105527814735198623389990054980809564249686534917716835834078490539754774423522372231542686629761656526407713541680814009926571657031026581441655983480262604803924097323787115111063330246254979889850370219496339517506886860860573913675436829797087159810198237318454488124728332715804484861151625979390977492808128612379537118458902436640505828481317602556244330318755155572819575469071130981976078877812295778851609863717018045697274218242763593174743363337422165636939037179659362754016590984474197386337767457357854703227439304849020243222825559137035521343620227923436235972658204022774970578353591414332653253795566876159811075005193393131370209364437662158918891317660780520750006518491180327300510917757305176281817808291041558817116536433064272158586553680625852297353101683033622910298600708944577706729669228713324498516581410472609009326159112388537615362860392159339775073513690883392041341537907375457231087629020063844094021540358159629509116699965291111723102001370871566236883114994844218822574009844970751418084738186634024755993124761774415137680335877756452128264420698507011776437267283270927390490760971880665282303
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (324 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx10.omc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx05.omc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx11.omcnet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx2.omc-mail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx1.omc-mail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx5.omc-mail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx6.omc-mail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx4.omc-mail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx3.omc-mail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx5.omc-mail.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx4.omc-mail.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx2.omc-mail.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx1.omc-mail.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx6.omc-mail.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx3.omc-mail.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backup-mx.omc-mail.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'relay.omc-mail.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx-cluster.omc-mail.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcb.com/gj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 14678eed834fd61e9d40040c0446a17034b20f72
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcb.com/gj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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