www.whatgoesaroundnyc.com
Issued by GeoTrust DV SSL CA - G3
About this certificate
This digital certificate with serial number 08:40:9e:dc:ec:d5:9e:8a:f7:b4:28:c1:48:0a:bd:ef was issued on by GeoTrust Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Certificate Subject
CN=www.whatgoesaroundnyc.com
GeoTrust Inc.
Organization:
GeoTrust Inc.
Organization unit: Domain Validated SSL
Organization unit: Domain Validated SSL
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 08:40:9e:dc:ec:d5:9e:8a:f7:b4:28:c1:48:0a:bd:efSerial Number (int): 10969353089435398268356926335586319855
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: ad:65:22:85:90:d0:3b:e3:a1:49:8b:37:f9:f1:0b:1d:5f:17:a0:77
Fingerprint (sha1): 51:36:0d:bb:31:07:ab:70:72:50:1c:40:91:5c:94:fc:32:0b:88:5c
Fingerprint (sha256): 58:6a:53:54:33:19:15:eb:e0:da:1f:c9:6e:ea:23:37:b0:e5:b4:6f:34:8a:98:9e:c4:15:d6:3f:e5:4e:6a:ce
Issuing Certificate URL: http://gt.symcb.com/gt.crt
Revocation information
OCSP Server: http://gt.symcd.comCRL Distribution Point: http://gt.symcb.com/gt.crl
Check the revocation status for certificate www.whatgoesaroundnyc.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.whatgoesaroundnyc.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.whatgoesaroundnyc.com
whatgoesaroundnyc.com
whatgoesaroundnyc.com
Other certificates including the domain name whatgoesaroundnyc.com
(limited to 100 certificates)
status.pipeimob.com.br
status.markiiieb.com
san-6-s10.tlsprovisioning.exacttarget.com
status.ngxnetworks.com
iq.syncd.tech
status.quarklink.io
status.anywhere.asolvi.app
san-6-s10.tlsprovisioning.exacttarget.com
status.mapworks.io
www.whatgoesaroundnyc.com
status.pipeimob.com.br
status.lenderdock.com
iq.syncd.tech
kjpiug.whatgoesaroundnyc.com
san-6-s10.tlsprovisioning.exacttarget.com
status.whatgoesaroundnyc.com
host.connect.whatgoesaroundnyc.com
status.bozic.io
status.buyerlink.com
status.zeasn.io
status.dealerexpert.ca
status.zeasn.io
san-6-s10.tlsprovisioning.exacttarget.com
status.orangecityfl.gov
san-6-s10.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
www.whatgoesaroundnyc.com
shw.rmt.status.descartes.com
status.anywhere.asolvi.app
status.whatgoesaroundnyc.com
status.anywhere.asolvi.app
san-6-s10.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
www.whatgoesaroundnyc.com
status.mapworks.io
status.lenderdock.com
status.facm.cl
status.ngxnetworks.com
status.apptrana.com
www.whatgoesaroundnyc.com
shw.rmt.status.descartes.com
status.apptrana.com
www.whatgoesaroundnyc.com
status.canadianblackbook.com
status.zeasn.io
shw.rmt.status.descartes.com
san-6-s10.tlsprovisioning.exacttarget.com
status.anywhere.asolvi.app
san-6-s10.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
status.canadianblackbook.com
status.canadianblackbook.com
status.orangecityfl.gov
status.lenderdock.com
san-6-s10.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
www.whatgoesaroundnyc.com
status.buyerlink.com
status.orangecityfl.gov
status.anywhere.asolvi.app
san-6-s10.tlsprovisioning.exacttarget.com
shw.rmt.status.descartes.com
iq.syncd.tech
status.buyerlink.com
status.bozic.io
san-6-s10.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
shw.rmt.status.descartes.com
status.ngxnetworks.com
status.lenderdock.com
san-6-s10.tlsprovisioning.exacttarget.com
status.anywhere.asolvi.app
status.apptrana.com
san-6-s10.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
www.whatgoesaroundnyc.com
iq.syncd.tech
status.whatgoesaroundnyc.com
kjpiug.whatgoesaroundnyc.com
status.anywhere.asolvi.app
status.markiiieb.com
www.whatgoesaroundnyc.com
status.anywhere.asolvi.app
iq.syncd.tech
san-6-s10.tlsprovisioning.exacttarget.com
status.anywhere.asolvi.app
whatgoesaroundnyc.com
san-6-s10.tlsprovisioning.exacttarget.com
status.ngxnetworks.com
san-6-s10.tlsprovisioning.exacttarget.com
www.whatgoesaroundnyc.com
shw.rmt.status.descartes.com
shw.rmt.status.descartes.com
iq.syncd.tech
san-6-s10.tlsprovisioning.exacttarget.com
status.mapworks.io
www.whatgoesaroundnyc.com
status.markiiieb.com
san-6-s10.tlsprovisioning.exacttarget.com
status.ngxnetworks.com
iq.syncd.tech
status.quarklink.io
status.anywhere.asolvi.app
san-6-s10.tlsprovisioning.exacttarget.com
status.mapworks.io
www.whatgoesaroundnyc.com
status.pipeimob.com.br
status.lenderdock.com
iq.syncd.tech
kjpiug.whatgoesaroundnyc.com
san-6-s10.tlsprovisioning.exacttarget.com
status.whatgoesaroundnyc.com
host.connect.whatgoesaroundnyc.com
status.bozic.io
status.buyerlink.com
status.zeasn.io
status.dealerexpert.ca
status.zeasn.io
san-6-s10.tlsprovisioning.exacttarget.com
status.orangecityfl.gov
san-6-s10.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
www.whatgoesaroundnyc.com
shw.rmt.status.descartes.com
status.anywhere.asolvi.app
status.whatgoesaroundnyc.com
status.anywhere.asolvi.app
san-6-s10.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
www.whatgoesaroundnyc.com
status.mapworks.io
status.lenderdock.com
status.facm.cl
status.ngxnetworks.com
status.apptrana.com
www.whatgoesaroundnyc.com
shw.rmt.status.descartes.com
status.apptrana.com
www.whatgoesaroundnyc.com
status.canadianblackbook.com
status.zeasn.io
shw.rmt.status.descartes.com
san-6-s10.tlsprovisioning.exacttarget.com
status.anywhere.asolvi.app
san-6-s10.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
status.canadianblackbook.com
status.canadianblackbook.com
status.orangecityfl.gov
status.lenderdock.com
san-6-s10.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
www.whatgoesaroundnyc.com
status.buyerlink.com
status.orangecityfl.gov
status.anywhere.asolvi.app
san-6-s10.tlsprovisioning.exacttarget.com
shw.rmt.status.descartes.com
iq.syncd.tech
status.buyerlink.com
status.bozic.io
san-6-s10.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
shw.rmt.status.descartes.com
status.ngxnetworks.com
status.lenderdock.com
san-6-s10.tlsprovisioning.exacttarget.com
status.anywhere.asolvi.app
status.apptrana.com
san-6-s10.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
san-6-s10.tlsprovisioning.exacttarget.com
www.whatgoesaroundnyc.com
iq.syncd.tech
status.whatgoesaroundnyc.com
kjpiug.whatgoesaroundnyc.com
status.anywhere.asolvi.app
status.markiiieb.com
www.whatgoesaroundnyc.com
status.anywhere.asolvi.app
iq.syncd.tech
san-6-s10.tlsprovisioning.exacttarget.com
status.anywhere.asolvi.app
whatgoesaroundnyc.com
san-6-s10.tlsprovisioning.exacttarget.com
status.ngxnetworks.com
san-6-s10.tlsprovisioning.exacttarget.com
www.whatgoesaroundnyc.com
shw.rmt.status.descartes.com
shw.rmt.status.descartes.com
iq.syncd.tech
san-6-s10.tlsprovisioning.exacttarget.com
status.mapworks.io
www.whatgoesaroundnyc.com
Certificate
The complete raw certificate details for www.whatgoesaroundnyc.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgIQCECe3OzVnor3tCjBSAq97zANBgkqhkiG9w0BAQsFADBm MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UECxMU RG9tYWluIFZhbGlkYXRlZCBTU0wxIDAeBgNVBAMTF0dlb1RydXN0IERWIFNTTCBD QSAtIEczMB4XDTE3MDkxMjAwMDAwMFoXDTE4MTIxMjIzNTk1OVowJDEiMCAGA1UE AwwZd3d3LndoYXRnb2VzYXJvdW5kbnljLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBALb60nqw68gOr9AdGUUz3FpwMmD9K9HyqVdnruVlbSvvG447 DEba54W6AzZPhnhc/7dYj1oonnAFGLjom5dsstgshCBW3Fh5VCptb3FdVuMOV3po Y+k2v4oPfJPUeZmXpptPuroKcEVbBabHsYt2/NhADFJYaWAL+qnHcDOGGbU09S8j wrfc89RrSfQUot10Y9qp8UKVil5DuiNNU1MkOvRcbLKng1Ifvcy6STBx15PHFYmZ mzID4lXJtoWtEfwYUeQpx2VeUlG7lHQmCbBd1RmJCOWhAyBDKiVaHc3KpeeIA1pN czfx/v/WQlljEgXJrfS71AdZHj2fl07HNKSzVXkCAwEAAaOCAdcwggHTMDsGA1Ud EQQ0MDKCGXd3dy53aGF0Z29lc2Fyb3VuZG55Yy5jb22CFXdoYXRnb2VzYXJvdW5k bnljLmNvbTAJBgNVHRMEAjAAMCsGA1UdHwQkMCIwIKAeoByGGmh0dHA6Ly9ndC5z eW1jYi5jb20vZ3QuY3JsMIGdBgNVHSAEgZUwgZIwgY8GBmeBDAECATCBhDA/Bggr BgEFBQcCARYzaHR0cHM6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9yZXBv c2l0b3J5L2xlZ2FsMEEGCCsGAQUFBwICMDUMM2h0dHBzOi8vd3d3Lmdlb3RydXN0 LmNvbS9yZXNvdXJjZXMvcmVwb3NpdG9yeS9sZWdhbDAfBgNVHSMEGDAWgBStZSKF kNA746FJizf58QsdXxegdzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0 cDovL2d0LnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL2d0LnN5bWNiLmNv bS9ndC5jcnQwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEB AAl6Q+EOVgwRd8JWXI1sY5Zyg4KTDwpaL28/+hdyImh/5cZa0IaEcruyHSaYE/qq UVLhG0eLCf7qLQG9+/FYaaonog42RhfvOXHIDW9czzXtin5dvKp9TXoUum81ifBg 5wY+xyCUhsTATSWZaGYYRiMUrf4Gd5t1MBJPx9M2x80JlbD2fO9SSYMDdqddHSOm NAER20+L9pAEHThycYdNJcr87LLJsM1+SCBzKuLCjjq8SQf6gr38MdFxffJdCHtr Yo21rgGyORSaUm+BeYHt7meURFr6sHxequ2oIywnIhl/eDzGqFKIDbSKlTn/SKsn UesfvFD/pMRUMKK95HXnbQU= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvrSerDryA6v0B0ZRTPc WnAyYP0r0fKpV2eu5WVtK+8bjjsMRtrnhboDNk+GeFz/t1iPWiiecAUYuOibl2yy 2CyEIFbcWHlUKm1vcV1W4w5Xemhj6Ta/ig98k9R5mZemm0+6ugpwRVsFpsexi3b8 2EAMUlhpYAv6qcdwM4YZtTT1LyPCt9zz1GtJ9BSi3XRj2qnxQpWKXkO6I01TUyQ6 9FxssqeDUh+9zLpJMHHXk8cViZmbMgPiVcm2ha0R/BhR5CnHZV5SUbuUdCYJsF3V GYkI5aEDIEMqJVodzcql54gDWk1zN/H+/9ZCWWMSBcmt9LvUB1kePZ+XTsc0pLNV eQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10969353089435398268356926335586319855 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL CA - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-12 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-12 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.whatgoesaroundnyc.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23099056532861759699884528794992760504604367163138882027579554254057907526969743667451287826497734277177046347352068520159163114404596450558902297469025586434326361892027327729906669202715472600653277529682803852519206799869435053043233161063976243374194472385593124013580452428385796182560363925321916325266706806658014272611665325669221781713204973307785762980536726131909557605566891082521623286003962076274628192051002261755595081362196738861943967009171650694577675889529907105760140140179293091234041112395110074541585830005464426711491996070781806678530659604004968509591494274876949819808050728770524023051641 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whatgoesaroundnyc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatgoesaroundnyc.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcb.com/gt.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ad65228590d03be3a1498b37f9f10b1d5f17a077 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcb.com/gt.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00097a43e10e560c1177c2565c8d6c6396728382930f0a5a2f6f3ffa177222687fe5c65ad0868472bbb21d269813faaa5152e11b478b09feea2d01bdfbf15869aa27a20e364617ef3971c80d6f5ccf35ed8a7e5dbcaa7d4d7a14ba6f3589f060e7063ec7209486c4c04d2599686618462314adfe06779b7530124fc7d336c7cd0995b0f67cef5249830376a75d1d23a6340111db4f8bf690041d387271874d25cafcecb2c9b0cd7e4820732ae2c28e3abc4907fa82bdfc31d1717df25d087b6b628db5ae01b239149a526f817981edee6794445afab07c5eaaeda8232c2722197f783cc6a852880db48a9539ff48ab2751eb1fbc50ffa4c45430a2bde475e76d05