mail.perrigo.com
- Perrigo Company -
Issued by GeoTrust EV SSL CA - G4
About this certificate
This digital certificate with serial number 05:ee:18:a0:25:60:30:8c:51:86:be:52:a3:6d:1b:84 was issued on by GeoTrust Inc..
With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Perrigo Company
Company registration number:
239055
Organization: Perrigo Company
Organization unit: IT&S
Organization: Perrigo Company
Organization unit: IT&S
State / Province:
Michigan
Locality: Allegan
Country: US
Locality: Allegan
Country: US
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 05:ee:18:a0:25:60:30:8c:51:86:be:52:a3:6d:1b:84Serial Number (int): 7882406097159589766576195160805022596
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: de:cf:5c:50:b7:ae:02:1f:15:17:aa:16:e8:0d:b5:28:9d:6a:5a:f3
Fingerprint (sha1): 99:75:76:54:81:76:e0:5f:cf:11:56:f6:04:3e:23:56:df:04:b7:ed
Fingerprint (sha256): 58:9e:fc:33:29:d9:d1:03:75:3f:58:74:90:ab:fb:c9:75:c7:c4:14:44:dd:84:4e:76:89:ee:61:38:af:7e:15
Issuing Certificate URL: http://gm.symcb.com/gm.crt
Revocation information
OCSP Server: http://gm.symcd.comCRL Distribution Point: http://gm.symcb.com/gm.crl
Check the revocation status for certificate mail.perrigo.com
8
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mail.perrigo.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
autodiscover.perrigo.mx
autodiscover.perrigouk.com
autodiscover.perrigo.co.il
mailil.perrigo.com
legacy.perrigo.com
autodiscover.perrigo.com
smtp.perrigo.com
mail.perrigo.com
autodiscover.perrigouk.com
autodiscover.perrigo.co.il
mailil.perrigo.com
legacy.perrigo.com
autodiscover.perrigo.com
smtp.perrigo.com
mail.perrigo.com
Other certificates including the domain name perrigo.com
(limited to 100 certificates)
nlroexpep01.perrigo.com
investor.perrigo.com
*.perrigo.com
webmail.perrigo.co.il
adfs.perrigo.com
*.perrigo.com
newinside.perrigo.com
mail.perrigo.com
*.perrigo.com
adfs.perrigo.com
*.perrigo.com
adfs.perrigo.com
mailil.perrigo.com
adfs.perrigo.com
adfs.perrigo.com
adfs.perrigo.com
newinside.perrigo.com
mail.perrigo.com
*.perrigo.com
mail.perrigo.mx
usalvcsee1.perrigo.com
*.perrigo.com
perrigo.com
mail.perrigo.com
mail.perrigo.com
omega.perrigo.com
adfs.perrigo.com
newinside.perrigo.com
storefront.perrigo.com
*.perrigo.com
*.perrigo.com
mail.perrigo.com
*.perrigo.com
omega.perrigo.com
storefront.perrigo.com
*.perrigo.com
investor.perrigo.com
*.perrigo.com
*.perrigo.com
*.perrigo.com
usaledge1.perrigo.com
perrigo.com
investor.perrigo.com
mail.perrigo.mx
investor.perrigo.com
pidpq.perrigo.com
perrigo.com
*.perrigo.com
newinside.perrigo.com
citrix.perrigo.com
investor.perrigo.com
webmail.perrigo.co.il
mail.perrigouk.com
investor.perrigo.com
adfs.perrigo.com
www.perrigo.com
*.perrigo.com
pidp.perrigo.com
perrigo.com
usalvcsee1.perrigo.com
usalvcsee2.perrigo.com
st.perrigo.com
perrigo.com
mail.perrigo.com
storefront.perrigo.com
im.perrigo.com
www.perrigo.com
mail.perrigo.com
mail.perrigouk.com
mail.perrigo.com
citrix.perrigo.com
nlroexpep01.perrigo.com
investor.perrigo.com
*.perrigo.com
webmail.perrigo.co.il
adfs.perrigo.com
*.perrigo.com
newinside.perrigo.com
mail.perrigo.com
*.perrigo.com
adfs.perrigo.com
*.perrigo.com
adfs.perrigo.com
mailil.perrigo.com
adfs.perrigo.com
adfs.perrigo.com
adfs.perrigo.com
newinside.perrigo.com
mail.perrigo.com
*.perrigo.com
mail.perrigo.mx
usalvcsee1.perrigo.com
*.perrigo.com
perrigo.com
mail.perrigo.com
mail.perrigo.com
omega.perrigo.com
adfs.perrigo.com
newinside.perrigo.com
storefront.perrigo.com
*.perrigo.com
*.perrigo.com
mail.perrigo.com
*.perrigo.com
omega.perrigo.com
storefront.perrigo.com
*.perrigo.com
investor.perrigo.com
*.perrigo.com
*.perrigo.com
*.perrigo.com
usaledge1.perrigo.com
perrigo.com
investor.perrigo.com
mail.perrigo.mx
investor.perrigo.com
pidpq.perrigo.com
perrigo.com
*.perrigo.com
newinside.perrigo.com
citrix.perrigo.com
investor.perrigo.com
webmail.perrigo.co.il
mail.perrigouk.com
investor.perrigo.com
adfs.perrigo.com
www.perrigo.com
*.perrigo.com
pidp.perrigo.com
perrigo.com
usalvcsee1.perrigo.com
usalvcsee2.perrigo.com
st.perrigo.com
perrigo.com
mail.perrigo.com
storefront.perrigo.com
im.perrigo.com
www.perrigo.com
mail.perrigo.com
mail.perrigouk.com
mail.perrigo.com
citrix.perrigo.com
nlroexpep01.perrigo.com
Certificate
The complete raw certificate details for mail.perrigo.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHejCCBmKgAwIBAgIQBe4YoCVgMIxRhr5So20bhDANBgkqhkiG9w0BAQsFADBH MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEgMB4GA1UEAxMX R2VvVHJ1c3QgRVYgU1NMIENBIC0gRzQwHhcNMTUxMjE0MDAwMDAwWhcNMTgwMjEx MjM1OTU5WjCB1jETMBEGCysGAQQBgjc8AgEDEwJVUzEZMBcGCysGAQQBgjc8AgEC EwhNaWNoaWdhbjEdMBsGA1UEDxMUUHJpdmF0ZSBPcmdhbml6YXRpb24xDzANBgNV BAUTBjIzOTA1NTELMAkGA1UEBhMCVVMxETAPBgNVBAgUCE1pY2hpZ2FuMRAwDgYD VQQHFAdBbGxlZ2FuMRgwFgYDVQQKFA9QZXJyaWdvIENvbXBhbnkxDTALBgNVBAsU BElUJlMxGTAXBgNVBAMUEG1haWwucGVycmlnby5jb20wggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQCwed4F78LSSo7G5jIG9jaw98uL3AgsF/GWBNqDyrUE UFEPyLD4YnEVD/XhGGLys7PuOYAAKlB3cUvCnu10zlvyAsyXP0QwNqiFW85ghMxM 1gD4oGURcGIXjiAcE93tEoG7cUDZwcSr9EADnXjPbNlI+g9VA0TOw37kIjk7ECbx 2a0Vc11zjrCnzsJ19OF0uKv10p4724H6fI4bAN8HZ2x7Hx7zuTmlEuYcxHVUn/DD SpslVHSKfsUZYbLJq7KxIz/H7g0rO44tWnZi6uKQkpKxRSl+4jtw8dcV+5w3QNxj /EhTJFhtahdRT8uii018tt2YkyyKrwGTRC2kGEFHK4kDAgMBAAGjggPQMIIDzDCB wgYDVR0RBIG6MIG3ghdhdXRvZGlzY292ZXIucGVycmlnby5teIIaYXV0b2Rpc2Nv dmVyLnBlcnJpZ291ay5jb22CGmF1dG9kaXNjb3Zlci5wZXJyaWdvLmNvLmlsghJt YWlsaWwucGVycmlnby5jb22CEmxlZ2FjeS5wZXJyaWdvLmNvbYIYYXV0b2Rpc2Nv dmVyLnBlcnJpZ28uY29tghBzbXRwLnBlcnJpZ28uY29tghBtYWlsLnBlcnJpZ28u Y29tMAkGA1UdEwQCMAAwDgYDVR0PAQH/BAQDAgWgMCsGA1UdHwQkMCIwIKAeoByG Gmh0dHA6Ly9nbS5zeW1jYi5jb20vZ20uY3JsMIGgBgNVHSAEgZgwgZUwgZIGCSsG AQQB8CIBBjCBhDA/BggrBgEFBQcCARYzaHR0cHM6Ly93d3cuZ2VvdHJ1c3QuY29t L3Jlc291cmNlcy9yZXBvc2l0b3J5L2xlZ2FsMEEGCCsGAQUFBwICMDUMM2h0dHBz Oi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvcmVwb3NpdG9yeS9sZWdhbDAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHwYDVR0jBBgwFoAU3s9cULeu Ah8VF6oW6A21KJ1qWvMwVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRw Oi8vZ20uc3ltY2QuY29tMCYGCCsGAQUFBzAChhpodHRwOi8vZ20uc3ltY2IuY29t L2dtLmNydDCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHcA3esdK3oNT6Ygi4Gt gWhwfi6OnQHVXIiNPRHEzbbsvswAAAFRoQ8ougAABAMASDBGAiEAnJEnEhNS39Ze MACkv+hCRCE19xm5LbDSFSOwpI12Gp4CIQDxLbqDLMc0TjThACqYWPDKgtAaOe7J mEG2x2ElFhKJ6wB2AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAAB UaEPKO4AAAQDAEcwRQIgEf/v7EOnb2aikEGklLlQCDnhjnkVDWiYBwImPO3PaCwC IQC/wyrBKPE1wKhJAvrhA4V0wVzCyr5gkIr3g1UkRsgTgAB2AGj2mPgfZIK+Oozu uSgdTPxxUV1nk9RE0QpnrLtPT/vEAAABUaEPKOsAAAQDAEcwRQIhAPwylaWVwyGq uEqA115Sh+qCghhAwigXFmgmOxLqd58SAiAkq7clLC1j5pVsVJDTNON1/yaBRSHW vtmt+M1jKA7R4jANBgkqhkiG9w0BAQsFAAOCAQEAPCeWVIgNZMVOzNTMC1KXla/I 7SVWDRwoe2RXHJXUsJnrnmpDrZys+WIDrCG9k1sJYVteOgoeBIJXWKCSsu00LmCG jwz3yM9/awICD2jPYWBh6k6+bnSuWQpeASTfDyx+zfu91Fvrxue2u3UEnpT6ilG5 DjLXXf0vjCBLiP0Pn5s/LqyHs59xAJq1iwC2SzyDVJtz33rZMhAKbazGAuaiIdl9 PTlfcV7UBsQuDjFDPsubAk12XPWwsx3D3Q5hSC0yaKDaND1O+uyBvYw3VhDkilJD 2Py+lqMlkQOi0V5jVohAE+UZqsAG0VR2h8tmcjnGkqa+azHb5ICBeAwu2eIf8w== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHneBe/C0kqOxuYyBvY2 sPfLi9wILBfxlgTag8q1BFBRD8iw+GJxFQ/14Rhi8rOz7jmAACpQd3FLwp7tdM5b 8gLMlz9EMDaohVvOYITMTNYA+KBlEXBiF44gHBPd7RKBu3FA2cHEq/RAA514z2zZ SPoPVQNEzsN+5CI5OxAm8dmtFXNdc46wp87CdfThdLir9dKeO9uB+nyOGwDfB2ds ex8e87k5pRLmHMR1VJ/ww0qbJVR0in7FGWGyyauysSM/x+4NKzuOLVp2YurikJKS sUUpfuI7cPHXFfucN0DcY/xIUyRYbWoXUU/LootNfLbdmJMsiq8Bk0QtpBhBRyuJ AwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 7882406097159589766576195160805022596 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust EV SSL CA - G4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-14 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-11 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '239055' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Michigan' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Allegan' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Perrigo Company' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'IT&S' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'mail.perrigo.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22278036668621061471250626885482501447154100060028076100782512867509503595684460217209211199724407140613480062681873552813765197096277992486237984353759181579716757553699053452441202227812269820068012263868952503929593339531283639262790352875473659054663362481085772904588625723507302181059583180201037006708808072188933703492713080554192294361610117402530506113834299173435567095716469106097605127422346231403473395662315766289681165209516294336084876231247802818275519433424268264108120257429195272149368092645634688207797072770960292030916595404677866943427904107592042309205750507314716630398143971385138687478019 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (186 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.perrigo.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.perrigouk.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.perrigo.co.il' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailil.perrigo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.perrigo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.perrigo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.perrigo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.perrigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (152 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName decf5c50b7ae021f1517aa16e80db5289d6a5af3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 003c279654880d64c54eccd4cc0b529795afc8ed25560d1c287b64571c95d4b099eb9e6a43ad9cacf96203ac21bd935b09615b5e3a0a1e04825758a092b2ed342e60868f0cf7c8cf7f6b02020f68cf616061ea4ebe6e74ae590a5e0124df0f2c7ecdfbbdd45bebc6e7b6bb75049e94fa8a51b90e32d75dfd2f8c204b88fd0f9f9b3f2eac87b39f71009ab58b00b64b3c83549b73df7ad932100a6dacc602e6a221d97d3d395f715ed406c42e0e31433ecb9b024d765cf5b0b31dc3dd0e61482d3268a0da343d4efaec81bd8c375610e48a5243d8fcbe96a3259103a2d15e6356884013e519aac006d1547687cb667239c692a6be6b31dbe48081780c2ed9e21ff3