mail.praha2.cz

- Městská část Praha 2 -

Issued by GeoTrust SHA256 SSL CA

About this certificate

This digital certificate with serial number 11:f5:b9:10:f5:13:1a:ee:28:73:72:62:53:2e:eb:df was issued on by GeoTrust Inc..

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Městská část Praha 2

Organization: Městská část Praha 2
Organization unit: IT
State / Province: Praha 2
Locality: Praha 2
Country: CZ

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 11:f5:b9:10:f5:13:1a:ee:28:73:72:62:53:2e:eb:df
Serial Number (int): 23872742247958802567183186459622304735
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 14:67:8e:ed:83:4f:d6:1e:9d:40:04:0c:04:46:a1:70:34:b2:0f:72

Fingerprint (sha1): 09:70:9f:e7:9d:aa:ae:66:55:59:00:75:99:a6:5d:75:3a:e8:c3:79
Fingerprint (sha256): 6a:74:ea:1c:44:a0:04:3e:33:b6:cf:27:61:da:62:32:28:46:62:21:48:07:7b:43:40:1c:82:dd:dd:7d:4e:be

Issuing Certificate URL: http://gj.symcb.com/gj.crt

Revocation information

OCSP Server: http://gj.symcd.com
CRL Distribution Point: http://gj.symcb.com/gj.crl

Check the revocation status for certificate mail.praha2.cz

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.praha2.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

exch1.praha2.p2.mepnet.cz
autodiscover.p2.mepnet.cz
exch2013.praha2.p2.mepnet.cz
autodiscover.praha2.cz
legacymail.praha2.cz
mail.praha2.cz

Other certificates including the domain name praha2.cz

(limited to 100 certificates)
suport.staff.utcluj.app
helpme.agilico.co.uk
mail.praha2.cz
helpdesk.centurionukrs.com
*.praha2.cz
servicedesk.cheaperwaste.co.uk
kiss.praha2.cz
support.ecctis.com
cisgin1.praha2.cz
servicedesk.cheaperwaste.co.uk
servicedesk.restoredigital.co.uk
support.tuxexpert.com
mail.praha2.cz
support.ecctis.com
ides.praha2.cz
kiss.praha2.cz
servicedesk.cheaperwaste.co.uk
cisgin2.praha2.cz
servicedesk.cheaperwaste.co.uk
helpdesk.pfleiderer.pl
ithelpdesk.uteco.com
sd.sch1584.su
kiss.praha2.cz
servicedesk.hidefsurveying.co.uk
it-support.drkbg.de
kiss.praha2.cz
*.praha2.cz
servicedesk.ibisacam.at
support-services.gruener-punkt.de
*.praha2.cz
ides.praha2.cz
servicedesk.quorumdev.com
cisgin1.praha2.cz
kiss.praha2.cz
dsi.alivetravel.com
suport.staff.utcluj.app
*.praha2.cz
servicedesk.cheaperwaste.co.uk
encyklopedie.praha2.cz
helpdesk.zultys.com
sd.sch1584.su
support-services.gruener-punkt.de
support.tuxexpert.com
cisgin1.praha2.cz
ides.praha2.cz
helpdesk.derbigum.com
support-services.gruener-punkt.de
servicedesk.quorumdev.com
ithelpdesk.uteco.com
techteam.awayresorts.co.uk
kiss.praha2.cz
support.gjesdal.kommune.no
ithelpdesk.uteco.com
ithelpdesk.uteco.com
dsi.alivetravel.com
servicedesk.envisionpharma.com
helpdesk.praha2.cz
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
kiss.praha2.cz
kiss.praha2.cz
servicedesk.cheaperwaste.co.uk
cisgin1.praha2.cz
encyklopedie.praha2.cz
servicedesk.cheaperwaste.co.uk
servicedesk.cheaperwaste.co.uk
servicedesk.beauchamps.ie
mail.praha2.cz
support-services.gruener-punkt.de
helpdesk.derbigum.com
ides.praha2.cz
mail.praha2.cz
mail.praha2.cz
kiss.praha2.cz
mail.praha2.cz
servicedesk.chsgroup.org.uk
servicedesk.cheaperwaste.co.uk
servicedesk.beauchamps.ie
mail.praha2.cz
sdcloud.thenottingham.com
suport.staff.utcluj.app
servicedesk.cheaperwaste.co.uk
encyklopedie.praha2.cz
servicedesk.cheaperwaste.co.uk
sd.sch1584.su
kiss.praha2.cz
cisgin2.praha2.cz
helpdesk.pgzinternational.com
ides.praha2.cz
techteam.awayresorts.co.uk
kiss.praha2.cz
support.languagelink.ru
servicedesk.cheaperwaste.co.uk
encyklopedie.praha2.cz
mail.praha2.cz
mail.praha2.cz
servicedesk.envisionpharma.com
servicemanager.loacker.com
mail.praha2.cz

Certificate

The complete raw certificate details for mail.praha2.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgIQEfW5EPUTGu4oc3JiUy7r3zANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEfMB0GA1UEAxMW
R2VvVHJ1c3QgU0hBMjU2IFNTTCBDQTAeFw0xNTEwMTUwMDAwMDBaFw0xNzEyMTMy
MzU5NTlaMHoxCzAJBgNVBAYTAkNaMRAwDgYDVQQIDAdQcmFoYSAyMRAwDgYDVQQH
DAdQcmFoYSAyMSEwHwYDVQQKDBhNxJtzdHNrw6EgxI3DoXN0IFByYWhhIDIxCzAJ
BgNVBAsMAklUMRcwFQYDVQQDDA5tYWlsLnByYWhhMi5jejCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALSU15gvfDtnfQIhCyaR+d9Tzcmguj3WxUbPxUO8
hhEvuKa6Ofxl+T3gO+e62GUyVYGPsQqoyDWz6RnTFXu47jfvSIqBLj0AjdwVqll/
Y/zFhoQ+yWa+lL+NZjbvN4km8utx+8njI7yiJ7x8HYRhTedKNQaJU/GP8qqM1WBj
figvg0yYwJ6xvsoKmdvngg0JG2FeaGFFtfcru3WM/o+xYIWXETNdwguJyXyj7bkt
stM/Q8LUmPbf8TXOHEKdfL0cbebfJhshz05bAwzg5mdpFuMxNvQIlI7VwQaWnfsn
MBP2wQvv6sCUV25RcTmo6pE0aDRyYt2nontcNmMUrXkkzfUCAwEAAaOCAiUwggIh
MIGdBgNVHREEgZUwgZKCGWV4Y2gxLnByYWhhMi5wMi5tZXBuZXQuY3qCGWF1dG9k
aXNjb3Zlci5wMi5tZXBuZXQuY3qCHGV4Y2gyMDEzLnByYWhhMi5wMi5tZXBuZXQu
Y3qCFmF1dG9kaXNjb3Zlci5wcmFoYTIuY3qCFGxlZ2FjeW1haWwucHJhaGEyLmN6
gg5tYWlsLnByYWhhMi5jejAJBgNVHRMEAjAAMA4GA1UdDwEB/wQEAwIFoDArBgNV
HR8EJDAiMCCgHqAchhpodHRwOi8vZ2ouc3ltY2IuY29tL2dqLmNybDCBnQYDVR0g
BIGVMIGSMIGPBgZngQwBAgIwgYQwPwYIKwYBBQUHAgEWM2h0dHBzOi8vd3d3Lmdl
b3RydXN0LmNvbS9yZXNvdXJjZXMvcmVwb3NpdG9yeS9sZWdhbDBBBggrBgEFBQcC
AjA1DDNodHRwczovL3d3dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL3JlcG9zaXRv
cnkvbGVnYWwwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQY
MBaAFBRnju2DT9YenUAEDARGoXA0sg9yMFcGCCsGAQUFBwEBBEswSTAfBggrBgEF
BQcwAYYTaHR0cDovL2dqLnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL2dq
LnN5bWNiLmNvbS9nai5jcnQwDQYJKoZIhvcNAQELBQADggEBACywmwbHjyjZr2H1
zEMo+AHK6PyfNQo836ohKYMrxfTm3UUSxlSNtm6ZOJKbi5NzicI6s98IrCiMPX1I
fLzkViGka4smWqU8e2X3B5jResocafeCyR5jIVOXPZ0MgQnys56ERfFighP0hRUS
RJDSbtgFn7lkTy8F+82MRsSxxCHOwHfIdaMQNdepj+SVvGJJ9bU2C4OJ/gyiUiF6
AIryS8ZKS3P1dLWjOwyPMshExjRgp2a+GV5zs/qT3VBSv9okEt9t/AM21ymXt4Oy
UDU24Gwizz2NY8K5RfmI6DhMvegGYm4CF1tidYyBMIKOGR3PYzhD5bncjNwsJRLQ
TkKGvzk=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJTXmC98O2d9AiELJpH5
31PNyaC6PdbFRs/FQ7yGES+4pro5/GX5PeA757rYZTJVgY+xCqjINbPpGdMVe7ju
N+9IioEuPQCN3BWqWX9j/MWGhD7JZr6Uv41mNu83iSby63H7yeMjvKInvHwdhGFN
50o1BolT8Y/yqozVYGN+KC+DTJjAnrG+ygqZ2+eCDQkbYV5oYUW19yu7dYz+j7Fg
hZcRM13CC4nJfKPtuS2y0z9DwtSY9t/xNc4cQp18vRxt5t8mGyHPTlsDDODmZ2kW
4zE29AiUjtXBBpad+ycwE/bBC+/qwJRXblFxOajqkTRoNHJi3aeie1w2YxSteSTN
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 23872742247958802567183186459622304735
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Praha 2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Praha 2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Městská část Praha 2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mail.praha2.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22796291701440349492586930183436145569195523373967063914698326169912947394150154837455405386408683400380922102985671376655905596894620302252040494027483819850697078819762268478448362671421677984522729292125656123848578763528969929321091345343443587468048043167192766013839884646750283450151348146834219697816887356388611568712652448355827623611540508852895979016032567320193553216802517405495797797703983578846229908339914871838727274156552544563095273008065001123361258259361903859584319982858504139357485296840432073513097142497872536583376654384144749934869278376041853124210938101410286635192276765584861151153653
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exch1.praha2.p2.mepnet.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.p2.mepnet.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exch2013.praha2.p2.mepnet.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.praha2.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacymail.praha2.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.praha2.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcb.com/gj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 14678eed834fd61e9d40040c0446a17034b20f72
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcb.com/gj.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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