mail.cmal.com
- CMRG Apparel, LLC -
Issued by GeoTrust SSL CA - G3
About this certificate
This digital certificate with serial number 10:c0:64:1f:0e:58:2f:2a:b3:4c:c1:58:62:10:aa:88 was issued on by GeoTrust Inc..
With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
CMRG Apparel, LLC
Organization:
CMRG Apparel, LLC
State / Province:
Massachusetts
Locality: Canton
Country: US
Locality: Canton
Country: US
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 10:c0:64:1f:0e:58:2f:2a:b3:4c:c1:58:62:10:aa:88Serial Number (int): 22266599630870142328908406699699776136
Serial Number lenght: 125 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c
Fingerprint (sha1): 56:46:57:06:cb:96:ee:06:45:1d:d7:f6:d9:2f:7e:80:52:46:34:da
Fingerprint (sha256): 6a:de:e3:2d:29:da:01:43:df:a3:a0:cf:9f:d0:aa:d2:3d:91:cf:37:02:07:e7:c8:be:ae:2c:40:a0:5b:17:4d
Issuing Certificate URL: http://gn.symcb.com/gn.crt
Revocation information
OCSP Server: http://gn.symcd.comCRL Distribution Point: http://gn.symcb.com/gn.crl
Check the revocation status for certificate mail.cmal.com
24
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mail.cmal.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
exchcasht01.dxlg.com
exchcasht02.dxlg.com
autodiscover.dxlg.com
dxlg.com
mail.dxlg.com
outlook.dxlg.com
Dr-mail.dxlg.com
exchcasht01.cmrgcorp.cmrginc.com
outlook.cmrgcorp.cmrginc.com
autodiscover.cmrgcorp.cmrginc.com
cas.cmrgcorp.cmrginc.com
cmrgcorp.cmrginc.com
exchcasht02.cmrgcorp.cmrginc.com
Dr-exchcasht03.cmrgcorp.cmrginc.com
Dr-exchcasht04.cmrgcorp.cmrginc.com
posmgw.cmal.com
Dr-exchcasht03.cmal.com
autodiscover.cmal.com
cas.cmal.com
cmal.com
outlook.cmal.com
Dr-exchcasht04.cmal.com
Dr-mail.cmal.com
mail.cmal.com
exchcasht02.dxlg.com
autodiscover.dxlg.com
dxlg.com
mail.dxlg.com
outlook.dxlg.com
Dr-mail.dxlg.com
exchcasht01.cmrgcorp.cmrginc.com
outlook.cmrgcorp.cmrginc.com
autodiscover.cmrgcorp.cmrginc.com
cas.cmrgcorp.cmrginc.com
cmrgcorp.cmrginc.com
exchcasht02.cmrgcorp.cmrginc.com
Dr-exchcasht03.cmrgcorp.cmrginc.com
Dr-exchcasht04.cmrgcorp.cmrginc.com
posmgw.cmal.com
Dr-exchcasht03.cmal.com
autodiscover.cmal.com
cas.cmal.com
cmal.com
outlook.cmal.com
Dr-exchcasht04.cmal.com
Dr-mail.cmal.com
mail.cmal.com
Other certificates including the domain name cmal.com
(limited to 100 certificates)
securemail.cmal.com
r2web1.dxlg.com
canton1.dxlg.com
mail.cmal.com
viewsecurity.cmal.com
mail.cmal.com
mail.cmal.com
help1.cmal.com
mail.cmal.com
securemail.cmal.com
mail.cmal.com
mail.cmal.com
securemail.cmal.com
securemail.cmal.com
mail.cmal.com
mail.cmal.com
r2web1.dxlg.com
mail.cmal.com
mail.cmal.com
mail.cmal.com
mail.cmal.com
mail.cmal.com
mail.cmal.com
mail.cmal.com
r2web1.dxlg.com
mail.cmal.com
mail.cmal.com
viewsecurity.cmal.com
r2web1.dxlg.com
r2web1.dxlg.com
canton1.dxlg.com
mail.cmal.com
viewsecurity.cmal.com
mail.cmal.com
mail.cmal.com
help1.cmal.com
mail.cmal.com
securemail.cmal.com
mail.cmal.com
mail.cmal.com
securemail.cmal.com
securemail.cmal.com
mail.cmal.com
mail.cmal.com
r2web1.dxlg.com
mail.cmal.com
mail.cmal.com
mail.cmal.com
mail.cmal.com
mail.cmal.com
mail.cmal.com
mail.cmal.com
r2web1.dxlg.com
mail.cmal.com
mail.cmal.com
viewsecurity.cmal.com
r2web1.dxlg.com
Certificate
The complete raw certificate details for mail.cmal.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIdjCCB16gAwIBAgIQEMBkHw5YLyqzTMFYYhCqiDANBgkqhkiG9w0BAQsFADBE MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTcwOTEzMDAwMDAwWhcNMTkwOTI4MjM1 OTU5WjBqMQswCQYDVQQGEwJVUzEWMBQGA1UECAwNTWFzc2FjaHVzZXR0czEPMA0G A1UEBwwGQ2FudG9uMRowGAYDVQQKDBFDTVJHIEFwcGFyZWwsIExMQzEWMBQGA1UE AwwNbWFpbC5jbWFsLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB ALgALfKJBl4/wFJ90mmUTTo2wtPE6d/cfdrWX6iTV5gPWBWhJYNGJSADl0BGl6cr L9yz8W7C29mIxAQld+A3TKQjML/5eLYoqo9uHbiNhVXHeld3P8YsoalVbkZoJJrK uBt80j4R85TEIZWi1tZfdaxtRC+XVtAOQ8GzBO7+qW4VVviGLw1w0yHrtnpBSLld MVCkuXA+bb/6I41fUmjU9kSxPvIcCKr5ZZU0rHY37zZO+nQ9f7WMIf46U9PyIWTY lW26KqBTn4HwP0k4hhZBkmQLuIKEnhoKC1T5Iqibz74V4Tpa1jPZKoqPBPbnPvLE wIf8xyStUthoL8t5voYZzi0CAwEAAaOCBTwwggU4MIICMQYDVR0RBIICKDCCAiSC FGV4Y2hjYXNodDAxLmR4bGcuY29tghRleGNoY2FzaHQwMi5keGxnLmNvbYIVYXV0 b2Rpc2NvdmVyLmR4bGcuY29tgghkeGxnLmNvbYINbWFpbC5keGxnLmNvbYIQb3V0 bG9vay5keGxnLmNvbYIQRHItbWFpbC5keGxnLmNvbYIgZXhjaGNhc2h0MDEuY21y Z2NvcnAuY21yZ2luYy5jb22CHG91dGxvb2suY21yZ2NvcnAuY21yZ2luYy5jb22C IWF1dG9kaXNjb3Zlci5jbXJnY29ycC5jbXJnaW5jLmNvbYIYY2FzLmNtcmdjb3Jw LmNtcmdpbmMuY29tghRjbXJnY29ycC5jbXJnaW5jLmNvbYIgZXhjaGNhc2h0MDIu Y21yZ2NvcnAuY21yZ2luYy5jb22CI0RyLWV4Y2hjYXNodDAzLmNtcmdjb3JwLmNt cmdpbmMuY29tgiNEci1leGNoY2FzaHQwNC5jbXJnY29ycC5jbXJnaW5jLmNvbYIP cG9zbWd3LmNtYWwuY29tghdEci1leGNoY2FzaHQwMy5jbWFsLmNvbYIVYXV0b2Rp c2NvdmVyLmNtYWwuY29tggxjYXMuY21hbC5jb22CCGNtYWwuY29tghBvdXRsb29r LmNtYWwuY29tghdEci1leGNoY2FzaHQwNC5jbWFsLmNvbYIQRHItbWFpbC5jbWFs LmNvbYINbWFpbC5jbWFsLmNvbTAJBgNVHRMEAjAAMA4GA1UdDwEB/wQEAwIFoDAr BgNVHR8EJDAiMCCgHqAchhpodHRwOi8vZ24uc3ltY2IuY29tL2duLmNybDCBnQYD VR0gBIGVMIGSMIGPBgZngQwBAgIwgYQwPwYIKwYBBQUHAgEWM2h0dHBzOi8vd3d3 Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvcmVwb3NpdG9yeS9sZWdhbDBBBggrBgEF BQcCAjA1DDNodHRwczovL3d3dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL3JlcG9z aXRvcnkvbGVnYWwwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB8GA1Ud IwQYMBaAFNJv95b0hT9yPDB9I9qFeJujfFp8MFcGCCsGAQUFBwEBBEswSTAfBggr BgEFBQcwAYYTaHR0cDovL2duLnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDov L2duLnN5bWNiLmNvbS9nbi5jcnQwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB1 AN3rHSt6DU+mIIuBrYFocH4ujp0B1VyIjT0RxM227L7MAAABXn0KojcAAAQDAEYw RAIgGMrK0sNR3OFKWIyLMkZx1DfoDCSlpEruNBWqJqJypx4CIA1DoelnIZJ4apif ti9NAIVXo38IrR43OGtQ6hz/J4meAHYApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+4 43fNDsgN3BAAAAFefQqicwAABAMARzBFAiEA29Cr6OYUIqCntWSNm/FdB8juc0Ru FaQFAJSfBKvMcOQCIDDxcfAgwBS5+ZjlDAyqTq3c4ov6P37Njt9JvRC8b5i3AHcA 7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo/csAAAFefQqkKwAABAMASDBG AiEAvBtteMXvLe2cLzGbLj5Ko9Brfc/hh2eW2A0YBX9u27MCIQCTcvx1QNFvm/al dq/SZ4GXUj9qxmZP0wMgUqnF2TeW1TANBgkqhkiG9w0BAQsFAAOCAQEAJBdUaSH6 S+RPW0rV0BgOBL+llwa6pCknmIQvHieA4vBuE8zHHfIbst/lNu0DN+9c78lrU4aL 7r9/ENY3LKUryiVgHLxZiq1C1c3rdWoALUZGjJN21daiNk4NtpVFfHfKBbQMHCDC 3FL/wo3WGhXt+DgpGblGHvsAcajbjUw7LToA7GSb6LmGb6EH24uFp4hgm4xig6jC 4ZlsZIwIIZUM9Zh5wDzG/e53QHLUwaqz/iFsbt8wBKPP3xhW1RAByiE1i1Wv5IIt 8YS2KDHp1c9qWfZTd3LiY/SeBFKeGwvefzWoiROb0TZpcxBv3eC6U9W02QBv1MYg rx+G0NKIhWfxtA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAAt8okGXj/AUn3SaZRN OjbC08Tp39x92tZfqJNXmA9YFaElg0YlIAOXQEaXpysv3LPxbsLb2YjEBCV34DdM pCMwv/l4tiiqj24duI2FVcd6V3c/xiyhqVVuRmgkmsq4G3zSPhHzlMQhlaLW1l91 rG1EL5dW0A5DwbME7v6pbhVW+IYvDXDTIeu2ekFIuV0xUKS5cD5tv/ojjV9SaNT2 RLE+8hwIqvlllTSsdjfvNk76dD1/tYwh/jpT0/IhZNiVbboqoFOfgfA/STiGFkGS ZAu4goSeGgoLVPkiqJvPvhXhOlrWM9kqio8E9uc+8sTAh/zHJK1S2Ggvy3m+hhnO LQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 22266599630870142328908406699699776136 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-13 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-28 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Massachusetts' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Canton' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CMRG Apparel, LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mail.cmal.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23227936619649476969389222056866137917847241292492940678189926964249724760683529405254804617706977336605596898582190204503011138073032693358056103750059062753094091233157619531388160894689762726589963289788880129601306061098216786300467612487085983582788531453063968934983437921627318532350088793064534750639401422735001931815729956426329247814945481704299396628094500090672156754009757385335597991123822838388183456348466004872386053315059350644776987336293750257236096458174955031357943583446470306106349033917022321467603572892273945896520966998196381619021961705935922112673889842336442982818848483306049287867949 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (552 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchcasht01.dxlg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchcasht02.dxlg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.dxlg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dxlg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.dxlg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outlook.dxlg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Dr-mail.dxlg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchcasht01.cmrgcorp.cmrginc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outlook.cmrgcorp.cmrginc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.cmrgcorp.cmrginc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cas.cmrgcorp.cmrginc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmrgcorp.cmrginc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchcasht02.cmrgcorp.cmrginc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Dr-exchcasht03.cmrgcorp.cmrginc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Dr-exchcasht04.cmrgcorp.cmrginc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'posmgw.cmal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Dr-exchcasht03.cmal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.cmal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cas.cmal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outlook.cmal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Dr-exchcasht04.cmal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Dr-mail.cmal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.cmal.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 002417546921fa4be44f5b4ad5d0180e04bfa59706baa4292798842f1e2780e2f06e13ccc71df21bb2dfe536ed0337ef5cefc96b53868beebf7f10d6372ca52bca25601cbc598aad42d5cdeb756a002d46468c9376d5d6a2364e0db695457c77ca05b40c1c20c2dc52ffc28dd61a15edf8382919b9461efb0071a8db8d4c3b2d3a00ec649be8b9866fa107db8b85a788609b8c6283a8c2e1996c648c0821950cf59879c03cc6fdee774072d4c1aab3fe216c6edf3004a3cfdf1856d51001ca21358b55afe4822df184b62831e9d5cf6a59f6537772e263f49e04529e1b0bde7f35a889139bd1366973106fdde0ba53d5b4d9006fd4c620af1f86d0d2888567f1b4