www.facton.com

- FACTON GmbH -

Issued by GeoTrust SHA256 SSL CA

About this certificate

This digital certificate with serial number 30:4b:30:1d:e9:22:9c:96:1d:a2:00:90:8c:c3:fa:ca was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

FACTON GmbH

Organization: FACTON GmbH
State / Province: Brandenburg
Locality: Potsdam
Country: DE

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 30:4b:30:1d:e9:22:9c:96:1d:a2:00:90:8c:c3:fa:ca
Serial Number (int): 64193341987495612389927172719048391370
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 14:67:8e:ed:83:4f:d6:1e:9d:40:04:0c:04:46:a1:70:34:b2:0f:72

Fingerprint (sha1): 7a:69:12:96:8a:83:eb:2d:60:d2:96:af:92:05:2f:85:cf:62:d4:a1
Fingerprint (sha256): 6b:4e:38:c4:e3:53:df:11:6a:1e:11:a0:82:59:a2:76:be:7e:fc:91:56:9f:fe:f0:8a:f7:d8:9a:b2:a9:cd:b1

Issuing Certificate URL: http://gj.symcb.com/gj.crt

Revocation information

OCSP Server: http://gj.symcd.com
CRL Distribution Point: http://gj.symcb.com/gj.crl

Check the revocation status for certificate www.facton.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.facton.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.facton.com
facton.com

Other certificates including the domain name facton.com

(limited to 100 certificates)
success.midaxo.com
success.midaxo.com
fdeuc-2.freshdesk.com
alpha.facton.com
success.midaxo.com
success.midaxo.com
success.midaxo.com
success.midaxo.com
events.facton.com
success.midaxo.com
events.facton.com
events.facton.com
events.facton.com
mail.facton.com
success.midaxo.com
success.midaxo.com
www.facton.com
fdeuc-2.freshdesk.com
success.midaxo.com
fdeuc-2.freshdesk.com
fdeuc-2.freshdesk.com
fdeuc-2.freshdesk.com
success.midaxo.com
fdeuc-2.freshdesk.com
fdeuc-2.freshdesk.com
success.midaxo.com
success.midaxo.com
fdeuc-2.freshdesk.com
events.facton.com
events.facton.com
success.midaxo.com
fdeuc-2.freshdesk.com
success.midaxo.com
success.midaxo.com
support.facton.com
success.midaxo.com
success.midaxo.com
success.midaxo.com
success.midaxo.com
content.facton.com
www.facton.com
fdeuc-2.freshdesk.com
fdeuc-2.freshdesk.com
fdeuc-2.freshdesk.com
blog.facton.com
support.facton.com
success.midaxo.com
success.midaxo.com
success.midaxo.com
success.midaxo.com
success.midaxo.com
www.facton.com
success.midaxo.com
content.facton.com
webpost.facton.com
success.midaxo.com
success.midaxo.com
success.midaxo.com
www.facton.com
mail.facton.com
secure0199.hubspot.com
success.midaxo.com
success.midaxo.com
success.midaxo.com
www.facton.com
success.midaxo.com
fdeuc-2.freshdesk.com
success.midaxo.com
content.facton.com
success.midaxo.com
dev-releasenotes.facton.com
success.midaxo.com
events.facton.com
mail.facton.com
success.midaxo.com
success.midaxo.com
blog.facton.com
success.midaxo.com
fdeuc-2.freshdesk.com
www.facton.com
success.midaxo.com
success.midaxo.com
success.midaxo.com
content.facton.com
success.midaxo.com
success.midaxo.com
success.midaxo.com
success.midaxo.com
secure0199.hubspot.com
content.facton.com
releasenotes.facton.com
www.facton.com
success.midaxo.com
qa-releasenotes.facton.com
fdeuc-2.freshdesk.com
success.midaxo.com
success.midaxo.com
blog.facton.com
success.midaxo.com
blog.facton.com

Certificate

The complete raw certificate details for www.facton.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF6zCCBNOgAwIBAgIQMEswHekinJYdogCQjMP6yjANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEfMB0GA1UEAxMW
R2VvVHJ1c3QgU0hBMjU2IFNTTCBDQTAeFw0xNzExMDEwMDAwMDBaFw0xODExMDEy
MzU5NTlaMGQxCzAJBgNVBAYTAkRFMRQwEgYDVQQIDAtCcmFuZGVuYnVyZzEQMA4G
A1UEBwwHUG90c2RhbTEUMBIGA1UECgwLRkFDVE9OIEdtYkgxFzAVBgNVBAMMDnd3
dy5mYWN0b24uY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAty0n
UXfM4ibBA0Xir9I9BMF1i0yBOIt+K7JW4Zsv/TTA/OLlKZKfsT/OgBRn1nHQGOMJ
oFdcdmTzHuFy6+soBlTUvWTA8Vr7rIFgH/oCjK8P9DpAzJE52Q8OR7bz+luU0UDC
01v7OTmd16Q20dHKOVVNgW7L2LDEQ5nYKFm0WQbY1d5kZjvyKPquHseZYDQaMb+i
RiBNKGOKuWxRy7/PMCK2CF6VwcwlReaj+Wu117qvxwtDlrcnQ9qizslrE+K3nHaF
MdoP7QDt0jnweZJihvf0V9G/X9odK6DJqfEQhDx7uhrCyRw0QRfmXKRp+Zo1DSeC
a+DJWPT7uGxTaom+LwIDAQABo4ICtTCCArEwJQYDVR0RBB4wHIIOd3d3LmZhY3Rv
bi5jb22CCmZhY3Rvbi5jb20wCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwKwYD
VR0fBCQwIjAgoB6gHIYaaHR0cDovL2dqLnN5bWNiLmNvbS9nai5jcmwwgZ0GA1Ud
IASBlTCBkjCBjwYGZ4EMAQICMIGEMD8GCCsGAQUFBwIBFjNodHRwczovL3d3dy5n
ZW90cnVzdC5jb20vcmVzb3VyY2VzL3JlcG9zaXRvcnkvbGVnYWwwQQYIKwYBBQUH
AgIwNQwzaHR0cHM6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9yZXBvc2l0
b3J5L2xlZ2FsMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSME
GDAWgBQUZ47tg0/WHp1ABAwERqFwNLIPcjBXBggrBgEFBQcBAQRLMEkwHwYIKwYB
BQUHMAGGE2h0dHA6Ly9nai5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9n
ai5zeW1jYi5jb20vZ2ouY3J0MIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcA3esd
K3oNT6Ygi4GtgWhwfi6OnQHVXIiNPRHEzbbsvswAAAFfeAr5+AAABAMASDBGAiEA
xRfqECc2IdngrFQbmmOhrwcRleflKp6zHtD7btqjeA4CIQDGskgJBDyXAuYKZKEA
otpAWnQy/I5bYEjxSWXQK3o12gB2AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3
zQ7IDdwQAAABX3gK+jQAAAQDAEcwRQIhAMRnEF5ALfioS2hGg3c06vYdGWgsJTjL
yflPZNl0tcw2AiBwEsDcuS5SqwSmOTXRTwRc8B5RbxEvB4rAbZQQtxjMXjANBgkq
hkiG9w0BAQsFAAOCAQEAPz51i40JI53rPNPriZrzI1+slr2878Hsw9Eheltuoro/
QKHssGdsgezttpTFMotWnXUi8iN0/FAdZ632GxnWHepoqnCRUAZZIIWVxGPC0eo6
IpgpkjOOCWPlOWqXhCou26GOWVmqiIcya4bOdlN7s3bJ83ag9o8bPJh3ZPYhfG7l
At8zBLq5K3/o2bB2hLOe0twTvFRuvYa49FH5Bih8a1D075aGcrgp9JZWqSqB5ixi
FRvSiSMVDggTGn2ihUkDL/WLKTnlOK/1fTW291iaV119lcPvz7WStHMb1apNvEuG
YNBW9Ivfe/DLSxc6wjAl4tWyISzliafx5ujNpXHHlw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAty0nUXfM4ibBA0Xir9I9
BMF1i0yBOIt+K7JW4Zsv/TTA/OLlKZKfsT/OgBRn1nHQGOMJoFdcdmTzHuFy6+so
BlTUvWTA8Vr7rIFgH/oCjK8P9DpAzJE52Q8OR7bz+luU0UDC01v7OTmd16Q20dHK
OVVNgW7L2LDEQ5nYKFm0WQbY1d5kZjvyKPquHseZYDQaMb+iRiBNKGOKuWxRy7/P
MCK2CF6VwcwlReaj+Wu117qvxwtDlrcnQ9qizslrE+K3nHaFMdoP7QDt0jnweZJi
hvf0V9G/X9odK6DJqfEQhDx7uhrCyRw0QRfmXKRp+Zo1DSeCa+DJWPT7uGxTaom+
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 64193341987495612389927172719048391370
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Brandenburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Potsdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'FACTON GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.facton.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23123875872333283099141967478635868652444604377841132140071439639806453388761674673035765330653068709999106022969623024938414439739592915907269529409792794574101819890900671004142344564651077997229877497667316699791822503511171159817208141649701179077060256958135789559038346603106207049701415779690485792192321979759166641253071301098182436156691645104648014772136824247464851014252618278181235768153901153999196528882186157834971125297035308762418756279763105282495168874710199571685890495774984548055387742038472935525465634242493337919208089872241290946890034102390597781756493905279202389364635899868629485338159
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.facton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facton.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcb.com/gj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 14678eed834fd61e9d40040c0446a17034b20f72
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcb.com/gj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015f780af9f80000040300483046022100c517ea10273621d9e0ac541b9a63a1af071195e7e52a9eb31ed0fb6edaa3780e022100c6b24809043c9702e60a64a100a2da405a7432fc8e5b6048f14965d02b7a35da007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015f780afa340000040300473045022100c467105e402df8a84b6846837734eaf61d19682c2538cbc9f94f64d974b5cc3602207012c0dcb92e52ab04a63935d14f045cf01e516f112f078ac06d9410b718cc5e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003f3e758b8d09239deb3cd3eb899af3235fac96bdbcefc1ecc3d1217a5b6ea2ba3f40a1ecb0676c81ecedb694c5328b569d7522f22374fc501d67adf61b19d61dea68aa7091500659208595c463c2d1ea3a22982992338e0963e5396a97842a2edba18e5959aa8887326b86ce76537bb376c9f376a0f68f1b3c987764f6217c6ee502df3304bab92b7fe8d9b07684b39ed2dc13bc546ebd86b8f451f906287c6b50f4ef968672b829f49656a92a81e62c62151bd28923150e08131a7da28549032ff58b2939e538aff57d35b6f7589a575d7d95c3efcfb592b4731bd5aa4dbc4b8660d056f48bdf7bf0cb4b173ac23025e2d5b2212ce589a7f1e6e8cda571c797