a.warren-wilson.edu

- Warren Wilson College -

Issued by GeoTrust SHA256 SSL CA

About this certificate

This digital certificate with serial number 0e:12:fa:10:2b:82:c6:72:8e:13:bf:cd:74:36:6e:07 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Warren Wilson College

Organization: Warren Wilson College
Organization unit: hosting
State / Province: North Carolina
Locality: Asheville
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:12:fa:10:2b:82:c6:72:8e:13:bf:cd:74:36:6e:07
Serial Number (int): 18707725167959915184400145694976273927
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 14:67:8e:ed:83:4f:d6:1e:9d:40:04:0c:04:46:a1:70:34:b2:0f:72

Fingerprint (sha1): ab:ce:5b:53:b9:21:2a:e5:17:df:5d:1d:a2:fa:46:24:ea:2f:cc:30
Fingerprint (sha256): 6c:8f:c1:e2:f3:2b:4b:61:98:a9:22:d5:7f:90:eb:2c:a0:7c:05:8c:f3:d8:1c:39:92:71:98:d2:c2:fa:ea:e9

Issuing Certificate URL: http://gj.symcb.com/gj.crt

Revocation information

OCSP Server: http://gj.symcd.com
CRL Distribution Point: http://gj.symcb.com/gj.crl

Check the revocation status for certificate a.warren-wilson.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for a.warren-wilson.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

a.warren-wilson.edu

Other certificates including the domain name warren-wilson.edu

(limited to 100 certificates)
5727270706610176-fe1.pantheonsite.io
*.warren-wilson.edu
5727270706610176-fe1.pantheonsite.io
warren-wilson.edu
www.rotanaservicedesk.com
5727270706610176-fe1.pantheonsite.io
moodle.warren-wilson.edu
helpdesk.renin.com
5727270706610176-fe1.pantheonsite.io
warren-wilson.edu
helpdesk.warren-wilson.edu
5727270706610176-fe1.pantheonsite.io
5727270706610176-fe1.pantheonsite.io
5727270706610176-fe1.pantheonsite.io
5727270706610176-fe1.pantheonsite.io
5727270706610176-fe1.pantheonsite.io
warren-wilson.edu
helpdesk.warren-wilson.edu
itservicedesk.intactpublicentities.ca
helpdesk.posnackschool.org
inside.warren-wilson.edu
falcon.warren-wilson.edu
5727270706610176-fe1.pantheonsite.io
5727270706610176-fe1.pantheonsite.io
5727270706610176-fe1.pantheonsite.io
campusweb.warren-wilson.edu
5727270706610176-fe1.pantheonsite.io
moodle.warren-wilson.edu
5727270706610176-fe1.pantheonsite.io
*.warren-wilson.edu
sni.cloudflaressl.com
5727270706610176-fe1.pantheonsite.io
falcon.warren-wilson.edu
5727270706610176-fe1.pantheonsite.io
5727270706610176-fe1.pantheonsite.io
5727270706610176-fe1.pantheonsite.io
a.warren-wilson.edu
5727270706610176-fe1.pantheonsite.io
helpdesk.warren-wilson.edu
5727270706610176-fe1.pantheonsite.io
warren-wilson.edu
www.warren-wilson.edu
servicedesk.primehealthcare.com
5727270706610176-fe1.pantheonsite.io
www.rotanaservicedesk.com
5727270706610176-fe1.pantheonsite.io
5727270706610176-fe1.pantheonsite.io
5727270706610176-fe1.pantheonsite.io
5727270706610176-fe1.pantheonsite.io
5727270706610176-fe1.pantheonsite.io
5727270706610176-fe1.pantheonsite.io
5727270706610176-fe1.pantheonsite.io
5727270706610176-fe1.pantheonsite.io
5727270706610176-fe1.pantheonsite.io
admissions.warren-wilson.edu
5727270706610176-fe1.pantheonsite.io
helpdesk.warren-wilson.edu
a.warren-wilson.edu
5727270706610176-fe1.pantheonsite.io
campusweb.warren-wilson.edu
5727270706610176-fe1.pantheonsite.io
5727270706610176-fe1.pantheonsite.io
helpdesk.warren-wilson.edu
5727270706610176-fe1.pantheonsite.io
*.warren-wilson.edu
sni.cloudflaressl.com
5727270706610176-fe1.pantheonsite.io
a.warren-wilson.edu
5727270706610176-fe1.pantheonsite.io
*.warren-wilson.edu
servicedesk.hardwoodlumber.net
sts.warren-wilson.edu
5727270706610176-fe1.pantheonsite.io
5727270706610176-fe1.pantheonsite.io
5727270706610176-fe1.pantheonsite.io
www.rotanaservicedesk.com
5727270706610176-fe1.pantheonsite.io
mail.warren-wilson.edu
campusweb.warren-wilson.edu
5727270706610176-fe1.pantheonsite.io
5727270706610176-fe1.pantheonsite.io
helpdesk.posnackschool.org
5727270706610176-fe1.pantheonsite.io
5727270706610176-fe1.pantheonsite.io
5727270706610176-fe1.pantheonsite.io
www.rotanaservicedesk.com
a.warren-wilson.edu
5727270706610176-fe1.pantheonsite.io
mail.warren-wilson.edu
5727270706610176-fe1.pantheonsite.io
5727270706610176-fe1.pantheonsite.io
5727270706610176-fe1.pantheonsite.io
warren-wilson.edu
5727270706610176-fe1.pantheonsite.io
5727270706610176-fe1.pantheonsite.io
mail.warren-wilson.edu
5727270706610176-fe1.pantheonsite.io
itservicedesk.intactpublicentities.ca
itservicedesk.intactpublicentities.ca
it-helpdesk.dtgo.com

Certificate

The complete raw certificate details for a.warren-wilson.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGhTCCBW2gAwIBAgIQDhL6ECuCxnKOE7/NdDZuBzANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEfMB0GA1UEAxMW
R2VvVHJ1c3QgU0hBMjU2IFNTTCBDQTAeFw0xNjA2MTMwMDAwMDBaFw0xODA2MTMy
MzU5NTlaMIGKMQswCQYDVQQGEwJVUzEXMBUGA1UECAwOTm9ydGggQ2Fyb2xpbmEx
EjAQBgNVBAcMCUFzaGV2aWxsZTEeMBwGA1UECgwVV2FycmVuIFdpbHNvbiBDb2xs
ZWdlMRAwDgYDVQQLDAdob3N0aW5nMRwwGgYDVQQDDBNhLndhcnJlbi13aWxzb24u
ZWR1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTUv5PaGPo0RsYTc
Kp2HTIOVTvH3NPnzyevCxwcoMfmHu7/zX8i9inaD0H/JysksdIYxtvboyImpMCyW
ETFjcxs8+gCVAkaqaiNQqrFyrzO7WG8TMCOAw1QN91bCRx+ov1ZyxeCJW7YUx8BB
yefojfngIaqRcUxgG0J7cxS3jyL4b3wu8T6x6qXYBEbVgYRQI+Xxd3jpMbQ4ZK7t
OXS+dITJ4dJnamfZveA5bqVtP7PfkkE93EtKT9LdMkBggK7/zGW3hlau4g/y/PXU
z1Zx9E8KdqG0uQbGXN7ttFUs0foz9KQ6L0c6S05uY0Y+aZVe30erB7kaeYtchrfA
NFuzvwIDAQABo4IDKDCCAyQwHgYDVR0RBBcwFYITYS53YXJyZW4td2lsc29uLmVk
dTAJBgNVHRMEAjAAMA4GA1UdDwEB/wQEAwIFoDArBgNVHR8EJDAiMCCgHqAchhpo
dHRwOi8vZ2ouc3ltY2IuY29tL2dqLmNybDCBnQYDVR0gBIGVMIGSMIGPBgZngQwB
AgIwgYQwPwYIKwYBBQUHAgEWM2h0dHBzOi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNv
dXJjZXMvcmVwb3NpdG9yeS9sZWdhbDBBBggrBgEFBQcCAjA1DDNodHRwczovL3d3
dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL3JlcG9zaXRvcnkvbGVnYWwwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFBRnju2DT9YenUAE
DARGoXA0sg9yMFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDovL2dq
LnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL2dqLnN5bWNiLmNvbS9nai5j
cnQwggF/BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB2AN3rHSt6DU+mIIuBrYFocH4u
jp0B1VyIjT0RxM227L7MAAABVUtwWmwAAAQDAEcwRQIgeXyEPXSWcFgzZRvYShwn
RH1rRzrBgo2y+NzXMXzh2pYCIQCB0XFKIcZTNRkdb1gwO0d7VydssNaKBd06QXLx
cN2unAB2AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABVUtwWqsA
AAQDAEcwRQIhAOBLyLo3c0PXczkKBUeSwWT0mypguxurjTIJH/AOAzssAiBrRCAT
NRdhGRUBBLoMjTAJZCm9/0g8GwYqEP5EEEiWYwB3AGj2mPgfZIK+OozuuSgdTPxx
UV1nk9RE0QpnrLtPT/vEAAABVUtwWpEAAAQDAEgwRgIhAL4stgueXu1P33yH9ADe
VqwBGIBxstBI4ciIJvk2kbjzAiEAyme9cKfgNY1EZjkjSFipiUrRoxurO7ZAl3rP
9z1RS3cwDQYJKoZIhvcNAQELBQADggEBAJtcPUZN+D04TCnT4vdDQ2mU5FbHTBdu
IZeojotn0A3g9SdTvYCc9cHBD8KUJ8lCLjdYsA9g4ODgf3kec6Fl7JQU9tWuD5H5
c8cOFyoZUkyauZJ7vvhP7wP3xvSMBEqpWNMi/j/7UuzZg/Rr9nZsVSvL6NUpJtST
y251Z5bMTXp+RREkjAj8bqpeTuhQLnuuVSQKyraiH+o0GMBNu7U1W1U//YbyhZWa
WwLLnmSH3Wud1mJgeZ+G7eoSGwxRVKxjyjCrN2liHcMFniEsp1aENnYEzdlP/8yD
Eza4CUj6+uQYbYCefaSr3Hf03ZuY1QzKWK6LBtc0b7QFTA/kdo9nDVg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTUv5PaGPo0RsYTcKp2H
TIOVTvH3NPnzyevCxwcoMfmHu7/zX8i9inaD0H/JysksdIYxtvboyImpMCyWETFj
cxs8+gCVAkaqaiNQqrFyrzO7WG8TMCOAw1QN91bCRx+ov1ZyxeCJW7YUx8BByefo
jfngIaqRcUxgG0J7cxS3jyL4b3wu8T6x6qXYBEbVgYRQI+Xxd3jpMbQ4ZK7tOXS+
dITJ4dJnamfZveA5bqVtP7PfkkE93EtKT9LdMkBggK7/zGW3hlau4g/y/PXUz1Zx
9E8KdqG0uQbGXN7ttFUs0foz9KQ6L0c6S05uY0Y+aZVe30erB7kaeYtchrfANFuz
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18707725167959915184400145694976273927
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'North Carolina'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Asheville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Warren Wilson College'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'hosting'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'a.warren-wilson.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24390220388783318268337905788171754597415632779353916784453986383369165735366340246535984968376670696797298957603036494756720417441085103657019632620743360954249066779850213598842119684489531355819494365840752164025894395715926510291210714278790301278588303215850016191293060257614386627337247621500911468812133944786542889926841598628773931883831104005764576580369724850880391892061142499494890300450857865805119138222913488204233878934639547843566028643782725647453850289177555291849822286594599248983396369030681832494690807555284130420566042708345388724132430929813407259051064445005872811879132650175301546652607
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.warren-wilson.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcb.com/gj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 14678eed834fd61e9d40040c0446a17034b20f72
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcb.com/gj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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