www.bauermedia.co.uk

- Bauer Corporate Services UK LP -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 41:54:83:71:b2:3c:35:c2:df:01:df:cf:2d:3a:00:72 was issued on by GeoTrust Inc..

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Bauer Corporate Services UK LP

Organization: Bauer Corporate Services UK LP
State / Province: Cambridgeshire
Locality: Peterborough
Country: GB

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 41:54:83:71:b2:3c:35:c2:df:01:df:cf:2d:3a:00:72
Serial Number (int): 86838638665738020917777319170949120114
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): eb:ef:18:31:8e:73:77:67:45:fe:c0:5c:54:d6:3d:d7:b7:c1:55:62
Fingerprint (sha256): 6c:b7:73:57:60:78:f0:3b:50:23:67:9c:1f:28:9b:29:6b:fd:d5:69:b9:25:e7:57:32:28:fe:d4:d2:36:51:1e

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate www.bauermedia.co.uk

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bauermedia.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webentry.bauerweb.co.uk
www.carmagazine.co.uk
cms.carmagazine.co.uk
lancaster.lro.com
www.spinnerwinner.co.uk
forum.practicalfishkeeping.co.uk
candidate.www.parkers.co.uk
beta.parkers.co.uk
candidate.beta.parkers.co.uk
www.parkers.co.uk
www.greatprints.co.uk
www.motorcyclenews.com
www.lembit.motorcyclenews.com
forum.motorcyclenews.com
creative.bauermedia.co.uk
www.bauermedia.co.uk
bauermedia.co.uk

Other certificates including the domain name bauermedia.co.uk

(limited to 100 certificates)
*.bauermedia.co.uk
www.bauermedia.co.uk
news.bauermedia.co.uk
sip.bauermedia.co.uk
news.bauermedia.co.uk
mail.bauermedia.co.uk
data.bauermedia.co.uk
lync.bauermedia.co.uk
mediavine.bauermedia.co.uk
data.bauermedia.co.uk
filesharing.bauermedia.co.uk
www.bauermedia.co.uk
mediavine.bauermedia.co.uk
myradiodesktop.bauermedia.co.uk
ldaps.bauermedia.co.uk
mail.bauermedia.co.uk
news.bauermedia.co.uk
ldaps.bauermedia.co.uk
*.bauermedia.co.uk
www.bauermedia.co.uk
news.bauermedia.co.uk
uat-masterdataservice.bauermedia.co.uk
dse.bauermedia.co.uk
www.bauermedia.co.uk
www.bauermedia.co.uk
lync.bauermedia.co.uk
sip.bauermedia.co.uk
dse.bauermedia.co.uk
bauermedia.co.uk
ldaps.bauermedia.co.uk
creative.bauermedia.co.uk
data.bauermedia.co.uk
dse.thompson-valves.com
rack.bauermedia.co.uk
*.bauermedia.co.uk
news.bauermedia.co.uk
*.bauermedia.co.uk
mail.bauermedia.co.uk
www.bauermedia.co.uk
www.bauermedia.co.uk
nextcloud.bauermedia.co.uk
careersportalfiles.bauermedia.co.uk
www.bauermedia.co.uk
www.bauermedia.co.uk
lyncdiscover.bauermedia.co.uk
magazineanddigital.bauermedia.co.uk
bauermedia.co.uk
mail.bauermedia.co.uk
*.bauermedia.co.uk
production.bauercreative.net
filesharing.csaws.bauermedia.co.uk
www.stg.bauermedia.co.uk
careershub.bauermedia.co.uk
mediastorage-lls.bauermedia.co.uk
www.bauermedia.co.uk
radioawards.bauermedia.co.uk
filesharing.csaws.bauermedia.co.uk
*.bauermedia.co.uk
nextcloud.bauermedia.co.uk
*.data.bauermedia.co.uk
www.bauermedia.co.uk
my.bauermedia.co.uk
filesharing.csaws.bauermedia.co.uk
bauermedia.co.uk
*.bauermedia.co.uk
myvpn.bauermedia.co.uk
www.bauermedia.co.uk
bauermedia.co.uk
fbhost.bauermedia.co.uk
bauermedia.co.uk
data.bauermedia.co.uk
myradiodesktop.bauermedia.co.uk
www.bauermedia.co.uk
filesharing.csaws.bauermedia.co.uk
www.bauermedia.co.uk
www.bauermedia.co.uk
www.bauermedia.co.uk
mail.bauermedia.co.uk
sip-pbo.bauermedia.co.uk
news.bauermedia.co.uk
*.bauermedia.co.uk
mail.bauermedia.co.uk
dse.bauermedia.co.uk
mail.bauermedia.co.uk
myview.bauermedia.co.uk
kibana.csaws.bauermedia.co.uk
*.bauermedia.co.uk
*.bauermedia.co.uk
mail.bauermedia.co.uk
*.data.bauermedia.co.uk
digitalsales.bauermedia.co.uk
careersportalfiles.bauermedia.co.uk
www.bauermedia.co.uk
www.bauermedia.co.uk
*.bauermedia.co.uk
mediavine.bauermedia.co.uk
fbhost.bauermedia.co.uk
www.bauermedia.co.uk
formbuilder.bauermedia.co.uk
nextcloud.bauermedia.co.uk

Certificate

The complete raw certificate details for www.bauermedia.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYIFuh74DtJ3J6pV6CZx
EHoQFItb3oViaYUUbgCLMkBfiG8Rl5zVqu7IhHUv+3JvQ/26kpCKK9R9KOfPMdUC
g2A6QYxtWLx74ZDwp9SQF/To17Mjz7q/IHJy6WVjF6kE1MCfodIymPw1oOHEF+bV
DJX32BCAGTgrqNrKZ8xbLo4L//SsiQbZahRzfRIainl45wszkKF/Z6VaGtaYBINY
8PE9Kvtz2fMClzEG2/aH63Gb+2O0HPQZxZoYZyJrRN7pWcvPYkU08b2UDYbOwr0P
rOoO4LwjH6+00RDT5pgKpoyG0etqB/Nco6ongSegrKm1NjwdGldhudzCftVK2s9d
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 86838638665738020917777319170949120114
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Cambridgeshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Peterborough'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bauer Corporate Services UK LP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.bauermedia.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23418202839626416215900898360451762789132085802122704375641365156600297370318141280703485161655068797638625372358257974778320352169023075209624953766935889269191990082583603761842550213525073679957611420552347212874443236507907382254057676291052953323621085591284666010112888799343140812887860527287747498333724835508333165505183995534435576630567341144447350221075103134498812900270460288708015957113958780790886975278605232381802957331013458499841108486625270084903482558061193125012874864159027931837149629008322352825103587144904944490417409526775346429521509754342441790730172398371688758464093242350309609528687
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (422 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webentry.bauerweb.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.carmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lancaster.lro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spinnerwinner.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.practicalfishkeeping.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'candidate.www.parkers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.parkers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'candidate.beta.parkers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parkers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greatprints.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.motorcyclenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lembit.motorcyclenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.motorcyclenews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creative.bauermedia.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bauermedia.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bauermedia.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015aace576ff0000040300473045022043c82f812d01ad6c2eefc961f5fb978ea8888207a9f059e98852dc6f857f106a022100ef29d38838bdcc0bd43329072d560e71cddcb69daf13dcc3ff8485a485074def007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015aace5773c000004030046304402200bf477383762a99380fc68903cd16439d9af9c7affb5e56216a73083e19833020220015482a1021be130d88e8da8379d64135ac7edeef5fa9ee1a3f21af94abd9c43
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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