*.bestdoctor.ru

- OBSHCHESTVO S OGRANICHENNOJ OTVETSTVENNOSTYU BESTDOCTOR -

Issued by GeoTrust SHA256 SSL CA

About this certificate

This digital certificate with serial number 43:cf:24:15:21:97:c6:fe:5f:ea:78:2e:87:05:4f:7b was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

OBSHCHESTVO S OGRANICHENNOJ OTVETSTVENNOSTYU BESTDOCTOR

Organization: OBSHCHESTVO S OGRANICHENNOJ OTVETSTVENNOSTYU BESTDOCTOR
State / Province: Tulskaya oblast
Locality: Tula
Country: RU

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 43:cf:24:15:21:97:c6:fe:5f:ea:78:2e:87:05:4f:7b
Serial Number (int): 90133813008239709907161505249060278139
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 14:67:8e:ed:83:4f:d6:1e:9d:40:04:0c:04:46:a1:70:34:b2:0f:72

Fingerprint (sha1): f0:21:65:84:0e:e5:e1:b2:19:5a:0f:6b:00:26:b5:e3:e3:68:d0:25
Fingerprint (sha256): 72:96:e5:f0:b9:ae:75:63:96:83:2a:00:47:47:5f:2e:e3:66:72:de:d1:e3:89:5c:b2:74:5e:13:78:37:85:d1

Issuing Certificate URL: http://gj.symcb.com/gj.crt

Revocation information

OCSP Server: http://gj.symcd.com
CRL Distribution Point: http://gj.symcb.com/gj.crl

Check the revocation status for certificate *.bestdoctor.ru

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.bestdoctor.ru

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.bestdoctor.ru
bestdoctor.ru

Other certificates including the domain name bestdoctor.ru

(limited to 100 certificates)
www.bestdoctor.ru
bestdoctor.ru
redash.bestdoctor.ru
redash.bestdoctor.ru
a.bestdoctor.ru
bestdoctor.ru
redash.bestdoctor.ru
*.bestdoctor.ru
blog.bestdoctor.ru
bestdoctor.ru
a.bestdoctor.ru
bestdoctor.ru
bestdoctor.ru
blog.bestdoctor.ru
bestdoctor.ru
*.bestdoctor.ru
blog.bestdoctor.ru
cms.vrelovod-osijek.com.hr
bestdoctor.ru
foto.aot.to.it
bestdoctor.ru
seasons.mismith.io
link.bestdoctor.ru
*.bestdoctor.ru
bestdoctor.ru
bestdoctor.ru
bestdoctor.ru
share.kymdanshop.vn
bestdoctor.ru
*.bestdoctor.ru
bestdoctor.ru
nearfreshadmin.estore.business
bestdoctor.ru
bestdoctor.ru
a.bestdoctor.ru
bestdoctor.ru
*.bestdoctor.ru
*.bestdoctor.ru
bestdoctor.ru
app.oui.health
bestdoctor.ru
blog.bestdoctor.ru
bestdoctor.ru
bestdoctor.ru
*.bestdoctor.ru
bestdoctor.ru
bestdoctor.ru
bestdoctor.ru
bestdoctor.ru
dashboard.sortyou.io
www.hub361.com
bestdoctor.ru
blog.bestdoctor.ru
bestdoctor.ru
bestdoctor.ru
bestdoctor.ru
bestdoctor.ru
bestdoctor.ru
*.bestdoctor.ru
bestdoctor.ru
bestdoctor.ru
blog.bestdoctor.ru
bestdoctor.ru
a.bestdoctor.ru
*.bestdoctor.ru
bestdoctor.ru
*.bestdoctor.ru
bestdoctor.ru
*.bestdoctor.ru

Certificate

The complete raw certificate details for *.bestdoctor.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGHjCCBQagAwIBAgIQQ88kFSGXxv5f6nguhwVPezANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEfMB0GA1UEAxMW
R2VvVHJ1c3QgU0hBMjU2IFNTTCBDQTAeFw0xNzEwMjUwMDAwMDBaFw0xODEwMjUy
MzU5NTlaMIGSMQswCQYDVQQGEwJSVTEYMBYGA1UECAwPVHVsc2theWEgb2JsYXN0
MQ0wCwYDVQQHDARUdWxhMUAwPgYDVQQKDDdPQlNIQ0hFU1RWTyBTIE9HUkFOSUNI
RU5OT0ogT1RWRVRTVFZFTk5PU1RZVSBCRVNURE9DVE9SMRgwFgYDVQQDDA8qLmJl
c3Rkb2N0b3IucnUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCntvXo
Sjx0qpAl3yqM07OovFLpvRJddDdH8DQYePcB+qDJrTEHsX1Hm2ZyK/BDLLMgsdE8
kfcuQvfMcJcR6UTGashib5x6VFypZh0+995IF11+smExP/NVnO1y4DaAoYi1FnOj
uxqizBD6S+g1OpUTOlG6wKrj3AMwgdmkM9zKfdBpt+Ik72dsPsZQluxypWjULPEt
JC937MLpKdb+g8A5Y6n/Rf4QcvJKmdhFGeoFlnxWjXBOlZlRTz02z1IaOKEp8CDy
rMiuL1XffzVDIUm/rybVJBkAeMHI3BZ/C2KLCe8IiExNnE5tbC+B3obibg3AxxTM
Tg2+YupPi6GL1mZ7AgMBAAGjggK5MIICtTApBgNVHREEIjAggg8qLmJlc3Rkb2N0
b3IucnWCDWJlc3Rkb2N0b3IucnUwCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAw
KwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL2dqLnN5bWNiLmNvbS9nai5jcmwwgZ0G
A1UdIASBlTCBkjCBjwYGZ4EMAQICMIGEMD8GCCsGAQUFBwIBFjNodHRwczovL3d3
dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL3JlcG9zaXRvcnkvbGVnYWwwQQYIKwYB
BQUHAgIwNQwzaHR0cHM6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9yZXBv
c2l0b3J5L2xlZ2FsMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNV
HSMEGDAWgBQUZ47tg0/WHp1ABAwERqFwNLIPcjBXBggrBgEFBQcBAQRLMEkwHwYI
KwYBBQUHMAGGE2h0dHA6Ly9nai5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6
Ly9nai5zeW1jYi5jb20vZ2ouY3J0MIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYA
3esdK3oNT6Ygi4GtgWhwfi6OnQHVXIiNPRHEzbbsvswAAAFfUrTX2QAABAMARzBF
AiEAuBY2sLBPLu7nwZX1ktfWK87Q7ZT/FZNQWxZvBuzMWHgCIE5ny4xPvhO3x/M4
8tKytF8a9CsNK0+yAw2C8Cn8BuIUAHcApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+4
43fNDsgN3BAAAAFfUrTYLgAABAMASDBGAiEA749VxTUTMclaPHlWNRj+TDcoIUHl
0pDe80/Y1vPuO+gCIQDTuHXI5PP4mgoGZuvCXnyNFjPUOVWNC8cMKYTi88/boTAN
BgkqhkiG9w0BAQsFAAOCAQEAfKcWxB4E2r8XQ9Us/ylx9aeHxHLMbhMp4Uz5dzh3
fZoNcI3ogZrXzZPtF4ZkiRo73feD1S5oohKHtKk0XFiuCzI2pZrloR7J0IttAN2d
chG32duG9Yhg+/r+k4+CIKsg1rLqsuWHUMn1KJwY2PR1tLygyzDwHp+Ic7PZ0acg
F1UwujnYvb5eN9ZZsLc2Q9JtgsoN2nlcfzgVGqcBLwp/Z5dBZA9exoC6c1zD2oJu
oD9LnAU4fcuB1iQfiJwyBwRV1xyoryouNJ9sxbtTwSRj0L1R2A7xh5fWJ8iw61tN
3GcRFKLoUPjPhk+rNZY0smkLdzAlrqyR7oVaXNYkJ7a9ZQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7b16Eo8dKqQJd8qjNOz
qLxS6b0SXXQ3R/A0GHj3Afqgya0xB7F9R5tmcivwQyyzILHRPJH3LkL3zHCXEelE
xmrIYm+celRcqWYdPvfeSBddfrJhMT/zVZztcuA2gKGItRZzo7saoswQ+kvoNTqV
EzpRusCq49wDMIHZpDPcyn3QabfiJO9nbD7GUJbscqVo1CzxLSQvd+zC6SnW/oPA
OWOp/0X+EHLySpnYRRnqBZZ8Vo1wTpWZUU89Ns9SGjihKfAg8qzIri9V3381QyFJ
v68m1SQZAHjByNwWfwtiiwnvCIhMTZxObWwvgd6G4m4NwMcUzE4NvmLqT4uhi9Zm
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 90133813008239709907161505249060278139
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Tulskaya oblast'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Tula'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'OBSHCHESTVO S OGRANICHENNOJ OTVETSTVENNOSTYU BESTDOCTOR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.bestdoctor.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21172018151807316148338223972776417971978152333586770893964075747343927039539651221131560422863188422250321118315913753562527770184071286660697197812155034996548805598698574608462467078363677493491524300087010208215210259015454975444804985719308649252707978887822163061671453537151720889399115733630739141913748536845072916220277356339525216322548579099516037902940868039829644267949230078836424891276692914716174884721614992688727939935041310635538339054538680415489332212761608639911355635462593120607264302136506129527665003185515882249999903510867685391823264447141096492523704710103021899311074294399025238402683
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bestdoctor.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestdoctor.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcb.com/gj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 14678eed834fd61e9d40040c0446a17034b20f72
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcb.com/gj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015f52b4d7d90000040300473045022100b81636b0b04f2eeee7c195f592d7d62bced0ed94ff1593505b166f06eccc587802204e67cb8c4fbe13b7c7f338f2d2b2b45f1af42b0d2b4fb2030d82f029fc06e214007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015f52b4d82e0000040300483046022100ef8f55c5351331c95a3c79563518fe4c37282141e5d290def34fd8d6f3ee3be8022100d3b875c8e4f3f89a0a0666ebc25e7c8d1633d439558d0bc70c2984e2f3cfdba1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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