suntory.jp

- Suntory Business Expert Limited -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 76:60:b7:7c:ef:54:73:a6:c8:67:99:06:df:42:5f:0d was issued on by GeoTrust Inc..

With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Suntory Business Expert Limited

Organization: Suntory Business Expert Limited
Organization unit: Group System
State / Province: Osaka
Locality: Osaka
Country: JP

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 76:60:b7:7c:ef:54:73:a6:c8:67:99:06:df:42:5f:0d
Serial Number (int): 157351085580358049744348430212985413389
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): e8:6e:60:55:bd:15:e0:2a:f2:8d:66:66:a2:42:6b:e8:1a:95:4e:b1
Fingerprint (sha256): 79:80:28:95:84:67:f0:36:05:a9:28:03:46:59:d1:0a:13:dd:36:2d:eb:e7:ac:9b:9f:0d:76:a5:fa:de:ad:d4

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate suntory.jp

28

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for suntory.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

honeymoment.jp
bvs.s-boss.com
tennensui-cp.jp
cp.the-premium.jp
cvs.premiumcp.jp
kinmugistyle.jp
www.cp-tokucha.jp
kinmugi-thanks.jp
mastersdream-magazine.jp
allfreecp.jp
kiwamigreen.com
www.s-boss.com
cc.suntory-kenko.com
aws.the-premium.jp
pepsi-cp.jp
www-test.mastersdream-magazine.jp
www-test.the-premium.jp
the-premium.jp
www-test.horoyoi-cp.com
www.suntory-sunbirds.com
www-test.s-boss.com
www-test.196cp.jp
196cp.jp
www-test.allfreecp.jp
www.horoyoi-cp.com
www-test.kinmugi-thanks.jp
hb-cp.jp
suntory.jp

Other certificates including the domain name suntory.jp

(limited to 100 certificates)
san2.suntory.jp
suntory.jp
san2.suntory.jp
san3.suntory.jp
suntory.jp
san2.suntory.jp
san2.suntory.jp
san2.suntory.jp
san2.suntory.jp
suntory.jp
san2.suntory.jp
suntory.jp
suntory.jp
suntory.jp
suntory.jp
suntory.jp
suntory.jp
san2.suntory.jp
suntory.jp
san3.suntory.jp
suntory.jp
suntory.jp
suntory.jp
san2.suntory.jp
san2.suntory.jp
san2.suntory.jp
san3.suntory.jp
suntory.jp
san2.suntory.jp
san2.suntory.jp
san2.suntory.jp
suntory.jp
san2.suntory.jp
suntory.jp
san2.suntory.jp
suntory.jp
san2.suntory.jp
san2.suntory.jp
suntory.jp
san2.suntory.jp
suntory.jp
san2.suntory.jp
suntory.jp
suntory.jp
san2.suntory.jp
san2.suntory.jp
san2.suntory.jp
san2.suntory.jp
san2.suntory.jp
san2.suntory.jp
suntory.jp
san2.suntory.jp
suntory.jp
san3.suntory.jp
san5.suntory.jp
suntory.jp
san2.suntory.jp
san2.suntory.jp
san2.suntory.jp
san2.suntory.jp
san2.suntory.jp
san2.suntory.jp
san2.suntory.jp
san2.suntory.jp
san2.suntory.jp
suntory.jp
san3.suntory.jp
san2.suntory.jp
san2.suntory.jp
san3.suntory.jp
suntory.jp
san2.suntory.jp
san2.suntory.jp
san3.suntory.jp
san2.suntory.jp
san2.suntory.jp
san2.suntory.jp
san5.suntory.jp
suntory.jp
san2.suntory.jp
san2.suntory.jp
suntory.jp
san3.suntory.jp
suntory.jp
suntory.jp
suntory.jp
san2.suntory.jp
suntory.jp
san2.suntory.jp
san3.suntory.jp
san2.suntory.jp
suntory.jp
suntory.jp
suntory.jp
san2.suntory.jp
suntory.jp
suntory.jp
san2.suntory.jp
suntory.jp
san3.suntory.jp

Certificate

The complete raw certificate details for suntory.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+EBt2kHecjjNcvvj+O8
F/jzHSXonjd2usGbTavka+M4nIqNkG1xLxMTQyRQpiCID5DBJ/tTzDFcZK2sxVyV
5htVURgewqazWvdqki39+FxtZhQ2fUxZd+d9KTqJIXaz7Sc9GO2hEKnmcl4fRdUo
L1P3CqY3pHAJOcEB3a6pPaeRBDgy00NmLVAPiZQvtvMxF2nlfj+3dIoG/JadmLTW
wOrHz8zeRd2WjlCXM57guEN0BaJFRZuBbiEZEnHIN52Cj85s+qtSLJs7scYHmjgM
pI8fOqIxiboteYy8xX9jkGXDNlQuKpfT7UVaY0BSVuQY/ElxPZNJ1WNKg2tqWBfm
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 157351085580358049744348430212985413389
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Osaka'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Osaka'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Suntory Business Expert Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Group System'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'suntory.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22202658310578280954553117094125706866726240632996932687417788633797847102333637010010477129678985890026502101718592805515881230873803001380368401132611919193513653461314212022140051740984415056333253211022253296365781985821230182411775892496460202827945848598822342201727018541991153770533351426195844414908364069421366671602794559742552201757124752752657570635769460570377997309378514319763424385430696898774623086498778993520841946478903569414232404043431896153769086838397131704359956972215823024867947406778343497107174049901009374432431614303054416926623146119615854672586678256032806786963739979275044495287889
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (543 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honeymoment.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bvs.s-boss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tennensui-cp.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp.the-premium.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvs.premiumcp.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinmugistyle.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cp-tokucha.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinmugi-thanks.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mastersdream-magazine.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allfreecp.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiwamigreen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.s-boss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cc.suntory-kenko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws.the-premium.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pepsi-cp.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-test.mastersdream-magazine.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-test.the-premium.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'the-premium.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-test.horoyoi-cp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suntory-sunbirds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-test.s-boss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-test.196cp.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '196cp.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-test.allfreecp.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.horoyoi-cp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-test.kinmugi-thanks.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hb-cp.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suntory.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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