www.lawgazette.co.uk

- The Law Society -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 5d:23:6b:81:3a:e3:9d:55:80:2a:c7:fa:d7:56:37:1f was issued on by GeoTrust Inc..

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

The Law Society

Organization: The Law Society
Organization unit: The Law Society
State / Province: London
Locality: London
Country: GB

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5d:23:6b:81:3a:e3:9d:55:80:2a:c7:fa:d7:56:37:1f
Serial Number (int): 123802114454531749935324541375003113247
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 71:6a:d5:a0:c1:73:df:01:6a:3c:a4:c6:dd:4d:82:b8:53:2e:ef:c9
Fingerprint (sha256): 7c:39:a2:05:77:e8:f5:94:61:df:50:a9:0f:5a:96:cc:64:6d:4b:78:c3:f9:10:11:bd:f0:21:34:53:85:c5:dc

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate www.lawgazette.co.uk

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lawgazette.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cms-uat.lawgazette.co.uk
tablet.lawgazette.co.uk
uat-directories.lawgazette.co.uk
uat.lawgazette.co.uk
www.lawgazette.co.uk
lawgazette.co.uk

Other certificates including the domain name lawgazette.co.uk

(limited to 100 certificates)
wvfe2.webvisioncloud.com
wvfe2.webvisioncloud.com
adtest.abasoft.co.uk
adfe1.abacusemedia.com
jobs.lawgazette.co.uk
adfe1.abacusemedia.com
adnoncentaur.abasoft.co.uk
wvfe2.webvisioncloud.com
wvfe2.webvisioncloud.com
wvfe2.webvisioncloud.com
adfe1.abasoft.co.uk
adnoncentaur.abasoft.co.uk
wvfe2.webvisioncloud.com
wvfe2.webvisioncloud.com
adtest.abasoft.co.uk
wvfe2.webvisioncloud.com
adnoncentaur.abasoft.co.uk
www.lawgazette.co.uk
wvfe2.webvisioncloud.com
adtest.abasoft.co.uk
adfe1.abacusemedia.com
wvfe1.webvisioncloud.com
wvfe2.webvisioncloud.com
adfrontend2.abasoft.co.uk
jobs.lawgazette.co.uk
adfe1.abacusemedia.com
www.lawgazette.co.uk
www.lawgazette.co.uk
wvfe2.webvisioncloud.com
wvfe2.webvisioncloud.com
adtest.abasoft.co.uk
wvfe2.webvisioncloud.com
www.lawgazette.co.uk
adtest.abasoft.co.uk
wvfe2.webvisioncloud.com
jobs.lawgazette.co.uk
wvfe2.webvisioncloud.com
adnoncentaur.abasoft.co.uk
www.lawgazette.co.uk
adfe1.abasoft.co.uk
wvfe2.webvisioncloud.com
adfrontend2.abasoft.co.uk
jobs.lawgazette.co.uk
adnoncentaur.abasoft.co.uk
wvfe2.webvisioncloud.com
jobs.lawgazette.co.uk
adfrontend2.abasoft.co.uk
wvfe2.webvisioncloud.com
wvfe2.webvisioncloud.com
www.lawgazette.co.uk
wvfe2.webvisioncloud.com
wvfe2.webvisioncloud.com
www.lawgazette.co.uk
www.lawgazette.co.uk
wvfe2.webvisioncloud.com
adfrontend2.abasoft.co.uk
www.lawgazette.co.uk
wvfe2.webvisioncloud.com
adnoncentaur.abasoft.co.uk
wvfe2.webvisioncloud.com
www.lawgazette.co.uk
wvfe2.webvisioncloud.com
adfe1.abasoft.co.uk
adnoncentaur.abasoft.co.uk
*.jobs.lawgazette.co.uk
wvfe1.webvisioncloud.com
*.jobs.lawgazette.co.uk
wvfe2.webvisioncloud.com
wvfe2.webvisioncloud.com
wvfe2.webvisioncloud.com
wvfe2.webvisioncloud.com
adfe1.abacusemedia.com

Certificate

The complete raw certificate details for www.lawgazette.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgIQXSNrgTrjnVWAKsf611Y3HzANBgkqhkiG9w0BAQsFADBE
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU
R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTYxMDEzMDAwMDAwWhcNMTcwODE5MjM1
OTU5WjCBgjELMAkGA1UEBhMCR0IxDzANBgNVBAgMBkxvbmRvbjEPMA0GA1UEBwwG
TG9uZG9uMRgwFgYDVQQKDA9UaGUgTGF3IFNvY2lldHkxGDAWBgNVBAsMD1RoZSBM
YXcgU29jaWV0eTEdMBsGA1UEAwwUd3d3Lmxhd2dhemV0dGUuY28udWswggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQUgk8ruyAxhzfaL1BXAvXsYLaWMCQ
Dj2mATtWVswv+Iug4ed2vZYtawXBpwR7GvblYFdgdSoPVxa9UVyzkytJyLC1e7/H
ld0Dsje0quv6oFARqG/jmFCRmVj05uG52sDOORbtKrMAd+4TFVazCR0XxUBt0zjK
5yaghdiLuBlFMBuCRPlSlXzl4yoBVbOhpW3Q8LFb9najDlsWuJhPGdluX8f01bJN
efQ5j/WQlk5sJS4twBhyJTg8kTd6F5zYjKrLFx6OR3APOLFUWbyEWJ38PJxeXPfN
Jnsc1/K4GrGXrV83cTpn4QI1DVNRggDBlYsyFmBuA2sH+apHJSKNuM+NAgMBAAGj
ggI7MIICNzCBngYDVR0RBIGWMIGTghhjbXMtdWF0Lmxhd2dhemV0dGUuY28udWuC
F3RhYmxldC5sYXdnYXpldHRlLmNvLnVrgiB1YXQtZGlyZWN0b3JpZXMubGF3Z2F6
ZXR0ZS5jby51a4IUdWF0Lmxhd2dhemV0dGUuY28udWuCFHd3dy5sYXdnYXpldHRl
LmNvLnVrghBsYXdnYXpldHRlLmNvLnVrMAkGA1UdEwQCMAAwDgYDVR0PAQH/BAQD
AgWgMCsGA1UdHwQkMCIwIKAeoByGGmh0dHA6Ly9nbi5zeW1jYi5jb20vZ24uY3Js
MIGdBgNVHSAEgZUwgZIwgY8GBmeBDAECAjCBhDA/BggrBgEFBQcCARYzaHR0cHM6
Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9yZXBvc2l0b3J5L2xlZ2FsMEEG
CCsGAQUFBwICMDUMM2h0dHBzOi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMv
cmVwb3NpdG9yeS9sZWdhbDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
HwYDVR0jBBgwFoAU0m/3lvSFP3I8MH0j2oV4m6N8WnwwVwYIKwYBBQUHAQEESzBJ
MB8GCCsGAQUFBzABhhNodHRwOi8vZ24uc3ltY2QuY29tMCYGCCsGAQUFBzAChhpo
dHRwOi8vZ24uc3ltY2IuY29tL2duLmNydDATBgorBgEEAdZ5AgQDAQH/BAIFADAN
BgkqhkiG9w0BAQsFAAOCAQEAeoLYdNO2gHvEiWXW5jVTmfHyIwV5UPHpVWDjkeBz
p3WpPmrtxBDKL9/xe01A7MzspYOLgQawLUYgWpQ8c3jMpuiXvRHlfraMf436JZaa
ATX1rAYiP+JirHFYqF8IUhpTnIO8zWkGQg6vqLcVQofEXwmA7x2kSgWxyPNzOOoB
gKpl+ovaB13YeAAAh+crOuO+tK91QBEKvbDTqKpoGhwNBRJfNRltP+gmrZRCFKlY
edhEJHatxNcnabWodsM8twKMPY8nudhbwhuOztn7Wzp/1VRdyo/EL5lcVqoDJIjC
QE9m5jztwXhU2ufs9MF/HWrwHjQhT30qDd48Fy0hlIiSdw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FIJPK7sgMYc32i9QVwL
17GC2ljAkA49pgE7VlbML/iLoOHndr2WLWsFwacEexr25WBXYHUqD1cWvVFcs5Mr
SciwtXu/x5XdA7I3tKrr+qBQEahv45hQkZlY9ObhudrAzjkW7SqzAHfuExVWswkd
F8VAbdM4yucmoIXYi7gZRTAbgkT5UpV85eMqAVWzoaVt0PCxW/Z2ow5bFriYTxnZ
bl/H9NWyTXn0OY/1kJZObCUuLcAYciU4PJE3ehec2IyqyxcejkdwDzixVFm8hFid
/DycXlz3zSZ7HNfyuBqxl61fN3E6Z+ECNQ1TUYIAwZWLMhZgbgNrB/mqRyUijbjP
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 123802114454531749935324541375003113247
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'The Law Society'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'The Law Society'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.lawgazette.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26298020932797384325998437331090839967196853306176752280180395493267059048322278474292869372319005079696907747768667553260601001168314574675431417913946490738396564004169012230850152687355484466600180044234423650291479139200902856273989303568190529021089430113134538387883713442645281159607641168237945376143136809161485125458728261213479868482508851493825647162190887063947328185890923795776466413308323215202367304444873311474870262281015720705200198659280263609242604654845255757242868555624545037699754664097241475694073119924337658298029362176035383625246178817676258477552044638430082733483834544313765602054029
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (150 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms-uat.lawgazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tablet.lawgazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-directories.lawgazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.lawgazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lawgazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawgazette.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007a82d874d3b6807bc48965d6e6355399f1f223057950f1e95560e391e073a775a93e6aedc410ca2fdff17b4d40eccceca5838b8106b02d46205a943c7378cca6e897bd11e57eb68c7f8dfa25969a0135f5ac06223fe262ac7158a85f08521a539c83bccd6906420eafa8b7154287c45f0980ef1da44a05b1c8f37338ea0180aa65fa8bda075dd878000087e72b3ae3beb4af7540110abdb0d3a8aa681a1c0d05125f35196d3fe826ad944214a95879d8442476adc4d72769b5a876c33cb7028c3d8f27b9d85bc21b8eced9fb5b3a7fd5545dca8fc42f995c56aa032488c2404f66e63cedc17854dae7ecf4c17f1d6af01e34214f7d2a0dde3c172d2194889277