li.lisecurelink.com

- Live Intent Inc. -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 60:71:83:10:e4:d0:0e:ff:de:31:86:9a:c5:fe:55:55 was issued on by GeoTrust Inc..

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Live Intent Inc.

Organization: Live Intent Inc.
Organization unit: IT
State / Province: New York
Locality: New York
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 60:71:83:10:e4:d0:0e:ff:de:31:86:9a:c5:fe:55:55
Serial Number (int): 128195275474489147560652106116877931861
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): eb:8b:1a:77:c5:dd:eb:77:a6:04:5b:d5:7a:a9:4e:f1:41:ee:ec:0e
Fingerprint (sha256): 7c:9c:d9:46:de:e9:15:86:e6:f3:e7:dd:57:8d:36:c1:41:18:8d:3a:79:27:3f:d3:a5:98:50:a3:fc:2d:a2:4e

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate li.lisecurelink.com

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for li.lisecurelink.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

spsec.feedblitz.com
li.travelocity.com
li.orbitz.com
li.hotels.com
li.okcupid.com
li.wotif.com
c.licasd.com
li.cheaptickets.com
nl.cools.com
liveintent.newyorktimesinfo.com
li.tacdn.com
li.expedia.com
li.drhinternet-ssl.com
lisecurelink.com
li.lisecurelink.com

Other certificates including the domain name lisecurelink.com

(limited to 100 certificates)
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com

Certificate

The complete raw certificate details for li.lisecurelink.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG+jCCBeKgAwIBAgIQYHGDEOTQDv/eMYaaxf5VVTANBgkqhkiG9w0BAQsFADBE
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU
R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTcwMzE1MDAwMDAwWhcNMTgwNTAzMjM1
OTU5WjB5MQswCQYDVQQGEwJVUzERMA8GA1UECAwITmV3IFlvcmsxETAPBgNVBAcM
CE5ldyBZb3JrMRkwFwYDVQQKDBBMaXZlIEludGVudCBJbmMuMQswCQYDVQQLDAJJ
VDEcMBoGA1UEAwwTbGkubGlzZWN1cmVsaW5rLmNvbTCCASIwDQYJKoZIhvcNAQEB
BQADggEPADCCAQoCggEBAKvKzRK2eOINyHqYEXycmFOP/dyanvYPggk4ZMk9zAuK
s43wx5LdrwzZixqw46WBwBwzXgUh+mqsE4FOsh3CdPAtsswyg8glF/4dvVZnnsnk
/Ewm+l/NA+QNKVhIkWdjc5bq9+4pM6Qxe/EGkNNmBC9naTMtEhCNEQw4bXIkB+1Q
KwoZWT35A4p7eI2Ctcq6JybUZkSJYqoT8aczD1XzsCM/s9jvS7uvcoU3bFFCkQ14
Lq0PSKcwNEsrGw9zCzBzEvMCiz4umMI7LiW04bk/9kaKo6/BkZo5MCVdWc1/CN+Y
z8zdLnz70vrCJQtUgmkRwTZesMXHVelCW3r9cIvecssCAwEAAaOCA7EwggOtMIIB
IQYDVR0RBIIBGDCCARSCE3Nwc2VjLmZlZWRibGl0ei5jb22CEmxpLnRyYXZlbG9j
aXR5LmNvbYINbGkub3JiaXR6LmNvbYINbGkuaG90ZWxzLmNvbYIObGkub2tjdXBp
ZC5jb22CDGxpLndvdGlmLmNvbYIMYy5saWNhc2QuY29tghNsaS5jaGVhcHRpY2tl
dHMuY29tggxubC5jb29scy5jb22CH2xpdmVpbnRlbnQubmV3eW9ya3RpbWVzaW5m
by5jb22CDGxpLnRhY2RuLmNvbYIObGkuZXhwZWRpYS5jb22CFmxpLmRyaGludGVy
bmV0LXNzbC5jb22CEGxpc2VjdXJlbGluay5jb22CE2xpLmxpc2VjdXJlbGluay5j
b20wCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwKwYDVR0fBCQwIjAgoB6gHIYa
aHR0cDovL2duLnN5bWNiLmNvbS9nbi5jcmwwgZ0GA1UdIASBlTCBkjCBjwYGZ4EM
AQICMIGEMD8GCCsGAQUFBwIBFjNodHRwczovL3d3dy5nZW90cnVzdC5jb20vcmVz
b3VyY2VzL3JlcG9zaXRvcnkvbGVnYWwwQQYIKwYBBQUHAgIwNQwzaHR0cHM6Ly93
d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9yZXBvc2l0b3J5L2xlZ2FsMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBTSb/eW9IU/cjww
fSPahXibo3xafDBXBggrBgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9n
bi5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9nbi5zeW1jYi5jb20vZ24u
Y3J0MIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUA3esdK3oNT6Ygi4GtgWhwfi6O
nQHVXIiNPRHEzbbsvswAAAFa0vvNRAAABAMARjBEAiA270LDluCyg6qEYi5uB3si
3BHLveGd1pF6Hv7fgD7LQgIgeIudpqbwpWZlSc8jWuiZb51oA4IC4WwNH8eU99YF
bGAAdgCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAVrS+83nAAAE
AwBHMEUCIQC42wccsBAF07C4F4wzOe91N9xtAFeC71Y+vpfp4P/ypAIgbEijTerb
ZX7jLANk8evqoK5TK72Tkm+ddL+C5CJGSL0wDQYJKoZIhvcNAQELBQADggEBAKRO
ErCELLhxYC66u0gH+WxqtuuWRPqzqvn83BXxmhKZbA9+RXJKj1I+hxONcm9zhSTG
PXdJQ5F+SnX5I/pFD2iCd0wiF8LkTGNy96Yp7DMd6XhsPihNvOgb3rB53tImbvxY
x43d6bxIudeRqNi5aXOUNriclEyyUY0BgWFeEYRdRFiEF4kP7V3oIjniYJ7sUKof
0PFuHYh4OMwAmNxlbynAeptqwYOdIeibEP7YZTPsL4okxX9cHDCrd3rih9xDqy8a
LdB+aLRlHOPAUZYsj30kg1nlVFkFvCuFHNXFSL4hUxQ/wtSNjWwIe0qXhzmYNmpw
TyjapYRwTNKQ+TPxmok=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8rNErZ44g3IepgRfJyY
U4/93Jqe9g+CCThkyT3MC4qzjfDHkt2vDNmLGrDjpYHAHDNeBSH6aqwTgU6yHcJ0
8C2yzDKDyCUX/h29VmeeyeT8TCb6X80D5A0pWEiRZ2Nzlur37ikzpDF78QaQ02YE
L2dpMy0SEI0RDDhtciQH7VArChlZPfkDint4jYK1yronJtRmRIliqhPxpzMPVfOw
Iz+z2O9Lu69yhTdsUUKRDXgurQ9IpzA0SysbD3MLMHMS8wKLPi6YwjsuJbThuT/2
Roqjr8GRmjkwJV1ZzX8I35jPzN0ufPvS+sIlC1SCaRHBNl6wxcdV6UJbev1wi95y
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 128195275474489147560652106116877931861
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Live Intent Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'li.lisecurelink.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21686755082462314717867785073197932797622796471000061234341169102424801852779825473472461397526734789629513967304544867185472789397012150314735362641942516943019532617635749059118389500270282851404104246341370642214406685596240985797487032626727550998993776073197964648146879491970289567998200026555016949550366139093041547172069785665431868990099054568730991564383206682261165630321167679061709814741181807063498058636140021388488281082299624927402650866009743863901502350310517115979831151824296155887369532288223467607058694157864668328605808440703032254155990892404711566689771502914509189006712579903280813863627
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (280 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spsec.feedblitz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'li.travelocity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'li.orbitz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'li.hotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'li.okcupid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'li.wotif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.licasd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'li.cheaptickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nl.cools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveintent.newyorktimesinfo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'li.tacdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'li.expedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'li.drhinternet-ssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lisecurelink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'li.lisecurelink.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015ad2fbcd440000040300463044022036ef42c396e0b283aa84622e6e077b22dc11cbbde19dd6917a1efedf803ecb420220788b9da6a6f0a5666549cf235ae8996f9d68038202e16c0d1fc794f7d6056c60007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015ad2fbcde70000040300473045022100b8db071cb01005d3b0b8178c3339ef7537dc6d005782ef563ebe97e9e0fff2a402206c48a34deadb657ee32c0364f1ebeaa0ae532bbd93926f9d74bf82e4224648bd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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