desktop.hnzc.co.nz
- Housing New Zealand Limited -
Issued by GeoTrust SSL CA - G3
About this certificate
This digital certificate with serial number 24:a6:c2:e6:af:a1:60:3f:15:79:70:cd:ca:fb:d1:5f was issued on by GeoTrust Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Housing New Zealand Limited
Organization:
Housing New Zealand Limited
Organization unit: ICT
Organization unit: ICT
State / Province:
Wellington
Locality: Wellington
Country: NZ
Locality: Wellington
Country: NZ
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 24:a6:c2:e6:af:a1:60:3f:15:79:70:cd:ca:fb:d1:5fSerial Number (int): 48718082191069207802300975272362234207
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c
Fingerprint (sha1): 7b:f1:8a:b9:12:a3:13:4c:b2:52:36:6b:59:d4:16:12:29:e0:5f:bc
Fingerprint (sha256): 81:2a:11:b7:9c:a9:23:69:a5:f3:ed:ad:c5:ba:03:5d:e4:a3:67:df:1e:c2:a3:9a:bc:18:f6:f7:57:db:7f:18
Issuing Certificate URL: http://gn.symcb.com/gn.crt
Revocation information
OCSP Server: http://gn.symcd.comCRL Distribution Point: http://gn.symcb.com/gn.crl
Check the revocation status for certificate desktop.hnzc.co.nz
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for desktop.hnzc.co.nz
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
desktop.hnzc.co.nz
Other certificates including the domain name hnzc.co.nz
(limited to 100 certificates)
close2home.co.nz
sts.hnzc.co.nz
mail.hnzc.co.nz
access01.hnzc.co.nz
www.hnzc.co.nz
mail.hnzc.co.nz
careers.hnzc.co.nz
mail-dr.hnzc.co.nz
close2home.co.nz
dev.hnzc.co.nz
PROD-SEC-MA01.hnz.co.nz
*.hnzc.co.nz
testsftp.hnzc.co.nz
access02.kaingaora.govt.nz
close2home.co.nz
NPE-SEC-B2B01.hnzc.co.nz
close2home.co.nz
close2home.co.nz
careers.hnzc.co.nz
close2home.co.nz
access01.kaingaora.govt.nz
PRDR-SEC-MA01.hnz.co.nz
access02.hnzc.co.nz
close2home.co.nz
ucweb02.hnzc.co.nz
ucweb01.kaingaora.govt.nz
close2home.co.nz
uatsftp.hnzc.co.nz
stst.hnzc.co.nz
mobile.hnzc.co.nz
careers.hnzc.co.nz
sts.hnzc.co.nz
*.hnzc.co.nz
hnzc.co.nz
hnzaadexpwe01.hnzc.co.nz
stst.hnzc.co.nz
sts.hnzc.co.nz
desktop.hnzc.co.nz
access02.kaingaora.govt.nz
careers.hnzc.co.nz
ucweb01.hnzc.co.nz
sts.hnzc.co.nz
close2home.co.nz
mail.hnzc.co.nz
ucweb02.hnzc.co.nz
close2home.co.nz
close2home.co.nz
careers.hnzc.co.nz
close2home.co.nz
careers.hnzc.co.nz
desktop.hnzc.co.nz
*.hnzc.co.nz
ucweb02.hnzc.co.nz
close2home.co.nz
careers.hnzc.co.nz
close2home.co.nz
close2home.co.nz
desktop.hnzc.co.nz
mail-dr.hnzc.co.nz
close2home.co.nz
mobile.hnzc.co.nz
close2home.co.nz
close2home.co.nz
apps.hnzc.co.nz
close2home.co.nz
appsadc.hnzc.co.nz
close2home.co.nz
desktop.hnzc.co.nz
hnzaadexpwe01.hnzc.co.nz
desktop.hnzc.co.nz
www.hnzc.co.nz
prodsftp.hnzc.co.nz
close2home.co.nz
mail.hnzc.co.nz
ucweb02.hnzc.co.nz
careers.hnzc.co.nz
ucweb02.hnzc.co.nz
desktop.hnzc.co.nz
close2home.co.nz
*.hnzc.co.nz
ucweb02.kaingaora.govt.nz
close2home.co.nz
close2home.co.nz
hnzaadexpwe01.hnzc.co.nz
careers.hnzc.co.nz
mail-dr.hnzc.co.nz
ucweb02.kaingaora.govt.nz
sts.hnzc.co.nz
mail.hnzc.co.nz
access01.hnzc.co.nz
www.hnzc.co.nz
mail.hnzc.co.nz
careers.hnzc.co.nz
mail-dr.hnzc.co.nz
close2home.co.nz
dev.hnzc.co.nz
PROD-SEC-MA01.hnz.co.nz
*.hnzc.co.nz
testsftp.hnzc.co.nz
access02.kaingaora.govt.nz
close2home.co.nz
NPE-SEC-B2B01.hnzc.co.nz
close2home.co.nz
close2home.co.nz
careers.hnzc.co.nz
close2home.co.nz
access01.kaingaora.govt.nz
PRDR-SEC-MA01.hnz.co.nz
access02.hnzc.co.nz
close2home.co.nz
ucweb02.hnzc.co.nz
ucweb01.kaingaora.govt.nz
close2home.co.nz
uatsftp.hnzc.co.nz
stst.hnzc.co.nz
mobile.hnzc.co.nz
careers.hnzc.co.nz
sts.hnzc.co.nz
*.hnzc.co.nz
hnzc.co.nz
hnzaadexpwe01.hnzc.co.nz
stst.hnzc.co.nz
sts.hnzc.co.nz
desktop.hnzc.co.nz
access02.kaingaora.govt.nz
careers.hnzc.co.nz
ucweb01.hnzc.co.nz
sts.hnzc.co.nz
close2home.co.nz
mail.hnzc.co.nz
ucweb02.hnzc.co.nz
close2home.co.nz
close2home.co.nz
careers.hnzc.co.nz
close2home.co.nz
careers.hnzc.co.nz
desktop.hnzc.co.nz
*.hnzc.co.nz
ucweb02.hnzc.co.nz
close2home.co.nz
careers.hnzc.co.nz
close2home.co.nz
close2home.co.nz
desktop.hnzc.co.nz
mail-dr.hnzc.co.nz
close2home.co.nz
mobile.hnzc.co.nz
close2home.co.nz
close2home.co.nz
apps.hnzc.co.nz
close2home.co.nz
appsadc.hnzc.co.nz
close2home.co.nz
desktop.hnzc.co.nz
hnzaadexpwe01.hnzc.co.nz
desktop.hnzc.co.nz
www.hnzc.co.nz
prodsftp.hnzc.co.nz
close2home.co.nz
mail.hnzc.co.nz
ucweb02.hnzc.co.nz
careers.hnzc.co.nz
ucweb02.hnzc.co.nz
desktop.hnzc.co.nz
close2home.co.nz
*.hnzc.co.nz
ucweb02.kaingaora.govt.nz
close2home.co.nz
close2home.co.nz
hnzaadexpwe01.hnzc.co.nz
careers.hnzc.co.nz
mail-dr.hnzc.co.nz
ucweb02.kaingaora.govt.nz
Certificate
The complete raw certificate details for desktop.hnzc.co.nz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIH+DCCBuCgAwIBAgIQJKbC5q+hYD8VeXDNyvvRXzANBgkqhkiG9w0BAQsFADBE MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTYwMjAyMDAwMDAwWhcNMTkwMjAxMjM1 OTU5WjCBiDELMAkGA1UEBhMCTloxEzARBgNVBAgMCldlbGxpbmd0b24xEzARBgNV BAcMCldlbGxpbmd0b24xJDAiBgNVBAoMG0hvdXNpbmcgTmV3IFplYWxhbmQgTGlt aXRlZDEMMAoGA1UECwwDSUNUMRswGQYDVQQDDBJkZXNrdG9wLmhuemMuY28ubnow ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDeCnvhrVoGjDxh6/0HumyO LXrSYOgVZQl4ngsl9IfcSnE3+SqLOdczENW1pg579BDpNuOMpWDB1u0mgIb4Vns/ 7NHTcD+tBkVlqJWfz80e6zrRhtI43CH/X8SEar4an3JcYbxlVrwzfqSZ/4rvYQ5K V4w+pGCFv1O0EZbJ4zlFxQkwDEjC0ptd0R3x0q1Hat0UGKIy2RlnYwd6tsfsjZsa ieGO24wvSaEkH+SEafFtQS85WO5S1VGBpq/syj6YhoQjIcAJLLvuENDsERwIxYTq E7+0Vq80K5BOkrirTH2W6tll/M02/rDdKNP+FK0lQsekaliBruhx7bYI0LfU6/6f EYnA+sQfI3EpTrbHco6mxJuwBWQa7gk/9K6VaJeKLN47IwAMogP9jxoSNc/8moE0 HYpa3x+UBnBAnROEEjL68CLffsg6YLEmfjK7x3xw5TV5sYYXt6k9wBQwylDUTcTV 6lNI0uSsxIzhCYplsom/uYECPVnwVRFmg1IgKD1DiRn5WkMgLoFpUccS3XZf9Rbw FiRGvYF7IswtZXSKwDcjBXUycfbllmrk3Pna/eBJh5OLbOJaFACS5gNGujfFnsCh WMTGARUR9GQfRI8p5bITUctPvfp+fZRWxX/z1GDDNg/Vtj5oSeeEPxBMqb9zVFXj UmuAzXvmRuUlM5bExK5ZvwIDAQABo4IDnzCCA5swHQYDVR0RBBYwFIISZGVza3Rv cC5obnpjLmNvLm56MAkGA1UdEwQCMAAwDgYDVR0PAQH/BAQDAgWgMCsGA1UdHwQk MCIwIKAeoByGGmh0dHA6Ly9nbi5zeW1jYi5jb20vZ24uY3JsMIGdBgNVHSAEgZUw gZIwgY8GBmeBDAECAjCBhDA/BggrBgEFBQcCARYzaHR0cHM6Ly93d3cuZ2VvdHJ1 c3QuY29tL3Jlc291cmNlcy9yZXBvc2l0b3J5L2xlZ2FsMEEGCCsGAQUFBwICMDUM M2h0dHBzOi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvcmVwb3NpdG9yeS9s ZWdhbDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHwYDVR0jBBgwFoAU 0m/3lvSFP3I8MH0j2oV4m6N8WnwwVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzAB hhNodHRwOi8vZ24uc3ltY2QuY29tMCYGCCsGAQUFBzAChhpodHRwOi8vZ24uc3lt Y2IuY29tL2duLmNydDCCAfcGCisGAQQB1nkCBAIEggHnBIIB4wHhAHYA3esdK3oN T6Ygi4GtgWhwfi6OnQHVXIiNPRHEzbbsvswAAAFSn6wX1AAABAMARzBFAiB8KWmc BFd9cPlQSJblWnzWkDopxtNTruVEA1O0Tx/knQIhANoCmD2GpAXAfhKOn6jQiLJg Avp8UlNaiBP4Xhep4O9JAHYApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN 3BAAAAFSn6wYFwAABAMARzBFAiEAlFd5iQVJPz5AUZkVzWpakr1M/qd+Mc9t+OSg WCfH92ACIAEv0KVxKHn8Wjvo3AZMwOm1cRf/8xBindH1yZBjw7zjAHYAaPaY+B9k gr46jO65KB1M/HFRXWeT1ETRCmesu09P+8QAAAFSn6wYEgAABAMARzBFAiAwV4gO 5OHb/dJDAg1n+BIRUtEIC0J2y/L9gJdccRYIJwIhAJH+Ssv4Qu6x9jXWfQFcDkpu L+KRdDXrOiIAQQwkQUZKAHcA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo /csAAAFSn6wZ3wAABAMASDBGAiEA8vBzBnosyb5WP2XGFIlWgZWrAl+vgDv/iKD0 o+bv4vECIQDAIpkWLD1QqVB170xg+UFc7TIkAqsDEORCoNirAj5nkjANBgkqhkiG 9w0BAQsFAAOCAQEAOXlRLkJgz1N5RbosC8oSI2wjpewqXqvVs+fkryfSOF0it2yP 0rI4pY0fh+hwMkH1UB4F8fBEP8hYR7BR0v2nYmkP8MvFREhQaDiCa9O5/DNlNn4C rPGo8hSKdm/ArBzoWNdLK7FX/p1MggurYZLvp2Hp9Kpl1tDBIxNsk6dRCd8tY/UZ wlxgyZyFvxXUF1DhsNOyZSZ7v4qrssKbRSu4PwYtLl+HdtBLdZRzGZuKYipaU+P+ nkeDeSCOlyRep/l0T4r8Ur1Kw0xBAn37QA/gA5eQJTfpwsTTV0TbH0z5H4IyU3p9 2+2l/Iyp6MdPblVVZEn48jGWAc79pA9Cb5oDrA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3gp74a1aBow8Yev9B7ps ji160mDoFWUJeJ4LJfSH3EpxN/kqiznXMxDVtaYOe/QQ6TbjjKVgwdbtJoCG+FZ7 P+zR03A/rQZFZaiVn8/NHus60YbSONwh/1/EhGq+Gp9yXGG8ZVa8M36kmf+K72EO SleMPqRghb9TtBGWyeM5RcUJMAxIwtKbXdEd8dKtR2rdFBiiMtkZZ2MHerbH7I2b GonhjtuML0mhJB/khGnxbUEvOVjuUtVRgaav7Mo+mIaEIyHACSy77hDQ7BEcCMWE 6hO/tFavNCuQTpK4q0x9lurZZfzNNv6w3SjT/hStJULHpGpYga7oce22CNC31Ov+ nxGJwPrEHyNxKU62x3KOpsSbsAVkGu4JP/SulWiXiizeOyMADKID/Y8aEjXP/JqB NB2KWt8flAZwQJ0ThBIy+vAi337IOmCxJn4yu8d8cOU1ebGGF7epPcAUMMpQ1E3E 1epTSNLkrMSM4QmKZbKJv7mBAj1Z8FURZoNSICg9Q4kZ+VpDIC6BaVHHEt12X/UW 8BYkRr2BeyLMLWV0isA3IwV1MnH25ZZq5Nz52v3gSYeTi2ziWhQAkuYDRro3xZ7A oVjExgEVEfRkH0SPKeWyE1HLT736fn2UVsV/89RgwzYP1bY+aEnnhD8QTKm/c1RV 41JrgM175kblJTOWxMSuWb8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 48718082191069207802300975272362234207 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-02 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-01 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Wellington' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Wellington' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Housing New Zealand Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ICT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'desktop.hnzc.co.nz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 905848055876505518313007706552224911433437193737160398109556196670775360658723393877642388479721729214315292604316832871145735679148160645347178611999592784171380090257056677239595780827182426004178182976866631914839380782335990237232529214752854206821405429353699549850526254156734270723289011930551755831089919556171833752634412191537973451186316395328237480632995507916195217946388008464490451504727203175871462198978487707425611007741431368698629838024854528761883995448777732524385332281404005148552235965543781049432190665211772846315193033471750494104611773175369770055624419402945779876128397744521762568158237508152436193611104367908853923688039655825732705181971357560283217912512687634461908710730236095297791807713128316493242991256564312528059086473075075475127981010437361803464113906410372343516581161409511586132057253085402853952688203439037645823855616993409265077216533307661869755275204537561616900009470539337529276111332250437009454548955276763650624385826012815470821201851426569217250288180906641646860921600807140067876018803346090341481948892037395015965658236130076649055510193918729824158876622393302037098103781944666271245658257000269206122058602130934075651003415126719946102933012601302765179633555903 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desktop.hnzc.co.nz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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