www.tiffany.es

- Tiffany and Co -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 29:e9:10:44:0f:90:cd:8e:a0:11:e0:a3:4f:7f:99:6d was issued on by GeoTrust Inc..

With 46 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Tiffany and Co

Organization: Tiffany and Co
Organization unit: Akamai SAN SSL OV
State / Province: New York
Locality: New York
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 29:e9:10:44:0f:90:cd:8e:a0:11:e0:a3:4f:7f:99:6d
Serial Number (int): 55708482906106206204651011121956755821
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 43:5e:32:e1:75:2f:80:2a:b3:28:c8:14:0f:66:a5:e3:95:64:9f:10
Fingerprint (sha256): 83:15:b1:29:08:37:15:64:28:7f:56:8d:51:ed:c0:36:ef:d5:11:a7:61:e9:26:a0:6a:a9:58:6c:2a:67:65:a7

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate www.tiffany.es

46

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.tiffany.es

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.tiffany.com.mx
www.tiffany.kr
m.tiffany.de
m.tiffany.ca
www.tiffany.de
www.pa.tiffany.com
www.tiffany.at
m.tiffany.it
www.tiffany.ie
m.tiffany.com
www.tiffany.it
www.tiffany.com.au
m.tiffany.com.br
m.tiffany.cn
cdn.tiffany.com
be.tiffany.com
m-be.tiffany.com
www.pa.tiffany.co.uk
www.whatmakeslovetrue.com
m.tiffany.kr
m-nl.tiffany.com
www.pa.tiffanytrade.com
tiffany.es
m.tiffany.es
m.tiffany.co.jp
www.tiffany.ru
m.tiffany.at
zh.tiffany.com
www.tiffanywatches.com
www.pa.tiffany.co.jp
nl.tiffany.com
m.tiffany.com.mx
www.tiffany.co.uk
www.m.tiffany.com
www.zh.tiffany.com
m.tiffany.fr
m-international.tiffany.com
m.tiffany.com.au
m-zh.tiffany.com
www.tiffanytrade.com
m.tiffany.ie
m.tiffany.co.uk
www.tiffany.com.br
www.tiffany.com.ru
www.tiffany.fr
www.tiffany.es

Other certificates including the domain name tiffany.es

(limited to 100 certificates)
pa.tiffany.com
dev3.edev.tiffany.com
qa2-aem.tiffany.com
www.tiffany.es
www.tiffany.com
sstats.tiffany.es
www.tiffany.com
www.tiffany.es
qa3-aem.tiffany.com
www.pa.tiffany.com
ps2b.tiffany.com
sstats.tiffany.es
www.tiffany.com
www.pa.tiffany.com
qa1-aem.tiffany.com
test1.edev.tiffany.com
www.estore-tco.com
qa1-aem.tiffany.com
www.qa1.tiffany.com
www.tiffany.es
www.pa.tiffany.com
www.pa.tiffany.com
sstats.tiffany.es
www.qa1.tiffany.com
www.pa.tiffany.com
ps-aem.tiffany.com
qa3-aem.tiffany.com
qa1-aem.tiffany.com
www.tiffany.com
dev1.edev.tiffany.com
qa.tiffany.com
www.tiffany.es
ps-aem.tiffany.com
www.qa1.tiffany.com
www.tiffany.com
www.tiffany.es
www.tiffany.com
sstats.tiffany.es
www.estore-tco.com
dev2.edev.tiffany.com
dev3.edev.tiffany.com
TIFFANY AND CO.
www.pa.tiffany.com
tiffany.at
www.tiffany.es
www.tiffany.es
www.pa.tiffany.com
dev2.edev.tiffany.com
ps2b.tiffany.com
www.tiffany.com
www.tiffany.es
dev2.edev.tiffany.com
www.tiffany.es
www.pa.tiffany.com
www.qa1.tiffany.com
www.tiffany.es
www.tiffany.com
test3.edev.tiffany.com
qa3.tiffany.com
www.tiffany.es
www.tiffany.es
dev3.edev.tiffany.com
test2.edev.tiffany.com
www.tiffany.es
TIFFANY AND CO.
www.tiffany.com
www.pa.tiffany.com
www.qa.tiffany.com
www.tiffany.com
www.qa1.tiffany.com
tiffany.at
www.qa1.tiffany.com
www.pa.tiffany.com
qa2.tiffany.com
pa.tiffany.com
www.qa1.tiffany.com
www.pa.tiffany.com
pa.tiffany.com
sstats.tiffany.es
www.tiffany.es
www.tiffany.es
www.tiffany.es
pa-aem.tiffany.com
www.qa1.tiffany.com
www.tiffany.es
qa2-aem.tiffany.com
qa2-aem.tiffany.com
www.pa.tiffany.com
test1.edev.tiffany.com
test3.edev.tiffany.com
m.tiffany.com
www.tiffany.com
pa-aem.tiffany.com
www.qa1.tiffany.com
www.tiffany.com
qa3-aem.tiffany.com
www.tiffany.com
www.tiffany.es
sstats.tiffany.es
www.tiffany.es

Certificate

The complete raw certificate details for www.tiffany.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOaMn9IvpptGiGy6QKIU
XH/3aO3VfKg5f29hhHNafrukb0CLEM5vGCoqer4N8xn46+PD4ePinniANUVz+f0W
swggC4f4KDnnz5CTHYKaERoyPVQz7Z8PM5gGvx62A+hMcu43kCouLsUQcaoMl0dC
aK3R2qCaFgwDa5yI79WtZtyJ8i5h8p/WdmGEiu5TpUjoBwddpnRXsruhYp4YqJ2o
v+SafbOJSYjV9MGzO20yhJGWG9qgWuedGNBCrBpQknk5N824Qn63QcUro5rL1t7R
yhTNlpuwy3reNRJN6jpFmJ7fRb655DQaH1AeAhD5RgFcmP7DvTonHnyobXJdm5NO
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 55708482906106206204651011121956755821
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-08-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Tiffany and Co'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Akamai SAN SSL OV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'www.tiffany.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22836582997677611307160715848511735426114739177033440910556045527716903544097552108354037464267219923990351352437307800682319747020804865256305294804806105896005829385518231301094510682485723657707076186554495925261780510813219629837180005554762506194213505579752033039728698837026437230696804771726934479784504231065452355337330521989348269104103353468404381373360800821111864316265085470118326566482250313275227835887581208869879922608752918502718021498622087714241800392688261226351044681010004124162917038921372144894294679250289251347171341424498332665174094169110207299690545864833738487640606184686885650255401
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (821 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffany.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffany.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tiffany.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tiffany.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffany.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pa.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffany.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tiffany.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffany.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffany.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffany.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tiffany.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tiffany.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-be.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pa.tiffany.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whatmakeslovetrue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tiffany.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-nl.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pa.tiffanytrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiffany.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tiffany.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tiffany.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffany.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tiffany.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zh.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffanywatches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pa.tiffany.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nl.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tiffany.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffany.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zh.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tiffany.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-international.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tiffany.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-zh.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffanytrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tiffany.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tiffany.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffany.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffany.com.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffany.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffany.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b8b95dd7366b8e582f1975ab982f392ea236aedfb3e6f05b63018b171f1058a976f3c57a2576fc9679b7ee9353d0feadee6c719f3e7751cda0040171d276cd1ed43c501ec052531c7ece19b45e1d07904b1fbceb93ffe5443a8f85f1dd7a756b9f638499480cb1579e691870779ff82f11c63e360fe02144ac3f52f12fcaf7077b73ca3e17caa0fc6374f41d56ed3f9aa5b9d325d1e80f6557cd32c25517d0ce943263f2d5ab219f9a41ac745f2773989c3650f2a7b3c67789dd955307ee39e43b54cea644c46fca287720cceb7b01970e8524bb572bedd2265ed285242795ddf5b2c8620293ef0d5997cd111e2b2d86001b960b548356cd7dc154215dbf0a64