www.khaironline.net
Issued by GeoTrust DV SSL CA - G3
About this certificate
This digital certificate with serial number 2e:a9:e8:4e:b9:26:08:8b:d0:a5:d9:5c:6b:60:29:6b was issued on by GeoTrust Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Certificate Subject
CN=www.khaironline.net
GeoTrust Inc.
Organization:
GeoTrust Inc.
Organization unit: Domain Validated SSL
Organization unit: Domain Validated SSL
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 2e:a9:e8:4e:b9:26:08:8b:d0:a5:d9:5c:6b:60:29:6bSerial Number (int): 62026697731323945679111611458781194603
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: ad:65:22:85:90:d0:3b:e3:a1:49:8b:37:f9:f1:0b:1d:5f:17:a0:77
Fingerprint (sha1): 75:b9:ff:79:71:f7:26:6f:d2:5b:44:58:d0:80:71:11:81:a8:4c:93
Fingerprint (sha256): 85:f4:48:a6:7b:ad:83:16:f4:2b:ab:11:6a:2e:4f:36:50:c0:63:4d:3e:92:81:d1:4c:00:77:8b:a4:f6:99:e8
Issuing Certificate URL: http://gt.symcb.com/gt.crt
Revocation information
OCSP Server: http://gt.symcd.comCRL Distribution Point: http://gt.symcb.com/gt.crl
Check the revocation status for certificate www.khaironline.net
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.khaironline.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.khaironline.net
khaironline.net
khaironline.net
Other certificates including the domain name khaironline.net
(limited to 100 certificates)
mail.khaironline.net
www.khaironline.net
itsupport.afmforest.com
ssihelpdesk.shoesensation.com
help-desk.soa.org
ayuda.vinte.com
www.khaironline.net
itsupport.quigleysimpson.com
servicedesk.vermontech.net
itsupport.afmforest.com
itsupport.quigleysimpson.com
ssihelpdesk.shoesensation.com
portal.beeyond.co
servicedesk.vermontech.net
www.khaironline.net
servicedesk.vermontech.net
mail.khaironline.net
mail.khaironline.net
servicedesk.vermontech.net
itsupport.afmforest.com
helpdesk.kleysen.com
servicedesk.vermontech.net
support.medicaxl.co.il
www.khaironline.net
www.khaironline.net
servicedesk.vermontech.net
itsupport.afmforest.com
support.khaironline.net
www.khaironline.net
www.khaironline.net
itsupport.quigleysimpson.com
www.khaironline.net
www.khaironline.net
www.khaironline.net
help-desk.soa.org
www.khaironline.net
www.khaironline.net
servicedesk.vermontech.net
ssihelpdesk.shoesensation.com
ayuda.vinte.com
helpdesk.kleysen.com
ssihelpdesk.shoesensation.com
itsupport.afmforest.com
support.khaironline.net
www.khaironline.net
itsupport.afmforest.com
www.khaironline.net
support.khaironline.net
help-desk.soa.org
help-desk.soa.org
help-desk.soa.org
www.khaironline.net
support.medicaxl.co.il
itsupport.afmforest.com
servicedesk.vermontech.net
itsupport.afmforest.com
www.khaironline.net
support.medicaxl.co.il
mail.khaironline.net
help-desk.soa.org
servicedesk.vermontech.net
servicedesk.vermontech.net
itsupport.quigleysimpson.com
servicedesk.vermontech.net
www.khaironline.net
support.khaironline.net
helpdesk.kleysen.com
support.medicaxl.co.il
ayuda.vinte.com
servicedesk.vermontech.net
help-desk.soa.org
help-desk.soa.org
www.khaironline.net
ayuda.vinte.com
helpdesk.kleysen.com
www.khaironline.net
itsupport.afmforest.com
ssihelpdesk.shoesensation.com
help-desk.soa.org
ayuda.vinte.com
www.khaironline.net
itsupport.quigleysimpson.com
servicedesk.vermontech.net
itsupport.afmforest.com
itsupport.quigleysimpson.com
ssihelpdesk.shoesensation.com
portal.beeyond.co
servicedesk.vermontech.net
www.khaironline.net
servicedesk.vermontech.net
mail.khaironline.net
mail.khaironline.net
servicedesk.vermontech.net
itsupport.afmforest.com
helpdesk.kleysen.com
servicedesk.vermontech.net
support.medicaxl.co.il
www.khaironline.net
www.khaironline.net
servicedesk.vermontech.net
itsupport.afmforest.com
support.khaironline.net
www.khaironline.net
www.khaironline.net
itsupport.quigleysimpson.com
www.khaironline.net
www.khaironline.net
www.khaironline.net
help-desk.soa.org
www.khaironline.net
www.khaironline.net
servicedesk.vermontech.net
ssihelpdesk.shoesensation.com
ayuda.vinte.com
helpdesk.kleysen.com
ssihelpdesk.shoesensation.com
itsupport.afmforest.com
support.khaironline.net
www.khaironline.net
itsupport.afmforest.com
www.khaironline.net
support.khaironline.net
help-desk.soa.org
help-desk.soa.org
help-desk.soa.org
www.khaironline.net
support.medicaxl.co.il
itsupport.afmforest.com
servicedesk.vermontech.net
itsupport.afmforest.com
www.khaironline.net
support.medicaxl.co.il
mail.khaironline.net
help-desk.soa.org
servicedesk.vermontech.net
servicedesk.vermontech.net
itsupport.quigleysimpson.com
servicedesk.vermontech.net
www.khaironline.net
support.khaironline.net
helpdesk.kleysen.com
support.medicaxl.co.il
ayuda.vinte.com
servicedesk.vermontech.net
help-desk.soa.org
help-desk.soa.org
www.khaironline.net
ayuda.vinte.com
helpdesk.kleysen.com
Certificate
The complete raw certificate details for www.khaironline.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE2zCCA8OgAwIBAgIQLqnoTrkmCIvQpdlca2ApazANBgkqhkiG9w0BAQsFADBm MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UECxMU RG9tYWluIFZhbGlkYXRlZCBTU0wxIDAeBgNVBAMTF0dlb1RydXN0IERWIFNTTCBD QSAtIEczMB4XDTE3MDkxMzAwMDAwMFoXDTIwMTIwMTIzNTk1OVowHjEcMBoGA1UE AwwTd3d3LmtoYWlyb25saW5lLm5ldDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBAK3HvcA9GzNevdzRrbQLj1ov1AvUn9kSEuj9ik6m1vRTGorlAU70eMLo 8QTI+nLthd8lIKrpdIgLPSY6WUrBXRa8VClQOdG4wm+QgxV3VWpKt77qlAZ8WPqI 1pv2TJZXeqglpSv/k3e8nVAtUkQib8+O8BcCvfRRNV7PYfiRO5ZZ0ZXt4z6UPwEk N9E/llQ/Ijg3+5gWiRf5/+md4nCun7/sFIEyo/i+Z/4+CD+LsSgOUA4q9F3Vnbqx MGf5UC3sIR0GEhKSHugT77vPl1xyfKrfD6XarXBsC8bRdCO0+mgzLlD5GRXPo+Eo hsj04jryIz5OzVxj7qd9/InHaxzDoCcCAwEAAaOCAcswggHHMC8GA1UdEQQoMCaC E3d3dy5raGFpcm9ubGluZS5uZXSCD2toYWlyb25saW5lLm5ldDAJBgNVHRMEAjAA MCsGA1UdHwQkMCIwIKAeoByGGmh0dHA6Ly9ndC5zeW1jYi5jb20vZ3QuY3JsMIGd BgNVHSAEgZUwgZIwgY8GBmeBDAECATCBhDA/BggrBgEFBQcCARYzaHR0cHM6Ly93 d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9yZXBvc2l0b3J5L2xlZ2FsMEEGCCsG AQUFBwICMDUMM2h0dHBzOi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvcmVw b3NpdG9yeS9sZWdhbDAfBgNVHSMEGDAWgBStZSKFkNA746FJizf58QsdXxegdzAO BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMFcG CCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDovL2d0LnN5bWNkLmNvbTAm BggrBgEFBQcwAoYaaHR0cDovL2d0LnN5bWNiLmNvbS9ndC5jcnQwEwYKKwYBBAHW eQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAFLay0odmB7nESyCEpLT17fj Lv+ZcNn6aqUKaJ4F/jT0kVyICx3zFkyewwHwt29ZNfXWc4HwDnAuVMtzym5Amo1+ xR0Pg0yCweZqtJ4m7dgCcoHMTYY/fJHKQPTDOENKFJ5tx3uSDuka0XvUfn66TMRX KGbsfaIk9+DjIqjxItgZI/6z8/eHX+1z3owmyoqMLna8osKc1FlCAqcsDB2/d940 mngtyX+fUf51U4DsEy/EyhikFWHOt8pQyJ6fxC5gZ7ceva3BGwlTn+A1MnL+nglE QcLuR6EBilRbwDS6Oj1qk0/feSOkBeEz1hdddioBIDUsDIGpM8/j/va9L3bqToM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArce9wD0bM1693NGttAuP Wi/UC9Sf2RIS6P2KTqbW9FMaiuUBTvR4wujxBMj6cu2F3yUgqul0iAs9JjpZSsFd FrxUKVA50bjCb5CDFXdVakq3vuqUBnxY+ojWm/ZMlld6qCWlK/+Td7ydUC1SRCJv z47wFwK99FE1Xs9h+JE7llnRle3jPpQ/ASQ30T+WVD8iODf7mBaJF/n/6Z3icK6f v+wUgTKj+L5n/j4IP4uxKA5QDir0XdWdurEwZ/lQLewhHQYSEpIe6BPvu8+XXHJ8 qt8PpdqtcGwLxtF0I7T6aDMuUPkZFc+j4SiGyPTiOvIjPk7NXGPup338icdrHMOg JwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 62026697731323945679111611458781194603 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust DV SSL CA - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-13 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-01 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.khaironline.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21937722823035974479544360046735030919073757968000937175265852305239300055385957640615489971124732903605133279495436318371761704752270668680504222091145010992631950444013014771032142805066150272054784963004364771626605185975512475642702224234050225642840230951833416202594610008010162010641681051797942710701729614863847671725115704360431439001823011592745490131820028105784958436436705213574258638555960620585859958696906276874494500820627386222794105679957767711979564874890175746537455997770283034262396915780768855975416281948378096774476312094529019808389517621212003431916166515210852021398153372708685438230567 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.khaironline.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khaironline.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcb.com/gt.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ad65228590d03be3a1498b37f9f10b1d5f17a077 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gt.symcb.com/gt.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0052dacb4a1d981ee7112c821292d3d7b7e32eff9970d9fa6aa50a689e05fe34f4915c880b1df3164c9ec301f0b76f5935f5d67381f00e702e54cb73ca6e409a8d7ec51d0f834c82c1e66ab49e26edd8027281cc4d863f7c91ca40f4c338434a149e6dc77b920ee91ad17bd47e7eba4cc4572866ec7da224f7e0e322a8f122d81923feb3f3f7875fed73de8c26ca8a8c2e76bca2c29cd4594202a72c0c1dbf77de349a782dc97f9f51fe755380ec132fc4ca18a41561ceb7ca50c89e9fc42e6067b71ebdadc11b09539fe0353272fe9e094441c2ee47a1018a545bc034ba3a3d6a934fdf7923a405e133d6175d762a0120352c0c81a933cfe3fef6bd2f76ea4e83