www.musik-produktiv.de

- Musik Produktiv GmbH & Co. KG -

Issued by GeoTrust Extended Validation SHA256 SSL CA

About this certificate

This digital certificate with serial number 76:5a:aa:69:41:ba:65:20:59:7e:25:be:ad:c9:82:6b was issued on by GeoTrust Inc..

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Musik Produktiv GmbH & Co. KG

Company registration number: HRA 4137
Organization: Musik Produktiv GmbH & Co. KG
State / Province: Nordrhein-Westfalen
Locality: Ibbenbüren
Country: DE

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 76:5a:aa:69:41:ba:65:20:59:7e:25:be:ad:c9:82:6b
Serial Number (int): 157319666568819755667539460041353036395
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 17:b8:dc:aa:b1:53:22:19:41:95:7b:3c:81:ea:88:9b:49:c3:a2:8b

Fingerprint (sha1): 8b:38:1d:99:3c:d4:03:ca:02:e9:b8:41:df:e2:e0:02:62:54:3c:ca
Fingerprint (sha256): 89:38:4a:0d:d2:be:42:3d:2f:77:33:fb:df:82:aa:8c:3f:e2:6e:76:5e:f7:e2:77:ab:17:6f:75:b0:4e:14:5e

Issuing Certificate URL: http://gk.symcb.com/gk.crt

Revocation information

OCSP Server: http://gk.symcd.com
CRL Distribution Point: http://gk.symcb.com/gk.crl

Check the revocation status for certificate www.musik-produktiv.de

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.musik-produktiv.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.musik-produktiv.ch
www.musik-produktiv.it
www.musik-produktiv.es
www.musik-produktiv.co.uk
www.musik-produktiv.at
www.musik-produktiv.pl
www.musik-produktiv.be
fr.musik-produktiv.be
www.musik-produktiv.se
www.musik-produktiv.fr
www.musik-produktiv.nl
www.musik-produktiv.com
sc1.musik-produktiv.com
www.musik-produktiv.ru
www.guitar-gallery.de
www.musik-produktiv.de
musik-produktiv.de

Other certificates including the domain name musik-produktiv.de

(limited to 100 certificates)
www.musik-produktiv.de
blog.musik-produktiv.de
*.musik-produktiv.de
musik-produktiv.de
www.musik-produktiv.de
www.musik-produktiv.de
www.musik-produktiv.de
www.musik-produktiv.de
www.musik-produktiv.de
www.musik-produktiv.de
www.musik-produktiv.de
portal.musik-produktiv.de
musik-produktiv.de
mail.musik-produktiv.de
musik-produktiv.de
musik-produktiv.de
musik-produktiv.de
mpmail.musik-produktiv.de
pflege.musik-produktiv.de
www.musik-produktiv.de
pflege.musik-produktiv.de
blog.musik-produktiv.de
www.musik-produktiv.de
blog.musik-produktiv.de
www.musik-produktiv.de
dev.musik-produktiv.de
www.musik-produktiv.de
mpmail.musik-produktiv.de
www.musik-produktiv.de
mpmail.musik-produktiv.de
www.musik-produktiv.de
musik-produktiv.de
musik-produktiv.de
blog.musik-produktiv.de
www.musik-produktiv.de
mpmail.musik-produktiv.de
www.musik-produktiv.de
www.musik-produktiv.de
blog.musik-produktiv.de
www.musik-produktiv.de
www.musik-produktiv.de
www.musik-produktiv.de

Certificate

The complete raw certificate details for www.musik-produktiv.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIuDCCB6CgAwIBAgIQdlqqaUG6ZSBZfiW+rcmCazANBgkqhkiG9w0BAQsFADBa
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEzMDEGA1UEAxMq
R2VvVHJ1c3QgRXh0ZW5kZWQgVmFsaWRhdGlvbiBTSEEyNTYgU1NMIENBMB4XDTE3
MDYyNzAwMDAwMFoXDTE4MTAxNzIzNTk1OVowggETMRMwEQYLKwYBBAGCNzwCAQMT
AkRFMSQwIgYLKwYBBAGCNzwCAQITE05vcmRyaGVpbi1XZXN0ZmFsZW4xGjAYBgsr
BgEEAYI3PAIBARMJU3RlaW5mdXJ0MR0wGwYDVQQPExRQcml2YXRlIE9yZ2FuaXph
dGlvbjERMA8GA1UEBRMISFJBIDQxMzcxCzAJBgNVBAYTAkRFMRwwGgYDVQQIDBNO
b3JkcmhlaW4tV2VzdGZhbGVuMRQwEgYDVQQHDAtJYmJlbmLDvHJlbjEmMCQGA1UE
CgwdTXVzaWsgUHJvZHVrdGl2IEdtYkggJiBDby4gS0cxHzAdBgNVBAMMFnd3dy5t
dXNpay1wcm9kdWt0aXYuZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC9xg1qdRBKy2lKTA4IOHsGmnJSrG24QqDFtbV5NAA+Gb+JkzpCDo3QelvbS0b6
C3FtIpmOsggKoPHGxspnlfdHnmXAjlePBtgSbPODmWWnC7vujXYAfVIy3LPpVR+d
YC7Q4plb1wljSw+rf8+CrOS4NJfc2WADTsyPWA/g2EhsYHcLC7ZlJypeABQIUReg
YA8en1P2xBI3aaAjwewSM+p+/AcLQy+0+E38Ed2ViEMW1ZLA24a4lCnVXwv9uRog
D24s5Wgwy+MsBwxRRjOpzAuFQVyiyRS2PZFFb5NOwmOnMPrCA/VzDanNOm/8SZS6
Em3N9wb29OeaADwzyaBDUFPXAgMBAAGjggS9MIIEuTCCAaQGA1UdEQSCAZswggGX
ghZ3d3cubXVzaWstcHJvZHVrdGl2LmNoghZ3d3cubXVzaWstcHJvZHVrdGl2Lml0
ghZ3d3cubXVzaWstcHJvZHVrdGl2LmVzghl3d3cubXVzaWstcHJvZHVrdGl2LmNv
LnVrghZ3d3cubXVzaWstcHJvZHVrdGl2LmF0ghZ3d3cubXVzaWstcHJvZHVrdGl2
LnBsghZ3d3cubXVzaWstcHJvZHVrdGl2LmJlghVmci5tdXNpay1wcm9kdWt0aXYu
YmWCFnd3dy5tdXNpay1wcm9kdWt0aXYuc2WCFnd3dy5tdXNpay1wcm9kdWt0aXYu
ZnKCFnd3dy5tdXNpay1wcm9kdWt0aXYubmyCF3d3dy5tdXNpay1wcm9kdWt0aXYu
Y29tghdzYzEubXVzaWstcHJvZHVrdGl2LmNvbYIWd3d3Lm11c2lrLXByb2R1a3Rp
di5ydYIVd3d3Lmd1aXRhci1nYWxsZXJ5LmRlghZ3d3cubXVzaWstcHJvZHVrdGl2
LmRlghJtdXNpay1wcm9kdWt0aXYuZGUwCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMC
BaAwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL2drLnN5bWNiLmNvbS9nay5jcmww
gakGA1UdIASBoTCBnjCBkgYJKwYBBAHwIgEGMIGEMD8GCCsGAQUFBwIBFjNodHRw
czovL3d3dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL3JlcG9zaXRvcnkvbGVnYWww
QQYIKwYBBQUHAgIwNQwzaHR0cHM6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNl
cy9yZXBvc2l0b3J5L2xlZ2FsMAcGBWeBDAEBMB0GA1UdJQQWMBQGCCsGAQUFBwMB
BggrBgEFBQcDAjAfBgNVHSMEGDAWgBQXuNyqsVMiGUGVezyB6oibScOiizBXBggr
BgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9nay5zeW1jZC5jb20wJgYI
KwYBBQUHMAKGGmh0dHA6Ly9nay5zeW1jYi5jb20vZ2suY3J0MIIBgAYKKwYBBAHW
eQIEAgSCAXAEggFsAWoAdwDd6x0reg1PpiCLga2BaHB+Lo6dAdVciI09EcTNtuy+
zAAAAVzop3O8AAAEAwBIMEYCIQDbZCjmLUhAht88iij1v6KNB3Y89OPCyFLHxNvv
ICfZ7wIhAKhTYNaYuNATJBm1LyNe0+IpHZTcZsW/xyVoTjEslVioAHcApLkJkLQY
WBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFc6Kdz0gAABAMASDBGAiEA5i4r
ZcVtJmXjhnuEtMYrGBW6jKW9HovalrAV/Hhtl6ACIQDhmMgF41iFkMKlNGNlQc4z
c0a4xs7rrFjf6gzbCOTv6AB2AO5Lvbd1zmC64UJpH6vhnmajD35fsHLYgwDEe4l6
qP3LAAABXOindbsAAAQDAEcwRQIhANMBO6NzzMFEyr0r4UaOvDbqsMv5XRpzPFvT
6oJz+NG4AiAD0V+h6YG8zIRJttW5U+Xagm1KE8zulWHrgiVFi10sSTANBgkqhkiG
9w0BAQsFAAOCAQEAi/18wUanPNSnBmJv+Z/rkanuCkR5vI07N+C1w6PFTUXBLXfL
6g8BNJL0R9Zw3mH7lELVcnJBu9rIEQm9HneYyKON9OSKMSicOXHwH96+PEIy1g5I
8Gk06te+kNMym6XyL3g0w+ReXf+1zGoxtErhSZgEzMi9sY/viJAOMPcZQE5vDHrO
vODaYVzLU6G1mZKX2PMJI/5mlNv1vOZkY3NL7kshugaLmdVqfar3OHuX5BZiO+RZ
FPG2c1HhVQLm6ar9uEM4lGlIqqNxm72UPR0/7hpYGIhR7ThJ9myiwYQARdKNDHns
kW9qErOqMPZ5+iSr6krvgJCHfxzm30TGh6w6vg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcYNanUQSstpSkwOCDh7
BppyUqxtuEKgxbW1eTQAPhm/iZM6Qg6N0Hpb20tG+gtxbSKZjrIICqDxxsbKZ5X3
R55lwI5XjwbYEmzzg5llpwu77o12AH1SMtyz6VUfnWAu0OKZW9cJY0sPq3/Pgqzk
uDSX3NlgA07Mj1gP4NhIbGB3Cwu2ZScqXgAUCFEXoGAPHp9T9sQSN2mgI8HsEjPq
fvwHC0MvtPhN/BHdlYhDFtWSwNuGuJQp1V8L/bkaIA9uLOVoMMvjLAcMUUYzqcwL
hUFcoskUtj2RRW+TTsJjpzD6wgP1cw2pzTpv/EmUuhJtzfcG9vTnmgA8M8mgQ1BT
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 157319666568819755667539460041353036395
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Extended Validation SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Steinfurt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRA 4137'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ibbenbüren'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Musik Produktiv GmbH & Co. KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.musik-produktiv.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23956702919775957688983561206811471040999012436988053779223123964365812416722147355857179758589374808271659572042297386598405202624493184015737297831579638960886119320130285504478795678854739388900276047549967403740277877718053300319548497067027927718681218656478912039302192262040802304037520011885836415664206517195628000623003066370417832157178446745644862905308756132548823073872764615238962191756823053820633939523110035614226526533093113825237916443701591558700746410440495167492243080581858886467433629790203157981034569192701534787887834696313843248563963319248829182324308295421408811559355113761580340237271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (411 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.musik-produktiv.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.musik-produktiv.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.musik-produktiv.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.musik-produktiv.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.musik-produktiv.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.musik-produktiv.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.musik-produktiv.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.musik-produktiv.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.musik-produktiv.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.musik-produktiv.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.musik-produktiv.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.musik-produktiv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sc1.musik-produktiv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.musik-produktiv.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guitar-gallery.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.musik-produktiv.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'musik-produktiv.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gk.symcb.com/gk.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17b8dcaab153221941957b3c81ea889b49c3a28b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gk.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gk.symcb.com/gk.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015ce8a773bc0000040300483046022100db6428e62d484086df3c8a28f5bfa28d07763cf4e3c2c852c7c4dbef2027d9ef022100a85360d698b8d0132419b52f235ed3e2291d94dc66c5bfc725684e312c9558a8007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015ce8a773d20000040300483046022100e62e2b65c56d2665e3867b84b4c62b1815ba8ca5bd1e8bda96b015fc786d97a0022100e198c805e3588590c2a534636541ce337346b8c6ceebac58dfea0cdb08e4efe8007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000015ce8a775bb0000040300473045022100d3013ba373ccc144cabd2be1468ebc36eab0cbf95d1a733c5bd3ea8273f8d1b8022003d15fa1e981bccc8449b6d5b953e5da826d4a13ccee9561eb8225458b5d2c49
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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