web.cupdata.com

- China Unionpay Data Services Co., Ltd -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 5c:7e:2b:c7:e3:df:1c:c9:9c:30:cf:a6:c6:04:2e:73 was issued on by GeoTrust Inc..

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

China Unionpay Data Services Co., Ltd

Organization: China Unionpay Data Services Co., Ltd
Organization unit: Innovation Business Dept.
State / Province: Shanghai
Locality: Shanghai
Country: CN

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5c:7e:2b:c7:e3:df:1c:c9:9c:30:cf:a6:c6:04:2e:73
Serial Number (int): 122944092996927769581307698786488036979
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 6f:86:13:f7:8a:77:b6:37:bf:3f:8b:b2:9d:73:6c:c2:97:9c:77:45
Fingerprint (sha256): 8d:1a:64:ed:ef:25:a7:b7:ba:6e:e4:26:60:d5:96:a8:7d:ab:5a:92:ee:5c:e4:56:07:b7:da:10:a1:a7:02:00

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate web.cupdata.com

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for web.cupdata.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

creditcard.gzcb.com.cn
creditcardapply.hfbank.com.cn
mall.hebbank.com
creditcard.sdebank.com
creditcard.shengjingbank.com.cn
ibill.qlbchina.com
img.leagcard.com
creditcard.zybank.com.cn
wspt.bankqh.com
www.wdnsbank.com
cc.zj96596.com
apl.cc.hrbb.com.cn
shop.cc.hrbb.com.cn
wx.cc.hrbb.com.cn
m.cardmail.psbc.com
cardmall.bankofdl.com
credit-card.hzbank.com.cn
creditshop.hxb.com.cn
fraud.cupdata.com
pointpay.cupdata.com
mcap.cupdata.com
web.cupdata.com

Other certificates including the domain name cupdata.com

(limited to 100 certificates)
web.cupdata.com
directbank.cupdata.com
wechat.cupdapp.com
web.cupdata.com
passort.leagcard.com
passort.leagcard.com
ncoas.cupdapp.com
ncoas.cupdapp.com
wlian.cupdata.com
resource.leagcard.com
resource.leagcard.com
web.cupdata.com
trip.cupdata.com
web.cupdata.com
citiweb.cupdata.com
wechat.cupdapp.com
resource.leagcard.com
directbank.cupdata.com
passort.leagcard.com
directbank.cupdata.com
ncoas.cupdapp.com
*.cupdata.com
wlian.cupdata.com
web.cupdata.com
securityplus.cupdata.com
mbank6.cupdata.com
directbank.cupdata.com
directbank.cupdata.com
www.cupdata.com
passort.leagcard.com
resource.leagcard.com
xdzlar.cupdata.com
directbank.cupdata.com
ncoas.cupdapp.com
*.statictest.cupdata.com
web.cupdata.com
web.cupdata.com
resource.leagcard.com
web.cupdata.com
resource.leagcard.com
web.cupdata.com
passort.leagcard.com
web.cupdata.com
web.cupdata.com
resource.leagcard.com
3d.cupdata.com
web.cupdata.com
app.cupdapp.com
web.cupdata.com
trip.cupdata.com
ncoas.cupdapp.com
securityplus.cupdata.com
passort.leagcard.com
directbank.cupdata.com
passort.leagcard.com
www.cupdata.com
passort.leagcard.com
citiweb.cupdata.com
www.cupdata.com
directbank.cupdata.com
trip.cupdata.com
web.cupdata.com
www.cupdata.com
mbank6.cupdata.com
directbank.cupdata.com
www.cupdata.com
passort.leagcard.com
scbwxmnrecsign.cupdata.com
ncoas.cupdapp.com
resource.leagcard.com
web.cupdata.com
resource.leagcard.com
web.cupdata.com
directbank.cupdata.com
resource.leagcard.com
3d.cupdata.com
directbank.cupdata.com
intl.cupdata.com
directbank.cupdata.com
ncoas.cupdapp.com
directbank.cupdata.com
onlineuat.cupdata.com
trip.cupdata.com
onlineuat.cupdata.com
www.cupdata.com
passort.leagcard.com
passort.leagcard.com
3d.cupdata.com
mbank6.cupdata.com
app.cupdapp.com
mbank6.cupdata.com
resource.leagcard.com
scbwxmnrecsign.test.cupdata.com
passort.leagcard.com
passort.leagcard.com
*.test.cupdata.com
passort.leagcard.com
resource.leagcard.com
resource.leagcard.com
www.cupdata.com

Certificate

The complete raw certificate details for web.cupdata.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lHgwR4ZpARM8tQPt9KP
Njqkva3BoffMDV5u40fbY7KlefkmJp0uhvxtbV00MZPhDPaH7gUZ2hIyHjWaqTKw
JHbZ4PISaueIuzVRXFM5TYWuLjOS5WHx+pX9ibJomLij1mqDTvZ3bPobaOU5VUra
behvgKT5wxa9/DmOcNOONQxZr5ef/EPOXf1mrj+Mo9o9pH9h2TsaaAnEXJLdYmEr
uPpdyVMRD7Gw/9lWmtJWlz1uSBaXIAT9DQh2QMa58PbQa/tzf/Fnxxy8spqDxIvV
Mn6xjb+5b889ARMygw/23hVK53+18Xyr8r0jUWoehgWHDLGsHaUFwAOFUKpPJVuM
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 122944092996927769581307698786488036979
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Shanghai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Shanghai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'China Unionpay Data Services Co., Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Innovation Business Dept.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'web.cupdata.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28570232442683190475187160757832717227175002949398573855557374624341376655910505456509510133994540555327519287458712106707672676333646921658631510121300480100345523329617275026236941686727117895749080474794408022046076967537791904288872018762167325862444497086995084912994754465831273327298409682576911852778910301306330386770388101264271040751121093797089440809609059352977244776942063879014697760665767316978192807484188832355096304052899523919927694906683789414060465030116669011340695234814444837550558553395501705580774720681297793756327637465839372751920170075035110306383989337711226277999354432384889580653709
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (479 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditcard.gzcb.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditcardapply.hfbank.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mall.hebbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditcard.sdebank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditcard.shengjingbank.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibill.qlbchina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.leagcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditcard.zybank.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wspt.bankqh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wdnsbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cc.zj96596.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apl.cc.hrbb.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.cc.hrbb.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wx.cc.hrbb.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.cardmail.psbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardmall.bankofdl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'credit-card.hzbank.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditshop.hxb.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fraud.cupdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pointpay.cupdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcap.cupdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.cupdata.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015fe1dd63670000040300473045022100f98a64a0adda8d35272b56912d99f5152367b0d395af855678ede9b19417ba4d02203a84e5b76642652cb4f71cce6712824299ca19e686dae69b1c17b948a310ba26007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015fe1dd63df0000040300473045022100f2f8bb83f2207426500b92ea60ee50cbfc32130bcfa6b14cfc0b871183abcb0c02202fb32113da9d9940f1d47e9aedb6f4d597e9bc95063243844124eea62d5dd183
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004a57ec9300b3cd079f270b90f89e10f38cdcaf205a30a523f9ab856bf14059900257d8a4afd49b0afd02e4b31497f019d94bd6d3cf4f898e9854b1467c9c1f842b5a7999b212ea6b7f8579f4020416e1732122fa0cd0ee1459aa357f36dd48cbb9025b976811c2c3d5d4b4433dedf0fa7c8f5d132abd6e74364fcbcf194cdcee8dbbed09773b59772ce456fc84f20301aad921e532b8ddb32b42fb4893615cd7dbb1cb50488d8a828505d68d12f3819d75092601abe42608372aa3cddde8113f2e1fed7e2fdbadc57ba746f212cc21cc36adfe7c1ddf36a44bdb627e21fb90643013da1be1aa27a2f26f358033fed35f91ace172887aaec45fa52bf273976a9b