aacdn.jp

- All About Inc. -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 1c:25:b6:23:fc:c4:e4:1e:0d:1f:e2:99:43:7b:1a:f7 was issued on by GeoTrust Inc..

With 31 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

All About Inc.

Organization: All About Inc.
Organization unit: SYSTEM GROUP
State / Province: Tokyo
Locality: Shibuya-ku
Country: JP

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1c:25:b6:23:fc:c4:e4:1e:0d:1f:e2:99:43:7b:1a:f7
Serial Number (int): 37414193115505234856360764947746724599
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): a8:2c:77:c4:f7:e6:35:75:46:fe:fa:05:ff:eb:d3:66:dd:e3:2e:69
Fingerprint (sha256): 90:d0:78:e0:8f:50:36:5a:01:17:fd:3d:14:8a:9a:47:8d:ce:cb:0e:8d:d0:23:0e:13:a5:c5:54:f6:72:87:43

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate aacdn.jp

31

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aacdn.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cdn.citrus-net.jp
online.ogawatsusyou.com
adcontents.primead.jp
ad.primead.jp
font.allabout-japan.com
stg-pts.allabout.co.jp
img08.allabout.co.jp
stg-img.allabout.co.jp
patric.allabout.co.jp
focus.allabout.co.jp
imgcp.allabout.co.jp
img02.allabout.co.jp
img09.allabout.co.jp
stg-imgcp.allabout.co.jp
img.allabout.co.jp
pts.allabout.co.jp
img01.allabout.co.jp
pts.aacdn.jp
stg-img.aacdn.jp
stg-imgcp.aacdn.jp
svg.aacdn.jp
f.aacdn.jp
cn.aacdn.jp
s.f.aacdn.jp
stg-pts.aacdn.jp
img.aacdn.jp
aoe.aacdn.jp
imgcp.aacdn.jp
docomo.img.aacdn.jp
docomo.pts.aacdn.jp
aacdn.jp

Other certificates including the domain name aacdn.jp

(limited to 100 certificates)
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aoe.aacdn.jp
aacdn.jp
ix.aacdn.jp
aacdn.jp
aacdn.jp
ix-stg.aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
ix.aacdn.jp
aacdn.jp
aacdn.jp
ix.aacdn.jp
ix.aacdn.jp
aacdn.jp
ix.aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
ix-stg.aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aoe.aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
ix-stg.aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aoe.aacdn.jp
aacdn.jp
stg.aacdn.jp
ix-stg.aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
stg.aacdn.jp
aoe.aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
aacdn.jp
ix.aacdn.jp
aoe.aacdn.jp

Certificate

The complete raw certificate details for aacdn.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIQHCW2I/zE5B4NH+KZQ3sa9zANBgkqhkiG9w0BAQsFADBE
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU
R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTYxMjA5MDAwMDAwWhcNMTcwOTI3MjM1
OTU5WjB1MQswCQYDVQQGEwJKUDEOMAwGA1UECAwFVG9reW8xEzARBgNVBAcMClNo
aWJ1eWEta3UxFzAVBgNVBAoMDkFsbCBBYm91dCBJbmMuMRUwEwYDVQQLDAxTWVNU
RU0gR1JPVVAxETAPBgNVBAMMCGFhY2RuLmpwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAx+Eq9DWA7e3ZsCBBCjmTj7/dvkEpIv6/1WMa947tcCCYjatZ
aN7f4aH8WhDh4KORS91dZgxH+Krjn7wGF4/NUYvxRxtQAYkjf0RhXZGQXtk4uRAv
HDYJRw/drCV8sqpgZVVxETwyIi39RMJZhTf7YjuSVcFL2n6MG9mIes+UGhE8kPb4
nBF4qbsG1rIDhjgrvDQSbfMjWXV+INl7VZFMcZ+s1BDuTZRy/r81yq5Djb/NKSby
dYDl5ncO0s5mDXyqnS6GP0QE5eK9lwLWbAf+SLiJs46Iryg8m3EkHmX+x8qHNzsN
9PVRC2jF6dEVhucf4KRiw1a57Z70FgWdL8zcswIDAQABo4ID/jCCA/owggJgBgNV
HREEggJXMIICU4IRY2RuLmNpdHJ1cy1uZXQuanCCF29ubGluZS5vZ2F3YXRzdXN5
b3UuY29tghVhZGNvbnRlbnRzLnByaW1lYWQuanCCDWFkLnByaW1lYWQuanCCF2Zv
bnQuYWxsYWJvdXQtamFwYW4uY29tghZzdGctcHRzLmFsbGFib3V0LmNvLmpwghRp
bWcwOC5hbGxhYm91dC5jby5qcIIWc3RnLWltZy5hbGxhYm91dC5jby5qcIIVcGF0
cmljLmFsbGFib3V0LmNvLmpwghRmb2N1cy5hbGxhYm91dC5jby5qcIIUaW1nY3Au
YWxsYWJvdXQuY28uanCCFGltZzAyLmFsbGFib3V0LmNvLmpwghRpbWcwOS5hbGxh
Ym91dC5jby5qcIIYc3RnLWltZ2NwLmFsbGFib3V0LmNvLmpwghJpbWcuYWxsYWJv
dXQuY28uanCCEnB0cy5hbGxhYm91dC5jby5qcIIUaW1nMDEuYWxsYWJvdXQuY28u
anCCDHB0cy5hYWNkbi5qcIIQc3RnLWltZy5hYWNkbi5qcIISc3RnLWltZ2NwLmFh
Y2RuLmpwggxzdmcuYWFjZG4uanCCCmYuYWFjZG4uanCCC2NuLmFhY2RuLmpwggxz
LmYuYWFjZG4uanCCEHN0Zy1wdHMuYWFjZG4uanCCDGltZy5hYWNkbi5qcIIMYW9l
LmFhY2RuLmpwgg5pbWdjcC5hYWNkbi5qcIITZG9jb21vLmltZy5hYWNkbi5qcIIT
ZG9jb21vLnB0cy5hYWNkbi5qcIIIYWFjZG4uanAwCQYDVR0TBAIwADAOBgNVHQ8B
Af8EBAMCBaAwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL2duLnN5bWNiLmNvbS9n
bi5jcmwwgZ0GA1UdIASBlTCBkjCBjwYGZ4EMAQICMIGEMD8GCCsGAQUFBwIBFjNo
dHRwczovL3d3dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL3JlcG9zaXRvcnkvbGVn
YWwwQQYIKwYBBQUHAgIwNQwzaHR0cHM6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291
cmNlcy9yZXBvc2l0b3J5L2xlZ2FsMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
BQcDAjAfBgNVHSMEGDAWgBTSb/eW9IU/cjwwfSPahXibo3xafDBXBggrBgEFBQcB
AQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9nbi5zeW1jZC5jb20wJgYIKwYBBQUH
MAKGGmh0dHA6Ly9nbi5zeW1jYi5jb20vZ24uY3J0MBMGCisGAQQB1nkCBAMBAf8E
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCnrpQPm5uQvAr8Ou2BOm3+SQBb4iweYG/f
fBUed9vTAwUE+hWbec1tQ1G8gvyn9c5Ww6n3A5I45LtS/pjFiTYq09JKcbJGYCjw
FxEL3d92N2vnuLMB8WsPyuUYjiQogKzooCRkwAyvG6OlMqMJDxD3rwIQ9kcNS6Sr
JrXQPIBBDVItzOA06wV0dKJkXYA7s9Po/1AuSQU4s9TkGw2mehHMCQmWI59zWdNC
KYZTmZne/4VzHwCwcinXrlfN1yJVQ4iIOlJVvWtCoXAjPHhSYwvWQvh3NXz0kf8i
B65X9dnodY+3nLTSCDWBKEZ8138eyPtlpdQcJqsy+SB3VrSFp9Ci
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+Eq9DWA7e3ZsCBBCjmT
j7/dvkEpIv6/1WMa947tcCCYjatZaN7f4aH8WhDh4KORS91dZgxH+Krjn7wGF4/N
UYvxRxtQAYkjf0RhXZGQXtk4uRAvHDYJRw/drCV8sqpgZVVxETwyIi39RMJZhTf7
YjuSVcFL2n6MG9mIes+UGhE8kPb4nBF4qbsG1rIDhjgrvDQSbfMjWXV+INl7VZFM
cZ+s1BDuTZRy/r81yq5Djb/NKSbydYDl5ncO0s5mDXyqnS6GP0QE5eK9lwLWbAf+
SLiJs46Iryg8m3EkHmX+x8qHNzsN9PVRC2jF6dEVhucf4KRiw1a57Z70FgWdL8zc
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 37414193115505234856360764947746724599
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Shibuya-ku'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'All About Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SYSTEM GROUP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'aacdn.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25232457063227340045821373374642351326592673298292090795768266641328417697532647973655710881189793641012272457559113642871731060078628515468424915050850779847932816414315631284340502522560852822058952752567715637910266227407108752244971003147950982218285015617980882414272956026119038485024168435750323339644537077191845206681740203309771234413582195651649994353136676161274151034821481170676499837650379545313435433106072953107429696490903532085084898309193056991650677027140290901485704536423077461625582704258353023714618345387129090370421850219836642484504651620133139318065677179691657571469413384262653819280563
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (599 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.citrus-net.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.ogawatsusyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adcontents.primead.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ad.primead.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'font.allabout-japan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-pts.allabout.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img08.allabout.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-img.allabout.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patric.allabout.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'focus.allabout.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imgcp.allabout.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img02.allabout.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img09.allabout.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-imgcp.allabout.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.allabout.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pts.allabout.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img01.allabout.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pts.aacdn.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-img.aacdn.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-imgcp.aacdn.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svg.aacdn.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.aacdn.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.aacdn.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.f.aacdn.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-pts.aacdn.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.aacdn.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aoe.aacdn.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imgcp.aacdn.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docomo.img.aacdn.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docomo.pts.aacdn.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aacdn.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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