pem.chiesigroup.com
- Chiesi Farmaceutici SpA -
Issued by GeoTrust SSL CA - G3
About this certificate
This digital certificate with serial number 34:2b:da:eb:d0:a4:fa:d1:79:b8:f4:b0:b3:87:d1:75 was issued on by GeoTrust Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Chiesi Farmaceutici SpA
Organization:
Chiesi Farmaceutici SpA
Organization unit: Group ICT
Organization unit: Group ICT
State / Province:
Parma
Locality: Parma
Country: IT
Locality: Parma
Country: IT
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 34:2b:da:eb:d0:a4:fa:d1:79:b8:f4:b0:b3:87:d1:75Serial Number (int): 69347564794216740228314365070416531829
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c
Fingerprint (sha1): f9:7d:82:16:fc:03:ed:1f:8d:ea:de:60:d9:15:de:8b:b6:c0:69:0b
Fingerprint (sha256): 91:89:e9:62:78:83:57:45:41:fe:c3:f3:41:70:46:28:76:01:f5:db:6e:56:4a:54:3a:f7:db:6f:9c:b5:51:3d
Issuing Certificate URL: http://gn.symcb.com/gn.crt
Revocation information
OCSP Server: http://gn.symcd.comCRL Distribution Point: http://gn.symcb.com/gn.crl
Check the revocation status for certificate pem.chiesigroup.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for pem.chiesigroup.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
pem.chiesigroup.com
Other certificates including the domain name chiesigroup.com
(limited to 100 certificates)
itpool.chiesigroup.com
extranet.chiesi.com
chiesisg.chiesigroup.com
chiesisg.chiesigroup.com
MAIL.chiesi.com
mail.chiesigroup.com
sip.chiesigroup.com
webconf.chiesigroup.com
itpool.chiesigroup.com
itpool.chiesi.com
wifi.chiesigroup.com
sip.chiesi.com
MAIL.chiesi.com
extranet.chiesi.com
extranet.chiesigroup.com
cag.chiesigroup.com
cag.chiesigroup.com
chvpn.chiesigroup.com
wifi.chiesigroup.com
itpool.chiesi.com
itpool.chiesi.com
pem.chiesigroup.com
cargobay.chiesi.com
mail.chiesi.com
extranet.chiesigroup.com
wifi.chiesigroup.com
chiesigroup.com
cargobay.chiesi.com
wifi.chiesigroup.com
chiesicrm.chiesigroup.com
chiesigroup.com
chiesisg.chiesigroup.com
sip.chiesi.com
itpool.chiesi.com
cag.chiesigroup.com
mail.chiesi.com
sip.chiesigroup.com
chiesigroup.com
sip.chiesigroup.com
extranet.chiesi.com
chvpn.chiesigroup.com
pem.chiesigroup.com
chiesigroup.com
sip.chiesigroup.com
pem.chiesigroup.com
chiesicrm.chiesigroup.com
www.chiesigroup.com
ngs.chiesigroup.com
pem.chiesigroup.com
MAIL.chiesi.com
cargobay.chiesi.com
sip.chiesigroup.com
MAIL.chiesi.com
cag.chiesigroup.com
cargobay.chiesigroup.com
sip.chiesigroup.com
itpool.chiesigroup.com
extranet.chiesi.com
pem.chiesigroup.com
chiesicrm.chiesigroup.com
chiesisg.chiesigroup.com
chiesigroup.com
extranet.chiesigroup.com
chiesigroup.com
attp.chiesi.com
chiesigroup.com
webconf.chiesigroup.com
chiesicrm.chiesigroup.com
itpool.chiesigroup.com
chiesigroup.com
ngs.chiesigroup.com
chiesigroup.com
sip.chiesi.com
sharefile.chiesi.com
chiesigroup.com
extranet.chiesi.com
chiesisg.chiesigroup.com
chiesisg.chiesigroup.com
MAIL.chiesi.com
mail.chiesigroup.com
sip.chiesigroup.com
webconf.chiesigroup.com
itpool.chiesigroup.com
itpool.chiesi.com
wifi.chiesigroup.com
sip.chiesi.com
MAIL.chiesi.com
extranet.chiesi.com
extranet.chiesigroup.com
cag.chiesigroup.com
cag.chiesigroup.com
chvpn.chiesigroup.com
wifi.chiesigroup.com
itpool.chiesi.com
itpool.chiesi.com
pem.chiesigroup.com
cargobay.chiesi.com
mail.chiesi.com
extranet.chiesigroup.com
wifi.chiesigroup.com
chiesigroup.com
cargobay.chiesi.com
wifi.chiesigroup.com
chiesicrm.chiesigroup.com
chiesigroup.com
chiesisg.chiesigroup.com
sip.chiesi.com
itpool.chiesi.com
cag.chiesigroup.com
mail.chiesi.com
sip.chiesigroup.com
chiesigroup.com
sip.chiesigroup.com
extranet.chiesi.com
chvpn.chiesigroup.com
pem.chiesigroup.com
chiesigroup.com
sip.chiesigroup.com
pem.chiesigroup.com
chiesicrm.chiesigroup.com
www.chiesigroup.com
ngs.chiesigroup.com
pem.chiesigroup.com
MAIL.chiesi.com
cargobay.chiesi.com
sip.chiesigroup.com
MAIL.chiesi.com
cag.chiesigroup.com
cargobay.chiesigroup.com
sip.chiesigroup.com
itpool.chiesigroup.com
extranet.chiesi.com
pem.chiesigroup.com
chiesicrm.chiesigroup.com
chiesisg.chiesigroup.com
chiesigroup.com
extranet.chiesigroup.com
chiesigroup.com
attp.chiesi.com
chiesigroup.com
webconf.chiesigroup.com
chiesicrm.chiesigroup.com
itpool.chiesigroup.com
chiesigroup.com
ngs.chiesigroup.com
chiesigroup.com
sip.chiesi.com
sharefile.chiesi.com
chiesigroup.com
Certificate
The complete raw certificate details for pem.chiesigroup.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG8DCCBdigAwIBAgIQNCva69Ck+tF5uPSws4fRdTANBgkqhkiG9w0BAQsFADBE MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTYwOTA3MDAwMDAwWhcNMTkwOTA3MjM1 OTU5WjCBgTELMAkGA1UEBhMCSVQxDjAMBgNVBAgMBVBhcm1hMQ4wDAYDVQQHDAVQ YXJtYTEgMB4GA1UECgwXQ2hpZXNpIEZhcm1hY2V1dGljaSBTcEExEjAQBgNVBAsM CUdyb3VwIElDVDEcMBoGA1UEAwwTcGVtLmNoaWVzaWdyb3VwLmNvbTCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAKo9+3Zqh1MW0X6812Kuhjv20+3KFmb3 1d/r2AEkQTeYiS6SGka8tCVFVkS7r6aFdxV4ETZe4cX7FGMN2+RAiGMez8uOd/8x Saz95iSGLpv6glA27jYSyTFd1IdJlZrRp1ULnoeUqKIAM7tpmnhyCRm9xftWw2Al PSish7gu2FycZJQQA+Ae9inKcPuriReizcS/0ELECLBd1h7/NuHyOJeeEe2so87K VdvlCXn2p0SLFrHO3xGIuZv5kNTRJO7apBAzKOM2J1x7WeEF8mAO3Lhfoi0AQfSD S0y/8kW7gI60muJwz19+lyDIWrPtc+s8gxqYGDrml6/jHtGT0/NA9jMCAwEAAaOC A54wggOaMB4GA1UdEQQXMBWCE3BlbS5jaGllc2lncm91cC5jb20wCQYDVR0TBAIw ADAOBgNVHQ8BAf8EBAMCBaAwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL2duLnN5 bWNiLmNvbS9nbi5jcmwwgZ0GA1UdIASBlTCBkjCBjwYGZ4EMAQICMIGEMD8GCCsG AQUFBwIBFjNodHRwczovL3d3dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL3JlcG9z aXRvcnkvbGVnYWwwQQYIKwYBBQUHAgIwNQwzaHR0cHM6Ly93d3cuZ2VvdHJ1c3Qu Y29tL3Jlc291cmNlcy9yZXBvc2l0b3J5L2xlZ2FsMB0GA1UdJQQWMBQGCCsGAQUF BwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBTSb/eW9IU/cjwwfSPahXibo3xafDBX BggrBgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9nbi5zeW1jZC5jb20w JgYIKwYBBQUHMAKGGmh0dHA6Ly9nbi5zeW1jYi5jb20vZ24uY3J0MIIB9QYKKwYB BAHWeQIEAgSCAeUEggHhAd8AdgDd6x0reg1PpiCLga2BaHB+Lo6dAdVciI09EcTN tuy+zAAAAVcFbl2YAAAEAwBHMEUCIHdjRvBXv+wM6TDVIHW3zM/VP4PDvC/b6kkC fPKd7qTrAiEAx3y8pomriwPFxPMwa2Kj1Fl8C8tw2rb1VJY+v2Zit30AdgCkuQmQ tBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAVcFbl7YAAAEAwBHMEUCIQC3 YddgTvnHvJxpQV6e0rkQZEzk4pp2TxGFLAKnuJ/T7AIgAU49VSqLrzAfAzB2a3K6 +L8MpNFesex9ceV1HCa1sXkAdQBo9pj4H2SCvjqM7rkoHUz8cVFdZ5PURNEKZ6y7 T0/7xAAAAVcFbl82AAAEAwBGMEQCIFWCbIgfK+g74EKcjgcWCrA3ojWFWCY0VI4l K8fhyA8TAiABQHqiUoqhykgWV+YNvrAQwPRy3R8b0oOTW53mjWznyAB2AO5Lvbd1 zmC64UJpH6vhnmajD35fsHLYgwDEe4l6qP3LAAABVwVuXwIAAAQDAEcwRQIgF6UN yApm4h4j6H0WqOqJf2rc0QARJDe8CmSV+43PfXcCIQDlmtLb9KMcKkGfaoyEb2bd 0htRcVp4z4zj/J/1qHUr+TANBgkqhkiG9w0BAQsFAAOCAQEAE5jMZ/d6VxdkYtLR 0TiZ0nGb66tiCmr9QEx/wRoC5BzTjS8q176QZqr0l9uK6poeIg0egdXj8R1/ftDB ChiCq1O0cMnJwtlJCWHRj0T63rowDrT1r2txHmD4P/G0cuodJX23+SmziMP6ZWkv eeOQLYXWEasw80mj3N9U7DKJ82IZGGjJe8/dQvbCku50+mn4mr5cZZODTybGiWAL pVoMZcDzkJqK5GFbYYi+sS2zFRZWjZ72bysoSCYBJh2wZFpqkRT53tIYDRKbp8OG XE0ynYWDCGXiJcGW6tTkBHTsClYKbljcAbAEHkc3hCDe1LD7SvmrGOPJLvzjTQM+ +M+/tQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj37dmqHUxbRfrzXYq6G O/bT7coWZvfV3+vYASRBN5iJLpIaRry0JUVWRLuvpoV3FXgRNl7hxfsUYw3b5ECI Yx7Py453/zFJrP3mJIYum/qCUDbuNhLJMV3Uh0mVmtGnVQueh5SoogAzu2maeHIJ Gb3F+1bDYCU9KKyHuC7YXJxklBAD4B72Kcpw+6uJF6LNxL/QQsQIsF3WHv824fI4 l54R7ayjzspV2+UJefanRIsWsc7fEYi5m/mQ1NEk7tqkEDMo4zYnXHtZ4QXyYA7c uF+iLQBB9INLTL/yRbuAjrSa4nDPX36XIMhas+1z6zyDGpgYOuaXr+Me0ZPT80D2 MwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 69347564794216740228314365070416531829 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-07 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-07 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Parma' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Parma' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Chiesi Farmaceutici SpA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Group ICT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'pem.chiesigroup.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21491076443504642465469681541006800267860518299699116604870175581930265725729006875579634856077943742534889157279289929306861996714213230039617230341376534481465296965872708487477496634745719474706616947570478139417263158326907460514517247559120951776762560928803772690022830100033894336417267419742543146724497082137331285313817033634673222875872156145436612524302234002508028309575234976351859573589663775226771623902631312740497264752981161623839551863160872859483465574213379654172456161087266215748506100162908111238980661372712155948941259775357959570395715867219522017461779435904733218597394384900283604989491 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pem.chiesigroup.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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