sip.chiesigroup.com
- Chiesi Farmaceutici SpA -
Issued by GeoTrust SSL CA - G3
About this certificate
This digital certificate with serial number 64:d7:2c:b4:3c:84:e3:92:6e:7b:68:95:d6:8d:3d:86 was issued on by GeoTrust Inc..
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Chiesi Farmaceutici SpA
Organization:
Chiesi Farmaceutici SpA
Organization unit: CICT
Organization unit: CICT
State / Province:
Parma
Locality: Parma
Country: IT
Locality: Parma
Country: IT
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 64:d7:2c:b4:3c:84:e3:92:6e:7b:68:95:d6:8d:3d:86Serial Number (int): 134040050108898141947441336360457026950
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c
Fingerprint (sha1): 16:ec:54:ee:4f:74:54:08:ac:80:86:2a:ca:11:bd:84:cd:32:7b:6c
Fingerprint (sha256): 9c:7b:17:45:31:f5:1e:1f:e5:45:b9:68:82:05:70:de:20:66:c0:be:cf:53:6b:70:b5:81:2b:35:de:a9:36:f3
Issuing Certificate URL: http://gn.symcb.com/gn.crt
Revocation information
OCSP Server: http://gn.symcd.comCRL Distribution Point: http://gn.symcb.com/gn.crl
Check the revocation status for certificate sip.chiesigroup.com
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sip.chiesigroup.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
sip.chiesi.com
webconf.chiesigroup.com
sip.chiesigroup.com
webconf.chiesigroup.com
sip.chiesigroup.com
Other certificates including the domain name chiesigroup.com
(limited to 100 certificates)
itpool.chiesigroup.com
extranet.chiesi.com
chiesisg.chiesigroup.com
chiesisg.chiesigroup.com
MAIL.chiesi.com
mail.chiesigroup.com
sip.chiesigroup.com
webconf.chiesigroup.com
itpool.chiesigroup.com
itpool.chiesi.com
wifi.chiesigroup.com
sip.chiesi.com
MAIL.chiesi.com
extranet.chiesi.com
extranet.chiesigroup.com
cag.chiesigroup.com
cag.chiesigroup.com
chvpn.chiesigroup.com
wifi.chiesigroup.com
itpool.chiesi.com
itpool.chiesi.com
pem.chiesigroup.com
cargobay.chiesi.com
mail.chiesi.com
extranet.chiesigroup.com
wifi.chiesigroup.com
chiesigroup.com
cargobay.chiesi.com
wifi.chiesigroup.com
chiesicrm.chiesigroup.com
chiesigroup.com
chiesisg.chiesigroup.com
sip.chiesi.com
itpool.chiesi.com
cag.chiesigroup.com
mail.chiesi.com
sip.chiesigroup.com
chiesigroup.com
sip.chiesigroup.com
extranet.chiesi.com
chvpn.chiesigroup.com
pem.chiesigroup.com
chiesigroup.com
sip.chiesigroup.com
pem.chiesigroup.com
chiesicrm.chiesigroup.com
www.chiesigroup.com
ngs.chiesigroup.com
pem.chiesigroup.com
MAIL.chiesi.com
cargobay.chiesi.com
sip.chiesigroup.com
MAIL.chiesi.com
cag.chiesigroup.com
cargobay.chiesigroup.com
sip.chiesigroup.com
itpool.chiesigroup.com
extranet.chiesi.com
pem.chiesigroup.com
chiesicrm.chiesigroup.com
chiesisg.chiesigroup.com
chiesigroup.com
extranet.chiesigroup.com
chiesigroup.com
attp.chiesi.com
chiesigroup.com
webconf.chiesigroup.com
chiesicrm.chiesigroup.com
itpool.chiesigroup.com
chiesigroup.com
ngs.chiesigroup.com
chiesigroup.com
sip.chiesi.com
sharefile.chiesi.com
chiesigroup.com
extranet.chiesi.com
chiesisg.chiesigroup.com
chiesisg.chiesigroup.com
MAIL.chiesi.com
mail.chiesigroup.com
sip.chiesigroup.com
webconf.chiesigroup.com
itpool.chiesigroup.com
itpool.chiesi.com
wifi.chiesigroup.com
sip.chiesi.com
MAIL.chiesi.com
extranet.chiesi.com
extranet.chiesigroup.com
cag.chiesigroup.com
cag.chiesigroup.com
chvpn.chiesigroup.com
wifi.chiesigroup.com
itpool.chiesi.com
itpool.chiesi.com
pem.chiesigroup.com
cargobay.chiesi.com
mail.chiesi.com
extranet.chiesigroup.com
wifi.chiesigroup.com
chiesigroup.com
cargobay.chiesi.com
wifi.chiesigroup.com
chiesicrm.chiesigroup.com
chiesigroup.com
chiesisg.chiesigroup.com
sip.chiesi.com
itpool.chiesi.com
cag.chiesigroup.com
mail.chiesi.com
sip.chiesigroup.com
chiesigroup.com
sip.chiesigroup.com
extranet.chiesi.com
chvpn.chiesigroup.com
pem.chiesigroup.com
chiesigroup.com
sip.chiesigroup.com
pem.chiesigroup.com
chiesicrm.chiesigroup.com
www.chiesigroup.com
ngs.chiesigroup.com
pem.chiesigroup.com
MAIL.chiesi.com
cargobay.chiesi.com
sip.chiesigroup.com
MAIL.chiesi.com
cag.chiesigroup.com
cargobay.chiesigroup.com
sip.chiesigroup.com
itpool.chiesigroup.com
extranet.chiesi.com
pem.chiesigroup.com
chiesicrm.chiesigroup.com
chiesisg.chiesigroup.com
chiesigroup.com
extranet.chiesigroup.com
chiesigroup.com
attp.chiesi.com
chiesigroup.com
webconf.chiesigroup.com
chiesicrm.chiesigroup.com
itpool.chiesigroup.com
chiesigroup.com
ngs.chiesigroup.com
chiesigroup.com
sip.chiesi.com
sharefile.chiesi.com
chiesigroup.com
Certificate
The complete raw certificate details for sip.chiesigroup.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGmzCCBYOgAwIBAgIQZNcstDyE45Jue2iV1o09hjANBgkqhkiG9w0BAQsFADBE MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTYwOTI3MDAwMDAwWhcNMTgwOTI0MjM1 OTU5WjB8MQswCQYDVQQGEwJJVDEOMAwGA1UECAwFUGFybWExDjAMBgNVBAcMBVBh cm1hMSAwHgYDVQQKDBdDaGllc2kgRmFybWFjZXV0aWNpIFNwQTENMAsGA1UECwwE Q0lDVDEcMBoGA1UEAwwTc2lwLmNoaWVzaWdyb3VwLmNvbTCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBANDhYYi/7V8Takm2R4ypMDROzcff2P4stisgAYx/ 4fkxsM8bqKqnx9Oo7d6leAgJa/KD3VmVDtRl1nxXN74Cfa087BuLwZ2ZAnRrm+wQ DgnZWKWLQ2QOsGcFFmlfPmSzK6+XuzcfUOGIrEUG5FttrWMaL6f9p+gurRh0ls8C wYuOY4170pYl5Bo4QOWCBwC5TKyTvQxUIY2IvQSaRhTFy1WJ63G2adyvFAise0Fe rAk2A1Jr31OU0n+sUARRgQ1iV0SYO6IAVyrsbSSLQ1276tHqEYsLlSD27NPqlII5 3HHVY4cNm2io+uUW1hEnsNGXjaQxT5mDMhvHs0R9B7JLEeECAwEAAaOCA08wggNL MEcGA1UdEQRAMD6CDnNpcC5jaGllc2kuY29tghd3ZWJjb25mLmNoaWVzaWdyb3Vw LmNvbYITc2lwLmNoaWVzaWdyb3VwLmNvbTAJBgNVHRMEAjAAMA4GA1UdDwEB/wQE AwIFoDArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8vZ24uc3ltY2IuY29tL2duLmNy bDCBnQYDVR0gBIGVMIGSMIGPBgZngQwBAgIwgYQwPwYIKwYBBQUHAgEWM2h0dHBz Oi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvcmVwb3NpdG9yeS9sZWdhbDBB BggrBgEFBQcCAjA1DDNodHRwczovL3d3dy5nZW90cnVzdC5jb20vcmVzb3VyY2Vz L3JlcG9zaXRvcnkvbGVnYWwwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MB8GA1UdIwQYMBaAFNJv95b0hT9yPDB9I9qFeJujfFp8MFcGCCsGAQUFBwEBBEsw STAfBggrBgEFBQcwAYYTaHR0cDovL2duLnN5bWNkLmNvbTAmBggrBgEFBQcwAoYa aHR0cDovL2duLnN5bWNiLmNvbS9nbi5jcnQwggF9BgorBgEEAdZ5AgQCBIIBbQSC AWkBZwB1AN3rHSt6DU+mIIuBrYFocH4ujp0B1VyIjT0RxM227L7MAAABV2sxs/8A AAQDAEYwRAIgHEn2FFDYN2ensJ/PpQNQSy77wF0ixGanq4mkOMPr7bcCICY/z7hO 9ulmQOX+IjDGX25in0FjwEbexTFPSnBF93i/AHUAaPaY+B9kgr46jO65KB1M/HFR XWeT1ETRCmesu09P+8QAAAFXazG0JAAABAMARjBEAiA3u1B2+PPJjRe0x9HXlvce zweN2+QnCOVjFyJBnravfwIgfjiR6o1HbbINfED0djeNxADlJexrBAmUiL5IZlOs EsUAdwDuS723dc5guuFCaR+r4Z5mow9+X7By2IMAxHuJeqj9ywAAAVdrMbRHAAAE AwBIMEYCIQD9iHZz7T/nN9R/P8+EjqUDoknIuMctgY5OZV/9pDizJQIhAIV3Lwat 4g1Kso/3CSiRdnlu6C630efvCweFcXGOqZQlMA0GCSqGSIb3DQEBCwUAA4IBAQDA ZkLzjV4WtGzg6E9PSYoBvm25sxXfEme4H4HzP0qObw3RDBChktf6tB6C+Y3k/xj5 aw3iSoFOQGLE7DMqChQVnDM2Pz1Eur5Kncdz3dqNk3967rpFwY/8QX7t8JuFJR9P CMm59qVCzW2M5j466G8KBtGsKemGK3F0U0DkZvOTaCpezF8j7WiY+NTo7OKySmJ4 cNdi8/QoEZ6OiXuI2oOsOYjFmJbdDOkyB7uYF0sTpoIO38olgVAdc3xVH5fCNqT2 donkEyfZ+tJ7OfTSv/HuYZF86dvozPBGa4D/GZrGiCP7ZQM5QXIBtaUPgEYE8r8P QkASqEcul8CiyK4KF+rO -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OFhiL/tXxNqSbZHjKkw NE7Nx9/Y/iy2KyABjH/h+TGwzxuoqqfH06jt3qV4CAlr8oPdWZUO1GXWfFc3vgJ9 rTzsG4vBnZkCdGub7BAOCdlYpYtDZA6wZwUWaV8+ZLMrr5e7Nx9Q4YisRQbkW22t Yxovp/2n6C6tGHSWzwLBi45jjXvSliXkGjhA5YIHALlMrJO9DFQhjYi9BJpGFMXL VYnrcbZp3K8UCKx7QV6sCTYDUmvfU5TSf6xQBFGBDWJXRJg7ogBXKuxtJItDXbvq 0eoRiwuVIPbs0+qUgjnccdVjhw2baKj65RbWESew0ZeNpDFPmYMyG8ezRH0HsksR 4QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 134040050108898141947441336360457026950 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-27 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-24 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Parma' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Parma' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Chiesi Farmaceutici SpA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CICT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'sip.chiesigroup.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26368706942758076926607991047545855230125669426627101949758258686789651531646682144442146155800047331399725434471946961919816674668758507605793489432102230221189181417327930679372168231910172644007107080420138305361809652231072826515877236590600154130854299034909239877791635209896939323455016327072394507690544992188584086155278898066539805856654091915812245420414751951017664545646222963166711812369779812718797545973907997149575586074397193461490894398891582455338729948528526259803032728595756144935959681699856771552953686499444864479107924120658473542425845682779019638949419968229535140457646252487644294091233 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.chiesi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webconf.chiesigroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.chiesigroup.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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