www.tiffany.es

- Tiffany and Co -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 3e:cc:d4:1f:c3:ac:2b:ef:2e:02:fc:c8:5d:8c:34:b1 was issued on by GeoTrust Inc..

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Tiffany and Co

Organization: Tiffany and Co
Organization unit: Akamai SAN SSL OV
State / Province: New York
Locality: New York
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3e:cc:d4:1f:c3:ac:2b:ef:2e:02:fc:c8:5d:8c:34:b1
Serial Number (int): 83475666685272620682562693049577387185
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): b6:98:8a:27:6f:ab:e0:f3:e5:66:fd:c4:aa:54:95:30:57:4b:ad:62
Fingerprint (sha256): a4:9e:84:f2:a2:16:e7:0b:1d:9c:0d:4b:46:8c:0e:d1:43:fa:69:95:6a:15:2e:26:7c:df:00:6f:cb:0a:5e:12

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate www.tiffany.es

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.tiffany.es

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.tiffany.com.mx
m.tiffany.com.mx
www.pd.tiffany.com
www.tiffany.ie
www.zh.tiffany.com
www.pa.tiffany.co.uk
m.tiffany.de
www.tiffany.de
m.tiffany.co.uk
www.tiffany.at
m.tiffany.it
pa.media.tiffany.com
www.tiffany.com.br
www.pa.tiffany.co.jp
www.m.tiffany.com
tiffany.es
m-zh.tiffany.com
m.tiffany.com.au
m.tiffany.com
qa.media.tiffany.com
m.tiffany.ca
www.pa.tiffany.com
cdn.tiffany.com
m-international.tiffany.com
www.tiffanytrade.com
www.tiffanywatches.com
m.tiffany.com.br
m-fr.tiffany.ca
www.tiffany.co.uk
m-be.tiffany.com
zh.tiffany.com
www.pa.tiffanytrade.com
nl.tiffany.com
m.tiffany.fr
www.tiffany.com.ru
m-nl.tiffany.com
m.tiffany.kr
www.tiffany.com.au
www.tiffany.ru
be.tiffany.com
m.tiffany.es
www.tiffany.fr
uk.tiffany.com
www.whatmakeslovetrue.com
m.tiffany.at
www.tiffany.kr
m.tiffany.cn
m.tiffany.co.jp
www.tiffany.it
m.tiffany.ie
www.tiffany.es

Other certificates including the domain name tiffany.es

(limited to 100 certificates)
pa.tiffany.com
dev3.edev.tiffany.com
qa2-aem.tiffany.com
www.tiffany.es
www.tiffany.com
sstats.tiffany.es
www.tiffany.com
www.tiffany.es
qa3-aem.tiffany.com
www.pa.tiffany.com
ps2b.tiffany.com
sstats.tiffany.es
www.tiffany.com
www.pa.tiffany.com
qa1-aem.tiffany.com
test1.edev.tiffany.com
www.estore-tco.com
qa1-aem.tiffany.com
www.qa1.tiffany.com
www.tiffany.es
www.pa.tiffany.com
www.pa.tiffany.com
sstats.tiffany.es
www.qa1.tiffany.com
www.pa.tiffany.com
ps-aem.tiffany.com
qa3-aem.tiffany.com
qa1-aem.tiffany.com
www.tiffany.com
dev1.edev.tiffany.com
qa.tiffany.com
www.tiffany.es
ps-aem.tiffany.com
www.qa1.tiffany.com
www.tiffany.com
www.tiffany.es
www.tiffany.com
sstats.tiffany.es
www.estore-tco.com
dev2.edev.tiffany.com
dev3.edev.tiffany.com
TIFFANY AND CO.
www.pa.tiffany.com
tiffany.at
www.tiffany.es
www.tiffany.es
www.pa.tiffany.com
dev2.edev.tiffany.com
ps2b.tiffany.com
www.tiffany.com
www.tiffany.es
dev2.edev.tiffany.com
www.tiffany.es
www.pa.tiffany.com
www.qa1.tiffany.com
www.tiffany.es
www.tiffany.com
test3.edev.tiffany.com
qa3.tiffany.com
www.tiffany.es
www.tiffany.es
dev3.edev.tiffany.com
test2.edev.tiffany.com
www.tiffany.es
TIFFANY AND CO.
www.tiffany.com
www.pa.tiffany.com
www.qa.tiffany.com
www.tiffany.com
www.qa1.tiffany.com
tiffany.at
www.qa1.tiffany.com
www.pa.tiffany.com
qa2.tiffany.com
pa.tiffany.com
www.qa1.tiffany.com
www.pa.tiffany.com
pa.tiffany.com
sstats.tiffany.es
www.tiffany.es
www.tiffany.es
www.tiffany.es
pa-aem.tiffany.com
www.qa1.tiffany.com
www.tiffany.es
qa2-aem.tiffany.com
qa2-aem.tiffany.com
www.pa.tiffany.com
test1.edev.tiffany.com
test3.edev.tiffany.com
m.tiffany.com
www.tiffany.com
pa-aem.tiffany.com
www.qa1.tiffany.com
www.tiffany.com
qa3-aem.tiffany.com
www.tiffany.com
www.tiffany.es
sstats.tiffany.es
www.tiffany.es

Certificate

The complete raw certificate details for www.tiffany.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05dj8I8m3dH0lGTGMeiX
E1ikTJv39wtPeAmvAZ4xZK31NkK2be9GeShOA9jt4PgzNSJUcmqIiIg9/7a8qhXI
zDzMqihUlrsdlaO4RDqhWj3CjvP65+M0KHorf+nICBk9/qPDB/559gRdO8qJWq7i
jjlBSnd1fqQEIbuADQk9QbQMaKx8F9bv+Qkoz0JeZYzRVMfWCDgyYPiV7x1m2NaK
3oAx8ZTpeR17/9WwIKBgHnME328zI9PXZ9rIBwQwbzyKiPE6EKvGLcTWGx+7Wn32
mErpN9XuOvZ7ZndDASd7o+tYB+0neas1ReoTmNW4liho2ZLJWwHtoibYLe+9Aafo
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 83475666685272620682562693049577387185
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Tiffany and Co'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Akamai SAN SSL OV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.tiffany.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26710935731217211439493799019967260365406605946481263078241562592089847168052251191271233432085265434290910875856040231814862250001687300263488585762005066817481833885457643126381205351740049881007007297295989102642159553210265120419306794899426897721164154251653462609565842832367007812826741461766206039693685056330637634579285013158650994730810311606109675836656804843667496758824823140537568903616089987785876410830026361448909131424101160706546860096430136088148486868661779618624261868983820507512375172440094413557405033979634273794424283691294185314157777803347508625647813310227601862249410897653704765728993
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (918 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffany.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tiffany.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pd.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffany.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zh.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pa.tiffany.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tiffany.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffany.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tiffany.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffany.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tiffany.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pa.media.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffany.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pa.tiffany.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiffany.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-zh.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tiffany.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.media.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tiffany.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pa.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-international.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffanytrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffanywatches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tiffany.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-fr.tiffany.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffany.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-be.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zh.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pa.tiffanytrade.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nl.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tiffany.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffany.com.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-nl.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tiffany.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffany.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffany.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tiffany.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffany.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.tiffany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whatmakeslovetrue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tiffany.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffany.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tiffany.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tiffany.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffany.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tiffany.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiffany.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000159f553748a00000403004830460221008b6a78890a973828c4eba46434355e12e467e2b3c5f0e07d41ee10370946527d022100e6fc5dc30509a7b74c82e6c55f9da5c2d99ba36b211bad6f1c29dc7709d72a01007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000159f55374b50000040300483046022100946c7387c6dcb82e9966b1024e8a2ca7b45501321939c75571c8c73ec7addf93022100dea70abc8124ad718aa3a2e9fbe44d897d03577c605c78cb08260906180eeb8d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002f7e5ebc979b8a05cc81fe93af87ec992a22ec1f453e248ccdfdcdca6ac212bc9f932e902ddd0b855974961d1c6742bd957b32143980e843849c11eafd9f66769d57c253e3a468c97691b4484c08fdd0d92d04628cd6afc247e7e8e1ea8fd590aebc0d1b92f34b9e4f485a7fffd29b8c3c4a9602dda0598501934aa9c1e4deeb86fcab5fdc67451b5b850d72d2aa5b5892cab875c033fd01aeb30dae9acd00e6fe9bdfa296c86184e06f5623d1e7942ff30b5b017653c70847bbfdbff621b2b6ed3f2a97d33a401e343ee6d832ff64861d6f18fd2d00e9a0202a3e863f469067c806318f7fdca9116940fd8aa134b4b13276745a80597898321182c235f35862