www.key103-offers.co.uk

- Bauer Radio Ltd -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 7c:bb:77:3b:10:5b:a7:0f:37:23:2c:61:53:42:39:5c was issued on by GeoTrust Inc..

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Bauer Radio Ltd

Organization: Bauer Radio Ltd
State / Province: CAMBRIDGESHIRE
Locality: PETERBOROUGH
Country: GB

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7c:bb:77:3b:10:5b:a7:0f:37:23:2c:61:53:42:39:5c
Serial Number (int): 165797649276142565219586966814002919772
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): ce:2e:18:08:34:ec:3b:5f:0d:42:5a:d6:bf:6e:79:cc:3d:31:98:b4
Fingerprint (sha256): ab:6a:f6:a6:45:d2:0a:25:bc:15:13:84:58:ba:cd:96:34:f4:69:ae:1b:30:88:cf:c2:fb:0e:3d:fb:4e:22:58

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate www.key103-offers.co.uk

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.key103-offers.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.clyde-offers.com
www.radiocity-offers.co.uk
www.rockfm-offers.co.uk
www.wave105deals.co.uk
www.northsound-offers.com
www.hallamfm-offers.co.uk
www.radioaire-offers.co.uk
www.freeradiooffers.co.uk
www.westsound-offers.com
www.metroradio-offers.co.uk
www.gemoffers.co.uk
www.planetradiooffers.co.uk
planetradiooffers.co.uk
www.cfmradio-offers.com
www.west-offers.co.uk
plus.coolfm.co.uk
www.tfmradio-offers.com
www.forth-offers.com
www.radioborders-offers.com
www.vikingfm-offers.co.uk
www.tay-offers.co.uk
www.mfr-offers.co.uk
www.key103-offers.co.uk
key103-offers.co.uk

Other certificates including the domain name key103-offers.co.uk

(limited to 100 certificates)
www.key103-offers.co.uk
planetradiooffers.co.uk
www.key103-offers.co.uk
www.key103-offers.co.uk
www.key103-offers.co.uk
www.key103-offers.co.uk
planetradiooffers.co.uk
planetradiooffers.co.uk
www.key103-offers.co.uk
escapes.key103-offers.co.uk
www.key103-offers.co.uk
www.key103-offers.co.uk
www.key103-offers.co.uk
planetradiooffers.co.uk
escapes.key103-offers.co.uk
www.key103-offers.co.uk
planetradiooffers.co.uk
planetradiooffers.co.uk
www.key103-offers.co.uk
planetradiooffers.co.uk
planetradiooffers.co.uk
escapes.key103-offers.co.uk
www.key103-offers.co.uk

Certificate

The complete raw certificate details for www.key103-offers.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIPTCCByWgAwIBAgIQfLt3OxBbpw83IyxhU0I5XDANBgkqhkiG9w0BAQsFADBE
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU
R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTcwNTIyMDAwMDAwWhcNMTgwNzEzMjM1
OTU5WjB5MQswCQYDVQQGEwJHQjEXMBUGA1UECAwOQ0FNQlJJREdFU0hJUkUxFTAT
BgNVBAcMDFBFVEVSQk9ST1VHSDEYMBYGA1UECgwPQmF1ZXIgUmFkaW8gTHRkMSAw
HgYDVQQDDBd3d3cua2V5MTAzLW9mZmVycy5jby51azCCASIwDQYJKoZIhvcNAQEB
BQADggEPADCCAQoCggEBANUu+2em47tf5FnOuKMYls4ltMNZ2r/5Lt79zojqpRA4
YF2ESba0wi1DhHeK32MaNEfWCOpp1zQVb7rEKcJcvCQ1B651LPKMo1Bm8AW3OyvI
1DUZLSMsUTebPDSUNteGwU5tjEpC3iFyC97/sG3rLuYPuMb5lEEKxGqdojgsCPM1
/OGwRPrxnSF6C0T8WK9cVnPygMPcnH6+oVfbGYsZgr16vM3x4+VQTKvRGPgq/pFB
F1PQK6tr8AdkoRlf+JOL9539rxXIqie4ev+1gCx4aqoJCFtnlkwIgOt44AIcZqAo
lEVINBgRLF4c0ZQi8yitwREJr7ObJ8pjOyqQI3Dm/C0CAwEAAaOCBPQwggTwMIIC
YwYDVR0RBIICWjCCAlaCFHd3dy5jbHlkZS1vZmZlcnMuY29tghp3d3cucmFkaW9j
aXR5LW9mZmVycy5jby51a4IXd3d3LnJvY2tmbS1vZmZlcnMuY28udWuCFnd3dy53
YXZlMTA1ZGVhbHMuY28udWuCGXd3dy5ub3J0aHNvdW5kLW9mZmVycy5jb22CGXd3
dy5oYWxsYW1mbS1vZmZlcnMuY28udWuCGnd3dy5yYWRpb2FpcmUtb2ZmZXJzLmNv
LnVrghl3d3cuZnJlZXJhZGlvb2ZmZXJzLmNvLnVrghh3d3cud2VzdHNvdW5kLW9m
ZmVycy5jb22CG3d3dy5tZXRyb3JhZGlvLW9mZmVycy5jby51a4ITd3d3LmdlbW9m
ZmVycy5jby51a4Ibd3d3LnBsYW5ldHJhZGlvb2ZmZXJzLmNvLnVrghdwbGFuZXRy
YWRpb29mZmVycy5jby51a4IXd3d3LmNmbXJhZGlvLW9mZmVycy5jb22CFXd3dy53
ZXN0LW9mZmVycy5jby51a4IRcGx1cy5jb29sZm0uY28udWuCF3d3dy50Zm1yYWRp
by1vZmZlcnMuY29tghR3d3cuZm9ydGgtb2ZmZXJzLmNvbYIbd3d3LnJhZGlvYm9y
ZGVycy1vZmZlcnMuY29tghl3d3cudmlraW5nZm0tb2ZmZXJzLmNvLnVrghR3d3cu
dGF5LW9mZmVycy5jby51a4IUd3d3Lm1mci1vZmZlcnMuY28udWuCF3d3dy5rZXkx
MDMtb2ZmZXJzLmNvLnVrghNrZXkxMDMtb2ZmZXJzLmNvLnVrMAkGA1UdEwQCMAAw
DgYDVR0PAQH/BAQDAgWgMCsGA1UdHwQkMCIwIKAeoByGGmh0dHA6Ly9nbi5zeW1j
Yi5jb20vZ24uY3JsMIGdBgNVHSAEgZUwgZIwgY8GBmeBDAECAjCBhDA/BggrBgEF
BQcCARYzaHR0cHM6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9yZXBvc2l0
b3J5L2xlZ2FsMEEGCCsGAQUFBwICMDUMM2h0dHBzOi8vd3d3Lmdlb3RydXN0LmNv
bS9yZXNvdXJjZXMvcmVwb3NpdG9yeS9sZWdhbDAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwHwYDVR0jBBgwFoAU0m/3lvSFP3I8MH0j2oV4m6N8WnwwVwYI
KwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8vZ24uc3ltY2QuY29tMCYG
CCsGAQUFBzAChhpodHRwOi8vZ24uc3ltY2IuY29tL2duLmNydDCCAQQGCisGAQQB
1nkCBAIEgfUEgfIA8AB2AN3rHSt6DU+mIIuBrYFocH4ujp0B1VyIjT0RxM227L7M
AAABXC/nS4QAAAQDAEcwRQIgJxPH/0kKTQTGcuAg7Jn4vMj6Ej8o+5lXKS40pDWf
HbECIQD1aG+C9xvBQRQkTKYPoBsD0ntRj7rLunng9oosGxcXtgB2AKS5CZC0GFgU
h7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABXC/nS7wAAAQDAEcwRQIgePGf+PH+
i56spTmEP5mqDP43el+VmlkagJPadyKuGmICIQC9X+K8nffWvd3nOXi47tlT4Cg8
6l/nqFptl4QzdonKmjANBgkqhkiG9w0BAQsFAAOCAQEAhhmjNPAIfY1pF4Va0Pa/
KHck/WthUnJz3cJbdt5hKfJ/3UQZ7fRQynVyxlkrWN1iKjhV5kAYIwLTJNRVEN3x
ELqHmG8lxBd3bv9QknXzlMYu092lwMHzcUPGrxDvmAZLDvVhH6P+jsbMtUJBcE/d
gkAcvvJQ/3q2s8F9ph+VAcUrttbfdsDc4ujEEoG5M6dUBktf1OfEwwKn4s8dYUNy
CUzLocOaXAvTtKkPhtgFE0LgD0ImAjC5yUJKSXnl7hXssA5XRNbp/Ge/nVpv7dNv
43OvS5zqH02DLiJ3FGu/voyBx3OZrlgRIjdGq/AS3C1MFq2HVkJZidSB+L038ssG
Ew==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1S77Z6bju1/kWc64oxiW
ziW0w1nav/ku3v3OiOqlEDhgXYRJtrTCLUOEd4rfYxo0R9YI6mnXNBVvusQpwly8
JDUHrnUs8oyjUGbwBbc7K8jUNRktIyxRN5s8NJQ214bBTm2MSkLeIXIL3v+wbesu
5g+4xvmUQQrEap2iOCwI8zX84bBE+vGdIXoLRPxYr1xWc/KAw9ycfr6hV9sZixmC
vXq8zfHj5VBMq9EY+Cr+kUEXU9Arq2vwB2ShGV/4k4v3nf2vFciqJ7h6/7WALHhq
qgkIW2eWTAiA63jgAhxmoCiURUg0GBEsXhzRlCLzKK3BEQmvs5snymM7KpAjcOb8
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 165797649276142565219586966814002919772
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CAMBRIDGESHIRE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PETERBOROUGH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bauer Radio Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.key103-offers.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26911926670271856678538401386424357066029251108768388916606788730592146540882622546208696559075013830875644557567697950643054641147032661897482501760295272157003059618116930529626944722362624426720287251806065117927300434001579454095994260105580714836306436303775358701672269859930565124723768500334231045978175564706021157299640157964007782913439002636280067984838665709316476703496191045749622061320681208898352294739167359336909871588250890224776168941817208205143455014480846954395228260528974919801993095498088894700654253388488939526588980567917939269693195295688933147454156808877496107596587736673234184502317
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (602 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clyde-offers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.radiocity-offers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rockfm-offers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wave105deals.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northsound-offers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hallamfm-offers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.radioaire-offers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freeradiooffers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westsound-offers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metroradio-offers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gemoffers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.planetradiooffers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planetradiooffers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cfmradio-offers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.west-offers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plus.coolfm.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tfmradio-offers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.forth-offers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.radioborders-offers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vikingfm-offers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tay-offers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mfr-offers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.key103-offers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'key103-offers.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015c2fe74b84000004030047304502202713c7ff490a4d04c672e020ec99f8bcc8fa123f28fb9957292e34a4359f1db1022100f5686f82f71bc14114244ca60fa01b03d27b518fbacbba79e0f68a2c1b1717b6007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015c2fe74bbc0000040300473045022078f19ff8f1fe8b9eaca539843f99aa0cfe377a5f959a591a8093da7722ae1a62022100bd5fe2bc9df7d6bddde73978b8eed953e0283cea5fe7a85a6d9784337689ca9a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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