www.spiegel.tv
- SPIEGEL-ONLINE GmbH -
Issued by GeoTrust SHA256 SSL CA
About this certificate
This digital certificate with serial number 0d:ec:c6:16:4c:d2:8f:00:d0:ba:ac:10:db:41:48:f8 was issued on by GeoTrust Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
SPIEGEL-ONLINE GmbH
Organization:
SPIEGEL-ONLINE GmbH
State / Province:
Hamburg
Locality: Hamburg
Country: DE
Locality: Hamburg
Country: DE
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0d:ec:c6:16:4c:d2:8f:00:d0:ba:ac:10:db:41:48:f8Serial Number (int): 18509363687714634494630928334054312184
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 14:67:8e:ed:83:4f:d6:1e:9d:40:04:0c:04:46:a1:70:34:b2:0f:72
Fingerprint (sha1): 47:44:30:0c:63:0f:a2:0c:ae:13:7a:a4:bb:c3:98:be:d6:4c:da:55
Fingerprint (sha256): af:6a:cf:64:61:f0:10:1c:d3:33:61:2d:2a:f6:e6:26:2a:51:f2:95:cf:fe:14:b1:a8:c1:fc:af:3e:45:b4:5b
Issuing Certificate URL: http://gj.symcb.com/gj.crt
Revocation information
OCSP Server: http://gj.symcd.comCRL Distribution Point: http://gj.symcb.com/gj.crl
Check the revocation status for certificate www.spiegel.tv
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.spiegel.tv
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.spiegel.tv
spiegel.tv
spiegel.tv
Other certificates including the domain name spiegel.tv
(limited to 100 certificates)
derspiegel.eu
www.spiegel.tv
ssl.1.damoh.spiegel.tv
ssl.1.damoh.spiegel.tv
spiegel-tv.spiegel.tv
derspiegel.eu
ssl.1.damoh.spiegel.tv
derspiegel.eu
embed.spiegel.de
ssl.1.damoh.spiegel.tv
der-spiegel.eu
ssl.1.damoh.spiegel.tv
der-spiegel.eu
ssl.1.damoh.spiegel.tv
derspiegel.eu
ssl.1.damoh.spiegel.tv
ivms.spiegel.tv
ssl.1.damoh.spiegel.tv
ssl.1.damoh.spiegel.tv
ssl.1.damoh.spiegel.tv
spiegel-tv.spiegel.tv
ssl.1.damoh.spiegel.tv
ssl.1.damoh.spiegel.tv
der-spiegel.eu
ssl.1.damoh.spiegel.tv
ssl.1.damoh.spiegel.tv
ssl.1.damoh.spiegel.tv
ssl.1.damoh.spiegel.tv
ivms.spiegel.tv
derspiegel.eu
www.spiegel.tv
www.spiegel.tv
ivms.spiegel.tv
ssl.1.damoh.spiegel.tv
ssl.1.damoh.spiegel.tv
der-spiegel.eu
ivms.spiegel.tv
ssl.1.damoh.spiegel.tv
ssl.1.damoh.spiegel.tv
spiegel-tv.spiegel.tv
spiegel-tv.spiegel.tv
spiegel-tv.spiegel.tv
ssl.1.damoh.spiegel.tv
embed.spiegel.de
derspiegel.eu
spiegel-tv.spiegel.tv
derspiegel.eu
embed.spiegel.de
ssl.1.damoh.spiegel.tv
derspiegel.eu
ssl.1.damoh.spiegel.tv
www.spiegel.tv
ssl.1.damoh.spiegel.tv
ssl.1.damoh.spiegel.tv
spiegel-tv.spiegel.tv
derspiegel.eu
ssl.1.damoh.spiegel.tv
derspiegel.eu
embed.spiegel.de
ssl.1.damoh.spiegel.tv
der-spiegel.eu
ssl.1.damoh.spiegel.tv
der-spiegel.eu
ssl.1.damoh.spiegel.tv
derspiegel.eu
ssl.1.damoh.spiegel.tv
ivms.spiegel.tv
ssl.1.damoh.spiegel.tv
ssl.1.damoh.spiegel.tv
ssl.1.damoh.spiegel.tv
spiegel-tv.spiegel.tv
ssl.1.damoh.spiegel.tv
ssl.1.damoh.spiegel.tv
der-spiegel.eu
ssl.1.damoh.spiegel.tv
ssl.1.damoh.spiegel.tv
ssl.1.damoh.spiegel.tv
ssl.1.damoh.spiegel.tv
ivms.spiegel.tv
derspiegel.eu
www.spiegel.tv
www.spiegel.tv
ivms.spiegel.tv
ssl.1.damoh.spiegel.tv
ssl.1.damoh.spiegel.tv
der-spiegel.eu
ivms.spiegel.tv
ssl.1.damoh.spiegel.tv
ssl.1.damoh.spiegel.tv
spiegel-tv.spiegel.tv
spiegel-tv.spiegel.tv
spiegel-tv.spiegel.tv
ssl.1.damoh.spiegel.tv
embed.spiegel.de
derspiegel.eu
spiegel-tv.spiegel.tv
derspiegel.eu
embed.spiegel.de
ssl.1.damoh.spiegel.tv
derspiegel.eu
ssl.1.damoh.spiegel.tv
Certificate
The complete raw certificate details for www.spiegel.tv in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG3TCCBcWgAwIBAgIQDezGFkzSjwDQuqwQ20FI+DANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEfMB0GA1UEAxMW R2VvVHJ1c3QgU0hBMjU2IFNTTCBDQTAeFw0xNzA3MjYwMDAwMDBaFw0yMDA3MjUy MzU5NTlaMGgxCzAJBgNVBAYTAkRFMRAwDgYDVQQIDAdIYW1idXJnMRAwDgYDVQQH DAdIYW1idXJnMRwwGgYDVQQKDBNTUElFR0VMLU9OTElORSBHbWJIMRcwFQYDVQQD DA53d3cuc3BpZWdlbC50djCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AM+9EjFmsQ6wfT74VM3xZo6++rUe8F4cfUoad1PZlbkc/GGrZW4ilOIPaVipPU/T Jssu0SGkezpOLMtwrcq5epPG7tw4a9BO7dNBgw18PKPaVUWKYUp1ohWhR2JaXuOR UqpwaxsH/Bn1ODRXZsShb4eu0PZB4Pt0S9DSY4QYP7WVCetpsFgL6GRawWTCFMAE ydM6a4mmMefiUgrC3VwcmQfvtPOdxuOk3s+5ne2+Tx0KinrnwR+rGXUyTuH74GPP 7QkbZSBjihiOBwGpAMtTUPedNVSZLabartvtL17YyTUphqLZ9AmAN3r331L0Iama s+MEUkiqqdUhHpAR4uGU6J8CAwEAAaOCA6MwggOfMCUGA1UdEQQeMByCDnd3dy5z cGllZ2VsLnR2ggpzcGllZ2VsLnR2MAkGA1UdEwQCMAAwDgYDVR0PAQH/BAQDAgWg MCsGA1UdHwQkMCIwIKAeoByGGmh0dHA6Ly9nai5zeW1jYi5jb20vZ2ouY3JsMIGd BgNVHSAEgZUwgZIwgY8GBmeBDAECAjCBhDA/BggrBgEFBQcCARYzaHR0cHM6Ly93 d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9yZXBvc2l0b3J5L2xlZ2FsMEEGCCsG AQUFBwICMDUMM2h0dHBzOi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvcmVw b3NpdG9yeS9sZWdhbDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHwYD VR0jBBgwFoAUFGeO7YNP1h6dQAQMBEahcDSyD3IwVwYIKwYBBQUHAQEESzBJMB8G CCsGAQUFBzABhhNodHRwOi8vZ2ouc3ltY2QuY29tMCYGCCsGAQUFBzAChhpodHRw Oi8vZ2ouc3ltY2IuY29tL2dqLmNydDCCAfMGCisGAQQB1nkCBAIEggHjBIIB3wHd AHUA3esdK3oNT6Ygi4GtgWhwfi6OnQHVXIiNPRHEzbbsvswAAAFdfwlL2QAABAMA RjBEAiBbq7pXpZ59ZVHyNg3enuFt+Ki3v7toW+FH+cZPStYCbgIgCo7EwN2KWCT2 zeCxWH7o5SPwFq09pimlTF8eQzMdTYsAdQCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb 37jjd80OyA3cEAAAAV1/CUwWAAAEAwBGMEQCIE2dKhHxFNrUM+3rhLrEyWsO4iL8 Zy3c8xPJTU+tEVuJAiB2g3zu73zXRFurhs8EO5iaGUat5rd3kEsFUX7h7H4x0AB1 AO5Lvbd1zmC64UJpH6vhnmajD35fsHLYgwDEe4l6qP3LAAABXX8JTegAAAQDAEYw RAIgIl31sZfleEDVcc7JqNWRvkfD+V7q4xjUy8W/axykkgQCIFbtjr2wcRUEXajN qf+wUYsScEqazVg0tAN8Xi6hG1RdAHYAvHjh38X2PGhGSTNNoQ+hXwl5aSAJwIG0 8/aRfz7ZuKUAAAFdfwlMgQAABAMARzBFAiBLyqo95jEEBwG+TytUKOxbMEVG+rDV kIKb7aryYJI+rAIhAIEPWkzOw7d2hKICLr/2okfs3U1NGmJHI91OU3wcpv1IMA0G CSqGSIb3DQEBCwUAA4IBAQB5kr4j9Cit4Gv9WNn+fZumqrs7ZzDzV1oFwZw9+PNP yDvo8gkFimcKdmBy5EQqSg3cHxCNWztlJEpwf4q44A8Kw4kOz8i9boIQpXYCGf0u AHsTSMs/WpTOwdNzh4Cij6axk7zhJ5RnbzPmmvujteyZBEhNpxUW60tGoTE5tJsU ELOCrMBS/mU3gtCxhLAtP88IwQAX0QSh+QxumEC25sw4Gi0PeKrv3hBJlp345F07 HUMzZquJ8Pu3Gm1vyYwysHJTDrQIoj39zH5ci7wosqJYK0fw30nLqP6S0iG1f7IJ XrffvnQEI+6SlJ1Ml7hufAykF4WYEiX3I4G+G2fBRHUn -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz70SMWaxDrB9PvhUzfFm jr76tR7wXhx9Shp3U9mVuRz8YatlbiKU4g9pWKk9T9Mmyy7RIaR7Ok4sy3Ctyrl6 k8bu3Dhr0E7t00GDDXw8o9pVRYphSnWiFaFHYlpe45FSqnBrGwf8GfU4NFdmxKFv h67Q9kHg+3RL0NJjhBg/tZUJ62mwWAvoZFrBZMIUwATJ0zpriaYx5+JSCsLdXByZ B++0853G46Tez7md7b5PHQqKeufBH6sZdTJO4fvgY8/tCRtlIGOKGI4HAakAy1NQ 9501VJktptqu2+0vXtjJNSmGotn0CYA3evffUvQhqZqz4wRSSKqp1SEekBHi4ZTo nwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 18509363687714634494630928334054312184 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SHA256 SSL CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-26 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-25 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hamburg' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hamburg' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SPIEGEL-ONLINE GmbH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.spiegel.tv' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26224563545661769575966913549348863972483046985376453231120834990898013289440776476793411704359934839183440607078239974795233002695471212693239987534209876610663288893073938514706838372250798297031617298799780982955026349899081724952182903549360666948197411596933800593402033224240773402098830864980693559139098472638399237746084770755736374660405876554334130724836416203871407954855487697269736221423895878186767321539988159093431586176007928284399579457014886119359724666252618135184664643531609538666025690044061507028276323703908317437568144856599974147761915695952313999875001627755270864960974751577995102972063 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spiegel.tv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiegel.tv' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcb.com/gj.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 14678eed834fd61e9d40040c0446a17034b20f72 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcb.com/gj.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (479 bytes) 01dd007500ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015d7f094bd9000004030046304402205babba57a59e7d6551f2360dde9ee16df8a8b7bfbb685be147f9c64f4ad6026e02200a8ec4c0dd8a5824f6cde0b1587ee8e523f016ad3da629a54c5f1e43331d4d8b007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015d7f094c16000004030046304402204d9d2a11f114dad433edeb84bac4c96b0ee222fc672ddcf313c94d4fad115b89022076837ceeef7cd7445bab86cf043b989a1946ade6b777904b05517ee1ec7e31d0007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000015d7f094de800000403004630440220225df5b197e57840d571cec9a8d591be47c3f95eeae318d4cbc5bf6b1ca49204022056ed8ebdb07115045da8cda9ffb0518b12704a9acd5834b4037c5e2ea11b545d007600bc78e1dfc5f63c684649334da10fa15f0979692009c081b4f3f6917f3ed9b8a50000015d7f094c81000004030047304502204bcaaa3de631040701be4f2b5428ec5b304546fab0d590829bedaaf260923eac022100810f5a4ccec3b77684a2022ebff6a247ecdd4d4d1a624723dd4e537c1ca6fd48 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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