gahrview.grandamerica.com

- Sinclair Services Company -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 42:53:c5:7d:95:bc:96:ee:7e:0e:97:d0:06:fc:f7:4f was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Sinclair Services Company

Organization: Sinclair Services Company
State / Province: Utah
Locality: Salt Lake City
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 42:53:c5:7d:95:bc:96:ee:7e:0e:97:d0:06:fc:f7:4f
Serial Number (int): 88164013945616329238783863907996727119
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 59:01:13:b2:05:da:63:d2:52:77:c9:77:ff:e2:04:50:8a:aa:7d:18
Fingerprint (sha256): b6:fd:1e:b1:e2:44:fa:81:45:57:79:59:d2:4b:91:75:30:1b:8f:26:b8:23:77:f0:69:d4:3f:0b:0c:94:22:d5

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate gahrview.grandamerica.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gahrview.grandamerica.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gahrview.grandamerica.com

Other certificates including the domain name grandamerica.com

(limited to 100 certificates)
image.e.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
grandamerica.com
san-4-s7.tlsprovisioning.exacttarget.com
www.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
secure.grandamerica.com
oxi.grandamerica.com
gahrows.grandamerica.com
www.grandamerica.com
image.e.grandamerica.com
www.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
ows.grandamerica.com
secure.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
gahrview.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
www.grandamerica.com
image.e.grandamerica.com
www.grandamerica.com
grandamerica.com
image.e.grandamerica.com
www.grandamerica.com
www.grandamerica.com
gahroxi.grandamerica.com
grandamerica.com
image.e.grandamerica.com
grandamerica.com
grandamerica.com
grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
www.grandamerica.com
grandamerica.com
san-4-s7.tlsprovisioning.exacttarget.com
image.e.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
grandamerica.com
ows.grandamerica.com
image.e.grandamerica.com
www.grandamerica.com
image.e.grandamerica.com
grandamerica.com
image.e.grandamerica.com
gahrview.grandamerica.com
grandamerica.com
image.e.grandamerica.com
grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
secure.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
secure.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
san-4-s7.tlsprovisioning.exacttarget.com
grandamerica.com
aruba.grandamerica.com
aruba.grandamerica.com
gahrview.grandamerica.com
www.grandamerica.com
image.e.grandamerica.com
www.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
www.grandamerica.com
image.e.grandamerica.com
image.e.grandamerica.com
gahrview.grandamerica.com

Certificate

The complete raw certificate details for gahrview.grandamerica.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG9DCCBdygAwIBAgIQQlPFfZW8lu5+DpfQBvz3TzANBgkqhkiG9w0BAQsFADBE
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU
R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTYxMDE0MDAwMDAwWhcNMTkxMTA1MjM1
OTU5WjB9MQswCQYDVQQGEwJVUzENMAsGA1UECAwEVXRhaDEXMBUGA1UEBwwOU2Fs
dCBMYWtlIENpdHkxIjAgBgNVBAoMGVNpbmNsYWlyIFNlcnZpY2VzIENvbXBhbnkx
IjAgBgNVBAMMGWdhaHJ2aWV3LmdyYW5kYW1lcmljYS5jb20wggEiMA0GCSqGSIb3
DQEBAQUAA4IBDwAwggEKAoIBAQDvgdNgMWw8dvym+V4uClD00XfcLmxCycxmsFZC
X6lLsgvY3LnZsPyM5FTXcN6rR/DZDzsgyQdE6Yvz7J0L8prfkdHaD1MAzkNaFQTw
DwEzU++jjz+8DHoxzrtI2iwba0jo619S8qA864HF/Q7MsIVaaHlRwzuoz6B8mUV9
jKv8QHshHKAwAUqFWXmgcfeiLt6+/v+6/b6biQk55Kn+9wNyyVAWI70+h/PNjqhI
HKYMw2R509zYE9FPuJzeYUK+v+Bfz12XfQ3MaMyPZm4IxVD86CAKYF0A7lM/wDbd
Cf4NXkZaP7+F/cRtL1nmyyMzA44H2YcBgGKUZBFrKuPUxzhdAgMBAAGjggOnMIID
ozAkBgNVHREEHTAbghlnYWhydmlldy5ncmFuZGFtZXJpY2EuY29tMAkGA1UdEwQC
MAAwDgYDVR0PAQH/BAQDAgWgMCsGA1UdHwQkMCIwIKAeoByGGmh0dHA6Ly9nbi5z
eW1jYi5jb20vZ24uY3JsMIGdBgNVHSAEgZUwgZIwgY8GBmeBDAECAjCBhDA/Bggr
BgEFBQcCARYzaHR0cHM6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9yZXBv
c2l0b3J5L2xlZ2FsMEEGCCsGAQUFBwICMDUMM2h0dHBzOi8vd3d3Lmdlb3RydXN0
LmNvbS9yZXNvdXJjZXMvcmVwb3NpdG9yeS9sZWdhbDAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwHwYDVR0jBBgwFoAU0m/3lvSFP3I8MH0j2oV4m6N8Wnww
VwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8vZ24uc3ltY2QuY29t
MCYGCCsGAQUFBzAChhpodHRwOi8vZ24uc3ltY2IuY29tL2duLmNydDCCAfgGCisG
AQQB1nkCBAIEggHoBIIB5AHiAHcA3esdK3oNT6Ygi4GtgWhwfi6OnQHVXIiNPRHE
zbbsvswAAAFXw9mnewAABAMASDBGAiEAxx96+FVNmi1Kty1SCZUnWajCxqOdhw1w
mzjdRaybYJYCIQDpa7tgJOCN1sLA+gqKSf7fQ+ZHlVRo8gtlWD8QSDquEwB2AGj2
mPgfZIK+OozuuSgdTPxxUV1nk9RE0QpnrLtPT/vEAAABV8PZp6EAAAQDAEcwRQIg
auFztAMvtS12elivQ4UNe3LZdh5yhhev4KmgZt50/KcCIQDbfL9stJf7wPr6G/31
T1mhXTYLL7BqdDIANMW0jR+SyQB3AO5Lvbd1zmC64UJpH6vhnmajD35fsHLYgwDE
e4l6qP3LAAABV8PZp8wAAAQDAEgwRgIhAOpHLcgnK8puPKF1n3gRaOg2BTdOq/nH
x5op1SvXGF9DAiEAw9daeB/z2v5JOq5tzO4qvdZPdCQ0IvUDCzCPdrOZ8YUAdgC8
eOHfxfY8aEZJM02hD6FfCXlpIAnAgbTz9pF/Ptm4pQAAAVfD2ahvAAAEAwBHMEUC
IAsWC+G6FqhxsDOTGOpspgQEWXXVIHLiDht3950EtwStAiEA0fRcWVaYQggb6P+e
jd6UO73CtOwlTIy/ugVByEaBui4wDQYJKoZIhvcNAQELBQADggEBAIxmX8qYgS6O
1A3ZULEuNSSeujwocFqMitZlSO+Xw6VI6+eUAWh7MvZqzJwc2m3txl5I+5bVsbAr
AHbVwRfPatojW/js+eBkJwrvrRhm2GYX42cOFEDCWjTg27cH4GpZAN5GhHHO7vJx
nkO2z/99CU4AbiWN2H9yxcc2WXHzqqCJiEx+/Oljd9plL7FZZnhlhD6nCLfHVEDT
pfvSGynA+5KnbIf90/LG72pfhQl0ZnOVLwQkhNjLzm0SPYfxRnGQeUdZIFoIM+Cj
jqODBG5LcQPUDivSKPb/CT/XUt6ezNbaqzoAxbyMcqneOpJDVnaSfidWj0frQG3T
/mI1X8dGxNI=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA74HTYDFsPHb8pvleLgpQ
9NF33C5sQsnMZrBWQl+pS7IL2Ny52bD8jORU13Deq0fw2Q87IMkHROmL8+ydC/Ka
35HR2g9TAM5DWhUE8A8BM1Pvo48/vAx6Mc67SNosG2tI6OtfUvKgPOuBxf0OzLCF
Wmh5UcM7qM+gfJlFfYyr/EB7IRygMAFKhVl5oHH3oi7evv7/uv2+m4kJOeSp/vcD
cslQFiO9PofzzY6oSBymDMNkedPc2BPRT7ic3mFCvr/gX89dl30NzGjMj2ZuCMVQ
/OggCmBdAO5TP8A23Qn+DV5GWj+/hf3EbS9Z5ssjMwOOB9mHAYBilGQRayrj1Mc4
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 88164013945616329238783863907996727119
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Utah'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Salt Lake City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sinclair Services Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'gahrview.grandamerica.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30234974318957585787875571255276177678510835617617661049020283122307764902854069514648242513063537756777683929157062352335290060876102361437424169433423473557420686048034546392322642082604487421095854135552815759109286330699159815070705025031455941707829640441450418407103673044938138801766764169635772477290929976643599416074715588680345673008132389448224680868629230377034967425698468295999187501419387594521232801531382891990379959259616138077796040944020858796996964776500069244154631523563794399719064389428793305625162867247944740220414609212745700710932115944875381506983255818496017379718000454766619265546333
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gahrview.grandamerica.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (488 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008c665fca98812e8ed40dd950b12e35249eba3c28705a8c8ad66548ef97c3a548ebe79401687b32f66acc9c1cda6dedc65e48fb96d5b1b02b0076d5c117cf6ada235bf8ecf9e064270aefad1866d86617e3670e1440c25a34e0dbb707e06a5900de468471ceeef2719e43b6cfff7d094e006e258dd87f72c5c7365971f3aaa089884c7efce96377da652fb159667865843ea708b7c75440d3a5fbd21b29c0fb92a76c87fdd3f2c6ef6a5f8509746673952f042484d8cbce6d123d87f1467190794759205a0833e0a38ea383046e4b7103d40e2bd228f6ff093fd752de9eccd6daab3a00c5bc8c72a9de3a92435676927e27568f47eb406dd3fe62355fc746c4d2