apps.hnzc.co.nz

- Housing New Zealand Limited -

Issued by GeoTrust SSL CA - G2

About this certificate

This digital certificate with serial number 7d:e3:39:2e:32:0c:8b:68:5b:41:20:0d:10:47:0a:14 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Compliant certificates must not encode explicitTest as an IA5String (RFC 6818: 3)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Housing New Zealand Limited

Organization: Housing New Zealand Limited
Organization unit: Systems Operations
State / Province: Wellington
Locality: Wellington
Country: NZ

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7d:e3:39:2e:32:0c:8b:68:5b:41:20:0d:10:47:0a:14
Serial Number (int): 167333310617334189720906703202352040468
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 11:4a:d0:73:39:d5:5b:69:08:5c:ba:3d:bf:64:9a:a8:8b:1c:55:bc

Fingerprint (sha1): 94:8f:14:78:23:2e:9c:a9:77:78:87:46:48:fb:19:cd:96:07:f7:09
Fingerprint (sha256): be:f9:ac:63:a1:9e:38:e1:db:0a:aa:77:52:1f:93:90:35:1f:82:f8:e5:75:5b:91:0f:cb:d7:59:be:ce:8f:f4

Issuing Certificate URL: http://gb.symcb.com/gb.crt

Revocation information

OCSP Server: http://gb.symcd.com
CRL Distribution Point: http://gb.symcb.com/gb.crl

Check the revocation status for certificate apps.hnzc.co.nz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apps.hnzc.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apps.hnzc.co.nz

Other certificates including the domain name hnzc.co.nz

(limited to 100 certificates)
close2home.co.nz
sts.hnzc.co.nz
mail.hnzc.co.nz
access01.hnzc.co.nz
www.hnzc.co.nz
mail.hnzc.co.nz
careers.hnzc.co.nz
mail-dr.hnzc.co.nz
close2home.co.nz
dev.hnzc.co.nz
PROD-SEC-MA01.hnz.co.nz
*.hnzc.co.nz
testsftp.hnzc.co.nz
access02.kaingaora.govt.nz
close2home.co.nz
NPE-SEC-B2B01.hnzc.co.nz
close2home.co.nz
close2home.co.nz
careers.hnzc.co.nz
close2home.co.nz
access01.kaingaora.govt.nz
PRDR-SEC-MA01.hnz.co.nz
access02.hnzc.co.nz
close2home.co.nz
ucweb02.hnzc.co.nz
ucweb01.kaingaora.govt.nz
close2home.co.nz
uatsftp.hnzc.co.nz
stst.hnzc.co.nz
mobile.hnzc.co.nz
careers.hnzc.co.nz
sts.hnzc.co.nz
*.hnzc.co.nz
hnzc.co.nz
hnzaadexpwe01.hnzc.co.nz
stst.hnzc.co.nz
sts.hnzc.co.nz
desktop.hnzc.co.nz
access02.kaingaora.govt.nz
careers.hnzc.co.nz
ucweb01.hnzc.co.nz
sts.hnzc.co.nz
close2home.co.nz
mail.hnzc.co.nz
ucweb02.hnzc.co.nz
close2home.co.nz
close2home.co.nz
careers.hnzc.co.nz
close2home.co.nz
careers.hnzc.co.nz
desktop.hnzc.co.nz
*.hnzc.co.nz
ucweb02.hnzc.co.nz
close2home.co.nz
careers.hnzc.co.nz
close2home.co.nz
close2home.co.nz
desktop.hnzc.co.nz
mail-dr.hnzc.co.nz
close2home.co.nz
mobile.hnzc.co.nz
close2home.co.nz
close2home.co.nz
apps.hnzc.co.nz
close2home.co.nz
appsadc.hnzc.co.nz
close2home.co.nz
desktop.hnzc.co.nz
hnzaadexpwe01.hnzc.co.nz
desktop.hnzc.co.nz
www.hnzc.co.nz
prodsftp.hnzc.co.nz
close2home.co.nz
mail.hnzc.co.nz
ucweb02.hnzc.co.nz
careers.hnzc.co.nz
ucweb02.hnzc.co.nz
desktop.hnzc.co.nz
close2home.co.nz
*.hnzc.co.nz
ucweb02.kaingaora.govt.nz
close2home.co.nz
close2home.co.nz
hnzaadexpwe01.hnzc.co.nz
careers.hnzc.co.nz
mail-dr.hnzc.co.nz
ucweb02.kaingaora.govt.nz

Certificate

The complete raw certificate details for apps.hnzc.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgIQfeM5LjIMi2hbQSANEEcKFDANBgkqhkiG9w0BAQUFADBE
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU
R2VvVHJ1c3QgU1NMIENBIC0gRzIwHhcNMTQwNzI4MDAwMDAwWhcNMTcwNzI3MjM1
OTU5WjCBlDELMAkGA1UEBhMCTloxEzARBgNVBAgUCldlbGxpbmd0b24xEzARBgNV
BAcUCldlbGxpbmd0b24xJDAiBgNVBAoUG0hvdXNpbmcgTmV3IFplYWxhbmQgTGlt
aXRlZDEbMBkGA1UECxQSU3lzdGVtcyBPcGVyYXRpb25zMRgwFgYDVQQDFA9hcHBz
LmhuemMuY28ubnowggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2smuS
Ef0b7iyIrhVyhB3ukHSOD9y36cE9zyaj7wzC8qsfeuXaeFBA+yhWWOA/sg/n1vb9
PKz7fn13uL5nyCs5QMgBupkfzgYyzvVkYKKkKUDgUu+rPEBzItkW+fMqcf+dLbTB
0sitUJPakjybeiYuW20dy/4er5mU/sQ7yBPpOLS3a+V7MLClM+Xf3UzkiNrlFBoC
MCTYj4iv4tfjGBXNMkNBUEXrB37JJybtj4QVyGXyAqrdfCDUw9WCfjiuxMKKxCHp
oQp0jeQzKL2F9CZ1DLPo2lP8zYZl2KazpIX7LuQFnxwFr5ZZ+Cf/7Uu2DxTUbvY0
Zjs6/s5YH/f/YjAfAgMBAAGjggFoMIIBZDAaBgNVHREEEzARgg9hcHBzLmhuemMu
Y28ubnowCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwKwYDVR0fBCQwIjAgoB6g
HIYaaHR0cDovL2diLnN5bWNiLmNvbS9nYi5jcmwwZQYDVR0gBF4wXDBaBgpghkgB
hvhFAQc2MEwwIwYIKwYBBQUHAgEWF2h0dHBzOi8vZC5zeW1jYi5jb20vY3BzMCUG
CCsGAQUFBwICMBkWF2h0dHBzOi8vZC5zeW1jYi5jb20vcnBhMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBQRStBzOdVbaQhcuj2/ZJqo
ixxVvDBXBggrBgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9nYi5zeW1j
ZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9nYi5zeW1jYi5jb20vZ2IuY3J0MA0G
CSqGSIb3DQEBBQUAA4IBAQC2W4OV3CivliznL/WRttWNnQjZnHUXOS8pkrD4AJzQ
HOf49A1K9DhmcRml25R1wDEMYlyldnTe0ybBgHp69BeSJnedLoxdjZ59FUDgGaXJ
KBG5tKtPX7+TnAGu5P8m7Z/AqkirfK0NPD10HMuqbW19PPKm1vZqM9Kg7ygznEfl
aMJqny09HTI/14p4YfU6QH8/xyor3h7Df2cViop9IH+JAIy2CXiK+MZaY7DZG7xJ
bsjTdgha6vQ6nKNx9LlqTPTonqM6hln4WfqWwTgHYVnK1Mo7/YfaDN5gxR9wpPe8
wEuCnZWeqXQ5ElJPA0+q0ECdrG4skDPfPFIBbFi5jToT
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrJrkhH9G+4siK4VcoQd
7pB0jg/ct+nBPc8mo+8MwvKrH3rl2nhQQPsoVljgP7IP59b2/Tys+359d7i+Z8gr
OUDIAbqZH84GMs71ZGCipClA4FLvqzxAcyLZFvnzKnH/nS20wdLIrVCT2pI8m3om
LlttHcv+Hq+ZlP7EO8gT6Ti0t2vlezCwpTPl391M5Ija5RQaAjAk2I+Ir+LX4xgV
zTJDQVBF6wd+yScm7Y+EFchl8gKq3Xwg1MPVgn44rsTCisQh6aEKdI3kMyi9hfQm
dQyz6NpT/M2GZdims6SF+y7kBZ8cBa+WWfgn/+1Ltg8U1G72NGY7Ov7OWB/3/2Iw
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 167333310617334189720906703202352040468
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-07-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Wellington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Wellington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Housing New Zealand Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Systems Operations'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'apps.hnzc.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23063353782406328040394521505487816927355999195753493732142622109501922512856968042965331277080002093633253316400645618420355753109707088276711005269310545113019955502290906672153918730348411986432706335212461557320854809192299238130557352625868663928240615820701542663031621510102622787002143092985994670657463806090902129720510858415180117844341574241554261943100512702197756039905899416877375342237144900416069711503292545379064763669903301637755554178029752891409819412330489145771147490040751466434230129796140581884597574141567707044546759966130140421397812541499483144298178915754552274863360838514857755160607
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.hnzc.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gb.symcb.com/gb.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 114ad07339d55b69085cba3dbf649aa88b1c55bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gb.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gb.symcb.com/gb.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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