ssl.logitravel.com

- Logitravel S.L. -

Issued by GeoTrust EV SSL CA - G4

About this certificate

This digital certificate with serial number 2f:3f:54:d2:e0:0b:3d:b9:04:34:36:7e:af:f2:7a:45 was issued on by GeoTrust Inc..

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Logitravel S.L.

Company registration number: B57288193
Organization: Logitravel S.L.
Organization unit: Informatica
State / Province: Baleares
Locality: Palma
Country: ES

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 2f:3f:54:d2:e0:0b:3d:b9:04:34:36:7e:af:f2:7a:45
Serial Number (int): 62802550933637806764205951307838814789
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: de:cf:5c:50:b7:ae:02:1f:15:17:aa:16:e8:0d:b5:28:9d:6a:5a:f3

Fingerprint (sha1): 9d:65:2f:81:ca:ab:b0:55:82:03:4f:0c:3c:f6:1a:01:94:93:83:60
Fingerprint (sha256): c2:e8:bf:99:1b:12:a5:82:39:47:ff:3d:0c:83:7e:49:ef:91:a8:51:55:d2:46:57:90:0d:79:ef:ed:09:05:c2

Issuing Certificate URL: http://gm.symcb.com/gm.crt

Revocation information

OCSP Server: http://gm.symcd.com
CRL Distribution Point: http://gm.symcb.com/gm.crl

Check the revocation status for certificate ssl.logitravel.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl.logitravel.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ssl.logitravel.pt
ssl.logitravel.com.mx
ssl.cdn.logitravel.com
ssl.logitravel.com

Other certificates including the domain name logitravel.com

(limited to 100 certificates)
grupoeci.viajeselcorteingles.es
blog.logitravel.com
*.affiliate.logitravel.com
*.logitravel.com
mailer.logitravel.com
*.logitravel.com
logitravel.com
*.logitravel.com
*.logitravel.com
logitravel.com
*.logitravel.com
grupoeci.viajeselcorteingles.es
providers.ssl.logitravel.com
www.logitravel.com
www.logitravel.com
www.logitravel.com
mailer.logitravel.com
*.logitravel.com
*.logitravel.com
blog.logitravel.com
providers.ssl.logitravel.com
mailer.logitravel.com
*.logitravel.com
p0az-cs-ha.onlinemarketing-support.com
communications.logitravel.com
TravelConcept SL
www.logitravel.com
p0az-cs-ha.onlinemarketing-support.com
*.logitravel.com
p0az-cs-ha.onlinemarketing-support.com
p0az-cs-ha.onlinemarketing-support.com
ssl.logitravel.com
*.logitravel.com
mailer.logitravel.com
blog.logitravel.com
www.logitravel.com
ssl.affiliate.logitravel.com
*.affiliate.logitravel.com
back.logitravel.com
TravelConcept SL
providers.ssl.logitravel.com
TravelConcept SL
*.affiliate.logitravel.com
*.logitravel.com
logitravel.com
ssl.logitravel.com
*.logitravel.com
logitravel.com
ssl.logitravel.com
communications.logitravel.com
grupoeci.viajeselcorteingles.es
communications.logitravel.com
p0az-cs-ha.onlinemarketing-support.com
p0az-cs-ha.onlinemarketing-support.com
communications.logitravel.com
*.logitravel.com
*.logitravel.com
*.logitravel.com
blog.logitravel.com
*.affiliate.logitravel.com
TravelConcept SL
*.logitravel.com
mailer.logitravel.com
TravelConcept SL
p0az-cs-ha.onlinemarketing-support.com
back.logitravel.com
mailer.logitravel.com
*.logitravel.com
*.affiliate.logitravel.com
www.logitravel.com
www.logitravel.com
mailer.logitravel.com
providers.ssl.logitravel.com
*.logitravel.com
ssl.logitravel.com
blog.logitravel.com
grupoeci.viajeselcorteingles.es
grupoeci.viajeselcorteingles.es
*.logitravel.com
*.affiliate.logitravel.com
*.logitravel.com
ssl.logitravel.com
blog.logitravel.com
TravelConcept SL
logitravel.com
*.logitravel.com
*.logitravel.com
www.logitravel.com
*.affiliate.logitravel.com
mailer.logitravel.com
communications.logitravel.com
blog.logitravel.com
communications.logitravel.com
*.logitravel.com
back.logitravel.com
grupoeci.viajeselcorteingles.es
*.logitravel.com
*.logitravel.com
*.logitravel.com
*.logitravel.com

Certificate

The complete raw certificate details for ssl.logitravel.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHDzCCBfegAwIBAgIQLz9U0uALPbkENDZ+r/J6RTANBgkqhkiG9w0BAQsFADBH
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEgMB4GA1UEAxMX
R2VvVHJ1c3QgRVYgU1NMIENBIC0gRzQwHhcNMTYwNDA0MDAwMDAwWhcNMTgwNDI0
MjM1OTU5WjCBxTETMBEGCysGAQQBgjc8AgEDEwJFUzEdMBsGA1UEDxMUUHJpdmF0
ZSBPcmdhbml6YXRpb24xEjAQBgNVBAUTCUI1NzI4ODE5MzELMAkGA1UEBhMCRVMx
ETAPBgNVBAgMCEJhbGVhcmVzMQ4wDAYDVQQHDAVQYWxtYTEYMBYGA1UECgwPTG9n
aXRyYXZlbCBTLkwuMRQwEgYDVQQLDAtJbmZvcm1hdGljYTEbMBkGA1UEAwwSc3Ns
LmxvZ2l0cmF2ZWwuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
rrE4vnQRhLZyQ91uz49EmUOYGZp0e6/6v5cT/+Wpqh1JYsbd2ZWR8Lvwxas19Ssg
ibk46ToQ0UVF+cq+IzDaCH7908WrQgL2F0HtgGbDnLk6FoAxW5e5os8YNyZnfTUx
xGPMpQ2lbvRSwptvcZ+2VextJMRNcmHMNbJGyFCGivzfWzMLmJpPOBLu+yQE3AZh
JiuFMPCJUpiVxGDCVkL6SHj22WFjNU7r6XCQ8hr5Ml5iFhPLvKDQ68kWxfeq+9+1
05lSRvXckRF/385J6eYfcjmOOin3/qidS1N06+wilXdTblZkX3LEN5qB5RBlfTyh
iuBxKr+OzTeJ2eWzdrm8iQIDAQABo4IDdjCCA3IwXwYDVR0RBFgwVoIRc3NsLmxv
Z2l0cmF2ZWwucHSCFXNzbC5sb2dpdHJhdmVsLmNvbS5teIIWc3NsLmNkbi5sb2dp
dHJhdmVsLmNvbYISc3NsLmxvZ2l0cmF2ZWwuY29tMAkGA1UdEwQCMAAwDgYDVR0P
AQH/BAQDAgWgMCsGA1UdHwQkMCIwIKAeoByGGmh0dHA6Ly9nbS5zeW1jYi5jb20v
Z20uY3JsMIGpBgNVHSAEgaEwgZ4wgZIGCSsGAQQB8CIBBjCBhDA/BggrBgEFBQcC
ARYzaHR0cHM6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9yZXBvc2l0b3J5
L2xlZ2FsMEEGCCsGAQUFBwICMDUMM2h0dHBzOi8vd3d3Lmdlb3RydXN0LmNvbS9y
ZXNvdXJjZXMvcmVwb3NpdG9yeS9sZWdhbDAHBgVngQwBATAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwHwYDVR0jBBgwFoAU3s9cULeuAh8VF6oW6A21KJ1q
WvMwVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8vZ20uc3ltY2Qu
Y29tMCYGCCsGAQUFBzAChhpodHRwOi8vZ20uc3ltY2IuY29tL2dtLmNydDCCAYAG
CisGAQQB1nkCBAIEggFwBIIBbAFqAHcA3esdK3oNT6Ygi4GtgWhwfi6OnQHVXIiN
PRHEzbbsvswAAAFT4eUagQAABAMASDBGAiEAxwg/pqJi2pMBZhwkLrbLdzfQx6nN
X79UUZwXcZ43dtQCIQCGd7jie7BpXi+3zenUAmbSpvCsYYwUWTOH0DPQE6JTXAB3
AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABU+HlGokAAAQDAEgw
RgIhAP4O1oxINcAg/0i93ro137qjETGcRAubVeTVqw8XI6TEAiEA7W6xQoY74eFx
JE1UPvBq9v8KRjTQdfXBCBOb5eVD4qYAdgBo9pj4H2SCvjqM7rkoHUz8cVFdZ5PU
RNEKZ6y7T0/7xAAAAVPh5RqfAAAEAwBHMEUCIGDPcZ9PSE8OokQ4nUYtDSbUa3m7
3vHgNKCfHiMDDdj8AiEA9GTvaYiNR+aAtFca3q1glGeWbLvD4EFV1aG9zF4iz5Mw
DQYJKoZIhvcNAQELBQADggEBAFQlI0e7N2BWdIBVtwlk3BJnjsLy3d5/90jKhFNj
I84PB1cT0x1bvsaWTKzG6ePZPfHGOlZyVLHm8/KU+E4WoVFd8HaYxFzbwNF+uJnO
b3g6vimKOdlwGhAI3hzCHMjAQ610P8UjZ1YIDvZmfdG5En4600N463YaQ/hSHVaR
0SelQntL8nWLtGBM3Kz3UzzdPe+qOKbpkqJmsVQNBjXLWvluYxkrNHL9BfYu2zII
Q6GD71BK2fapFbxR1qfv46s+M43h6jKW/Oqw6HKMFphLK7y1NDc6ij8MMN7qnAy0
H082yljDITWhNgHpp3uWvgFNzQnsfxFekFshlPY3oskJhtg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrE4vnQRhLZyQ91uz49E
mUOYGZp0e6/6v5cT/+Wpqh1JYsbd2ZWR8Lvwxas19Ssgibk46ToQ0UVF+cq+IzDa
CH7908WrQgL2F0HtgGbDnLk6FoAxW5e5os8YNyZnfTUxxGPMpQ2lbvRSwptvcZ+2
VextJMRNcmHMNbJGyFCGivzfWzMLmJpPOBLu+yQE3AZhJiuFMPCJUpiVxGDCVkL6
SHj22WFjNU7r6XCQ8hr5Ml5iFhPLvKDQ68kWxfeq+9+105lSRvXckRF/385J6eYf
cjmOOin3/qidS1N06+wilXdTblZkX3LEN5qB5RBlfTyhiuBxKr+OzTeJ2eWzdrm8
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 62802550933637806764205951307838814789
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust EV SSL CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'B57288193'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baleares'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Palma'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Logitravel S.L.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Informatica'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ssl.logitravel.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22052856319827967902916815618578649727574262075714875904734009306835036541645101224797611141144140698293538025007320643546455453729365184499676257923057521362951996358564230972474083948371907060062516227833014881054458774144857264792419942491601591264722161298784539423233303603479729838345511847364081428508898010626937382081982155581062266987030282476878728007906430665562852515221727884409843517130922094218012939110452263909463040647234784248793586394092869132022300397404054794265761925418413559935871544092416529579868246003990600566893775326121723833366622670317552477792538782103660873220957272068944568106121
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.logitravel.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.logitravel.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.cdn.logitravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.logitravel.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName decf5c50b7ae021f1517aa16e80db5289d6a5af3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0054252347bb376056748055b70964dc12678ec2f2ddde7ff748ca84536323ce0f075713d31d5bbec6964cacc6e9e3d93df1c63a567254b1e6f3f294f84e16a1515df07698c45cdbc0d17eb899ce6f783abe298a39d9701a1008de1cc21cc8c043ad743fc5236756080ef6667dd1b9127e3ad34378eb761a43f8521d5691d127a5427b4bf2758bb4604cdcacf7533cdd3defaa38a6e992a266b1540d0635cb5af96e63192b3472fd05f62edb320843a183ef504ad9f6a915bc51d6a7efe3ab3e338de1ea3296fceab0e8728c16984b2bbcb534373a8a3f0c30deea9c0cb41f4f36ca58c32135a13601e9a77b96be014dcd09ec7f115e905b2194f637a2c90986d8