*.mypoiworld.com
- MyPoi World B.V. -
Issued by GeoTrust SSL CA - G3
About this certificate
This digital certificate with serial number 47:28:5b:3b:97:bc:41:74:e0:02:3a:60:4e:b4:54:16 was issued on by GeoTrust Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
MyPoi World B.V.
Organization:
MyPoi World B.V.
Organization unit: ICT
Organization unit: ICT
State / Province:
Overijssel
Locality: Oldenzaal
Country: NL
Locality: Oldenzaal
Country: NL
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 47:28:5b:3b:97:bc:41:74:e0:02:3a:60:4e:b4:54:16Serial Number (int): 94584729995765764371811901291327935510
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c
Fingerprint (sha1): 6f:d5:a9:89:d7:bc:07:0b:0b:00:0d:0b:82:6c:f3:f1:4c:3c:da:5f
Fingerprint (sha256): c3:1b:68:6f:ea:f4:fe:96:14:d3:25:db:05:e1:5e:1b:79:ba:e9:03:96:c8:5f:91:84:03:b4:36:5f:8b:57:49
Issuing Certificate URL: http://gn.symcb.com/gn.crt
Revocation information
OCSP Server: http://gn.symcd.comCRL Distribution Point: http://gn.symcb.com/gn.crl
Check the revocation status for certificate *.mypoiworld.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.mypoiworld.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.mypoiworld.com
mypoiworld.com
mypoiworld.com
Other certificates including the domain name mypoiworld.com
(limited to 100 certificates)
doubledutch.prelive.mypoiworld.com
puzzel.gelderlander.prelive.mypoiworld.com
cdn.mypoiworld.com
puzzel.bndestem.prelive.mypoiworld.com
puzzel.volkskrant.prelive.mypoiworld.com
static.persgroep.mypoiworld.com
puzzel.trouw.prelive.mypoiworld.com
*.mypoiworld.com
static.persgroep.mypoiworld.com
encrypted.mypoiworld.com
puzzel.bd.prelive.mypoiworld.com
static.persgroep.prelive.mypoiworld.com
puzzel.gelderlander.prelive.mypoiworld.com
puzzel.ad.prelive.mypoiworld.com
puzzel.hln.prelive.mypoiworld.com
encrypted.mypoiworld.com
static.persgroep.mypoiworld.com
puzzel.gelderlander.prelive.mypoiworld.com
static.persgroep.mypoiworld.com
*.mypoiworld.com
puzzel.ad.prelive.mypoiworld.com
cms-svedex-prelive.mypoiworld.com
puzzel.trouw.prelive.mypoiworld.com
puzzel.ad.prelive.mypoiworld.com
static.persgroep.mypoiworld.com
*.mypoiworld.com
puzzel.destentor.prelive.mypoiworld.com
static.persgroep.prelive.mypoiworld.com
puzzel.pzc.prelive.mypoiworld.com
puzzel.hln.prelive.mypoiworld.com
puzzel.ed.prelive.mypoiworld.com
www-obf-prelive.mypoiworld.com
puzzel.ad.prelive.mypoiworld.com
static.persgroep.mypoiworld.com
static.persgroep.mypoiworld.com
static.persgroep.prelive.mypoiworld.com
puzzel.trouw.prelive.mypoiworld.com
encrypted.mypoiworld.com
puzzel.trouw.prelive.mypoiworld.com
cdn.mypoiworld.com
puzzel.trouw.prelive.mypoiworld.com
puzzel.ed.prelive.mypoiworld.com
encrypted.mypoiworld.com
static.persgroep.prelive.mypoiworld.com
auth-apprm.mypoiworld.com
puzzel.trouw.prelive.mypoiworld.com
*.mypoiworld.com
puzzel.pzc.prelive.mypoiworld.com
static.persgroep.mypoiworld.com
puzzel.ad.prelive.mypoiworld.com
puzzel.ed.prelive.mypoiworld.com
puzzel.gelderlander.prelive.mypoiworld.com
static.persgroep.prelive.mypoiworld.com
puzzel.ad.prelive.mypoiworld.com
puzzel.tubantia.prelive.mypoiworld.com
puzzel.ad.prelive.mypoiworld.com
puzzel.pzc.prelive.mypoiworld.com
puzzel.trouw.prelive.mypoiworld.com
*.mypoiworld.com
puzzel.pzc.prelive.mypoiworld.com
www-waterbus-prelive.mypoiworld.com
puzzel.trouw.prelive.mypoiworld.com
puzzel.ad.prelive.mypoiworld.com
puzzel.gelderlander.prelive.mypoiworld.com
cms-waterbus-prelive.mypoiworld.com
puzzel.ed.prelive.mypoiworld.com
puzzel.trouw.prelive.mypoiworld.com
puzzel.trouw.prelive.mypoiworld.com
puzzel.ad.prelive.mypoiworld.com
cdn.mypoiworld.com
puzzel.ed.prelive.mypoiworld.com
static.persgroep.prelive.mypoiworld.com
*.dev.mypoiworld.com
puzzel.trouw.prelive.mypoiworld.com
*.mypoiworld.com
puzzel.gelderlander.prelive.mypoiworld.com
*.mypoiworld.com
puzzel.pzc.prelive.mypoiworld.com
static.persgroep.prelive.mypoiworld.com
puzzel.trouw.prelive.mypoiworld.com
static.persgroep.prelive.mypoiworld.com
puzzel.ed.prelive.mypoiworld.com
puzzel.ad.prelive.mypoiworld.com
games.hln.prelive.mypoiworld.com
puzzel.gelderlander.prelive.mypoiworld.com
puzzel.gelderlander.prelive.mypoiworld.com
puzzel.destentor.prelive.mypoiworld.com
puzzel.pzc.prelive.mypoiworld.com
puzzel.trouw.prelive.mypoiworld.com
puzzel.bd.prelive.mypoiworld.com
puzzel.tubantia.prelive.mypoiworld.com
puzzel.ad.prelive.mypoiworld.com
static.persgroep.mypoiworld.com
*.mypoiworld.com
puzzel.gelderlander.prelive.mypoiworld.com
cms-obf.mypoiworld.com
puzzel.bndestem.prelive.mypoiworld.com
puzzel.bd.prelive.mypoiworld.com
encrypted.mypoiworld.com
puzzel.pzc.prelive.mypoiworld.com
puzzel.gelderlander.prelive.mypoiworld.com
cdn.mypoiworld.com
puzzel.bndestem.prelive.mypoiworld.com
puzzel.volkskrant.prelive.mypoiworld.com
static.persgroep.mypoiworld.com
puzzel.trouw.prelive.mypoiworld.com
*.mypoiworld.com
static.persgroep.mypoiworld.com
encrypted.mypoiworld.com
puzzel.bd.prelive.mypoiworld.com
static.persgroep.prelive.mypoiworld.com
puzzel.gelderlander.prelive.mypoiworld.com
puzzel.ad.prelive.mypoiworld.com
puzzel.hln.prelive.mypoiworld.com
encrypted.mypoiworld.com
static.persgroep.mypoiworld.com
puzzel.gelderlander.prelive.mypoiworld.com
static.persgroep.mypoiworld.com
*.mypoiworld.com
puzzel.ad.prelive.mypoiworld.com
cms-svedex-prelive.mypoiworld.com
puzzel.trouw.prelive.mypoiworld.com
puzzel.ad.prelive.mypoiworld.com
static.persgroep.mypoiworld.com
*.mypoiworld.com
puzzel.destentor.prelive.mypoiworld.com
static.persgroep.prelive.mypoiworld.com
puzzel.pzc.prelive.mypoiworld.com
puzzel.hln.prelive.mypoiworld.com
puzzel.ed.prelive.mypoiworld.com
www-obf-prelive.mypoiworld.com
puzzel.ad.prelive.mypoiworld.com
static.persgroep.mypoiworld.com
static.persgroep.mypoiworld.com
static.persgroep.prelive.mypoiworld.com
puzzel.trouw.prelive.mypoiworld.com
encrypted.mypoiworld.com
puzzel.trouw.prelive.mypoiworld.com
cdn.mypoiworld.com
puzzel.trouw.prelive.mypoiworld.com
puzzel.ed.prelive.mypoiworld.com
encrypted.mypoiworld.com
static.persgroep.prelive.mypoiworld.com
auth-apprm.mypoiworld.com
puzzel.trouw.prelive.mypoiworld.com
*.mypoiworld.com
puzzel.pzc.prelive.mypoiworld.com
static.persgroep.mypoiworld.com
puzzel.ad.prelive.mypoiworld.com
puzzel.ed.prelive.mypoiworld.com
puzzel.gelderlander.prelive.mypoiworld.com
static.persgroep.prelive.mypoiworld.com
puzzel.ad.prelive.mypoiworld.com
puzzel.tubantia.prelive.mypoiworld.com
puzzel.ad.prelive.mypoiworld.com
puzzel.pzc.prelive.mypoiworld.com
puzzel.trouw.prelive.mypoiworld.com
*.mypoiworld.com
puzzel.pzc.prelive.mypoiworld.com
www-waterbus-prelive.mypoiworld.com
puzzel.trouw.prelive.mypoiworld.com
puzzel.ad.prelive.mypoiworld.com
puzzel.gelderlander.prelive.mypoiworld.com
cms-waterbus-prelive.mypoiworld.com
puzzel.ed.prelive.mypoiworld.com
puzzel.trouw.prelive.mypoiworld.com
puzzel.trouw.prelive.mypoiworld.com
puzzel.ad.prelive.mypoiworld.com
cdn.mypoiworld.com
puzzel.ed.prelive.mypoiworld.com
static.persgroep.prelive.mypoiworld.com
*.dev.mypoiworld.com
puzzel.trouw.prelive.mypoiworld.com
*.mypoiworld.com
puzzel.gelderlander.prelive.mypoiworld.com
*.mypoiworld.com
puzzel.pzc.prelive.mypoiworld.com
static.persgroep.prelive.mypoiworld.com
puzzel.trouw.prelive.mypoiworld.com
static.persgroep.prelive.mypoiworld.com
puzzel.ed.prelive.mypoiworld.com
puzzel.ad.prelive.mypoiworld.com
games.hln.prelive.mypoiworld.com
puzzel.gelderlander.prelive.mypoiworld.com
puzzel.gelderlander.prelive.mypoiworld.com
puzzel.destentor.prelive.mypoiworld.com
puzzel.pzc.prelive.mypoiworld.com
puzzel.trouw.prelive.mypoiworld.com
puzzel.bd.prelive.mypoiworld.com
puzzel.tubantia.prelive.mypoiworld.com
puzzel.ad.prelive.mypoiworld.com
static.persgroep.mypoiworld.com
*.mypoiworld.com
puzzel.gelderlander.prelive.mypoiworld.com
cms-obf.mypoiworld.com
puzzel.bndestem.prelive.mypoiworld.com
puzzel.bd.prelive.mypoiworld.com
encrypted.mypoiworld.com
puzzel.pzc.prelive.mypoiworld.com
Certificate
The complete raw certificate details for *.mypoiworld.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgIQRyhbO5e8QXTgAjpgTrRUFjANBgkqhkiG9w0BAQsFADBE MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTUxMjE2MDAwMDAwWhcNMTcwMjEzMjM1 OTU5WjB6MQswCQYDVQQGEwJOTDETMBEGA1UECBMKT3Zlcmlqc3NlbDESMBAGA1UE BxQJT2xkZW56YWFsMRkwFwYDVQQKFBBNeVBvaSBXb3JsZCBCLlYuMQwwCgYDVQQL FANJQ1QxGTAXBgNVBAMUECoubXlwb2l3b3JsZC5jb20wggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQDS3f2gY4TpOu9UwL6QhmBzMEy3K0X0rfqGFBDQjIkJ XTCZsWJffLwDyd1k1/SBR7TCIR5WSCY2hzxtNwlnJEIBG6nN1q3nkGJJ50jt16gK hgnTnFxqkp+3BAcQ1R2n2TXbA2j9boznV82uwJdD9WVPqJdgTNrTxOemWVJetpTe AZNMOvSGSZkn/1HwvUbwJLQfpHM9fD/R8Y1TVwzWo5cxjhN6Ic3fLc7ROqDysIx0 tTA1dA/i5GZ8slXrJj9kCoDK/GQw8yPG/rVf2xIwrxBtpUA+jZNq0BXOs3uVmW0+ U2M7VCaaPg+2a/c6h8kRaIkIV/PtMf+uBfH450C8B5UVAgMBAAGjggGyMIIBrjAr BgNVHREEJDAighAqLm15cG9pd29ybGQuY29tgg5teXBvaXdvcmxkLmNvbTAJBgNV HRMEAjAAMA4GA1UdDwEB/wQEAwIFoDArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8v Z24uc3ltY2IuY29tL2duLmNybDCBnQYDVR0gBIGVMIGSMIGPBgZngQwBAgIwgYQw PwYIKwYBBQUHAgEWM2h0dHBzOi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMv cmVwb3NpdG9yeS9sZWdhbDBBBggrBgEFBQcCAjA1DDNodHRwczovL3d3dy5nZW90 cnVzdC5jb20vcmVzb3VyY2VzL3JlcG9zaXRvcnkvbGVnYWwwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFNJv95b0hT9yPDB9I9qFeJuj fFp8MFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDovL2duLnN5bWNk LmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL2duLnN5bWNiLmNvbS9nbi5jcnQwDQYJ KoZIhvcNAQELBQADggEBADKxEQDHs9bU/JSc6BdNucFKCA/G4EFEpeEp7UvU/Pig CpwFvECOx81GEmiXeDuH3DgdwJy3cqKlLe6EVulUIiYYZTSSqXkFRzNpKqqSMvHz n/dXkqFwzJKqKkfBtPPSvBB/qVONuOgJGH/h6CnszgqNaAd04+7esmSlyPHObmpy sFMb9Evi5ZQMJuxexDArBWyQumAY7U4Sw/h76TTV+fwnYFsrLWkbppjJO1hmbYn7 eX5iAN57xdfgQ1slOnCPm1Syoy7+ZAUs7TkxY1noTKxzyT5xWd/wcKWQATyhSzd0 XUeP5+cTF2t+Ai1dWNa3S8dDWMzqbsLcQXDPDgKy1ZQ= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0t39oGOE6TrvVMC+kIZg czBMtytF9K36hhQQ0IyJCV0wmbFiX3y8A8ndZNf0gUe0wiEeVkgmNoc8bTcJZyRC ARupzdat55BiSedI7deoCoYJ05xcapKftwQHENUdp9k12wNo/W6M51fNrsCXQ/Vl T6iXYEza08TnpllSXraU3gGTTDr0hkmZJ/9R8L1G8CS0H6RzPXw/0fGNU1cM1qOX MY4TeiHN3y3O0Tqg8rCMdLUwNXQP4uRmfLJV6yY/ZAqAyvxkMPMjxv61X9sSMK8Q baVAPo2TatAVzrN7lZltPlNjO1Qmmj4Ptmv3OofJEWiJCFfz7TH/rgXx+OdAvAeV FQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 94584729995765764371811901291327935510 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-16 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-13 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Overijssel' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Oldenzaal' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'MyPoi World B.V.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'ICT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.mypoiworld.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26619511751056437672220586972195816852246033322963683227408696472837060657823345167966211247789389745385047511518236957535055272175918570238820765713935398285068892784050398886299209498301281216334814238632787711368635712751724245455536756627488230201069510015288410156295944765962247392565822016814959828046338199590439910375680812365538807893549759422597202157232584597386438694364086148821756967974338036000670962834880942610067313006806401072870976230651884281907335932544149838241594705269437763742256962917315562846670344726557607468613729552802707051532619645289104959569001337442620357393279950274513586328853 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mypoiworld.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypoiworld.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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