gtlbml3lf0200.bagmail.net
- arvato systems GmbH -
Issued by GeoTrust SHA256 SSL CA
About this certificate
This digital certificate with serial number 03:1c:39:18:76:31:c8:4a:82:e3:60:e6:9c:08:b8:4e was issued on by GeoTrust Inc..
With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
arvato systems GmbH
Organization:
arvato systems GmbH
State / Province:
Nordrhein-Westfalen
Locality: Guetersloh
Country: DE
Locality: Guetersloh
Country: DE
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:1c:39:18:76:31:c8:4a:82:e3:60:e6:9c:08:b8:4eSerial Number (int): 4134226334796445651735501227292145742
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 14:67:8e:ed:83:4f:d6:1e:9d:40:04:0c:04:46:a1:70:34:b2:0f:72
Fingerprint (sha1): d8:75:65:9d:f6:6b:da:cc:6d:7b:a6:f2:ad:ee:24:79:47:9c:ee:38
Fingerprint (sha256): c3:d1:94:b8:e1:9c:b5:f2:75:95:22:5d:ce:94:d3:08:6b:49:7d:e7:43:f4:89:99:67:24:5d:b0:24:aa:54:d0
Issuing Certificate URL: http://gj.symcb.com/gj.crt
Revocation information
OCSP Server: http://gj.symcd.comCRL Distribution Point: http://gj.symcb.com/gj.crl
Check the revocation status for certificate gtlbml3lf0200.bagmail.net
20
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for gtlbml3lf0200.bagmail.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
sip.bertelsmann.de
lyncdiscover.arvato.com
meet.bertelsmann.de
lyncdiscoverinternal.bertelsmann.de
gtlbml3lf0202.bagmail.net
dialin.arvatosystems.com
lyncdiscoverinternal.arvato.com
sip.arvato.com
dialin.bertelsmann.de
gtlbml3lf0204.bagmail.net
gtlbml3lf0205.bagmail.net
lyncdiscover.bertelsmann.de
gtlbml3lf0203.bagmail.net
lyncdiscoverinternal.arvatosystems.com
gtlbml3lf0206.bagmail.net
gtlbml3lf0201.bagmail.net
gtlbml3lf0250.bagmail.net
dialin.arvato.com
lyncdiscover.arvatosystems.com
gtlbml3lf0200.bagmail.net
lyncdiscover.arvato.com
meet.bertelsmann.de
lyncdiscoverinternal.bertelsmann.de
gtlbml3lf0202.bagmail.net
dialin.arvatosystems.com
lyncdiscoverinternal.arvato.com
sip.arvato.com
dialin.bertelsmann.de
gtlbml3lf0204.bagmail.net
gtlbml3lf0205.bagmail.net
lyncdiscover.bertelsmann.de
gtlbml3lf0203.bagmail.net
lyncdiscoverinternal.arvatosystems.com
gtlbml3lf0206.bagmail.net
gtlbml3lf0201.bagmail.net
gtlbml3lf0250.bagmail.net
dialin.arvato.com
lyncdiscover.arvatosystems.com
gtlbml3lf0200.bagmail.net
Other certificates including the domain name bagmail.net
(limited to 100 certificates)
um.bagmail.net
owasemea.bertelsmann.de
um.bagmail.net
gtlbmllyd0100.bagmail.net
*.bagmail.net
devccgtlp02.vc.bertelsmann.de
gtlbml3lf0200.bagmail.net
gtlbmlske0200.bertelsmann.de
owasemea.bertelsmann.de
gtlbml3lf0100.bagmail.net
owasemea.bertelsmann.de
gtlbmlske0100.bertelsmann.de
gtlbml3lf0200.bagmail.net
devccgtlp02.vc.bertelsmann.de
connect.bagmail.net
owasemea.bertelsmann.de
*.bagmail.net
gtlbml3lf0200.bagmail.net
gtlbmllyf0100.bagmail.net
um.bagmail.net
gtlbml3lf0200.bagmail.net
gtlbml3le0100.bagmail.net
connect.bagmail.net
*.bagmail.net
gtlbmllyf0100.bagmail.net
dubbmlskf0001.bagmail.net
gtlbmlske0100.bertelsmann.de
gtlbmllyd0100.bagmail.net
gtlbml3lf0200.bagmail.net
gtlbmllyf0100.bagmail.net
*.bagmail.net
gtlbml3lf0100.bagmail.net
gtlbmlske0200.bertelsmann.de
gtlbmlske0100.bertelsmann.de
mucbmllys0001.bagmail.net
gtlbmllyd0100.bagmail.net
devccgtlp02.vc.bertelsmann.de
devccgtlp02.vc.bertelsmann.de
nycbml3lf0100.bagmail.net
*.bagmail.net
gtlbmllyd0100.bagmail.net
gtlbml3le0100.bagmail.net
nycbml3le0100.bagmail.net
owasemea.bertelsmann.de
um.bagmail.net
gtlbmllyd0100.bagmail.net
*.bagmail.net
devccgtlp02.vc.bertelsmann.de
gtlbml3lf0200.bagmail.net
gtlbmlske0200.bertelsmann.de
owasemea.bertelsmann.de
gtlbml3lf0100.bagmail.net
owasemea.bertelsmann.de
gtlbmlske0100.bertelsmann.de
gtlbml3lf0200.bagmail.net
devccgtlp02.vc.bertelsmann.de
connect.bagmail.net
owasemea.bertelsmann.de
*.bagmail.net
gtlbml3lf0200.bagmail.net
gtlbmllyf0100.bagmail.net
um.bagmail.net
gtlbml3lf0200.bagmail.net
gtlbml3le0100.bagmail.net
connect.bagmail.net
*.bagmail.net
gtlbmllyf0100.bagmail.net
dubbmlskf0001.bagmail.net
gtlbmlske0100.bertelsmann.de
gtlbmllyd0100.bagmail.net
gtlbml3lf0200.bagmail.net
gtlbmllyf0100.bagmail.net
*.bagmail.net
gtlbml3lf0100.bagmail.net
gtlbmlske0200.bertelsmann.de
gtlbmlske0100.bertelsmann.de
mucbmllys0001.bagmail.net
gtlbmllyd0100.bagmail.net
devccgtlp02.vc.bertelsmann.de
devccgtlp02.vc.bertelsmann.de
nycbml3lf0100.bagmail.net
*.bagmail.net
gtlbmllyd0100.bagmail.net
gtlbml3le0100.bagmail.net
nycbml3le0100.bagmail.net
Certificate
The complete raw certificate details for gtlbml3lf0200.bagmail.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIQAxw5GHYxyEqC42DmnAi4TjANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEfMB0GA1UEAxMW R2VvVHJ1c3QgU0hBMjU2IFNTTCBDQTAeFw0xNjA0MjAwMDAwMDBaFw0xNzA2MjUy MzU5NTlaMIGCMQswCQYDVQQGEwJERTEcMBoGA1UECAwTTm9yZHJoZWluLVdlc3Rm YWxlbjETMBEGA1UEBwwKR3VldGVyc2xvaDEcMBoGA1UECgwTYXJ2YXRvIHN5c3Rl bXMgR21iSDEiMCAGA1UEAwwZZ3RsYm1sM2xmMDIwMC5iYWdtYWlsLm5ldDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOmrnSr9ep7Ima3CN9w88KWHrH92 Un3a0Z7V9lTOM4MN11TmGs5AhE16PIAnndKWuRPr5Az+Dn1S/W636v4gqxpaXghK f4o7W7TK6OpcceXK6KQV2Id/60pgiHVdvjg0LOR++3j1mXgazXnjzdMX36yHbo/8 ukbBcSVfdHcQPe+clitvN09CRCblf5c9bmTBo1bX28mSlssVB1+g1H92ocT5AF7S fF3NasW7AF9oUaVNxVtWfVDAiy9aq8kQYOXuDKiMBt4WjOqBQWWSwdfHwjyQM/1U yhuiGOwkm5eCAH1Ve0EZ/dYf9wsAdBFFRPk+uz2Wh+Q5v4KODwDbcwYabZMCAwEA AaOCA8QwggPAMIICJgYDVR0RBIICHTCCAhmCEnNpcC5iZXJ0ZWxzbWFubi5kZYIX bHluY2Rpc2NvdmVyLmFydmF0by5jb22CE21lZXQuYmVydGVsc21hbm4uZGWCI2x5 bmNkaXNjb3ZlcmludGVybmFsLmJlcnRlbHNtYW5uLmRlghlndGxibWwzbGYwMjAy LmJhZ21haWwubmV0ghhkaWFsaW4uYXJ2YXRvc3lzdGVtcy5jb22CH2x5bmNkaXNj b3ZlcmludGVybmFsLmFydmF0by5jb22CDnNpcC5hcnZhdG8uY29tghVkaWFsaW4u YmVydGVsc21hbm4uZGWCGWd0bGJtbDNsZjAyMDQuYmFnbWFpbC5uZXSCGWd0bGJt bDNsZjAyMDUuYmFnbWFpbC5uZXSCG2x5bmNkaXNjb3Zlci5iZXJ0ZWxzbWFubi5k ZYIZZ3RsYm1sM2xmMDIwMy5iYWdtYWlsLm5ldIImbHluY2Rpc2NvdmVyaW50ZXJu YWwuYXJ2YXRvc3lzdGVtcy5jb22CGWd0bGJtbDNsZjAyMDYuYmFnbWFpbC5uZXSC GWd0bGJtbDNsZjAyMDEuYmFnbWFpbC5uZXSCGWd0bGJtbDNsZjAyNTAuYmFnbWFp bC5uZXSCEWRpYWxpbi5hcnZhdG8uY29tgh5seW5jZGlzY292ZXIuYXJ2YXRvc3lz dGVtcy5jb22CGWd0bGJtbDNsZjAyMDAuYmFnbWFpbC5uZXQwCQYDVR0TBAIwADAO BgNVHQ8BAf8EBAMCBaAwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL2dqLnN5bWNi LmNvbS9nai5jcmwwgZ0GA1UdIASBlTCBkjCBjwYGZ4EMAQICMIGEMD8GCCsGAQUF BwIBFjNodHRwczovL3d3dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL3JlcG9zaXRv cnkvbGVnYWwwQQYIKwYBBQUHAgIwNQwzaHR0cHM6Ly93d3cuZ2VvdHJ1c3QuY29t L3Jlc291cmNlcy9yZXBvc2l0b3J5L2xlZ2FsMB0GA1UdJQQWMBQGCCsGAQUFBwMB BggrBgEFBQcDAjAfBgNVHSMEGDAWgBQUZ47tg0/WHp1ABAwERqFwNLIPcjBXBggr BgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9nai5zeW1jZC5jb20wJgYI KwYBBQUHMAKGGmh0dHA6Ly9nai5zeW1jYi5jb20vZ2ouY3J0MBMGCisGAQQB1nkC BAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBQNB1f/EOYlDS5vcQ3RjW/Y8Rg hiLUEgQCuSzRcId45JKkEH6vNAab0lcxhoDYv/Atk5FI2p9UGgyRi/eb7dbba4u1 a501SyNh/2r+Sj+bNsnYuF9bp8NEc0kbMV/xaJX/VrIzd+/Gfty2xcckoUyIFn5+ Mth+51FoKvSa/K4f16na7KpVvmOV2MWDrsofm2VpPzEusMe9j+ye9FKZJhCbSpuj kyyRisEwqqkGYKt8W08AwJ43D4xR01FPI3fg7OrhBnfJXqzO0zc3dwPc9o0MlP+X cwmZJiFt69pla1wSYBzPFUc2suZYJuM/wdbxbqq0QVqRleIi0OxkvTh/1AGY -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6audKv16nsiZrcI33Dzw pYesf3ZSfdrRntX2VM4zgw3XVOYazkCETXo8gCed0pa5E+vkDP4OfVL9brfq/iCr GlpeCEp/ijtbtMro6lxx5cropBXYh3/rSmCIdV2+ODQs5H77ePWZeBrNeePN0xff rIduj/y6RsFxJV90dxA975yWK283T0JEJuV/lz1uZMGjVtfbyZKWyxUHX6DUf3ah xPkAXtJ8Xc1qxbsAX2hRpU3FW1Z9UMCLL1qryRBg5e4MqIwG3haM6oFBZZLB18fC PJAz/VTKG6IY7CSbl4IAfVV7QRn91h/3CwB0EUVE+T67PZaH5Dm/go4PANtzBhpt kwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 4134226334796445651735501227292145742 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SHA256 SSL CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-20 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-25 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein-Westfalen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Guetersloh' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'arvato systems GmbH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'gtlbml3lf0200.bagmail.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29498151043592331171870925674427774533023474038965910087770681332189436295088653106651548341235193726868850318704677432751164312549249846844479893220896266714384346614094226561963698165716333462053758328742433325037767674938157523353250007969011215503951422603554970192939164664114116065069863109641110083173522061679809319699064983348342421634592993019603054291916443616948699538019167513454331705370064673098759050362492692613506459126005353803371732345655737850989052826783870002437967653032995223108780304524689925082414332003445832465097459761607762323952601589579533939319091151634795494374716228739091761098131 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (541 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.bertelsmann.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.arvato.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.bertelsmann.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.bertelsmann.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtlbml3lf0202.bagmail.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.arvatosystems.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.arvato.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.arvato.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.bertelsmann.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtlbml3lf0204.bagmail.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtlbml3lf0205.bagmail.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.bertelsmann.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtlbml3lf0203.bagmail.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.arvatosystems.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtlbml3lf0206.bagmail.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtlbml3lf0201.bagmail.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtlbml3lf0250.bagmail.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.arvato.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.arvatosystems.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtlbml3lf0200.bagmail.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcb.com/gj.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 14678eed834fd61e9d40040c0446a17034b20f72 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcb.com/gj.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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