crm.pensplan.com

- Pensplan Centrum S.p.A. -

Issued by GeoTrust SSL CA - G2

About this certificate

This digital certificate with serial number 76:a1:66:9d:43:e9:96:ad:12:5c:09:96:c6:95:e6:38 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Pensplan Centrum S.p.A.

Organization: Pensplan Centrum S.p.A.
Organization unit: IT
State / Province: Bolzano
Locality: Bolzano
Country: IT

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 76:a1:66:9d:43:e9:96:ad:12:5c:09:96:c6:95:e6:38
Serial Number (int): 157686944562463154382309314162639365688
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 11:4a:d0:73:39:d5:5b:69:08:5c:ba:3d:bf:64:9a:a8:8b:1c:55:bc

Fingerprint (sha1): 57:cf:c9:3d:f3:77:b8:be:2d:29:58:a5:16:84:08:cd:68:48:84:7d
Fingerprint (sha256): d2:16:71:b4:c3:50:58:0d:1d:f8:65:60:9a:f1:03:c9:b4:20:ea:16:d8:20:25:3f:b4:98:6a:f4:cd:b0:01:38

Issuing Certificate URL: http://gb.symcb.com/gb.crt

Revocation information

OCSP Server: http://gb.symcd.com
CRL Distribution Point: http://gb.symcb.com/gb.crl

Check the revocation status for certificate crm.pensplan.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for crm.pensplan.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

crm.pensplan.com

Other certificates including the domain name pensplan.com

(limited to 100 certificates)
segnalazioni.pensplan.com
whistleblowing.mairetecnimont.com
segnalazioni.pensplan.com
www.pensplan.com
whistleblowing.giustizia.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
segnalazioni.pensplan.com
academy.pensplan.com
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
segnalazioni.pensplan.com
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
*.pensplan.com
segnalazioni.pensplan.com
whistleblowing.giustizia.it
*.pensplan.com
whistleblowing.giustizia.it
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
borgwarnerbrossysystemitaly.wbisweb.it
segnalazioni.pensplan.com
*.pensplan.com
*.pensplan.com
borgwarnerbrossysystemitaly.wbisweb.it
borgwarnerbrossysystemitaly.wbisweb.it
segnalazioni.pensplan.com
*.pensplan.com
academy.pensplan.com
whistleblowing.giustizia.it
www.pensplan.com
whistleblowing.giustizia.it
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
www.pensplan.com
www.pensplan.com
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
segnalazioni.pensplan.com
segnalazioni.pensplan.com
borgwarnerbrossysystemitaly.wbisweb.it
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
segnalazioni.pensplan.com
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
segnalazioni.pensplan.com
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
*.pensplan.com
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
segnalazioni.pensplan.com
whistleblowing.giustizia.it
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.mairetecnimont.com
borgwarnerbrossysystemitaly.wbisweb.it
crm.pensplan.com
segnalazioni.pensplan.com
whistleblowing.giustizia.it
segnalazioni.pensplan.com
*.pensplan.com
segnalazioni.pensplan.com
academy.pensplan.com
whistleblowing.giustizia.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
borgwarnerbrossysystemitaly.wbisweb.it
whistleblowing.giustizia.it
whistleblowing.giustizia.it
segnalazioni.pensplan.com

Certificate

The complete raw certificate details for crm.pensplan.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE7TCCA9WgAwIBAgIQdqFmnUPplq0SXAmWxpXmODANBgkqhkiG9w0BAQUFADBE
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU
R2VvVHJ1c3QgU1NMIENBIC0gRzIwHhcNMTUxMTA2MDAwMDAwWhcNMTYxMTA1MjM1
OTU5WjB7MQswCQYDVQQGEwJJVDEQMA4GA1UECBMHQm9semFubzEQMA4GA1UEBxQH
Qm9semFubzEgMB4GA1UEChQXUGVuc3BsYW4gQ2VudHJ1bSBTLnAuQS4xCzAJBgNV
BAsUAklUMRkwFwYDVQQDFBBjcm0ucGVuc3BsYW4uY29tMIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEAsMX6MgYHo4pLzFz+SUYRCknI3tDoZd4JuhFM95DV
Apjg1Mo3HWEP2ijEtyrb8qSHfLCoplSwsbd7vJzKPgEu77/hGDUtZHa9n2lYyytO
uEh+B3Um2NVlcw1e63sPy2OTift8i4fF/s18cC/LkmNgbs5ObtPwvjkg2tKf55eN
idDpMmRGetIUKO6sEk7kgfn4+26SRtzDNyb38I9bXen9+lSsDdaadS+xfthRawbc
waYnlP1VtQ5AprFsgrmPYliAzbi1i9N53DgrR84c5qJt8LluRcSc/MtN5fH22a2v
2slP9Vj58aQnskREMAOC6MpNuI0vQsVPCiVml+MKR9pGdwIDAQABo4IBojCCAZ4w
GwYDVR0RBBQwEoIQY3JtLnBlbnNwbGFuLmNvbTAJBgNVHRMEAjAAMA4GA1UdDwEB
/wQEAwIFoDArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8vZ2Iuc3ltY2IuY29tL2di
LmNybDCBnQYDVR0gBIGVMIGSMIGPBgZngQwBAgIwgYQwPwYIKwYBBQUHAgEWM2h0
dHBzOi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvcmVwb3NpdG9yeS9sZWdh
bDBBBggrBgEFBQcCAjA1DDNodHRwczovL3d3dy5nZW90cnVzdC5jb20vcmVzb3Vy
Y2VzL3JlcG9zaXRvcnkvbGVnYWwwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMB8GA1UdIwQYMBaAFBFK0HM51VtpCFy6Pb9kmqiLHFW8MFcGCCsGAQUFBwEB
BEswSTAfBggrBgEFBQcwAYYTaHR0cDovL2diLnN5bWNkLmNvbTAmBggrBgEFBQcw
AoYaaHR0cDovL2diLnN5bWNiLmNvbS9nYi5jcnQwDQYJKoZIhvcNAQEFBQADggEB
AA/FgUmYIGD77ZoMJTp6kk+Eo2i0nH9vFQSgVVpsgm3TbJsRg9P/wKHGgIK8201z
2d9YIs4HNJg8nJU7+TpAkfqYKD4pUzlp+KKdhcPqCqH50vRctx+0rhsE22bIM7wK
RQ3eWUXyH5tWfy4iIBoE7mol2e+yaGFr/CHU3PwhmjNLnt81Vu70wI4W05SPLddk
u7LxaCEa4TQrvhvF1xex8XDDvAV9nc4QqXX/zQui7fGPwezV6NUtkwzRGNXWLgpR
kwjW8QPebdkeMzqtbU1jbMvN+tVIy4ZHZ1O9WP9GFEsX0y+T8VEOyGHZzXil4lOd
oKnameo8MZkXvLCES0CV6Mw=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMX6MgYHo4pLzFz+SUYR
CknI3tDoZd4JuhFM95DVApjg1Mo3HWEP2ijEtyrb8qSHfLCoplSwsbd7vJzKPgEu
77/hGDUtZHa9n2lYyytOuEh+B3Um2NVlcw1e63sPy2OTift8i4fF/s18cC/LkmNg
bs5ObtPwvjkg2tKf55eNidDpMmRGetIUKO6sEk7kgfn4+26SRtzDNyb38I9bXen9
+lSsDdaadS+xfthRawbcwaYnlP1VtQ5AprFsgrmPYliAzbi1i9N53DgrR84c5qJt
8LluRcSc/MtN5fH22a2v2slP9Vj58aQnskREMAOC6MpNuI0vQsVPCiVml+MKR9pG
dwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 157686944562463154382309314162639365688
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bolzano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Bolzano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Pensplan Centrum S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'crm.pensplan.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22315567931958197116758502765550551773113605667208586539757632717459923161117683441162108309190939237532142799804267569140143812248669122452674864587549141504882338141500781029803396775542720944726894858196351538658448502801330994248984926782036094458659191256008811657994972742658657172369414047443285639955492732362780984926392826553331477875383500497824803875122093397464006560564934881204852073412440893527402806501189434976082891664240880953018130726874213487123831767999763699452773768877168557283802130936405604182345064859354961187972873707202827210325019745460731088729635842222763981352930508866046528210551
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.pensplan.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gb.symcb.com/gb.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 114ad07339d55b69085cba3dbf649aa88b1c55bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gb.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gb.symcb.com/gb.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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