*.fatebenefratelli-isolatiberina.it

- Casa Generaliz Ordine Osped San Giovanni di Dio Fatebenefratelli -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 28:83:1a:3a:b9:c2:3b:2d:62:43:c4:80:05:4c:53:ea was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Casa Generaliz Ordine Osped San Giovanni di Dio Fatebenefratelli

Organization: Casa Generaliz Ordine Osped San Giovanni di Dio Fatebenefratelli
State / Province: Rome
Locality: Rome
Country: IT

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 28:83:1a:3a:b9:c2:3b:2d:62:43:c4:80:05:4c:53:ea
Serial Number (int): 53849842715237355989013147977679393770
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 72:1a:4c:16:dd:7c:1c:74:c0:7d:ac:72:b6:66:ac:94:59:03:19:c0
Fingerprint (sha256): d2:b3:a0:21:be:6d:fd:84:2f:3d:46:05:7f:6b:fd:f6:8a:47:85:d6:61:27:0e:36:d5:07:f5:c4:fa:e3:ed:1d

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate *.fatebenefratelli-isolatiberina.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.fatebenefratelli-isolatiberina.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.fatebenefratelli-isolatiberina.it
fatebenefratelli-isolatiberina.it

Other certificates including the domain name fatebenefratelli-isolatiberina.it

(limited to 100 certificates)
servizionline.fatebenefratelli-isolatiberina.it
backoffice.fatebenefratelli-isolatiberina.it
www.fatebenefratelli-isolatiberina.it
*.fatebenefratelli-isolatiberina.it
fatebenefratelli-isolatiberina.it
*.fatebenefratelli-isolatiberina.it
*.fatebenefratelli-isolatiberina.it
fatebenefratelli-isolatiberina.it
backoffice.fatebenefratelli-isolatiberina.it
backoffice.fatebenefratelli-isolatiberina.it
fatebenefratelli-isolatiberina.it
*.fatebenefratelli-isolatiberina.it
*.fatebenefratelli-isolatiberina.it
fatebenefratelli-isolatiberina.it
fatebenefratelli-isolatiberina.it
*.fatebenefratelli-isolatiberina.it
www.fatebenefratelli-isolatiberina.it
www.fatebenefratelli-isolatiberina.it
servizionline.fatebenefratelli-isolatiberina.it

Certificate

The complete raw certificate details for *.fatebenefratelli-isolatiberina.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIQKIMaOrnCOy1iQ8SABUxT6jANBgkqhkiG9w0BAQsFADBE
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU
R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTcwMjAxMDAwMDAwWhcNMjAwMjAxMjM1
OTU5WjCBpDELMAkGA1UEBhMCSVQxDTALBgNVBAgMBFJvbWUxDTALBgNVBAcMBFJv
bWUxSTBHBgNVBAoMQENhc2EgR2VuZXJhbGl6IE9yZGluZSBPc3BlZCBTYW4gR2lv
dmFubmkgZGkgRGlvIEZhdGViZW5lZnJhdGVsbGkxLDAqBgNVBAMMIyouZmF0ZWJl
bmVmcmF0ZWxsaS1pc29sYXRpYmVyaW5hLml0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA+u1HTdHIFnti3Jy+PJTEJm12vD/2JltP7U+Q07zemmdth/fp
64dKzOr5++y2RCT4Ks7gw/ViKzxoEVaQA2YYuqU+3CjiA2uJlWHl0KklcDtsRdrF
9pqQxfQRCOFqCNpq6riZQbLlL0TdAFXIP1PCN1TDt7yj5gK5X3AAeBiEWCj+Hl+d
Hi1sE9OdMGWE919H3EiNnG9dDwblMeNJGeorWXCkbCpFpYZby/xx9p89peJMmGIK
7cDuE98Iu5URybtAAuERJiPj7KrlPtVbKu+xgHCsQU3baqY66WTRWFiZZyT00lnd
e+nxSgjhuosRoTIkMLG9MLgEtBDda6N7Qcn0kQIDAQABo4ID0DCCA8wwUQYDVR0R
BEowSIIjKi5mYXRlYmVuZWZyYXRlbGxpLWlzb2xhdGliZXJpbmEuaXSCIWZhdGVi
ZW5lZnJhdGVsbGktaXNvbGF0aWJlcmluYS5pdDAJBgNVHRMEAjAAMA4GA1UdDwEB
/wQEAwIFoDArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8vZ24uc3ltY2IuY29tL2du
LmNybDCBnQYDVR0gBIGVMIGSMIGPBgZngQwBAgIwgYQwPwYIKwYBBQUHAgEWM2h0
dHBzOi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvcmVwb3NpdG9yeS9sZWdh
bDBBBggrBgEFBQcCAjA1DDNodHRwczovL3d3dy5nZW90cnVzdC5jb20vcmVzb3Vy
Y2VzL3JlcG9zaXRvcnkvbGVnYWwwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMB8GA1UdIwQYMBaAFNJv95b0hT9yPDB9I9qFeJujfFp8MFcGCCsGAQUFBwEB
BEswSTAfBggrBgEFBQcwAYYTaHR0cDovL2duLnN5bWNkLmNvbTAmBggrBgEFBQcw
AoYaaHR0cDovL2duLnN5bWNiLmNvbS9nbi5jcnQwggH0BgorBgEEAdZ5AgQCBIIB
5ASCAeAB3gB1AN3rHSt6DU+mIIuBrYFocH4ujp0B1VyIjT0RxM227L7MAAABWfjL
kNkAAAQDAEYwRAIgLUvFOsNP9thJ+R1GwucoC0odCe5HmQvdUKNswNW6+qECIDrQ
NZXuBxJB5NzZINYnxiyu2OjAukGQN4jDkVzl4lVhAHYApLkJkLQYWBSHuxOizGdw
Cjw1mAT5G9+443fNDsgN3BAAAAFZ+MuRFAAABAMARzBFAiBQJtbQ2wOCXRoZsa9y
0AFmCo4zqdNgbYYcjrZQe9acDAIhAPZdJDEf1n3FwU+CJBY3jg4PWytr33CPybJN
nBn7SnN7AHUA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo/csAAAFZ+MuS
1QAABAMARjBEAiByb387pjy/59pC//hvBtmWNd/1tbymWivtk93tfpqiRgIgNQfn
JO2LRABixYZXonjTiXNvzWTGPUkQY1rrwF4F3QwAdgC8eOHfxfY8aEZJM02hD6Ff
CXlpIAnAgbTz9pF/Ptm4pQAAAVn4y5HKAAAEAwBHMEUCIQDXsshrHZTZgANgE2fg
IfSrHcZZUTZANjV7Z7LSmli4KgIgGr9jhaSZ3nG3lktVHcYJYBZQ7FDSjb3jlwm5
GLPfzDgwDQYJKoZIhvcNAQELBQADggEBAMFQ+WeK8e4GXiXE0drvT+Bq6kMAwZF6
pF3yfa7UXfF+TRrc+fAIG9spj5Rp3BCyp1yC4c49mkc+OgoSWSHPtEAlTTb9f/uD
CGLKLSWf71s03Z8Yk0LsNpn20DIXupEyjhWpJyvLsD5SkVyivRhcEmFkBefIIeGn
lGQ3KzcBW3VKxTX2NBK6xu8wa+KV9dgUBcnl4nyz53O4JSF3g0W/UevlQ7m1TmiN
SuTmjeDnyecE+92eVscjl20Ofyjxbpy+Jc4cFoGhsOgnf8Rxj5AI0F7ZfMOZpQcC
clE0sc7/hdTsw/ErZ1WSUQEDuTKv1xzAT7hN0IG8f6IHKYW6A3h8EGs=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+u1HTdHIFnti3Jy+PJTE
Jm12vD/2JltP7U+Q07zemmdth/fp64dKzOr5++y2RCT4Ks7gw/ViKzxoEVaQA2YY
uqU+3CjiA2uJlWHl0KklcDtsRdrF9pqQxfQRCOFqCNpq6riZQbLlL0TdAFXIP1PC
N1TDt7yj5gK5X3AAeBiEWCj+Hl+dHi1sE9OdMGWE919H3EiNnG9dDwblMeNJGeor
WXCkbCpFpYZby/xx9p89peJMmGIK7cDuE98Iu5URybtAAuERJiPj7KrlPtVbKu+x
gHCsQU3baqY66WTRWFiZZyT00lnde+nxSgjhuosRoTIkMLG9MLgEtBDda6N7Qcn0
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 53849842715237355989013147977679393770
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rome'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rome'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Casa Generaliz Ordine Osped San Giovanni di Dio Fatebenefratelli'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.fatebenefratelli-isolatiberina.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31676582646128286694178384446170327435109490507504077119548474249949991175284809988053286923590814599596057518697894653139668012696046460007495287353530231616873337114216941303682833172371522176414031881891594200028665063950063044578925567231987846067490553074486679712488778668048450534716138406422397414516075360963944755711100918446964483754904663840031728723415410752800679944445633489223090975656126204697480978269037264276530579665546068573582955918555845440453768376382365317548316185246091543042535983382618501159064758390028040855853592716536971487379502061631515929851040149187370602040983100557992223437969
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fatebenefratelli-isolatiberina.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatebenefratelli-isolatiberina.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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