www.lefrecce.it
- TRENITALIA S.p.A. -
Issued by GeoTrust SSL CA - G3
About this certificate
This digital certificate with serial number 5a:37:af:9e:67:80:54:61:18:47:13:f9:3d:52:ee:c0 was issued on by GeoTrust Inc..
With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
TRENITALIA S.p.A.
Organization:
TRENITALIA S.p.A.
Organization unit: TRENITALIA S.p.A.
Organization unit: TRENITALIA S.p.A.
State / Province:
Roma
Locality: Roma
Country: IT
Locality: Roma
Country: IT
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 5a:37:af:9e:67:80:54:61:18:47:13:f9:3d:52:ee:c0Serial Number (int): 119919657919624257363378683026749976256
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c
Fingerprint (sha1): 1c:cc:97:81:1f:1d:c2:38:05:78:f1:0d:87:25:7d:65:59:fd:30:52
Fingerprint (sha256): d6:58:62:17:eb:a3:c4:77:9a:b0:90:6e:22:dc:4e:a4:87:e1:68:21:4b:28:a9:ba:f4:5c:db:83:69:1d:c3:a1
Issuing Certificate URL: http://gn.symcb.com/gn.crt
Revocation information
OCSP Server: http://gn.symcd.comCRL Distribution Point: http://gn.symcb.com/gn.crl
Check the revocation status for certificate www.lefrecce.it
10
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.lefrecce.it
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
italyinmotion.it
www.italyinmotion.it
italyinmotion.com
www.italyinmotion.com
www.italyinmotion.eu
italyinmotion.eu
www.thello.fr
thello.fr
lefrecce.it
www.lefrecce.it
www.italyinmotion.it
italyinmotion.com
www.italyinmotion.com
www.italyinmotion.eu
italyinmotion.eu
www.thello.fr
thello.fr
lefrecce.it
www.lefrecce.it
Other certificates including the domain name lefrecce.it
(limited to 100 certificates)
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
be.lefrecce.it
sni.cloudflaressl.com
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
app.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
extvpn01.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
be.lefrecce.it
www.lefrecce.it
*.lefrecce.it
www.lefrecce.it
www.lefrecce.it
app.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
sni.cloudflaressl.com
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
*.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
be.lefrecce.it
sni.cloudflaressl.com
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
app.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
extvpn01.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
be.lefrecce.it
www.lefrecce.it
*.lefrecce.it
www.lefrecce.it
www.lefrecce.it
app.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
sni.cloudflaressl.com
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
www.lefrecce.it
*.lefrecce.it
Certificate
The complete raw certificate details for www.lefrecce.it in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHFTCCBf2gAwIBAgIQWjevnmeAVGEYRxP5PVLuwDANBgkqhkiG9w0BAQsFADBE MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTYxMjE0MDAwMDAwWhcNMTgwMzE1MjM1 OTU5WjB9MQswCQYDVQQGEwJJVDENMAsGA1UECAwEUm9tYTENMAsGA1UEBwwEUm9t YTEaMBgGA1UECgwRVFJFTklUQUxJQSBTLnAuQS4xGjAYBgNVBAsMEVRSRU5JVEFM SUEgUy5wLkEuMRgwFgYDVQQDDA93d3cubGVmcmVjY2UuaXQwggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQDAQpD5Ehc+xd2+ozoxZ0VhvwXSbDRkNjRuGEgi ntWdgCb2h6D0yTMuCK0gW47ehJbpIyP6Ho1OaCAROOXrpqSZcFfiIGRrwjvOLebH 990gMaXRSPRvqS8FL7pM7UIr9nOQTn+yVsn5Xb18pxio4i1aJDtT7Thh2UEvBB+m Edx0TkIGG8OML1EWe2IRw6irLFDoCA8gwvs3dz7vQnpzx7JFzCwpG4U1hbg2fNVZ JcmcykD+ehZiXnqZhM8oKlBkoVkNilIbTrnXRVvSqGvnuxCQkKTpxeAahIzO3SN0 lhYaRZSD/iZP+LiJBcTM2vELFVFpmjxDuos1bsVWpxCdXDOjAgMBAAGjggPIMIID xDCBvQYDVR0RBIG1MIGyghBpdGFseWlubW90aW9uLml0ghR3d3cuaXRhbHlpbm1v dGlvbi5pdIIRaXRhbHlpbm1vdGlvbi5jb22CFXd3dy5pdGFseWlubW90aW9uLmNv bYIUd3d3Lml0YWx5aW5tb3Rpb24uZXWCEGl0YWx5aW5tb3Rpb24uZXWCDXd3dy50 aGVsbG8uZnKCCXRoZWxsby5mcoILbGVmcmVjY2UuaXSCD3d3dy5sZWZyZWNjZS5p dDAJBgNVHRMEAjAAMA4GA1UdDwEB/wQEAwIFoDArBgNVHR8EJDAiMCCgHqAchhpo dHRwOi8vZ24uc3ltY2IuY29tL2duLmNybDCBnQYDVR0gBIGVMIGSMIGPBgZngQwB AgIwgYQwPwYIKwYBBQUHAgEWM2h0dHBzOi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNv dXJjZXMvcmVwb3NpdG9yeS9sZWdhbDBBBggrBgEFBQcCAjA1DDNodHRwczovL3d3 dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL3JlcG9zaXRvcnkvbGVnYWwwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFNJv95b0hT9yPDB9 I9qFeJujfFp8MFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDovL2du LnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL2duLnN5bWNiLmNvbS9nbi5j cnQwggF/BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB3AN3rHSt6DU+mIIuBrYFocH4u jp0B1VyIjT0RxM227L7MAAABWP0dRToAAAQDAEgwRgIhAPMTleZFTqnneL53wWv9 CPl63O/JHEkSn+v1atZmA64HAiEA+SrHskO+q5lkE4Izv+psCuplBQYlV9ymo2Mo Dl59DYwAdgDuS723dc5guuFCaR+r4Z5mow9+X7By2IMAxHuJeqj9ywAAAVj9HUWM AAAEAwBHMEUCIADFaRe+ikOWoQx+HEPR747tRpJe+ymCtDdXXikrgYd1AiEA39CD 2AtjOt+6NaQNGS2rMXEGWYUFbjLryijnlk/SkYEAdgC8eOHfxfY8aEZJM02hD6Ff CXlpIAnAgbTz9pF/Ptm4pQAAAVj9HUYtAAAEAwBHMEUCIAWU8WmUuZXsdHR5cwKC ptHyWl+Z3MoBL3uvavV4nVcrAiEAqOTHlCvB2y9Wb3v734RD15DWsMLUsDnK3jd9 Fx4zsjYwDQYJKoZIhvcNAQELBQADggEBAMTZHynux5YaNbqbbTuttlNvEVK85qHQ 0XJtI3mqsDJB/EwyPtt9q5e2PzGkRlLa48isW7R7MrqylwTyQAJ2uHArw2mj678y 9XQGzJSkh2DyENDIBRzTMmCcjJxIi865/6fXUHQ50GDmjK8OvlKO5C4ZslgHrdoZ SuFczxNlj/RNSwKbbfq6eU1fHzrS1Yx/tEUMmFiz6ZiNyu9YzGGA2tDAaBdw5FSf +lBQH/DtClzVetaIElqOw1ZQj/o2LbVdoLlkpdJXmjTN3A5xUjBEB4ms/BZf8/xf ojJHn+HWXLWx7O7SFsp78HTwkLoeSiOU9YuxYeqjywRN/FNYMjdQi6Y= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEKQ+RIXPsXdvqM6MWdF Yb8F0mw0ZDY0bhhIIp7VnYAm9oeg9MkzLgitIFuO3oSW6SMj+h6NTmggETjl66ak mXBX4iBka8I7zi3mx/fdIDGl0Uj0b6kvBS+6TO1CK/ZzkE5/slbJ+V29fKcYqOIt WiQ7U+04YdlBLwQfphHcdE5CBhvDjC9RFntiEcOoqyxQ6AgPIML7N3c+70J6c8ey RcwsKRuFNYW4NnzVWSXJnMpA/noWYl56mYTPKCpQZKFZDYpSG06510Vb0qhr57sQ kJCk6cXgGoSMzt0jdJYWGkWUg/4mT/i4iQXEzNrxCxVRaZo8Q7qLNW7FVqcQnVwz owIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 119919657919624257363378683026749976256 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-14 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-15 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Roma' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Roma' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TRENITALIA S.p.A.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TRENITALIA S.p.A.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.lefrecce.it' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24270579619675046942196663134894953878906910765410713744270588520120686391596907290460115391205656312347658716628330363260287337923442213550263869759267717585999142026897269406919869002055309077519292782252751765877412078791502118688100674828620802131117092165149730669836022585773854584501764505875704460160443524739241956282183205578356994942212526790419613718911856574003244259438918817536312038384629438610526656888475383081668867370807668035188155902426599505095161997475434867393133450392372852158689542920590022729817065673576369338014321506036633243181483912121519474401145587389233915891930643327027192279971 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (181 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'italyinmotion.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.italyinmotion.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'italyinmotion.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.italyinmotion.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.italyinmotion.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'italyinmotion.eu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thello.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thello.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lefrecce.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lefrecce.it' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00c4d91f29eec7961a35ba9b6d3badb6536f1152bce6a1d0d1726d2379aab03241fc4c323edb7dab97b63f31a44652dae3c8ac5bb47b32bab29704f2400276b8702bc369a3ebbf32f57406cc94a48760f210d0c8051cd332609c8c9c488bceb9ffa7d7507439d060e68caf0ebe528ee42e19b25807adda194ae15ccf13658ff44d4b029b6dfaba794d5f1f3ad2d58c7fb4450c9858b3e9988dcaef58cc6180dad0c0681770e4549ffa50501ff0ed0a5cd57ad688125a8ec356508ffa362db55da0b964a5d2579a34cddc0e715230440789acfc165ff3fc5fa232479fe1d65cb5b1eceed216ca7bf074f090ba1e4a2394f58bb161eaa3cb044dfc53583237508ba6