lync.bilfinger.net

- Bilfinger SE -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 30:a1:a1:62:fa:90:e8:ff:02:b8:24:6d:65:80:c5:77 was issued on by GeoTrust Inc..

With 43 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Bilfinger SE

Organization: Bilfinger SE
State / Province: Baden-Wuerttemberg
Locality: Mannheim
Country: DE

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 30:a1:a1:62:fa:90:e8:ff:02:b8:24:6d:65:80:c5:77
Serial Number (int): 64642176901752621530919973449266939255
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 61:6c:5a:5e:b5:5f:0e:c3:03:e5:f0:27:9b:13:aa:a6:5f:b6:c9:e6
Fingerprint (sha256): e7:5a:17:df:bb:f1:56:65:2a:ae:55:b3:3b:77:76:4d:9a:09:f4:2c:f2:67:b9:d0:7e:23:fc:09:f5:69:95:e5

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate lync.bilfinger.net

43

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lync.bilfinger.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lyncsipinternal.envi-con.de
sip.envi-con.de
lyncdiscover.envi-con.de
lyncdiscoverinternal.envi-con.de
sip.bebit.de
lyncsipinternal.bebit.de
lyncdiscoverinternal.bebit.de
lyncdiscover.bebit.de
lyncsipinternal.geraete.com
sip.geraete.com
lyncdiscover.geraete.com
lyncdiscoverinternal.geraete.com
dedc1ls0002.res1.rlaone.net
dedc1ls9002.res1qa.rlaone.net
lyncowas.res1.rlaone.net
s001-01-00558.res1.rlaone.net
lyncowas.res1qa.rlaone.net
s001-01-00555.res1.rlaone.net
dedc1ls0001.res1.rlaone.net
s001-01-00557.res1.rlaone.net
s001-01-00543.res1.rlaone.net
dedc1ls9001.res1qa.rlaone.net
s001-01-00556.res1.rlaone.net
lyncdiscoverinternal.hsgzander.at
sip.hsgzander.at
lyncsipinternal.hsgzander.at
lyncdiscover.hsgzander.at
sip.johnsonscreens.com
lyncsipinternal.johnsonscreens.com
lyncdiscover.johnsonscreens.com
lyncdiscoverinternal.johnsonscreens.com
lyncdiscover.bilfinger.com
lyncsipinternal.bilfinger.com
sip.bilfinger.com
bilfinger.com
lyncdiscoverinternal.bilfinger.com
lyncwebexternal.bilfinger.net
lyncedgeinternal.bilfinger.net
lyncpool01.bilfinger.net
lyncowas-external.bilfinger.net
lyncwebconferencing.bilfinger.net
lyncwebinternal.bilfinger.net
lync.bilfinger.net

Other certificates including the domain name bilfinger.net

(limited to 100 certificates)
mdm.bilfinger.net
proarc.bilfinger.net
auth.bilfinger.net
standards.bilfinger.net
wms.bilfinger.net
sd-is-usa.bilfinger.net
mdmemailqa.bilfinger.net
*.spa.bilfinger.net
iscloud.bilfinger.net
filebox2.bilfinger.net
auth.bilfinger.net
vpn.evry.com
q14-cc.sap.bilfinger.net
csi-sts.bbps.bilfinger.net
whl.bilfinger.net
medialibrary.bilfinger.net
envicloud.bilfinger.net
filebox.bilfinger.net
knowledgetest.bilfinger.net
asp.bilfinger.net
sharepoint.bilfinger.net
wdsc14.sap.bilfinger.net
mdmqa.bilfinger.net
fscloud.bilfinger.net
ssrs-proxy.auth.bilfinger.net
mycitrix.bilfinger.net
login.bilfinger.net
fscloud.bilfinger.net
oos.bilfinger.net
i-doit.bilfinger.net
lync.bilfinger.net
bea.bilfinger.net
vpn.evry.com
bld.bilfinger.net
templogin.bilfinger.net
betriebsvereinbarung-informationssysteme.bilfinger.net
login.bilfinger.net
wdsp14.sap.bilfinger.net
mdmemail.bilfinger.net
storefrontqa.bilfinger.net
academy-elearning-test.bilfinger.net
di1-cc.sap.bilfinger.net
*.bilfinger.com
teams.bilfinger.net
bi.bilfinger.net
ssc-service-reporting.bilfinger.net
wdsq14.sap.bilfinger.net
jabis.bilfinger.net
fscloud.bilfinger.net
mycitrixqa.bilfinger.net
autodiscover.bilfinger.net
mclug.bilfinger.net
*.shield.bilfinger.net
mdm.bilfinger.net
di3-cc.sap.bilfinger.net
academy.bilfinger.net
edge.bilfinger.net
pmo.bilfinger.net
bsfm-ftp.bilfinger.net
csi-sts.bbps.bilfinger.net
*.bilfinger.com
medialibrary.bilfinger.net
*.cloudapps.bilfinger.net
applications.bilfinger.net
webapps.bilfinger.net
my.bilfinger.net
mdm.bilfinger.net
mdmqa.bilfinger.net
webapps.bilfinger.net
p14-cc.sap.bilfinger.net
academy-elearning.bilfinger.net
csi-sts.bb.bilfinger.net
academy.bilfinger.net
filebox2.bilfinger.net
*.nav.bilfinger.net
mycitrix.bilfinger.net
teams.bilfinger.net
find.bilfinger.net
csi-sts.bb.bilfinger.net
siem.bilfinger.net
mclut.bilfinger.net
*.cloudappsqa.bilfinger.net
academy-test.bilfinger.net
www.identify-fs.bilfinger.com
login.bilfinger.net
iscloud.bilfinger.net
csi-sts.bhr.bilfinger.net
envicloud.bilfinger.net
gtc.bilfinger.net
filebox2.bilfinger.net
gcp-apps.bilfinger.net
q17-cc.sap.bilfinger.net
puma.bilfinger.net
academy.bilfinger.net
nsg.bilfinger.net
i-doit-test.bilfinger.net
vpn.evry.com
filebox.bilfinger.net
*.gcp-apps.bilfinger.net
bmcloud.bilfinger.net

Certificate

The complete raw certificate details for lync.bilfinger.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA116Ejm2Oda0Xymf0XYGa
Z4Jd6iZPNTpbOD+97CkVEpta9woWiMchOPJtnhhng80+DXmVpMOKZ0MWHT31dmyJ
0TFIllsmgYsOrdvNGxHiS9QVrOpXchM9c13psXQv00/tJSVIrHK01+X9ESIdYhl8
odgsTnmxefXK0dbU5K/5iRcGcxhFKn9ZbTGMf8vYApofKsiky0GtQUmC2ABz+HGr
RgguhTg3R/IJ+znJ0h57L+3rer/m5YrcYNiWPkj8RzHsP+a7ZukCOCUu4Kv89tRb
GK7PnyEPhWqzQNBaxy4ZIeRwFTMqtI1AGz68O+9kZspUtXztaxh7chLjoJzEkggt
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 64642176901752621530919973449266939255
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Mannheim'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Bilfinger SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'lync.bilfinger.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27187844031154767820237671267500278831391080572264818617076376565010926623556877886791690459684390061568989743636545882771745700126351089254624325782769806688536095397737386767066265414115102469136097943328944923870663261846221206575319116320150162025422908097974402581525379493021844092520788975570620089850434739032558194195428413685353530768888779478841052700925758740483030181735984225643146481734680914509319692833062460475154583631903261583230707856201202053195388689567307730201023399717558910033246513407488256486922374104132130324190428075189574317686686495081438467934984703442499788368888333793672491970041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1220 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncsipinternal.envi-con.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.envi-con.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.envi-con.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.envi-con.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.bebit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncsipinternal.bebit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.bebit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.bebit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncsipinternal.geraete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.geraete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.geraete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.geraete.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dedc1ls0002.res1.rlaone.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dedc1ls9002.res1qa.rlaone.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncowas.res1.rlaone.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's001-01-00558.res1.rlaone.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncowas.res1qa.rlaone.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's001-01-00555.res1.rlaone.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dedc1ls0001.res1.rlaone.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's001-01-00557.res1.rlaone.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's001-01-00543.res1.rlaone.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dedc1ls9001.res1qa.rlaone.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's001-01-00556.res1.rlaone.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.hsgzander.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.hsgzander.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncsipinternal.hsgzander.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.hsgzander.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.johnsonscreens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncsipinternal.johnsonscreens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.johnsonscreens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.johnsonscreens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.bilfinger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncsipinternal.bilfinger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.bilfinger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bilfinger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.bilfinger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncwebexternal.bilfinger.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncedgeinternal.bilfinger.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncpool01.bilfinger.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncowas-external.bilfinger.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncwebconferencing.bilfinger.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncwebinternal.bilfinger.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lync.bilfinger.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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