www.vipallinclusive.com

- QUBE Group a.s. -

Issued by GeoTrust Extended Validation SHA256 SSL CA

About this certificate

This digital certificate with serial number 62:87:fe:7c:33:cd:6b:48:11:0e:ad:e6:9c:0a:6e:18 was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

QUBE Group a.s.

Company registration number: 47 593 172
Organization: QUBE Group a.s.
Organization unit: Information Technology
State / Province: Slovenská republika
Locality: Bratislava-Staré Mesto
Country: SK

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 62:87:fe:7c:33:cd:6b:48:11:0e:ad:e6:9c:0a:6e:18
Serial Number (int): 130970465235187508484008201912389889560
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 17:b8:dc:aa:b1:53:22:19:41:95:7b:3c:81:ea:88:9b:49:c3:a2:8b

Fingerprint (sha1): b2:1a:7c:68:a0:5d:6f:72:94:4d:26:58:2d:1c:13:8f:87:2c:4e:f5
Fingerprint (sha256): e9:7f:20:eb:f7:32:ef:22:74:53:ed:28:3e:02:02:2a:a5:44:f3:2f:e3:6a:eb:e4:e9:be:eb:59:c0:fe:cd:e2

Issuing Certificate URL: http://gk.symcb.com/gk.crt

Revocation information

OCSP Server: http://gk.symcd.com
CRL Distribution Point: http://gk.symcb.com/gk.crl

Check the revocation status for certificate www.vipallinclusive.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.vipallinclusive.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.vipallinclusive.com
vipallinclusive.com

Other certificates including the domain name vipallinclusive.com

(limited to 100 certificates)
dev.vipallinclusive.com
cloud.vipallinclusive.com
analytics.vipallinclusive.com
analytics.vipallinclusive.com
dev.vipallinclusive.com
app.vipallinclusive.com
dev.vipallinclusive.com
analytics.vipallinclusive.com
dev.vipallinclusive.com
dev.vipallinclusive.com
dev.vipallinclusive.com
analytics.vipallinclusive.com
app.vipallinclusive.com
app.vipallinclusive.com
dev.vipallinclusive.com
www.vipallinclusive.com
analytics.vipallinclusive.com
dev.vipallinclusive.com
dev.vipallinclusive.com
app.vipallinclusive.com
app.vipallinclusive.com
analytics.vipallinclusive.com
analytics.vipallinclusive.com
dev.vipallinclusive.com
app.vipallinclusive.com
dev.vipallinclusive.com
analytics.vipallinclusive.com
analytics.vipallinclusive.com
dev.vipallinclusive.com
analytics.vipallinclusive.com
www.vipallinclusive.com
app.vipallinclusive.com
dev.vipallinclusive.com
app.vipallinclusive.com
analytics.vipallinclusive.com
app.vipallinclusive.com
analytics.vipallinclusive.com
cloud.vipallinclusive.com
app.vipallinclusive.com
dev.vipallinclusive.com
dev.vipallinclusive.com
analytics.vipallinclusive.com
dev.vipallinclusive.com
autoconfig.vipallinclusive.com
cloud.vipallinclusive.com
analytics.vipallinclusive.com
dev.vipallinclusive.com
dev.vipallinclusive.com
dev.vipallinclusive.com
analytics.vipallinclusive.com
cloud.vipallinclusive.com
app.vipallinclusive.com
cloud.vipallinclusive.com
app.vipallinclusive.com
analytics.vipallinclusive.com
analytics.vipallinclusive.com
analytics.vipallinclusive.com
analytics.vipallinclusive.com
dev.vipallinclusive.com
analytics.vipallinclusive.com
analytics.vipallinclusive.com
www.vipallinclusive.com
analytics.vipallinclusive.com
app.vipallinclusive.com
dev.vipallinclusive.com
analytics.vipallinclusive.com
cloud.vipallinclusive.com
vipallinclusive.com
www.vipallinclusive.com
www.vipallinclusive.com
vipallinclusive.com
cloud.vipallinclusive.com
dev.vipallinclusive.com
analytics.vipallinclusive.com
cloud.vipallinclusive.com
git.vipallinclusive.com

Certificate

The complete raw certificate details for www.vipallinclusive.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIJzCCBw+gAwIBAgIQYof+fDPNa0gRDq3mnApuGDANBgkqhkiG9w0BAQsFADBa
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEzMDEGA1UEAxMq
R2VvVHJ1c3QgRXh0ZW5kZWQgVmFsaWRhdGlvbiBTSEEyNTYgU1NMIENBMB4XDTE2
MDMyMjAwMDAwMFoXDTE4MDQyMTIzNTk1OVowgfQxEzARBgsrBgEEAYI3PAIBAxMC
U0sxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYDVQQFEwo0NyA1
OTMgMTcyMQswCQYDVQQGEwJTSzEdMBsGA1UECAwUU2xvdmVuc2vDoSByZXB1Ymxp
a2ExIDAeBgNVBAcMF0JyYXRpc2xhdmEtU3RhcsOpIE1lc3RvMRgwFgYDVQQKDA9R
VUJFIEdyb3VwIGEucy4xHzAdBgNVBAsMFkluZm9ybWF0aW9uIFRlY2hub2xvZ3kx
IDAeBgNVBAMMF3d3dy52aXBhbGxpbmNsdXNpdmUuY29tMIICIjANBgkqhkiG9w0B
AQEFAAOCAg8AMIICCgKCAgEAvs2bYbaBEaLIWXzgnRxPntDrlVAJxFDa0sLNl/kS
2TPC6TIpmr5Mh5tiVxjf/mf4vpSsvitlZNxa1M+opkOfdqsGUQHNxlqOhjIVJj5g
qjJi9n7WXBk6FDEus+eb6U1M4YteHqUmBMkXR1XtJFRaiVTx7uHHhz1+tGNcsL4w
vufgaukGlTpiM0u0BZpXW/6aKnBpSdJ1zb3LLcx6UqKx0OGBlfyZouHOCQfjSp41
/dNgqVZU0xaNx7terBhxjHbxEgKnsrHWtP5nFMIGiDRVU2qyFC/VM+jFK9iNzhJ5
1w9EtCCCSirbuhxSAGMmUQvlKgl5At32h4mXLAXvopliLGN3Khy7fYYxDtAl/PKz
1LCPM8oQOOORCoxRyRSaWRYx5geRBguO0KcMONAgBTddwk6ALBcrKWCA4wrR6J3P
I6lV3ZgUmp0G7tjnrolE7CjOWwymng6hAQ6hy3oIZ4z37GbttbCYyaGxZVhlST2r
tEOEVvlv2lR/S6j06pqrgMLqt9PM4PJ89GXRP5IE+MCiVu70r+sMUX2Cp+/uc+vb
G95c1cxTAuAbMiE249Q2ZCLnwT2amLS4p1qjz1i2bJ4A82VQAHAZ0XJYoH4k8YSg
UGGEeOjoUG6r8I2fuRyyW++rVpb9GUVXY19pmdfWs9L8EkVOmRsOjwO63tlyclMk
VB0CAwEAAaOCA0wwggNIMDcGA1UdEQQwMC6CF3d3dy52aXBhbGxpbmNsdXNpdmUu
Y29tghN2aXBhbGxpbmNsdXNpdmUuY29tMAkGA1UdEwQCMAAwDgYDVR0PAQH/BAQD
AgWgMCsGA1UdHwQkMCIwIKAeoByGGmh0dHA6Ly9nay5zeW1jYi5jb20vZ2suY3Js
MIGpBgNVHSAEgaEwgZ4wgZIGCSsGAQQB8CIBBjCBhDA/BggrBgEFBQcCARYzaHR0
cHM6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9yZXBvc2l0b3J5L2xlZ2Fs
MEEGCCsGAQUFBwICMDUMM2h0dHBzOi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJj
ZXMvcmVwb3NpdG9yeS9sZWdhbDAHBgVngQwBATAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwHwYDVR0jBBgwFoAUF7jcqrFTIhlBlXs8geqIm0nDooswVwYI
KwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8vZ2suc3ltY2QuY29tMCYG
CCsGAQUFBzAChhpodHRwOi8vZ2suc3ltY2IuY29tL2drLmNydDCCAX4GCisGAQQB
1nkCBAIEggFuBIIBagFoAHYA3esdK3oNT6Ygi4GtgWhwfi6OnQHVXIiNPRHEzbbs
vswAAAFTntJsMgAABAMARzBFAiAaINcXPl9MUEnD677OzZt4Acf2vI6Be5at3nPQ
1ecrZgIhAKURwyYvgsxT1sXi2fZL7yfMgooP66+x5D+CAKkbYh6PAHYApLkJkLQY
WBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFTntJsawAABAMARzBFAiEAwQ3Y
ip/Hf+8nZ5gsoC8whrWOzygo1gtfEi8WZg4iTpwCIEO8FJwGvl1MixCs6WdN9icy
8s18ocuCJnfuYhtpvyR5AHYAaPaY+B9kgr46jO65KB1M/HFRXWeT1ETRCmesu09P
+8QAAAFTntJsWQAABAMARzBFAiEA0diO/geRFT9/v6K8O3IA7VCswonEGc8ArReZ
5GXyMrECICsWLFKIgCGWu+kRptzNO3XejsCUFBjd2jRtOf2sRDJbMA0GCSqGSIb3
DQEBCwUAA4IBAQA6IymZQuRdkclsSeanshiUSKDQy2yC86XBHiY7Vl/WBoL/px7G
aTQzVimaZ4XBoyKcwpKg72BdbMVVZ40xDiUKSmNFBSTa0C0e+x7RYhDhBaUklnsy
ope+d6IUTmIeKOBoHwRuVjhwiy8j2gJvmGUEfCjLxvZTsWEbmk6Gnx0pYPkeW71R
ZDk1O7C1XeO6BaXmIabMH9tvGZbiHj63W7iS+lj9qw76SKhoqVhI7Jv+5KVss3Z0
hm9RdbgNw79tF2dWEtysEsZAYtShGfbmWWMCrwNPm7Hywl2fFsSoYx+2TgNmI2Gz
8uj42cHeNjVE5h4AFZtlefWdbjr8CgXfCh+a
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 130970465235187508484008201912389889560
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Extended Validation SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '47 593 172'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Slovenská republika'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bratislava-Staré Mesto'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'QUBE Group a.s.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Information Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.vipallinclusive.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 778408947976983269295845417487282534672750394782217917505987757001939977538195924413346621409130493683333914640394714755532958157479293530946650627996332405662702078650005835195784323262336609988720731940427225017297684553320009202088130914069990665864388285769953926671082830409343606189633226014984323387281504241259365820004365774418146509067755790242844558276025141663306730001197713440444727496225707071744685733216588911102959088835382997619682286067786777734095285736505539604327643070363679631010166856304109350279525739191400335118907839796844042172140745766980701163510660880143288083960479099127973065872090286626568792977835228212366155751998462330306276808427037831755840050879535604624062561827583584304318574403142070455299599702852256922723800479760447262688952761317147319196506013216758320144097586840225772783187210722418126629522673825636477960238060535824166263007770852183887372194534559290135808353093520558428335201209473485085357806078192311734891239858134781536867709950950380405370119156596924055919228782646211451880902105413371522782943995892539584304422297042110637503428318818046315505930048957173205530189316067595209231634657298038823058109298960052724465597335943530620403580753693355064608682169373
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vipallinclusive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vipallinclusive.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gk.symcb.com/gk.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17b8dcaab153221941957b3c81ea889b49c3a28b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gk.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gk.symcb.com/gk.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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