infonet3.bmwgroup.com

- Bayerische Motoren Werke AG -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 5c:26:41:be:7d:e7:5f:91:ee:4f:7a:29:a4:54:e2:5a was issued on by GeoTrust Inc..

With 31 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Bayerische Motoren Werke AG

Organization: Bayerische Motoren Werke AG
Organization unit: Akamai SAN SSL OV
State / Province: Bavaria
Locality: Munich
Country: DE

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5c:26:41:be:7d:e7:5f:91:ee:4f:7a:29:a4:54:e2:5a
Serial Number (int): 122487616341777038234601062208577528410
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 2e:ab:1d:e7:e8:d6:54:67:ef:41:f1:6b:ae:3b:2a:d6:9b:dc:f8:ff
Fingerprint (sha256): ea:0e:2d:85:05:13:2b:b8:34:45:92:d6:b8:5b:19:7a:e9:de:2c:98:fe:96:dc:4e:a0:a7:3b:32:8a:54:9f:7b

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate infonet3.bmwgroup.com

31

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for infonet3.bmwgroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fupo-poc.bmw-connecteddrive.no
fupo-poc.bmw-connecteddrive.cz
fupo-poc.bmw-connecteddrive.co.nz
fupo-poc.bmw-connecteddrive.com.tr
fupo-poc.bmw-connecteddrive.es
fupo-poc.bmw-connecteddrive.co.za
infonet3-akamai-int.bmwgroup.com
fupo-poc.bmw-connecteddrive.com
fupo-poc.bmw-connecteddrive.pt
fupo-poc.bmw-connecteddrive.sg
infonet3-akamai.bmwgroup.com
fupo-poc.bmw-connecteddrive.kr
fupo-poc.bmw-connecteddrive.fr
fupo-poc.bmw-connecteddrive.co.uk
fupo-poc.bmw-connecteddrive.dk
fupo-poc.bmw-connecteddrive.pl
fupo-poc.bmw-connecteddrive.my
fupo-poc.bmw-connecteddrive.ch
fupo-poc.bmw-connecteddrive.ru
fupo-poc.bmw-connecteddrive.mx
fupo-poc.bmw-connecteddrive.tw
fupo-poc.bmw-connecteddrive.be
fupo-poc.bmw-connecteddrive.ae
fupo-poc.bmw-connecteddrive.de
fupo-poc.bmw-connecteddrive.se
fupo-poc.bmw-connecteddrive.jp
fupo-poc.bmw-connecteddrive.at
infonet3-int.bmwgroup.com
fupo-poc.bmw-connecteddrive.com.br
fupo-poc.bmw-connecteddrive.it
infonet3.bmwgroup.com

Other certificates including the domain name bmwgroup.com

(limited to 100 certificates)
cosy-int.bmwgroup.com
cuvedat.bmwgroup.com
bsi-service-wen.bmwgroup.com
ebest-gf5-int2.bmwgroup.com
spa-int.sfchina.bmw.com.cn
myair-bdr-us.bmwgroup.com
mein-test.bmwgroup.com
aftersales-configuration.bmwgroup.com
xpita-green.bmwgroup.com
air-int.bmwgroup.com
api.mobilitygraph.bmwgroup.com
e4ni3.bmwgroup.com
drift.bmwgroup.com
sgate2-int-apac.bmwgroup.com
p44-tracking-data-prod.bmwgroup.com
wissensfinder.bmwgroup.com
sparc-int.bmwgroup.com
e-180.com
df3test-bmwinfobahn.bmwgroup.com
lcs-int.bmwgroup.com
apisec.bmwgroup.com
srpmm-api-i.bmwgroup.com
ispanext-user-int-gf4.bmwgroup.com
rwebmeter.bmwgroup.com
aida-i.bmwgroup.com
nachhaltigkeit-newsletter.bmwgroup.com
dealerportalsg-int.bmwgroup.com
zadea-i.bmwgroup.com
spoa-int-2.bmwgroup.com
h5vco-bmw-test.bmwgroup.com
swg-mx.bmwgroup.com
uat-infobahn.bmwgroup.com
alscore-int.bmwgroup.com
dfegateway-i2.bmwgroup.com
csp-gft.bmwgroup.com
carver.bmwgroup.com
dealerservices-t.bmwgroup.com
tmsi-i.bmwgroup.com
osm-cloud-uat-kr.bmwgroup.com
vcs-gf4-t.bmwgroup.com
stabi.bmwgroup.com
h5vco.bmwgroup.com
plw-prod1.bmwgroup.com
h5vco-int.bmwgroup.com
osm-cloud-int-fed-eu.bmwgroup.com
eccza.bmwgroup.com
b2dua4.bmwgroup.com
conrecordtest.bmwgroup.com
srmza.bmwgroup.com
ilz-device-qa.bmwgroup.com
passworddev.bmwgroup.com
alclaims-test.bmwgroup.com
ispanext-user-prod-us-ig-weam.bmwgroup.com
zeus-neu.bmwgroup.com
ddaus-p-gf4.bmwgroup.com
cmscn-int.bmwgroup.com
kai-user-qa-eam.bmwgroup.com
topdrive-i.bmwgroup.com
mocu-int.bmwgroup.com
bch.eu-central-1.test.iis.connected.bmw
dealerservices-test.bmwgroup.com
oasis.bmwgroup.com
www.charging.bmwgroup.com
myc-profile-int.bmwgroup.com
dealercockpit-aos.bmwgroup.com
cargo-auth-ddr-int.bmwgroup.com
vcommus.bmwgroup.com
mediapool-i3.bmwgroup.com
nasf-as-tp-technical-campaign.bmwgroup.com
alertnowpbf00.bmwgroup.com
acc-fa-be-alph.bmwgroup.com
prod-mybmw-auth.bmwgroup.com
msdcrm365-int.bmwgroup.com
noaifa.bmwgroup.com
eaina-wen-int.bmwgroup.com
infonet3.bmwgroup.com
test.mini-mx.bmwgroup.com
www.bmw.de
trz-device-qa-us.bmwgroup.com
www.bmw.com
fsconnect-int-next.bmwgroup.com
b2dua-int.bmwgroup.com
gqs-i.bmwgroup.com
air-services-qa1-wen-basic.bmwgroup.com
ispanext-device-qa-cn-weam.bmwgroup.com
pita-dev.bmwgroup.com
usp22-test.bmwgroup.com
myair-bdr-qa2.bmwgroup.com
ics.bmwgroup.com
ispanext-user-int-weam.bmwgroup.com
swg-mx.bmwgroup.com
apisec-i.bmwgroup.com
ispanext-user-qa-ig-weam.bmwgroup.com
vcsus-t.bmwgroup.com
uctemeasip02.bmwgroup.net
air-services-b2i-int.bmwgroup.com
crowd-innovation.bmwgroup.com
ivpbg-new.bmwgroup.com
ult-test.bmwgroup.com
cfs-ch-int2.bmwgroup.com

Certificate

The complete raw certificate details for infonet3.bmwgroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxC9yqElLUXfgjQ1wWEVq
3vudejVaqx7VSW8jb1uXrIcV1hksNzVogWGErPwbK+eUHdbtBdVan3qVyKODjN+s
aO+2cXZL3hpRiGYEMn0aurvk0qvYb/S2bfLQkDwjSvr3okVt+9b3Q4j5ZTpRhBm7
lg/373bPfTbvGFw7LjpLhYCXkw38uBS8E/G33aTg3sSW6GzNgud66/LazaH3BA1q
cIA8ib1d92grCGL4xtaO9TNDhFq3J5wVkxeUrYOMWZnH/7On0qbc9ti6vatUQZvI
XKlQ6cWk48lOsRRO7jXt9b77H4HFiK3yVwZKGALTVnYkoHP27cN7DnTmNQiOfGm5
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 122487616341777038234601062208577528410
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bavaria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Munich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Bayerische Motoren Werke AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Akamai SAN SSL OV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'infonet3.bmwgroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24766105195179580623573391633155910727041378413503021999557252215087432878574827730048914713284302628857437899459959737275154003557885731276596577100587035258462493471717373112842076398803385962398073847144716049655703242310682089513849180889767619750326469861052917140469401050696573366525905106218110900451668575389985128084983633709050065797477910617147044546196237897884416587206189386598035691310186326175983281283529350934971078614032891871980638480391977619597875260403499521217526195454610985026944554975579376766098415939762220349483619681083013705591350495643922697858728196288348531640768138060776377793023
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1000 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infonet3-akamai-int.bmwgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infonet3-akamai.bmwgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infonet3-int.bmwgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infonet3.bmwgroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000152f54e68a30000040300483046022100b65a647f30c8ce7e999955cdaad086aaba168153efd87ae05c4f8c435e85db43022100f224544dd40d54e71389abb3640a791d49654d0677ffc854936587274851bec8007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000152f54e68e00000040300483046022100e02f50f949dc90b9d83f506b8600a758b3cb23fdc902a180830ddef7b5347f27022100c43f7df91041aecf899c4331ceab3e5ee3dc804d7ffe8beed2cb6603330c8a72
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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