members.columbusmuseum.org
- Columbus Museum of Art -
Issued by GeoTrust SHA256 SSL CA
About this certificate
This digital certificate with serial number 4c:98:97:19:cb:56:8f:c7:64:db:1b:5a:94:8d:30:7d was issued on by GeoTrust Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Columbus Museum of Art
Organization:
Columbus Museum of Art
Organization unit: Hosting
Organization unit: Hosting
State / Province:
Ohio
Locality: Columbus
Country: US
Locality: Columbus
Country: US
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 4c:98:97:19:cb:56:8f:c7:64:db:1b:5a:94:8d:30:7dSerial Number (int): 101813621489635217989864888484057919613
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 14:67:8e:ed:83:4f:d6:1e:9d:40:04:0c:04:46:a1:70:34:b2:0f:72
Fingerprint (sha1): 0d:74:e0:ee:f6:c4:cf:15:58:15:db:2c:6a:d6:25:43:12:c3:c3:d4
Fingerprint (sha256): ea:c4:e4:8b:eb:48:c4:bc:62:3e:79:b4:71:3b:3d:ce:14:43:55:6e:10:3b:0d:12:4b:92:2c:c2:2e:87:d3:21
Issuing Certificate URL: http://gj.symcb.com/gj.crt
Revocation information
OCSP Server: http://gj.symcd.comCRL Distribution Point: http://gj.symcb.com/gj.crl
Check the revocation status for certificate members.columbusmuseum.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for members.columbusmuseum.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
members.columbusmuseum.org
Other certificates including the domain name columbusmuseum.org
(limited to 100 certificates)
www.columbusmuseum.org
www.columbusmuseum.org
museumstore.columbusmuseum.org
museumstore.columbusmuseum.org
museumstore.columbusmuseum.org
museumstore.columbusmuseum.org
museumstore.columbusmuseum.org
alexa.columbusmuseum.org
pizzuti.columbusmuseum.org
pizzuti.columbusmuseum.org
www.columbusmuseum.org
museumstore.columbusmuseum.org
museumstore.columbusmuseum.org
museumstore.columbusmuseum.org
museumstore.columbusmuseum.org
museumstore.columbusmuseum.org
museumstore.columbusmuseum.org
museumstore.columbusmuseum.org
www.columbusmuseum.org
columbusmuseum.org
alexa.columbusmuseum.org
members.columbusmuseum.org
museumstore.columbusmuseum.org
mycma.columbusmuseum.org
pizzuti.columbusmuseum.org
pizzuti.columbusmuseum.org
columbusmuseum.org
museumstore.columbusmuseum.org
pizzuti.columbusmuseum.org
members.columbusmuseum.org
museumstore.columbusmuseum.org
museumstore.columbusmuseum.org
museumstore.columbusmuseum.org
museumstore.columbusmuseum.org
members.columbusmuseum.org
columbusmuseum.org
www.columbusmuseum.org
alexa.columbusmuseum.org
museumstore.columbusmuseum.org
members.columbusmuseum.org
members.columbusmuseum.org
museumstore.columbusmuseum.org
columbusmuseum.org
museumstore.columbusmuseum.org
www.columbusmuseum.org
www.columbusmuseum.org
columbusmuseum.org
museumstore.columbusmuseum.org
columbusmuseum.org
pizzuti.columbusmuseum.org
museumstore.columbusmuseum.org
members.columbusmuseum.org
museumstore.columbusmuseum.org
www.columbusmuseum.org
pizzuti.columbusmuseum.org
museumstore.columbusmuseum.org
museumstore.columbusmuseum.org
members.columbusmuseum.org
columbusmuseum.org
pizzuti.columbusmuseum.org
members.columbusmuseum.org
www.columbusmuseum.org
www.columbusmuseum.org
museumstore.columbusmuseum.org
museumstore.columbusmuseum.org
museumstore.columbusmuseum.org
museumstore.columbusmuseum.org
museumstore.columbusmuseum.org
alexa.columbusmuseum.org
pizzuti.columbusmuseum.org
pizzuti.columbusmuseum.org
www.columbusmuseum.org
museumstore.columbusmuseum.org
museumstore.columbusmuseum.org
museumstore.columbusmuseum.org
museumstore.columbusmuseum.org
museumstore.columbusmuseum.org
museumstore.columbusmuseum.org
museumstore.columbusmuseum.org
www.columbusmuseum.org
columbusmuseum.org
alexa.columbusmuseum.org
members.columbusmuseum.org
museumstore.columbusmuseum.org
mycma.columbusmuseum.org
pizzuti.columbusmuseum.org
pizzuti.columbusmuseum.org
columbusmuseum.org
museumstore.columbusmuseum.org
pizzuti.columbusmuseum.org
members.columbusmuseum.org
museumstore.columbusmuseum.org
museumstore.columbusmuseum.org
museumstore.columbusmuseum.org
museumstore.columbusmuseum.org
members.columbusmuseum.org
columbusmuseum.org
www.columbusmuseum.org
alexa.columbusmuseum.org
museumstore.columbusmuseum.org
members.columbusmuseum.org
members.columbusmuseum.org
museumstore.columbusmuseum.org
columbusmuseum.org
museumstore.columbusmuseum.org
www.columbusmuseum.org
www.columbusmuseum.org
columbusmuseum.org
museumstore.columbusmuseum.org
columbusmuseum.org
pizzuti.columbusmuseum.org
museumstore.columbusmuseum.org
members.columbusmuseum.org
museumstore.columbusmuseum.org
www.columbusmuseum.org
pizzuti.columbusmuseum.org
museumstore.columbusmuseum.org
museumstore.columbusmuseum.org
members.columbusmuseum.org
columbusmuseum.org
pizzuti.columbusmuseum.org
members.columbusmuseum.org
www.columbusmuseum.org
Certificate
The complete raw certificate details for members.columbusmuseum.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGiDCCBXCgAwIBAgIQTJiXGctWj8dk2xtalI0wfTANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEfMB0GA1UEAxMW R2VvVHJ1c3QgU0hBMjU2IFNTTCBDQTAeFw0xNjA4MTAwMDAwMDBaFw0xODA4MTAy MzU5NTlaMIGHMQswCQYDVQQGEwJVUzENMAsGA1UECAwET2hpbzERMA8GA1UEBwwI Q29sdW1idXMxHzAdBgNVBAoMFkNvbHVtYnVzIE11c2V1bSBvZiBBcnQxEDAOBgNV BAsMB0hvc3RpbmcxIzAhBgNVBAMMGm1lbWJlcnMuY29sdW1idXNtdXNldW0ub3Jn MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi88lJbnx3gwyXadnbj9x mEp37wK7EID2hiayu7/QJtPjYS4xoW/twcUn8ZnApeHCpxOtU7suSNy8PkADK/pV c+cMhypy+u4hLmXuEjgtJQkaFroRl9KgYGa6nJ4/Ousfv2fvfXAt7bWFA2xGjJA3 WBK85yR9FINTVahBSRNMLwD/cIJxwK8h0fab/+XXVzy9pCzbP1sLKPmNiaY0ghm7 xddUhdCZtynnukE4Xo7jTXuYTeCIVa6/8ZKt6Uue6r1B2TW2te8UltKKftRAD8UI QCQ+5Fk0wGuCeasCtZPtZaYVOWTsoj/GbH/aU0KC82bxYh2+7M2Ac8lY0FKxnzPw ewIDAQABo4IDLjCCAyowJQYDVR0RBB4wHIIabWVtYmVycy5jb2x1bWJ1c211c2V1 bS5vcmcwCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwKwYDVR0fBCQwIjAgoB6g HIYaaHR0cDovL2dqLnN5bWNiLmNvbS9nai5jcmwwgZ0GA1UdIASBlTCBkjCBjwYG Z4EMAQICMIGEMD8GCCsGAQUFBwIBFjNodHRwczovL3d3dy5nZW90cnVzdC5jb20v cmVzb3VyY2VzL3JlcG9zaXRvcnkvbGVnYWwwQQYIKwYBBQUHAgIwNQwzaHR0cHM6 Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9yZXBvc2l0b3J5L2xlZ2FsMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBQUZ47tg0/W Hp1ABAwERqFwNLIPcjBXBggrBgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6 Ly9nai5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9nai5zeW1jYi5jb20v Z2ouY3J0MIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgDd6x0reg1PpiCLga2B aHB+Lo6dAdVciI09EcTNtuy+zAAAAVZ14SVkAAAEAwBHMEUCIQCvgEyy45RoLV5c ZyDd9MWb8GBzzOjg4CjAG7l0TttCFwIgB245x0b9BBePpTJx0x3G8TCA2veiaZCj sWuqxAhrnS4AdgCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAVZ1 4SWjAAAEAwBHMEUCIDnVtc8cML5SLAv0LE5ufXLthBs0ayMMqKpKClqTw/XbAiEA /6GkvjOq++0cqOt46qCy8HrbXg+V2c4KcSehRpHEQ74AdgBo9pj4H2SCvjqM7rko HUz8cVFdZ5PURNEKZ6y7T0/7xAAAAVZ14SWSAAAEAwBHMEUCIQCslpO6leHtm8Yw eCAy2ceQWBOyTo/fPYhE4oTapl0cBgIgBcz/c5oubj8vlZX4APCwHTYvmfWmoZ39 p8yNV2MTlD4wDQYJKoZIhvcNAQELBQADggEBAEJP6yrbtHAEEjZO5wmQXzY+hbZF wwmvxsDSwguX1t0LgVi7HLryre6u8sK2RVHG4VgCjFDspbLFGjQBABd2V/O6OaU8 x49tPr05+H34Kbjhi7YEuiGcmKNYqzbv7uoh+WX+h+Ni/GhGQfNDbUFG7PDhWlwt LprPDxdh10+EfVdbylymTLnP82YAofEuhpUbUx16OVLAuvYkZdIcnlHg0Gayeohl ZoJgUsfp7PBgedKndYgLPX9eo9o+98Cyz59DJ48SzoQs3qnz+7IP2eHDj7l/5hYo eR0PV2UiQktwmX4TrZ6pbwROCcF1303HdozW7kUIKKgd3Brx5or2LCzkDzc= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi88lJbnx3gwyXadnbj9x mEp37wK7EID2hiayu7/QJtPjYS4xoW/twcUn8ZnApeHCpxOtU7suSNy8PkADK/pV c+cMhypy+u4hLmXuEjgtJQkaFroRl9KgYGa6nJ4/Ousfv2fvfXAt7bWFA2xGjJA3 WBK85yR9FINTVahBSRNMLwD/cIJxwK8h0fab/+XXVzy9pCzbP1sLKPmNiaY0ghm7 xddUhdCZtynnukE4Xo7jTXuYTeCIVa6/8ZKt6Uue6r1B2TW2te8UltKKftRAD8UI QCQ+5Fk0wGuCeasCtZPtZaYVOWTsoj/GbH/aU0KC82bxYh2+7M2Ac8lY0FKxnzPw ewIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 101813621489635217989864888484057919613 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SHA256 SSL CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-10 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-10 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ohio' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Columbus' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Columbus Museum of Art' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hosting' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'members.columbusmuseum.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17649271449571701107622632928870354751895448184371169193469054994650256279129612987059528020977751046740960940187747972712402088428565722576441887526563515569722603645564839381593292189835458131591295437766282669001152996003180606754270480507030315785890153997585617716558500531605122580800161889228034859927904428618691709741341354868979755704538337984558842034733083964481065490346972976038142573015158858242763996283851396610303246048509381100645477760005845985887045351021187607812998755485146741044758308152500959979879617677085380674008801868575217733564853262168454572408002536076267899538301635958636146847867 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'members.columbusmuseum.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcb.com/gj.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 14678eed834fd61e9d40040c0446a17034b20f72 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcb.com/gj.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 0168007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015675e125640000040300473045022100af804cb2e394682d5e5c6720ddf4c59bf06073cce8e0e028c01bb9744edb42170220076e39c746fd04178fa53271d31dc6f13080daf7a26990a3b16baac4086b9d2e007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015675e125a30000040300473045022039d5b5cf1c30be522c0bf42c4e6e7d72ed841b346b230ca8aa4a0a5a93c3f5db022100ffa1a4be33aafbed1ca8eb78eaa0b2f07adb5e0f95d9ce0a7127a14691c443be00760068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc40000015675e125920000040300473045022100ac9693ba95e1ed9bc630782032d9c7905813b24e8fdf3d8844e284daa65d1c06022005ccff739a2e6e3f2f9595f800f0b01d362f99f5a6a19dfda7cc8d576313943e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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