123test.com

- 123test BV -

Issued by GeoTrust EV SSL CA - G4

About this certificate

This digital certificate with serial number 49:f4:11:4c:c9:ef:55:d7:7a:b6:50:62:3c:67:f2:1b was issued on by GeoTrust Inc..

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

123test BV

Company registration number: 27187803
Organization: 123test BV
State / Province: Gelderland
Locality: Nijmegen
Country: NL

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 49:f4:11:4c:c9:ef:55:d7:7a:b6:50:62:3c:67:f2:1b
Serial Number (int): 98300915010580795446847838972478485019
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: de:cf:5c:50:b7:ae:02:1f:15:17:aa:16:e8:0d:b5:28:9d:6a:5a:f3

Fingerprint (sha1): dd:a1:7f:d7:63:aa:1e:bf:f5:0d:18:d6:11:ba:f7:57:8c:56:76:80
Fingerprint (sha256): f8:3e:25:0d:a2:fe:e5:fb:9a:38:e9:f6:98:2d:84:b0:48:53:c7:cd:a7:55:9e:fa:da:07:b0:b0:70:6f:ba:58

Issuing Certificate URL: http://gm.symcb.com/gm.crt

Revocation information

OCSP Server: http://gm.symcd.com
CRL Distribution Point: http://gm.symcb.com/gm.crl

Check the revocation status for certificate 123test.com

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 123test.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.123test.nl
dyn.123test.com
api2.123test.com
123test.es
123test.fr
123test.nl
www.123test.de
api.123test.com
www.123test.fr
www.123test.es
cdn.123test.com
123test.de
123test.com
www.123test.com

Other certificates including the domain name 123test.com

(limited to 100 certificates)

dyn.123test.com
lowell-place-apartments.com
dyn.123test.com
developer.123test.com
qr-stage.viv-it.co
developer.123test.com
simian.co
123test.com
botanastehuacan.com
foosball-challenge.collegebasket.tech
developer.123test.com
123test.com
education.finance
inyoice.com
api2.123test.com
api.123test.com
reddit.mmastreams100.com
cdn.123test.com
123test.com
api2.123test.com
nicolascauet.me
api2.123test.com
cdn.123test.com
api24.123test.com
123test.com
123test.com
developer.123test.com
api.123test.com
cdn.123test.com
api.123test.com
api.123test.com
dyn.123test.com
www.ballhop.co
api22.123test.com
developer.123test.com
developer.123test.com
dyn.123test.com
123test.com
api.123test.com
123test.com
1450987616.rsc.cdn77.org
developer.123test.com
123test.com
123test.com
developer.123test.com
cdn.123test.com
portfolio.devsancabo.com
developer.123test.com
cdn.123test.com
dyn.123test.com
www.123test.com
cdn.123test.com
marketing.s.undertime.co
123test.com
api2.123test.com
unrealworld.co.uk
123test.com
developer.123test.com
123test.com
api2.123test.com
123test.com
cdn.123test.com
playpuzzles.link
developer.123test.com
www.123test.com
api.123test.com
developer.123test.com
api.123test.com
developer.123test.com
api22.123test.com
assessment-training.123test.com
api2.123test.com
dyn.123test.com
developer.123test.com
api2.123test.com
www.bernardobernal.com
dyn.123test.com
dyn.123test.com
api20.123test.com
doesmidwesthaveabeltsquat.com
123test.com
dyn.123test.com
api22.123test.com
developer.123test.com
www.perklone-md.cn
www.doughboyz.org
3778-care-simulator-staging.nata.dev
api4.123test.com
developer.123test.com
www.theflashpoint.tk
dev.eureka.academy
developer.123test.com
admin.reportkard.com
developer.123test.com
cdn.123test.com
123test.com
dyn.123test.com
cdn.123test.com
123test.com

Certificate

The complete raw certificate details for 123test.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4thdXAdnlmET7jOa1mKx
0939Q0v5+gb8JSKD3VERpfrfVAiV/i7TDQdJU0Yg2IsB5UbKsdPyCPVRuzhKhRFE
2jkGOy5mdGLYpDW5IhDt21dZjCzD0foBLB5eyGbT8flhq24ejxbis5cjQrBA7IrD
aR9ZtL1X71dQU0sizHsK3bSqjJOt+pdNMV/2Fq+XP6pulStpP/wNzNikAat2KyzO
tFvEDs6Q6LPBxKn38XxZK2nTpltMJelrDD6qkVc8he+wCvEIVSYzmc+yYXHNPqIm
R223LKwlv0SNP2/ieplHt1mcJZApXYh7sQeHhfewjTL3TIp8qUktgSKGxfaFdY1P
Ptsal2RDNgnElEy045QX0ePRZ+ZbYcdD3a8Krkdjtnh1LBpPF+Y3UclqcLhPeMdF
O85oe34wN5dl9wPYWkuM+ile1Z++cCv692GUFUfUjqinUyBLQYrl2HpZDvbUA/uu
vWsMiRQQvpHZuqRy2oQx9pWtS9U1GZDs6hp/BM+xwNMfiuLTQvuQnoEFQXYlk+ed
Gc7/Fba8F+eXy0T9/aNvQx5eEUESasRZicX7jTevueEpgBlzRBmSwv2ejPuWDoLw
X0LiLoGm55O4gL25QpOQLDsJQGiQh8dELv/E5+fKBbT5bo2z5C+SOpTJSFn9Oz6T
BdfmFMdpzp9DPUbf/w0GVsECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 98300915010580795446847838972478485019
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust EV SSL CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '27187803'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Gelderland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nijmegen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '123test BV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '123test.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 925447570723052171234295260748165608720788856949395872861719674196756131691482566786689081436951268160567992862139535691958931213385019840592647049201813368340316157623616759307614034775910727011664348451025993353275136975817153529476063642427462504716109669329040093326656019653004948996825027133018915196069992023585763940256293432476841955595239348924690992738157091236810766461889482823173011043387519119626664399259968461592573339700189897327182036173810258339129947131203776762701438658955009561878325602478722225493270259790666551404680835882398755657158695154807661621659201207887709868281155190196929049481839564832678015000163954516142764262908596336019692108122619124120546715984358942292538873408315646032868547336724817784222001379813893522978231047035315633030433477912614307052427648995119861133527885107107336320644615514586087203915277154839835525122504625631088896067050924855249359948923773050796099804352103653191452990884562341192055979579565852072592345470167796295457568319616143827771739182435871780953733665813620131470326753885214719716987994552170479885364458460565566559185143576343410757413001399441605901316075811372216769036227961368003797252683728277673309363172866027848101014779763790223707172394689
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (214 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.123test.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dyn.123test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api2.123test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '123test.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '123test.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '123test.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.123test.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.123test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.123test.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.123test.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.123test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '123test.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '123test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.123test.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName decf5c50b7ae021f1517aa16e80db5289d6a5af3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0009817d11a404d33e06b3ae4d72198af7e20ff7ec7be8e07f37a88e54972bf0e886e0204592ff587721999806fe89d1f97de16214ec4ee57941f7f06dcb89f19b9d181316cca1a751775fe1134573a108dac34b18f6fe9f762bbda890ebd406d07c1724abaf8bfc12f15efd0a714f4572b8d8336a284b47cfbdb0add6e80b841a56472eded976765fd88778978e08bec0e39aa88cb28e1805c76f478e5263e720ad2c85eaa8a8b4acf9470ab88d96628da3e5bc4c6b439249e59573e82bb63f6030e16f4fa17842391cf6bea988d88b3777ea3cbba8e58e40f3465cb3dbb4def575ac57c43e361b6c26f9f67eb5145640eeffa0ed135be0aa2747231dbaafda76