loacker.com

- A. Loacker AG -

Issued by GeoTrust SHA256 SSL CA

About this certificate

This digital certificate with serial number 67:99:bf:de:81:4a:a0:0a:e2:17:44:b5:65:67:a8:ed was issued on by GeoTrust Inc..

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

A. Loacker AG

Organization: A. Loacker AG
Organization unit: IT
State / Province: BOLZANO
Locality: RENON
Country: IT

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 67:99:bf:de:81:4a:a0:0a:e2:17:44:b5:65:67:a8:ed
Serial Number (int): 137708796554102321728992474866670610669
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 14:67:8e:ed:83:4f:d6:1e:9d:40:04:0c:04:46:a1:70:34:b2:0f:72

Fingerprint (sha1): e4:ce:ca:bb:92:f4:0d:e2:3f:54:09:d4:01:e5:1f:23:59:bb:8e:46
Fingerprint (sha256): fb:ef:d3:58:ad:d7:ae:b1:29:27:e1:bf:11:ee:51:69:52:be:88:3f:b2:81:1d:4c:61:91:bd:72:14:af:15:32

Issuing Certificate URL: http://gj.symcb.com/gj.crt

Revocation information

OCSP Server: http://gj.symcd.com
CRL Distribution Point: http://gj.symcb.com/gj.crl

Check the revocation status for certificate loacker.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for loacker.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.loacker-deutschland.de
loacker-deutschland.de
loacker.it
www.loacker.it
www.loackerusa.com
loackerusa.com
shelfplanner.loacker.com
loacker.com
www.loacker.com

Other certificates including the domain name loacker.com

(limited to 100 certificates)
*.loacker.com
*.net.loacker.com
*.loacker.com
servicedesk.cheaperwaste.co.uk
sg2.loacker.com
consumer-hub.loacker.com
*.net.loacker.com
loacker.com
portal.loacker.com
consumer-hub.loacker.com
r.loacker.com
www.loacker.com
www.loacker-family.com
sip.loacker.com
cafe.loacker.com
www.loacker.com
*.loacker.com
shop.loacker.com
estatechebonta.loacker.com
plovcq.loacker.com
*.loacker.com
www.loacker.com
datapoc.loacker.com
consumer-hub.loacker.com
loacker.com
sip.loacker.com
loacker.com
consumer-hub.loacker.com
portal.loacker.com
loacker.com
*.loacker.com
consumer-hub.loacker.com
consumer-hub.loacker.com
*.loacker.com
loacker.com
estatechebonta.loacker.com
sg2.loacker.com
loacker.com
servicemanager.loacker.com
www.loacker-family.com
consumer-hub.loacker.com
test-shop.loacker.com
*.loacker.com
*.loacker.com
consumer-hub.loacker.com
sip.loacker.com
*.net.loacker.com
sip.loacker.com
loacker.com
www.loacker-family.com
loacker.com
consumer-hub.loacker.com
cafe.loacker.com
loacker.com
loacker.com
shop.loacker.com
consumer-hub.loacker.com
*.net.loacker.com
*.net.loacker.com
plovcq.loacker.com
sip.loacker.com
loacker.com
servicedesk.cheaperwaste.co.uk

Certificate

The complete raw certificate details for loacker.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHczCCBlugAwIBAgIQZ5m/3oFKoAriF0S1ZWeo7TANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEfMB0GA1UEAxMW
R2VvVHJ1c3QgU0hBMjU2IFNTTCBDQTAeFw0xNzA1MjQwMDAwMDBaFw0yMDA1MjMy
MzU5NTlaMGoxCzAJBgNVBAYTAklUMRAwDgYDVQQIDAdCT0xaQU5PMQ4wDAYDVQQH
DAVSRU5PTjEWMBQGA1UECgwNQS4gTG9hY2tlciBBRzELMAkGA1UECwwCSVQxFDAS
BgNVBAMMC2xvYWNrZXIuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkuzE3PfLhTem4ilZozWmXFZq4b1Q6lyaBy0ew/UusAeU0ZHKZ4/L6/U0T31b
rLQMXZ5RgZ+Y2SuCOysC3rcu5LrBoJ+29TlIstUN/lDUOa3aY/Xd+MV41XN4buIn
Vl/BEETNqBjg9fZSKy9ZffJsrEVf/GMpm0EwLjvB/Le2xTSH1qOmXqiOwM3U2sM8
xcPHYQ4DjiaWG42JTWek7/XTwqgEXwO0JDdak5Awm1809t84LjlC7sNY9CEM4vb2
ffxDqVH2aO313sbx6Eu3C+QnEUszWxQwpygUrIEqp/ElbO1bTqCvxuj9pnxmnXUS
lS4epsYd1gQIDGjhWbbcDngeHQIDAQABo4IENzCCBDMwgbcGA1UdEQSBrzCBrIIa
d3d3LmxvYWNrZXItZGV1dHNjaGxhbmQuZGWCFmxvYWNrZXItZGV1dHNjaGxhbmQu
ZGWCCmxvYWNrZXIuaXSCDnd3dy5sb2Fja2VyLml0ghJ3d3cubG9hY2tlcnVzYS5j
b22CDmxvYWNrZXJ1c2EuY29tghhzaGVsZnBsYW5uZXIubG9hY2tlci5jb22CC2xv
YWNrZXIuY29tgg93d3cubG9hY2tlci5jb20wCQYDVR0TBAIwADAOBgNVHQ8BAf8E
BAMCBaAwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL2dqLnN5bWNiLmNvbS9nai5j
cmwwgZ0GA1UdIASBlTCBkjCBjwYGZ4EMAQICMIGEMD8GCCsGAQUFBwIBFjNodHRw
czovL3d3dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL3JlcG9zaXRvcnkvbGVnYWww
QQYIKwYBBQUHAgIwNQwzaHR0cHM6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNl
cy9yZXBvc2l0b3J5L2xlZ2FsMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjAfBgNVHSMEGDAWgBQUZ47tg0/WHp1ABAwERqFwNLIPcjBXBggrBgEFBQcBAQRL
MEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9nai5zeW1jZC5jb20wJgYIKwYBBQUHMAKG
Gmh0dHA6Ly9nai5zeW1jYi5jb20vZ2ouY3J0MIIB9AYKKwYBBAHWeQIEAgSCAeQE
ggHgAd4AdgDd6x0reg1PpiCLga2BaHB+Lo6dAdVciI09EcTNtuy+zAAAAVw6L1v0
AAAEAwBHMEUCIQCBEv2aeVORXBIRhSZieCG9In1Dv7Jj/wcbZgFvfm7gLwIgYw4l
dRC+hXqjyeGln6X+iiZH78sorbD4WTbNVOxo2eYAdQCkuQmQtBhYFIe7E6LMZ3AK
PDWYBPkb37jjd80OyA3cEAAAAVw6L1wqAAAEAwBGMEQCIDddXxnyUGZrlTeAyvIg
barVEd9bNY6bPTjQ8HMd8HswAiARuAB8wAQbN0jdqfxusTjnvEba+vEO3iapTmPv
XqkbIQB2AO5Lvbd1zmC64UJpH6vhnmajD35fsHLYgwDEe4l6qP3LAAABXDovXekA
AAQDAEcwRQIhAO9O8XuDPd48YXk36lRz4Q33nwDUEBE2J34AFyiUzpCYAiBx6Exg
2b9cg+0REJHcu5VJI05kbHR69Irm6bbmdpv1VwB1ALx44d/F9jxoRkkzTaEPoV8J
eWkgCcCBtPP2kX8+2bilAAABXDovXOkAAAQDAEYwRAIgZ58Mvkzpz7rrhJf6swnO
IN9Hqztgn9CXJ2hrhL9KrtICIAwxgG/RFn3x2hCoi8j+HEg2YErmfGRV7ESqM2Gq
BRzaMA0GCSqGSIb3DQEBCwUAA4IBAQBH1hyfeHzPgl+Pq8fpkZUZ3gA53KT4f9cn
qbOXlRAcTxFdVlVOxhdgMbG6ls9Vzv9yJ2/Lxkmr2Jrx/AZqk4BMC+nsnKDb5hyo
kv397GGWA248a9+vVGiuJygkg+jCk7XO4VOhE8vk1FOWLwBTOWd7hVTVzQ7S9voQ
QZC06xzHrqxxoIfbuXpaMR5j3Dyubb3kMa5L5jDsod+ZzxysMF6Gms+OoSGHrL2F
eQapfNIsJnDhcM9jXtsl73vlGDpee5aBffxJ1+3wBHofZ/BKWrNf8SzhFXJdOS3L
Fol++zblxkeI4FJWZyAO4GZnayYMdMF9j2x2OqbeSyNJGfxkj3Cc
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuzE3PfLhTem4ilZozWm
XFZq4b1Q6lyaBy0ew/UusAeU0ZHKZ4/L6/U0T31brLQMXZ5RgZ+Y2SuCOysC3rcu
5LrBoJ+29TlIstUN/lDUOa3aY/Xd+MV41XN4buInVl/BEETNqBjg9fZSKy9ZffJs
rEVf/GMpm0EwLjvB/Le2xTSH1qOmXqiOwM3U2sM8xcPHYQ4DjiaWG42JTWek7/XT
wqgEXwO0JDdak5Awm1809t84LjlC7sNY9CEM4vb2ffxDqVH2aO313sbx6Eu3C+Qn
EUszWxQwpygUrIEqp/ElbO1bTqCvxuj9pnxmnXUSlS4epsYd1gQIDGjhWbbcDnge
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 137708796554102321728992474866670610669
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BOLZANO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'RENON'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'A. Loacker AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'loacker.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18547547668842770944806286180683108306642671101572083563257211327456897889346366424034488977030344466760321517904907645681828946862718246454757568441969003847539954225268208931837157089829596508611204343103016376374532821052066607477928874757445926326502115639702644935021492131741513517420586911821191985305913357701022651488676844413972609717134221934309539154505375285679218553958719531580580973314947474111839109416489152127397415620768876287585316607219678591768877681674402501042786703820569342369450516554790006095132304126504360781608694144940316293024407007271069533301846504313664030773053665755279797001757
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (175 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loacker-deutschland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loacker-deutschland.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loacker.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loacker.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loackerusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loackerusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shelfplanner.loacker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loacker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loacker.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcb.com/gj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 14678eed834fd61e9d40040c0446a17034b20f72
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcb.com/gj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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