epo-web-pro-live.glb.itcs.hpe.com

- Hewlett Packard Enterprise Company -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 72:8d:59:ac:27:ff:ad:26:94:4c:02:e9:14:1c:07:2e was issued on by Symantec Corporation.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Hewlett Packard Enterprise Company

Organization: Hewlett Packard Enterprise Company
State / Province: California
Locality: Palo Alto
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 72:8d:59:ac:27:ff:ad:26:94:4c:02:e9:14:1c:07:2e
Serial Number (int): 152265924150611506806888520834636056366
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 18:04:13:0c:e2:6d:18:36:13:0f:cc:3d:8d:4f:5f:b4:8a:84:5d:92
Fingerprint (sha256): 00:07:6c:73:fe:af:ca:26:b4:2f:9b:3c:2d:16:34:86:00:cb:06:bc:05:b9:1f:30:16:e0:32:d0:05:8c:0b:15

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate epo-web-pro-live.glb.itcs.hpe.com

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for epo-web-pro-live.glb.itcs.hpe.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

c9t21399.itcs.hpe.com
epes-web-pro-live.glb.itcs.hpe.com
c9t21397.itcs.hpe.com
c4t21394.itcs.hpe.com
c4t21398.itcs.hpe.com
c4t21395.itcs.hpe.com
c9t21401.itcs.hpe.com
epes-web-pro-live-h9.itcs.hpe.com
c4t21396.itcs.hpe.com
epes-web-pro-live-h4.itcs.hpe.com
c9t21400.itcs.hpe.com
epo-web-pro-live.glb.itcs.hpe.com

Other certificates including the domain name hpe.com

(limited to 100 certificates)
consumption.support.hpe.com
walmartproxy.houston.hpe.com
fc-portal.itcs.hpe.com
spa-pro-ref.glb.itcs.hpe.com
c9t22803.itcs.hpe.com
staging.cloudvolumes.hpe.com
epo-web-pro-live.glb.itcs.hpe.com
nl.discovermore.hpe.com
hpegives.hpe.com
literatureserver-new.glb.itcs.hpe.com
g1t6981-p.austin.hpe.com
p1lg509260.it.hpe.com
g4t9569g.houston.hpe.com
icapweb.glb.itcs.hpe.com
hpt-itg-ext-r3.itcs.hpe.com
s79t0166g.sgp.ext.hpe.com
www.labs.hpe.com
sbgroup.hpmms.hpe.com
hc4w02099.itcs.hpe.com
c4t15930.itcs.hpe.com
wstax-itg.itcs.hpe.com
pace-ext.itcs.hpe.com
sh70w0035.asiapacific.hpqcorp.net
prp-prd-pmg.ext.hpe.com
cce02hpqcppmbyod.houston.hpe.com
h10014.www1.hpe.com
itglap-esvc.houston.hpe.com
ukv002.hpmms.hpe.com
bp-awa-citrix.houston.hpe.com
112655-EPS-ITG.HPE.COM
lab.mis.edunet.hpe.com
z2z-hpecom-static-prd-31.ext.hpe.com
btp01sftsba02.asiapacific.hpqcorp.net
ahsv.glb.itcs.hpe.com
iwf01hpesba05.asiapacific.hpqcorp.net
bp-awa-citrix.houston.hpe.com
beta.infosight.hpe.com
z2z-hpecom-static-prd-07.ext.hpe.com
msitrace.msxix.hpe.com
sipext-16prd91.houston.ucrtc.hpe.com
g9t7157g.houston.hpe.com
uk.staging.cloudvolumes.hpe.com
fseuc-1a.freshservice.com
c9t05181.itcs.hpe.com
HPESizers.hpe.com
eitcds100.int.svcs.hpe.com
solid-service.int.hpe.com
itg-discover.itcs.hpe.com
abdullahfinalIntegrationHPE.hpe.com
rtc16prdfepool761.aus.ucrtc.hpecorp.net
ols-prd.hpe.com
enterpriselicense.hpe.com
mft2.svcs.entsvcs.com
b2bi-itg.ordercapture.ext.hpe.com
vlsched.vlabs.hpe.com
elsiemae.bethland.hpe.com
g9t6659g.houston.hpe.com
g4t9577g.houston.hpe.com
salespro.hpe.com
api-ext-pro.support.hpe.com
glis-extlb-itg.pr.ext.hpe.com
matter-itg.legal.int.hpe.com
paymentsolutions-status.shijicloud.com
prod.19.slot.cdn.salesforce-communities.com
rtc16itgfepool91.houston.hpe.com
nextgen-dev.it.hpe.com
itg-ext.support.hpe.com
rtc16prdfepool793.sgp.ucrtc.hpecorp.net
rams.glb.itcs.hpe.com
prpdapi-pro1-houston.itcs.hpe.com
UKV003.hpmms.hpe.com
s360-itg.ext.hpe.com
g9t7157g.houston.hpe.com
hpsc-pro-athp.austin.hpe.com
lync-web-chat16ITG91.houston.hpe.com
intmail-itg.houston.hpecorp.net
g4t7453.houston.hpe.com
hpEPublic.hpe.com
ipp.corp.ext.hpe.com
news.now.hpe.com
bp-awa-citrix.houston.hpe.com
pgs-pro.itcs.hpe.com
grommet-bc-prd-lb.itcs.hpe.com
ebt3.prod.ssn.hp.com
kih01hpesba01.asiapacific.hpqcorp.net
iAuthCAS.houston.hpe.com
hc4t06244.itcs.hpecorp.net
ment.hpe.com
*.common.cloud.hpe.com
prp-pro.glb.itcs.hpe.com
g4t9578g.houston.hpe.com
epes-web-pro-live.glb.itcs.hpe.com
fc-portal.itcs.hpe.com
itg-ext.support.hpe.com
c4w15541.itcs.hpe.com
vpc.erm.svcs.hpe.com
p1lg501824.it.hpe.com
api.consumption-dev.support.hpe.com
ent312.sharepoint.hpe.com
d4t5515g.houston.hpe.com

Certificate

The complete raw certificate details for epo-web-pro-live.glb.itcs.hpe.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHQDCCBiigAwIBAgIQco1ZrCf/rSaUTALpFBwHLjANBgkqhkiG9w0BAQsFADB+
MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAd
BgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxLzAtBgNVBAMTJlN5bWFudGVj
IENsYXNzIDMgU2VjdXJlIFNlcnZlciBDQSAtIEc0MB4XDTE2MDMzMDAwMDAwMFoX
DTE3MDMzMTIzNTk1OVowgY8xCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxpZm9y
bmlhMRIwEAYDVQQHDAlQYWxvIEFsdG8xKzApBgNVBAoMIkhld2xldHQgUGFja2Fy
ZCBFbnRlcnByaXNlIENvbXBhbnkxKjAoBgNVBAMMIWVwby13ZWItcHJvLWxpdmUu
Z2xiLml0Y3MuaHBlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ANDh5/mlNjNF+uz4UtGM1GP+QKYl5r5ELUiy+bQe/jlGOS6xMH0n4Mx3qYXKFAvH
IW6upD70OHeDqzcuHsv6PBhFD3HiIRmUkCyH1iLXifxnL8gfOu6bOmF/ip7J0VXq
IZNfTz51WKbo3osHG2zWoNDlv2bzobcE2P33KyRfCV3YfftpBSJLXfwhe4GYVpdA
pE5uFrTTAaH7kj3hbJJYhToqw5OLsHmRPNKc4+Wbm4r0LDK1oJIesbDc9Ruoht65
2tdUNeajD4v48TAUfhXAG6RCvrhuhCq5LUTAu7ctuf9pCwoQJHm6MU3pxkOq0tVO
aB0ZOvjK27mv7dEWcTgo4CsCAwEAAaOCA6YwggOiMIIBUgYDVR0RBIIBSTCCAUWC
FWM5dDIxMzk5Lml0Y3MuaHBlLmNvbYIiZXBlcy13ZWItcHJvLWxpdmUuZ2xiLml0
Y3MuaHBlLmNvbYIVYzl0MjEzOTcuaXRjcy5ocGUuY29tghVjNHQyMTM5NC5pdGNz
LmhwZS5jb22CFWM0dDIxMzk4Lml0Y3MuaHBlLmNvbYIVYzR0MjEzOTUuaXRjcy5o
cGUuY29tghVjOXQyMTQwMS5pdGNzLmhwZS5jb22CIWVwZXMtd2ViLXByby1saXZl
LWg5Lml0Y3MuaHBlLmNvbYIVYzR0MjEzOTYuaXRjcy5ocGUuY29tgiFlcGVzLXdl
Yi1wcm8tbGl2ZS1oNC5pdGNzLmhwZS5jb22CFWM5dDIxNDAwLml0Y3MuaHBlLmNv
bYIhZXBvLXdlYi1wcm8tbGl2ZS5nbGIuaXRjcy5ocGUuY29tMAkGA1UdEwQCMAAw
DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBh
BgNVHSAEWjBYMFYGBmeBDAECAjBMMCMGCCsGAQUFBwIBFhdodHRwczovL2Quc3lt
Y2IuY29tL2NwczAlBggrBgEFBQcCAjAZGhdodHRwczovL2Quc3ltY2IuY29tL3Jw
YTAfBgNVHSMEGDAWgBRfYM9hkFXfhEMUimAqsvV69EMY7zArBgNVHR8EJDAiMCCg
HqAchhpodHRwOi8vc3Muc3ltY2IuY29tL3NzLmNybDBXBggrBgEFBQcBAQRLMEkw
HwYIKwYBBQUHMAGGE2h0dHA6Ly9zcy5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0
dHA6Ly9zcy5zeW1jYi5jb20vc3MuY3J0MIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDw
AHYA3esdK3oNT6Ygi4GtgWhwfi6OnQHVXIiNPRHEzbbsvswAAAFTxhl/MAAABAMA
RzBFAiAaYfyMfn3Vnz0gkvWvg7OaeM6s+vRHMDgnk5vRH+1hSwIhAPOI4RmjLvcQ
wXvErXKzKBWETsCePNdDqesQRTDI1OQvAHYApLkJkLQYWBSHuxOizGdwCjw1mAT5
G9+443fNDsgN3BAAAAFTxhl/TQAABAMARzBFAiEAzRbOw3W3G+/geaC8zuxT/L3i
xhEU8dBwcWyWUXd91RgCIG5/nTM0BeAuFuI1XaqB5g043uBPXhhh1a5IFeBfMvYy
MA0GCSqGSIb3DQEBCwUAA4IBAQBUQNyDLBlLAoA3fa/f/Rd6vbrTBK/JWmnSJ2+r
Rnl/dJODM/91OtA1K2FSvGPxMZKXjBZ/eFlZ4HRSxHR79/ea+taE6Ex8lNoTm813
mC0vbrblJK+DYymwDVm+aoMKDJM7jLVaamdG+wVyfO/IhULtqeaYmHCne3sAf+jo
MW3F31VoIfNw+dISSQLBIN9VNLPMIAD6gFednYkVGEmzJUCToFB0mVKgSxmPCaQu
wFi/4RffnY950IeoKjYm+K9rG8cNrOmY538jD2xZ2BUQ9azPZzMKS+aKCaHRi/JZ
snjyW1M8I9Ccc4NBI+dX1EtiOeCui8Xp/f828gpQfvFrReUG
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OHn+aU2M0X67PhS0YzU
Y/5ApiXmvkQtSLL5tB7+OUY5LrEwfSfgzHephcoUC8chbq6kPvQ4d4OrNy4ey/o8
GEUPceIhGZSQLIfWIteJ/GcvyB867ps6YX+KnsnRVeohk19PPnVYpujeiwcbbNag
0OW/ZvOhtwTY/fcrJF8JXdh9+2kFIktd/CF7gZhWl0CkTm4WtNMBofuSPeFskliF
OirDk4uweZE80pzj5ZubivQsMrWgkh6xsNz1G6iG3rna11Q15qMPi/jxMBR+FcAb
pEK+uG6EKrktRMC7ty25/2kLChAkeboxTenGQ6rS1U5oHRk6+Mrbua/t0RZxOCjg
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 152265924150611506806888520834636056366
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Palo Alto'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hewlett Packard Enterprise Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'epo-web-pro-live.glb.itcs.hpe.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26368965908880233714330942595158302065488484583634648365573555127214412949205365865561305568658401367537557796261118347991988245308815733108466121446784504414886597684153467836806778537044360247327928193152180057357405949434563730151901486252133736829230948485968289708378550359894474731685288269665334149310166783241003866440197081143230524578365304591084514142843847261199555086536025874481111661562284270220854089561044046751820786488968345868324651732734045726358115647048921809397977799612431088634714577033919941952836952420548206010547335328938843054358484707726061005124385446004265517786687362154623887007787
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (329 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c9t21399.itcs.hpe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epes-web-pro-live.glb.itcs.hpe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c9t21397.itcs.hpe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c4t21394.itcs.hpe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c4t21398.itcs.hpe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c4t21395.itcs.hpe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c9t21401.itcs.hpe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epes-web-pro-live-h9.itcs.hpe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c4t21396.itcs.hpe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epes-web-pro-live-h4.itcs.hpe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c9t21400.itcs.hpe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epo-web-pro-live.glb.itcs.hpe.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [104 116 116 112 115 58 47 47 100 46 115 121 109 99 98 46 99 111 109 47 114 112 97]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000153c6197f30000004030047304502201a61fc8c7e7dd59f3d2092f5af83b39a78ceacfaf447303827939bd11fed614b022100f388e119a32ef710c17bc4ad72b32815844ec09e3cd743a9eb104530c8d4e42f007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000153c6197f4d0000040300473045022100cd16cec375b71befe079a0bcceec53fcbde2c61114f1d070716c9651777dd51802206e7f9d333405e02e16e2355daa81e60d38dee04f5e1861d5ae4815e05f32f632
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005440dc832c194b0280377dafdffd177abdbad304afc95a69d2276fab46797f74938333ff753ad0352b6152bc63f13192978c167f785959e07452c4747bf7f79afad684e84c7c94da139bcd77982d2f6eb6e524af836329b00d59be6a830a0c933b8cb55a6a6746fb05727cefc88542eda9e6989870a77b7b007fe8e8316dc5df556821f370f9d2124902c120df5534b3cc2000fa80579d9d89151849b3254093a050749952a04b198f09a42ec058bfe117df9d8f79d087a82a3626f8af6b1bc70dace998e77f230f6c59d81510f5accf67330a4be68a09a1d18bf259b278f25b533c23d09c73834123e757d44b6239e0ae8bc5e9fdff36f20a507ef16b45e506