*.cloud.centurylink.com
- CenturyLink -
Issued by Symantec Class 3 Secure Server CA - G4
About this certificate
This digital certificate with serial number 53:b5:ce:b1:23:e2:ad:96:90:c7:f0:c4:bf:bf:e8:5e was issued on by Symantec Corporation.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
CenturyLink
Organization:
CenturyLink
Organization unit: FOSS Operations Support Team
Organization unit: FOSS Operations Support Team
State / Province:
Louisiana
Locality: Monroe
Country: US
Locality: Monroe
Country: US
Symantec Corporation
Organization:
Symantec Corporation
Organization unit: Symantec Trust Network
Organization unit: Symantec Trust Network
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 53:b5:ce:b1:23:e2:ad:96:90:c7:f0:c4:bf:bf:e8:5eSerial Number (int): 111269921592411950846500795923455535198
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef
Fingerprint (sha1): 94:1d:36:09:63:71:7b:47:55:ba:83:04:0c:b2:83:92:c8:d8:62:1e
Fingerprint (sha256): 00:32:dd:7b:61:f3:78:1b:98:c9:13:e5:10:29:55:7f:5e:76:f1:cd:cc:8c:4c:c4:27:d5:d8:95:84:f0:ad:be
Issuing Certificate URL: http://ss.symcb.com/ss.crt
Revocation information
OCSP Server: http://ss.symcd.comCRL Distribution Point: http://ss.symcb.com/ss.crl
Check the revocation status for certificate *.cloud.centurylink.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.cloud.centurylink.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.cloud.centurylink.com
Other certificates including the domain name centurylink.com
(limited to 100 certificates)
ctlchangead.centurylink.com
ctlchangead.centurylink.com
*.cloud.centurylink.com
rvmweb.centurylink.com
ipsops-test1.centurylink.com
www.centurylink.com
lab.iaf.centurylink.com
mcoe.centurylink.com
www.centurylink.com
businessvoip.centurylink.com
qxgisp-itv1-basicauth.centurylink.com
gadHCDHHS.ccc.centurylink.com
rmc-itv1.centurylink.com
vbs.level3.com
tcat-test1.centurylink.com
alumni.centurylink.com
pypi.mss.centurylink.com
promotions.centurylink.com
webops.centurylink.com
ctlmft1.centurylink.com
salesforceWFtest.centurylink.com
ixg-notices-test.centurylink.com
mrit.centurylink.com
cole.centurylink.com
ucexe1dmz.centurylink.com
iot7-test1.centurylink.com
ctg-itv1.centurylink.com
communicator6.centurylink.com
nagios.mss.centurylink.com
clustere-p2.alpha.expressway.hcs.centurylink.com
sipp-odc.centurylink.com
pilot.mss.centurylink.com
imaxml-notices-test.centurylink.com
LIVE.AF.CENTURYLINK.COM
cora.centurylink.com
smetrics.centurylink.com
hcde-ppo-itv1.centurylink.com
sapmobile-test1.centurylink.com
kai04.centurylink.com
gadSCOUPD.ccc.centurylink.com
splunk-test-ext.centurylink.com
sv.citedisplay.com
akamaisecure2.qualtrics.com
ebcontent.centurylink.com
sngaccesspool1.centurylink.com
news.centurylink.com
ctg-itv1.centurylink.com
gadCHUBB1.ccc.centurylink.com
ctlchangead.centurylink.com
qxgbc3-dmz.centurylink.com
dn1mtbaccess.centurylink.com
wfm.govccc.centurylink.com
controlnetworx.centurylink.com
ue1psbc02.govccc.centurylink.com
bgksbc.centurylink.com
ERM.Centurylink.com
clustere-p2.mhp.expressway.hcs.centurylink.com
ctlverify-test.centurylink.com
LIVE.IAF.CENTURYLINK.COM
LIVE.AF.CENTURYLINK.COM
de.controlcenter.centurylink.com
www.cert2.centurylink.com
tcat7-test1.centurylink.com
secure4s.scene7.com
qhome-test1.centurylink.com
psba.centurylink.com
gadSOFSUN.ccc.centurylink.com
ecd.lumen.com
bidmaster.centurylink.com
dn1mtbaccess.centurylink.com
tcat-preprod.centurylink.com
cag-ddc.ctlaccess.centurylink.com
eam.centurylink.com
wfmILSLLC.ccc.centurylink.com
promotions.centurylink.com
sipp-odc.centurylink.com
gadIOWAHT.ccc.centurylink.com
sipp-ddc.centurylink.com
jaadu-itv1.centurylink.com
get.centurylink.com
careeropportunities.centurylink.com
controlfederal-itv1.centurylink.com
ocsrp2.centurylink.com
ebus-test.centurylink.com
logs.mss.centurylink.com
ddcaccesspool.centurylink.com
ready.centurylink.com
vdi.centurylink.com
qgsisupplierportal.centurylink.com
selfservice.centurylink.com
controlcenter-e2e.centurylink.com
voiceconfig.centurylink.com
kai01.centurylink.com
hcmadminapi.govccc.centurylink.com
cid-adn.ccc.centurylink.com
qxgbc3-itv1-dmz.centurylink.com
sip.ctltest.centurylink.com
sapmobile-test1.centurylink.com
partnerlinkemea.centurylink.com
w3lweb-itv1-dmz.centurylink.com
ctlchangead.centurylink.com
*.cloud.centurylink.com
rvmweb.centurylink.com
ipsops-test1.centurylink.com
www.centurylink.com
lab.iaf.centurylink.com
mcoe.centurylink.com
www.centurylink.com
businessvoip.centurylink.com
qxgisp-itv1-basicauth.centurylink.com
gadHCDHHS.ccc.centurylink.com
rmc-itv1.centurylink.com
vbs.level3.com
tcat-test1.centurylink.com
alumni.centurylink.com
pypi.mss.centurylink.com
promotions.centurylink.com
webops.centurylink.com
ctlmft1.centurylink.com
salesforceWFtest.centurylink.com
ixg-notices-test.centurylink.com
mrit.centurylink.com
cole.centurylink.com
ucexe1dmz.centurylink.com
iot7-test1.centurylink.com
ctg-itv1.centurylink.com
communicator6.centurylink.com
nagios.mss.centurylink.com
clustere-p2.alpha.expressway.hcs.centurylink.com
sipp-odc.centurylink.com
pilot.mss.centurylink.com
imaxml-notices-test.centurylink.com
LIVE.AF.CENTURYLINK.COM
cora.centurylink.com
smetrics.centurylink.com
hcde-ppo-itv1.centurylink.com
sapmobile-test1.centurylink.com
kai04.centurylink.com
gadSCOUPD.ccc.centurylink.com
splunk-test-ext.centurylink.com
sv.citedisplay.com
akamaisecure2.qualtrics.com
ebcontent.centurylink.com
sngaccesspool1.centurylink.com
news.centurylink.com
ctg-itv1.centurylink.com
gadCHUBB1.ccc.centurylink.com
ctlchangead.centurylink.com
qxgbc3-dmz.centurylink.com
dn1mtbaccess.centurylink.com
wfm.govccc.centurylink.com
controlnetworx.centurylink.com
ue1psbc02.govccc.centurylink.com
bgksbc.centurylink.com
ERM.Centurylink.com
clustere-p2.mhp.expressway.hcs.centurylink.com
ctlverify-test.centurylink.com
LIVE.IAF.CENTURYLINK.COM
LIVE.AF.CENTURYLINK.COM
de.controlcenter.centurylink.com
www.cert2.centurylink.com
tcat7-test1.centurylink.com
secure4s.scene7.com
qhome-test1.centurylink.com
psba.centurylink.com
gadSOFSUN.ccc.centurylink.com
ecd.lumen.com
bidmaster.centurylink.com
dn1mtbaccess.centurylink.com
tcat-preprod.centurylink.com
cag-ddc.ctlaccess.centurylink.com
eam.centurylink.com
wfmILSLLC.ccc.centurylink.com
promotions.centurylink.com
sipp-odc.centurylink.com
gadIOWAHT.ccc.centurylink.com
sipp-ddc.centurylink.com
jaadu-itv1.centurylink.com
get.centurylink.com
careeropportunities.centurylink.com
controlfederal-itv1.centurylink.com
ocsrp2.centurylink.com
ebus-test.centurylink.com
logs.mss.centurylink.com
ddcaccesspool.centurylink.com
ready.centurylink.com
vdi.centurylink.com
qgsisupplierportal.centurylink.com
selfservice.centurylink.com
controlcenter-e2e.centurylink.com
voiceconfig.centurylink.com
kai01.centurylink.com
hcmadminapi.govccc.centurylink.com
cid-adn.ccc.centurylink.com
qxgbc3-itv1-dmz.centurylink.com
sip.ctltest.centurylink.com
sapmobile-test1.centurylink.com
partnerlinkemea.centurylink.com
w3lweb-itv1-dmz.centurylink.com
Certificate
The complete raw certificate details for *.cloud.centurylink.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGijCCBXKgAwIBAgIQU7XOsSPirZaQx/DEv7/oXjANBgkqhkiG9w0BAQsFADB+ MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAd BgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxLzAtBgNVBAMTJlN5bWFudGVj IENsYXNzIDMgU2VjdXJlIFNlcnZlciBDQSAtIEc0MB4XDTE3MDIwNjAwMDAwMFoX DTE5MDIwNzIzNTk1OVowgZExCzAJBgNVBAYTAlVTMRIwEAYDVQQIDAlMb3Vpc2lh bmExDzANBgNVBAcMBk1vbnJvZTEUMBIGA1UECgwLQ2VudHVyeUxpbmsxJTAjBgNV BAsMHEZPU1MgT3BlcmF0aW9ucyBTdXBwb3J0IFRlYW0xIDAeBgNVBAMMFyouY2xv dWQuY2VudHVyeWxpbmsuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1MQUkagOsj34g6PavGDFeKzYHWXGBPplX6aRTQAPbmpvslLdI89+DlTa0rO XHAQHobJ0Pu3NfIRz0QbA5NITODT3r0cUddW9Af23k0HE4AIZf05rYllu1czw1yD X2EOU1pWy8VdSV2J+3XkTQ9R9b1B2jRTdr2IuwF8MgWrxnFIe5DCM5oNB3werss5 XpaZsJ6rUWFmU3jy3n+6l9F0aru7LyfP02Uh2wAe8qvnL8XwMRL/Ta3/AdTmP28O 6PpYKjxxAnHrKNJanN3WHYWrJcfR0VjaRlLYCL7fjGgNgEfU6BBH4emWzlnzHnZK WyhJauqBqQp+cTWnhPNjQSS22wIDAQABo4IC7jCCAuowIgYDVR0RBBswGYIXKi5j bG91ZC5jZW50dXJ5bGluay5jb20wCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAw HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMGEGA1UdIARaMFgwVgYGZ4EM AQICMEwwIwYIKwYBBQUHAgEWF2h0dHBzOi8vZC5zeW1jYi5jb20vY3BzMCUGCCsG AQUFBwICMBkMF2h0dHBzOi8vZC5zeW1jYi5jb20vcnBhMB8GA1UdIwQYMBaAFF9g z2GQVd+EQxSKYCqy9Xr0QxjvMCsGA1UdHwQkMCIwIKAeoByGGmh0dHA6Ly9zcy5z eW1jYi5jb20vc3MuY3JsMFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0 cDovL3NzLnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL3NzLnN5bWNiLmNv bS9zcy5jcnQwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB2AN3rHSt6DU+mIIuB rYFocH4ujp0B1VyIjT0RxM227L7MAAABWhPhmAgAAAQDAEcwRQIhAJaqp8Nm562s e8A6Gh4PWw/zSw/ju4mrQm5abNhJ4eJ4AiBfpLZCdQ5nJVLWHTAQeIwCak/2QVMe Qi2QggE6VSGOVQB2AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAAB WhPhmCcAAAQDAEcwRQIgeesPm6edfBCFwN6XK5WIypGjiIqOifJZKJzDGWIbaTMC IQCMRCZo0L7Ri6p8XtSjF9TiIM8eyEXmaQu7bPCmAypAJgB2AO5Lvbd1zmC64UJp H6vhnmajD35fsHLYgwDEe4l6qP3LAAABWhPhmgMAAAQDAEcwRQIgTNwfFHvmEXNT 0GogUI5cp87hejRl9kVtngFMtXY25tQCIQD2qddjSj+qxE6ZEVyRzLnhLpurdrz7 E2U3cfnQ0HtUrjANBgkqhkiG9w0BAQsFAAOCAQEAlQAUy2tpjsylvwTHkDJIDWFI OSUFF8NbMJM86/dgyzoUknjtvZDb8YyZpVNLgzCZKwsnREVars3v4BgsmClFY+tT C3JE6zyTK386FGJZ4oITVQ2LiWGmzhEmeZ9my8AGGksyC9JD/Mh7wpaMvntxzBh3 KK4hDheA0gQB3ew8JbkpKE/lNP4az5+8xIVwwzzUoZDrk48qNbVRsydd2zdPIAVn /lGqthevwM4uAPAsO49Nw0zxpY6Lki/Nm4ehoGpHqpHaa3i1JKAmhcdD+kJjrOd/ rlWgDgl3PcIzY4OQmntkcSSZzgoIo3SSvOG/sn6b5MX/I2bLU8qcQ6j1qN13Xg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1MQUkagOsj34g6PavGD FeKzYHWXGBPplX6aRTQAPbmpvslLdI89+DlTa0rOXHAQHobJ0Pu3NfIRz0QbA5NI TODT3r0cUddW9Af23k0HE4AIZf05rYllu1czw1yDX2EOU1pWy8VdSV2J+3XkTQ9R 9b1B2jRTdr2IuwF8MgWrxnFIe5DCM5oNB3werss5XpaZsJ6rUWFmU3jy3n+6l9F0 aru7LyfP02Uh2wAe8qvnL8XwMRL/Ta3/AdTmP28O6PpYKjxxAnHrKNJanN3WHYWr JcfR0VjaRlLYCL7fjGgNgEfU6BBH4emWzlnzHnZKWyhJauqBqQp+cTWnhPNjQSS2 2wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 111269921592411950846500795923455535198 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-07 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Louisiana' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Monroe' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CenturyLink' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'FOSS Operations Support Team' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.cloud.centurylink.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24657429732794090289952850337890703477652581712505105971893253092499155287100597635534721441671606581794371052461298161683346714003510022031689119804813541151765234780440273199144468174898423906997500714339596224941321343116709508449987308213644601679923943476897682199010729210176504590042372947316083678139846269590863227518997915604234410182158365526985103375664659423977809353230232332118684938379480734554013624504433575918200991522630108998866369850698963975120187311968469230922121059869520488040345079013113426064817248220286712849209100989799229423822222521934213516113246254394306574151104025683226398078683 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cloud.centurylink.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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