global.nba.com

- NBA Media Ventures, LLC -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 79:26:95:35:a7:e8:d6:44:fe:cc:bd:8c:8c:fd:7a:e9 was issued on by Symantec Corporation.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

NBA Media Ventures, LLC

Organization: NBA Media Ventures, LLC
Organization unit: Media Operations & Technology
State / Province: New York
Locality: New York
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 79:26:95:35:a7:e8:d6:44:fe:cc:bd:8c:8c:fd:7a:e9
Serial Number (int): 161036921100688180715629283506839714537
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 54:ec:dd:9e:d9:86:57:0d:a7:e0:d3:49:96:d0:fd:99:d2:86:78:fd
Fingerprint (sha256): 00:41:5f:c9:94:7f:77:31:eb:94:07:d0:e1:89:f1:91:13:75:9e:f3:ac:5b:55:55:c4:7f:72:15:6f:90:88:17

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate global.nba.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for global.nba.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

delaware.dleague.nba.com
fr.glob-prev3.nba.com
uk.glob-prev3.nba.com
siouxfalls.dleague.nba.com
raptors905.dleague.nba.com
bakersfield.dleague.nba.com
iowa.dleague-dev.nba.com
ak-static.cms-qa.nba.com
mx.glob-prev3.nba.com
grandrapids.dleague.nba.com
canton.dleague.nba.com
ar.global.nba.com
northernarizona.dleague-dev.nba.com
ar.glob-prev3.nba.com
gr.glob-prev3.nba.com
reno.dleague-dev.nba.com
de.glob-prev3.nba.com
en.glob-prev3.nba.com
es.global.nba.com
windycity.dleague.nba.com
greensboro.dleague.nba.com
santacruz.dleague.nba.com
longisland.dleague.nba.com
au.global.nba.com
it.glob-prev3.nba.com
tw.glob-prev3.nba.com
riograndevalley.dleague-dev.nba.com
saltlakecity.dleague-dev.nba.com
au.glob-prev3.nba.com
nz.glob-prev3.nba.com
idaho.dleague-dev.nba.com
fortwayne.dleague.nba.com
erie.dleague.nba.com
westchester.dleague.nba.com
stats-prod.dleague.nba.com
ru.global.nba.com
enebea.glob-prev3.nba.com
de.global.nba.com
ftwayne.dleague-dev.nba.com
ak-static.cms-dev.nba.com
texas.dleague.nba.com
santacruz.dleague-dev.nba.com
okc.dleague.nba.com
northernarizona.dleague.nba.com
idaho.dleague.nba.com
ak-static.cms.nba.com
pt.global.nba.com
tr.glob-prev3.nba.com
reno.dleague.nba.com
westchester.dleague-dev.nba.com
oklahomacity.dleague-dev.nba.com
gr.global.nba.com
saltlakecity.dleague.nba.com
il.global.nba.com
maine.dleague-dev.nba.com
ftwayne.dleague.nba.com
it.global.nba.com
enebea.global.nba.com
mi-prev3.nba.com
canton.dleague-dev.nba.com
austin.dleague-dev.nba.com
siouxfalls.dleague-dev.nba.com
grandrapids.dleague-dev.nba.com
losangeles.dleague-dev.nba.com
en.global.nba.com
es.glob-prev3.nba.com
maine.dleague.nba.com
nz.global.nba.com
tw.global.nba.com
longisland.dleague-dev.nba.com
oklahomacity.dleague.nba.com
ru.glob-prev3.nba.com
bakersfield.dleague-dev.nba.com
raptors905.dleague-dev.nba.com
riograndevalley.dleague.nba.com
jp.global.nba.com
windycity.dleague-dev.nba.com
fortwayne.dleague-dev.nba.com
fr.global.nba.com
erie.dleague-dev.nba.com
africa.global.nba.com
uk.global.nba.com
pt.glob-prev3.nba.com
africa.glob-prev3.nba.com
tr.global.nba.com
okc.dleague-dev.nba.com
rgv.dleague-dev.nba.com
delaware.dleague-dev.nba.com
dleague.nba.com
rgv.dleague.nba.com
jp.glob-prev3.nba.com
mx.global.nba.com
greensboro.dleague-dev.nba.com
iowa.dleague.nba.com
stats-prod.dleague-dev.nba.com
losangeles.dleague.nba.com
austin.dleague.nba.com
texas.dleague-dev.nba.com
il.glob-prev3.nba.com
global.nba.com

Other certificates including the domain name nba.com

(limited to 100 certificates)
sp.gosanangelo.com
www-all.nba.com
secure.nba.com
global.nba.com
classroom.nba.com
allball.blogs.nba.com
takrun.org
stage.nba.com
hk.nba.com
cmp.channelpartner.de
store.nba.com
google-videos-qa.nba.com
nbaevents.nba.com
ct-sand.nba.com
r2.shared.global.fastly.net
audience.nba.com
webmail.hk.nba.com
google-videos-dev.nba.com
sdc.turner.com
www-all.nba.com
fidelity.nba.com
on.nba.com
ca.nba.com
nbafantasy.nba.com
fantasy.india.nba.com
nba.com
mvpvote.nba.com
sni330fgl.wpc.edgecastcdn.net
a.data.nba.com
techtips.nba.com
audience.nba.com
madants.gleague.nba.com
r2.shared.global.fastly.net
esinniobiwaquareeb.live
nba.com
store.nba.com
account-staging.nba.com
account.nba.com
play.nba.com
sdc.turner.com
www-all.nba.com
hk.nba.com
store.nba.com
*.nba.com
nba.com
nbae-support.nba.com
*.global.nba.com
*.nba.com
sni330fgl.wpc.edgecastcdn.net
google-videos-qa.nba.com
polls.turner.com
hk.nba.com
aspera.nba.com
exec.nba.com
webmail.sh.nba.com
returns.store.nba.com
www.turner.com
teamvideo.nba.com
ik.imagekit.io
dleaguestore.nba.com
akamai-san88.exacttarget.com
www-all.nba.com
dev.turner.com
vpnsh.nba.com
lrmedia.nba.com
vegasexpo.nba.com
www.sidekick.management
ik.imagekit.io
assets.nba.com
r2.shared.global.fastly.net
nbafantasy.nba.com
www.vegasexpo.nba.com
checkin.nba.com
*.internal.nba.com
sa1gl.wpc.edgecastcdn.net
www.turner.com
picks.nba.com
ct.nba.com
ik.imagekit.io
centercourtlive.nba.com
sdc.turner.com
audience.lab.nba.com
*.nba.com
*.nba.com
stage.nba.com
vpnhk.nba.com
consent.planetradio.co.uk
emediate.com.br
google-videos-qa.nba.com
global.nba.com
content.nba.com
gr.leaguepass.nba.com
stage.nba.com
smetrics.global.nba.com
nbaevents.nba.com
www.docsupport.nba.com
mydepartment.nba.com
audience.lab.nba.com
exec.nba.com
photostore.nba.com

Certificate

The complete raw certificate details for global.nba.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIQXzCCD0egAwIBAgIQeSaVNafo1kT+zL2MjP166TANBgkqhkiG9w0BAQsFADB+
MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAd
BgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxLzAtBgNVBAMTJlN5bWFudGVj
IENsYXNzIDMgU2VjdXJlIFNlcnZlciBDQSAtIEc0MB4XDTE3MDcyODAwMDAwMFoX
DTE4MTAyNzIzNTk1OVowgZYxCzAJBgNVBAYTAlVTMREwDwYDVQQIDAhOZXcgWW9y
azERMA8GA1UEBwwITmV3IFlvcmsxIDAeBgNVBAoMF05CQSBNZWRpYSBWZW50dXJl
cywgTExDMSYwJAYDVQQLDB1NZWRpYSBPcGVyYXRpb25zICYgVGVjaG5vbG9neTEX
MBUGA1UEAwwOZ2xvYmFsLm5iYS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDoZwob1jZxTpSRfu7+51bT6dA5KfYCkUtq3hn6nEPsWV3oO1LPd4DI
HwxJ237+F4tgzJHAtvQJ8BnaAnYZw07GXgVifMq0IvTI8f4/DgYxMP41wku97IIF
h0OZmofAT97AbwspWj6lG7LzNlz5W6v53uGWfxlomwNvKr581dremsmBF6D9Ocjh
9lO0NSMvsrsjHcT8oZcOCY7JeqUowF35JwKl6vhCe2wy4cx2J4pVapgfVeUOkuhH
T6940vIfyv4waAFjRajQrnKOoBUtL1B3Cb/RNLP5SetqePVClTS71FhnIHCuWybD
QSZ/1/CUuT5ZKUSxekoKrVxpC9/ghGphAgMBAAGjggy+MIIMujCCCe4GA1UdEQSC
CeUwggnhghhkZWxhd2FyZS5kbGVhZ3VlLm5iYS5jb22CFWZyLmdsb2ItcHJldjMu
bmJhLmNvbYIVdWsuZ2xvYi1wcmV2My5uYmEuY29tghpzaW91eGZhbGxzLmRsZWFn
dWUubmJhLmNvbYIacmFwdG9yczkwNS5kbGVhZ3VlLm5iYS5jb22CG2Jha2Vyc2Zp
ZWxkLmRsZWFndWUubmJhLmNvbYIYaW93YS5kbGVhZ3VlLWRldi5uYmEuY29tghhh
ay1zdGF0aWMuY21zLXFhLm5iYS5jb22CFW14Lmdsb2ItcHJldjMubmJhLmNvbYIb
Z3JhbmRyYXBpZHMuZGxlYWd1ZS5uYmEuY29tghZjYW50b24uZGxlYWd1ZS5uYmEu
Y29tghFhci5nbG9iYWwubmJhLmNvbYIjbm9ydGhlcm5hcml6b25hLmRsZWFndWUt
ZGV2Lm5iYS5jb22CFWFyLmdsb2ItcHJldjMubmJhLmNvbYIVZ3IuZ2xvYi1wcmV2
My5uYmEuY29tghhyZW5vLmRsZWFndWUtZGV2Lm5iYS5jb22CFWRlLmdsb2ItcHJl
djMubmJhLmNvbYIVZW4uZ2xvYi1wcmV2My5uYmEuY29tghFlcy5nbG9iYWwubmJh
LmNvbYIZd2luZHljaXR5LmRsZWFndWUubmJhLmNvbYIaZ3JlZW5zYm9yby5kbGVh
Z3VlLm5iYS5jb22CGXNhbnRhY3J1ei5kbGVhZ3VlLm5iYS5jb22CGmxvbmdpc2xh
bmQuZGxlYWd1ZS5uYmEuY29tghFhdS5nbG9iYWwubmJhLmNvbYIVaXQuZ2xvYi1w
cmV2My5uYmEuY29tghV0dy5nbG9iLXByZXYzLm5iYS5jb22CI3Jpb2dyYW5kZXZh
bGxleS5kbGVhZ3VlLWRldi5uYmEuY29tgiBzYWx0bGFrZWNpdHkuZGxlYWd1ZS1k
ZXYubmJhLmNvbYIVYXUuZ2xvYi1wcmV2My5uYmEuY29tghVuei5nbG9iLXByZXYz
Lm5iYS5jb22CGWlkYWhvLmRsZWFndWUtZGV2Lm5iYS5jb22CGWZvcnR3YXluZS5k
bGVhZ3VlLm5iYS5jb22CFGVyaWUuZGxlYWd1ZS5uYmEuY29tght3ZXN0Y2hlc3Rl
ci5kbGVhZ3VlLm5iYS5jb22CGnN0YXRzLXByb2QuZGxlYWd1ZS5uYmEuY29tghFy
dS5nbG9iYWwubmJhLmNvbYIZZW5lYmVhLmdsb2ItcHJldjMubmJhLmNvbYIRZGUu
Z2xvYmFsLm5iYS5jb22CG2Z0d2F5bmUuZGxlYWd1ZS1kZXYubmJhLmNvbYIZYWst
c3RhdGljLmNtcy1kZXYubmJhLmNvbYIVdGV4YXMuZGxlYWd1ZS5uYmEuY29tgh1z
YW50YWNydXouZGxlYWd1ZS1kZXYubmJhLmNvbYITb2tjLmRsZWFndWUubmJhLmNv
bYIfbm9ydGhlcm5hcml6b25hLmRsZWFndWUubmJhLmNvbYIVaWRhaG8uZGxlYWd1
ZS5uYmEuY29tghVhay1zdGF0aWMuY21zLm5iYS5jb22CEXB0Lmdsb2JhbC5uYmEu
Y29tghV0ci5nbG9iLXByZXYzLm5iYS5jb22CFHJlbm8uZGxlYWd1ZS5uYmEuY29t
gh93ZXN0Y2hlc3Rlci5kbGVhZ3VlLWRldi5uYmEuY29tgiBva2xhaG9tYWNpdHku
ZGxlYWd1ZS1kZXYubmJhLmNvbYIRZ3IuZ2xvYmFsLm5iYS5jb22CHHNhbHRsYWtl
Y2l0eS5kbGVhZ3VlLm5iYS5jb22CEWlsLmdsb2JhbC5uYmEuY29tghltYWluZS5k
bGVhZ3VlLWRldi5uYmEuY29tghdmdHdheW5lLmRsZWFndWUubmJhLmNvbYIRaXQu
Z2xvYmFsLm5iYS5jb22CFWVuZWJlYS5nbG9iYWwubmJhLmNvbYIQbWktcHJldjMu
bmJhLmNvbYIaY2FudG9uLmRsZWFndWUtZGV2Lm5iYS5jb22CGmF1c3Rpbi5kbGVh
Z3VlLWRldi5uYmEuY29tgh5zaW91eGZhbGxzLmRsZWFndWUtZGV2Lm5iYS5jb22C
H2dyYW5kcmFwaWRzLmRsZWFndWUtZGV2Lm5iYS5jb22CHmxvc2FuZ2VsZXMuZGxl
YWd1ZS1kZXYubmJhLmNvbYIRZW4uZ2xvYmFsLm5iYS5jb22CFWVzLmdsb2ItcHJl
djMubmJhLmNvbYIVbWFpbmUuZGxlYWd1ZS5uYmEuY29tghFuei5nbG9iYWwubmJh
LmNvbYIRdHcuZ2xvYmFsLm5iYS5jb22CHmxvbmdpc2xhbmQuZGxlYWd1ZS1kZXYu
bmJhLmNvbYIcb2tsYWhvbWFjaXR5LmRsZWFndWUubmJhLmNvbYIVcnUuZ2xvYi1w
cmV2My5uYmEuY29tgh9iYWtlcnNmaWVsZC5kbGVhZ3VlLWRldi5uYmEuY29tgh5y
YXB0b3JzOTA1LmRsZWFndWUtZGV2Lm5iYS5jb22CH3Jpb2dyYW5kZXZhbGxleS5k
bGVhZ3VlLm5iYS5jb22CEWpwLmdsb2JhbC5uYmEuY29tgh13aW5keWNpdHkuZGxl
YWd1ZS1kZXYubmJhLmNvbYIdZm9ydHdheW5lLmRsZWFndWUtZGV2Lm5iYS5jb22C
EWZyLmdsb2JhbC5uYmEuY29tghhlcmllLmRsZWFndWUtZGV2Lm5iYS5jb22CFWFm
cmljYS5nbG9iYWwubmJhLmNvbYIRdWsuZ2xvYmFsLm5iYS5jb22CFXB0Lmdsb2It
cHJldjMubmJhLmNvbYIZYWZyaWNhLmdsb2ItcHJldjMubmJhLmNvbYIRdHIuZ2xv
YmFsLm5iYS5jb22CF29rYy5kbGVhZ3VlLWRldi5uYmEuY29tghdyZ3YuZGxlYWd1
ZS1kZXYubmJhLmNvbYIcZGVsYXdhcmUuZGxlYWd1ZS1kZXYubmJhLmNvbYIPZGxl
YWd1ZS5uYmEuY29tghNyZ3YuZGxlYWd1ZS5uYmEuY29tghVqcC5nbG9iLXByZXYz
Lm5iYS5jb22CEW14Lmdsb2JhbC5uYmEuY29tgh5ncmVlbnNib3JvLmRsZWFndWUt
ZGV2Lm5iYS5jb22CFGlvd2EuZGxlYWd1ZS5uYmEuY29tgh5zdGF0cy1wcm9kLmRs
ZWFndWUtZGV2Lm5iYS5jb22CGmxvc2FuZ2VsZXMuZGxlYWd1ZS5uYmEuY29tghZh
dXN0aW4uZGxlYWd1ZS5uYmEuY29tghl0ZXhhcy5kbGVhZ3VlLWRldi5uYmEuY29t
ghVpbC5nbG9iLXByZXYzLm5iYS5jb22CDmdsb2JhbC5uYmEuY29tMAkGA1UdEwQC
MAAwDgYDVR0PAQH/BAQDAgWgMGEGA1UdIARaMFgwVgYGZ4EMAQICMEwwIwYIKwYB
BQUHAgEWF2h0dHBzOi8vZC5zeW1jYi5jb20vY3BzMCUGCCsGAQUFBwICMBkMF2h0
dHBzOi8vZC5zeW1jYi5jb20vcnBhMCsGA1UdHwQkMCIwIKAeoByGGmh0dHA6Ly9z
cy5zeW1jYi5jb20vc3MuY3JsMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjAfBgNVHSMEGDAWgBRfYM9hkFXfhEMUimAqsvV69EMY7zBXBggrBgEFBQcBAQRL
MEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9zcy5zeW1jZC5jb20wJgYIKwYBBQUHMAKG
Gmh0dHA6Ly9zcy5zeW1jYi5jb20vc3MuY3J0MIIBgAYKKwYBBAHWeQIEAgSCAXAE
ggFsAWoAdwDd6x0reg1PpiCLga2BaHB+Lo6dAdVciI09EcTNtuy+zAAAAV2J8dL5
AAAEAwBIMEYCIQC/ncyx62OmDjKeCsdp+4xiu+1ESxlCP/UjbCEIsaqZSgIhAIn7
kXCSDegVn6n6g9p2kriZnO7UfD6U/z40+R7z6O8tAHYApLkJkLQYWBSHuxOizGdw
Cjw1mAT5G9+443fNDsgN3BAAAAFdifHTLQAABAMARzBFAiEAglFHYfoJ2T10U/3A
sSGG73M85BmtWDmrG+hd7Od1dOACICf/b8Zc4UycfzrjqI9E6etUBAg4yjRhJZev
LbktUBdxAHcA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo/csAAAFdifHT
iwAABAMASDBGAiEA26wynYgiie6xVisl1oGQh4enJUvOwcCAsAYv40/aTpcCIQDk
t3iG0lYEe3W7VWI0+modZnvSuhdbkl/UkwxXMQRXZTANBgkqhkiG9w0BAQsFAAOC
AQEAa2Sf/Ufw1cTmZvyGo0O0vXy9wAufa+N5zkC3ClKxmVDkrlb2+U1L9b0vbIzw
ceQoq8KYyioYiOeHys7xPj+5CXkLyREg7H39pyTBR2fWsbf11GIcstTZbqQMeVuH
fXPHa8WoryWxrvEgmfRF1Of7S44ZuV7nu0A1FnR6LxbbFEIlhQXwvheIBYfRwL3p
kYxPYp/Ekduik4oDmLFlryAX/xhM2yd3J1Fxg+Q81k0C8BTcoIFd46orPRWVanlc
SZryRdgnuwJmGFJOlnjinxK9Iq2e5AsoTibDUizdtGzjB/LrGMEDQTl+zXKBe0Ar
hdhvE0icL716C7uBjaP3365Aqg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GcKG9Y2cU6UkX7u/udW
0+nQOSn2ApFLat4Z+pxD7Fld6DtSz3eAyB8MSdt+/heLYMyRwLb0CfAZ2gJ2GcNO
xl4FYnzKtCL0yPH+Pw4GMTD+NcJLveyCBYdDmZqHwE/ewG8LKVo+pRuy8zZc+Vur
+d7hln8ZaJsDbyq+fNXa3prJgReg/TnI4fZTtDUjL7K7Ix3E/KGXDgmOyXqlKMBd
+ScCper4QntsMuHMdieKVWqYH1XlDpLoR0+veNLyH8r+MGgBY0Wo0K5yjqAVLS9Q
dwm/0TSz+Unranj1QpU0u9RYZyBwrlsmw0Emf9fwlLk+WSlEsXpKCq1caQvf4IRq
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 161036921100688180715629283506839714537
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NBA Media Ventures, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Media Operations & Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'global.nba.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29338097417030640547873123217286274920237769617122856688507762170822681267409376094639846524178493753158538883656698022765080091062730692142660196817017308266079435669715939917293312915825979143871842961641598680051900460804120239252453560204025249374007128594123948857082382255583570293328988619462158472678097726775543817184981336234079722748724252720361300173862467467321397153266531036172956070938826047502006504555038719286490230329614397438277593194161650537232732806906526579087700602984424206124712976603437254403228205181145311803720925642064863987730735718476707206755345187584072109881360694319854135831137
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2533 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delaware.dleague.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.glob-prev3.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.glob-prev3.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siouxfalls.dleague.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raptors905.dleague.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakersfield.dleague.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowa.dleague-dev.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ak-static.cms-qa.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx.glob-prev3.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandrapids.dleague.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canton.dleague.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.global.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northernarizona.dleague-dev.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ar.glob-prev3.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gr.glob-prev3.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reno.dleague-dev.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de.glob-prev3.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'en.glob-prev3.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.global.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windycity.dleague.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greensboro.dleague.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santacruz.dleague.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longisland.dleague.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'au.global.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.glob-prev3.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.glob-prev3.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riograndevalley.dleague-dev.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saltlakecity.dleague-dev.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'au.glob-prev3.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nz.glob-prev3.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idaho.dleague-dev.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortwayne.dleague.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erie.dleague.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westchester.dleague.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stats-prod.dleague.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ru.global.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enebea.glob-prev3.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de.global.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftwayne.dleague-dev.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ak-static.cms-dev.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texas.dleague.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santacruz.dleague-dev.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okc.dleague.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northernarizona.dleague.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idaho.dleague.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ak-static.cms.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pt.global.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tr.glob-prev3.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reno.dleague.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westchester.dleague-dev.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oklahomacity.dleague-dev.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gr.global.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saltlakecity.dleague.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'il.global.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maine.dleague-dev.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftwayne.dleague.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.global.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enebea.global.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi-prev3.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canton.dleague-dev.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'austin.dleague-dev.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siouxfalls.dleague-dev.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandrapids.dleague-dev.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'losangeles.dleague-dev.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'en.global.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.glob-prev3.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maine.dleague.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nz.global.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.global.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longisland.dleague-dev.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oklahomacity.dleague.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ru.glob-prev3.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakersfield.dleague-dev.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raptors905.dleague-dev.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riograndevalley.dleague.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jp.global.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windycity.dleague-dev.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fortwayne.dleague-dev.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.global.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erie.dleague-dev.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'africa.global.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.global.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pt.glob-prev3.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'africa.glob-prev3.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tr.global.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okc.dleague-dev.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rgv.dleague-dev.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delaware.dleague-dev.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dleague.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rgv.dleague.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jp.glob-prev3.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx.global.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greensboro.dleague-dev.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iowa.dleague.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stats-prod.dleague-dev.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'losangeles.dleague.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'austin.dleague.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'texas.dleague-dev.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'il.glob-prev3.nba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'global.nba.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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