ebtest-1bw-fccssqsa.wellsfargo.com

- Wells Fargo & Company -

Issued by Wells Fargo Certificate Authority WS1

About this certificate

This digital certificate with serial number 3c:aa:46:2c:ba:b2:76:66:f5:16:cd:e4:d4:62:3d:2e was issued on by Wells Fargo.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Wells Fargo & Company

Organization: Wells Fargo & Company
Organization unit: NSPAE-WAF
State / Province: California
Locality: San Francisco
Country: US

Wells Fargo

Organization: Wells Fargo
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3c:aa:46:2c:ba:b2:76:66:f5:16:cd:e4:d4:62:3d:2e
Serial Number (int): 80637793525537239076774128700207807790
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 26:81:a4:be:ad:cc:8a:01:72:1b:de:c1:e3:f2:e1:08:4d:b8:09:de
AuthorityKeyId: fe:08:e3:63:85:07:7e:f5:00:58:89:b3:89:a9:4f:ed:0f:0a:41:4f

Fingerprint (sha1): f0:3f:d1:6f:37:8f:d3:60:e3:c6:a2:be:ab:4a:59:3f:e1:53:28:01
Fingerprint (sha256): 00:6d:ef:e5:41:80:39:ac:ec:f0:4d:4c:67:39:b2:f9:e6:30:3c:37:c5:e0:7e:1c:0a:45:05:55:f6:2d:06:d0

Issuing Certificate URL: http://mssl-aia.ws.symantec.com/PrivateCA/821017909-RSA-SHA256.cer

Revocation information

OCSP Server: http://mssl-ocsp.ws.symantec.com
CRL Distribution Point: http://mssl-crl.ws.symantec.com/PrivateCA/821017909-RSA-SHA256.crl

Check the revocation status for certificate ebtest-1bw-fccssqsa.wellsfargo.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ebtest-1bw-fccssqsa.wellsfargo.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ebtest-1bw-fccssqsa.wellsfargo.com
authcte.fccaccessonline.com
cte-auth.fccaccessonline.com
oxi-cte-userconversion.fccaccessonline.com
userconversioncte.fccaccessonline.com

Other certificates including the domain name wellsfargo.com

(limited to 100 certificates)
teamworks-uat.wellsfargo.com
st-adhoc.wellsfargo.com
ceosvfix.wellsfargo.com
ceomediauat.wellsfargo.com
achgpuat1.wellsfargo.com
mposapi-uat.wellsfargo.com
retirement-bpo-s-prod.wellsfargo.com
bwl.wellsfargo.com
acctagg.wellsfargo.com
proxy-ewpcs.wellsfargo.com
www.retirementcity.wellsfargo.com
ectz5863r9.wellsfargo.com
mwapp-sit2.wellsfargo.com
edisclosure-pm.wellsfargo.com
qa-static.evetest.wellsfargo.com
ectv4022r5.wellsfargo.com
imagenet-mortgage-uat.wellsfargo.com
st-adhoc.wellsfargo.com
uat-wib.isgpp.wellsfargo.com
ebtest-1bw-fccssqsa.wellsfargo.com
wellsorders.ceo.wellsfargo.com
wellsfs.wellsfargo.com
esignature.wellsfargo.com
equitylinkedreporting.wellsfargo.com
wellsreport.wellsfargo.com
ectx4004r8v.wellsfargo.com
tradeworks-wca.wellsfargo.com
backoffice.wellsfargo.com
eservices.wellsfargodealerservices.com
mxdalpv05.wellsfargo.com
mdm-qa.msgqa.wellsfargo.com
myedpulse.wellsfargo.com
wwwfix.ctslink.com
marketdata.wellsfargo.com
wellscontentfix.wellsfargo.com
onlinedecisiontool.wellsfargo.com
sit-www.evetest.wellsfargo.com
wellscontentuat.wellsfargo.com
pasline-uat.wellsfargo.com
wfadvisors-prod1.wellsfargo.com
marketdata.wellsfargo.com
labs.wellsfargo.com
wellsceopafix.ceo.wellsfargo.com
www.wellsfargoassetmanagement.com
procuretopay.wellsfargo.com
oxi-m-cte-broker.wellsfargo.com
401knext-uat.wellsfargo.com
deposit.wellsfargo.com
servicesuat.ceo.wellsfargo.com
bcereporting-sit.wellsfargo.com
ofxtax.wellsfargo.com
teamworks2-uat.wellsfargo.com
wellswcapa.sec.wellsfargo.com
www-wellsfargoadvisors.wellsfargo.com
cashops-uat.wellsfargo.com
cms.wellsfargo.com
ifs-cra.wellsfargo.com
cm-pfix.ceo.wellsfargo.com
ectv5858r8v.wellsfargo.com
creditweb-ist.wellsfargo.com
safe-t.wellsfargo.com
www.wellsfargo.com
pyd-WS2-client.wellsfargo.com
RAS-AZ-A.wellsfargo.com
3PV-TL3P003L.WELLSFARGO.COM
wfa-d-1trdfix-msg-v-01.wellsfargo.com
P2P-CLX.test.wellsfargo.com
retirement-bpo-uat.wellsfargo.com
ebprod-1bw-retail.wellsfargo.com
wmidsa.wellsfargo.com
pyd-WQE-client.wellsfargo.com
wfa-t-1trdapi-websvc-v-00.wellsfargo.com
hulavc-n-sit.wellsfargo.com
csfedportal-ext.wellsfargo.com
csfactor-uat.wellsfargo.com
m-wfadvisorbroker-cte1.wellsfargo.com
stg-admin.wellsfargo.com
wellstrustfix.wellsfargo.com
retirementservices-uat.wellsfargo.com
studentinsurance-uat.wellsfargo.com
ebprod-1wfw-wfapublic.wellsfargo.com
whlsleretirement-uat.wellsfargo.com
voltage-ps-0000.msgdev.wellsfargo.com
accountservices-wellsonecard.wellsfargo.com
godigitaldesktop.wellsfargo.com
ectv4008r8v.wellsfargo.com
coms-ceo-uat.wellsfargo.com
api-enterprise1.wellsfargo.com
ect-lab-6912r5a.wellsfargo.com
m.wellsfargo.com
teamworks-uat.wellsfargo.com
nc2-qaapm-pfe-wtwt.wellsfargo.com
gpow.wellsfargo.com
corporateretirementportal.wellsfargo.com
fundservicesreporting.wellsfargo.com
sourcing.wellsfargo.com
ifs-cra-bcp.wellsfargo.com
ectx4020r8v.wellsfargo.com
eddwtuat.ceo.wellsfargo.com
scf-apps.wellsfargo.com

Certificate

The complete raw certificate details for ebtest-1bw-fccssqsa.wellsfargo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAno4jqw224XAw86rzG8gd
f5h71tRbb4k+ukwerrs3JInNqxLWwxJ1eKzCv+A6iW1gM0Twxs6fqx/j16O4f9yr
970s5lAddp5UtCRSvOqhBC0rHZOV/NdbvJOZHGHtJG4E5gnGoYUEqCJW6JBd65DW
gjFjQJO6EYwT5/pJ/RfEXyrb+MfrfORKPdcuLQDf3V6bphBulcSO2PNHwNT45GB+
w7WVJVPBHl2ZUuc1bUBtmki2WoU4aOWyP26aWM2n7N5L1DzZ2BIJMHGC+S9ZNavB
C9Wp7+tCS4AfscnYwLumYjRGYBWOzSTmlUlR7l7c/MFJsjcmsPsaGwK4binr6jvH
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 80637793525537239076774128700207807790
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wells Fargo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wells Fargo Certificate Authority WS1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Wells Fargo & Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NSPAE-WAF'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ebtest-1bw-fccssqsa.wellsfargo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20015743700025140401119349942242013347056095501139352851142241674620620517480521133045092479824023823608631709549209807623314632937133127037709081650660966573939720100637791303006034493507412947643292779183800531135312965298199833239050889745080651222105871296557694636680215515814209828453404449046322937261314556647353069833875438782260053538523725452705819575735479506823449874604202657224309168677932534423233140025832104231096972935631625926663070367054606258627131441637327499848922158692392373363965940698030407567028246756827346064265667133948839487054523015183975067309798979906974563009301002876060476098547
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (181 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebtest-1bw-fccssqsa.wellsfargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authcte.fccaccessonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cte-auth.fccaccessonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oxi-cte-userconversion.fccaccessonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'userconversioncte.fccaccessonline.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2681a4beadcc8a01721bdec1e3f2e1084db809de
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fe08e36385077ef5005889b389a94fed0f0a414f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mssl-crl.ws.symantec.com/PrivateCA/821017909-RSA-SHA256.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (128 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mssl-ocsp.ws.symantec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mssl-aia.ws.symantec.com/PrivateCA/821017909-RSA-SHA256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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