sfgretail-uat.corp.cvscaremark.com

- CVS Health -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 11:bd:0c:a9:79:0d:e9:de:fd:4e:35:44:df:36:dd:93 was issued on by Symantec Corporation.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

CVS Health

Organization: CVS Health
Organization unit: I/S Security
Organization unit: For Intranet Use Only
State / Province: Rhode Island
Locality: Woonsocket
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 11:bd:0c:a9:79:0d:e9:de:fd:4e:35:44:df:36:dd:93
Serial Number (int): 23578476850545867640733145902454594963
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): cc:7c:f6:38:3d:64:ca:34:83:d7:1f:72:79:74:bd:bb:ca:05:97:b8
Fingerprint (sha256): 00:8e:51:35:61:3f:62:64:b4:1d:a5:2f:2b:7a:d5:ed:5b:84:40:a3:97:31:06:02:6c:52:12:82:00:49:37:21

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate sfgretail-uat.corp.cvscaremark.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sfgretail-uat.corp.cvscaremark.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rri1psysdl7v.corp.cvscaremark.com
rri1psysdl6v.corp.cvscaremark.com
rri1psysdl10v.corp.cvscaremark.com
rri1psysdl19v.corp.cvscaremark.com
rri1psysdl9v.corp.cvscaremark.com
rri1psysdl8v.corp.cvscaremark.com
rri1psysdl14v.corp.cvscaremark.com
rri1psysdl29v.corp.cvscaremark.com
rri1psysdl24v.corp.cvscaremark.com
sfgretail-uat.corp.cvscaremark.com

Other certificates including the domain name cvscaremark.com

(limited to 100 certificates)
PAZ1VAWBPW1V.corp.cvscaremark.com
KMPCI-WEST.corp.cvscaremark.com
PAZ1MCSSQLUW2V.corp.cvscaremark.com
rri1kafaul10v.corp.cvscaremark.com
rri2omnada003.corp.cvscaremark.com
f48205inv.corp.cvscaremark.com
PRI1FAZPW9V.corp.cvscaremark.com
PAZ1FAZDW5V.corp.cvscaremark.com
rri2sndapl10v.corp.cvscaremark.com
esl-dev-east.corp.cvscaremark.com
rxcsys.caremarkrx.net
webportaluat.acs-rx.com
preprod-eoms.corp.cvscaremark.com
www.WebPortalCoreAPICommon.corp.cvscaremark.com
eaz1eamppp10p.aetna.com
paz1hdpcdl5p.corp.cvscaremark.com
psfb.corp.cvscaremark.com
eastscim.corp.cvscaremark.com
spmfinder-pt.corp.cvscaremark.com
eaz1sispw05v.corp.cvscaremark.com
RRI2VFINTO1V.corp.cvscaremark.com
RCA1WCSATW1V.corp.cvscaremark.com
rri1pmpau2r1a.corp.cvscaremark.com
sfgretail-uat.corp.cvscaremark.com
rsfb.corp.cvscaremark.com
rri2pnddnl1v.corp.cvscaremark.com
PFL14VDIPROD.corp.cvscaremark.com
sr-api.corp.cvscaremark.com
PAZ1RECDDW11V.corp.cvscaremark.com
eslwsrr-pe-west.corp.cvscaremark.com
policy.corp.cvscaremark.com
PAZ1RXEDQW9V.corp.cvscaremark.com
TfsAppPrd.corp.cvscaremark.com
rri2lwfdnl2v.corp.cvscaremark.com
rri1ccswtl1v.corp.cvscaremark.com
f48378inv.corp.cvscaremark.com
pil12autopw1v.corp.cvscaremark.com
messagesit3.corp.cvscaremark.com
dev1requestcenter.cvscaremark.com
RRI2ISIAPW1V.corp.cvscaremark.com
f48220inv.corp.cvscaremark.com
stressapi03.corp.cvscaremark.com
rxcpharmacy.DEV.corp.cvscaremark.com
RRI1ARCHDPW1C.corp.cvscaremark.com
rri2tibapa1.corp.cvscaremark.com
msdev-west.corp.cvscaremark.com
www.cmsservice.corp.cvscaremark.com
PAZ1ECMWNW11V.corp.cvscaremark.com
PAZ1VUICPO1V.corp.cvscaremark.com
silverscript.sit4a.meddweb.net
RRI1IDMADL1V.corp.cvscaremark.com
PAZ1CTMDTW1V.CORP.CVSCAREMARK.COM
pri2vcrl5v.corp.cvscaremark.com
PRI1FAZDPW9P.corp.cvscaremark.com
PRI1FAZPW10V.corp.cvscaremark.com
KioKno.cvs.com
esldp-sit1-west.corp.cvscaremark.com
paz1sprxwpl2v.corp.cvscaremark.com
IRI1DGW128.sccm.ilab.cvscaremark.com
dev3-dspservices.corp.cvscaremark.com
raz1rxwplxdb04.corp.cvscaremark.com
insight-dev.caremark.com
sr-tag-test.corp.cvscaremark.com
secureappslb.caremark.com
RIN1TKODUL2V.corp.cvscaremark.com
paz1sqldw74p.corp.cvscaremark.com
www.WebPortalCoreAPIPhysician.sit.corp.cvscaremark.com
raz1pbacpw1v.corp.cvscaremark.com
RRI2OTXDUW1V.corp.cvscaremark.com
egrc-uat.cvscaremark.com
rri2blgrpl2v.corp.cvscaremark.com
b2b.cvshealth.com
raz1r2oapl10v.corp.cvscaremark.com
POCS.corp.cvscaremark.com
rri2tibapa1.corp.cvscaremark.com
pedge.corp.cvscaremark.com
PBM-Z-ZLP095.cvs.com
paz1lvedtl10v.corp.cvscaremark.com
rri2incrtw1v.corp.cvscaremark.com
cvsepm-hfm.corp.cvscaremark.com
paz1iceaul1v.corp.cvscaremark.com
rotatordev.corp.cvscaremark.com
FederationE.cvscaremark.com
RRI2VCV3PW1V.corp.cvscaremark.com
f48283inv.corp.cvscaremark.com
uat.myomnicare.corp.cvscaremark.com
owa.corp.cvscaremark.com
Omniview2wayTlsClient-Prd.corp.cvscaremark.com
PAZ1MCSWPW10V.corp.cvscaremark.com
rri1rxieul11v.corp.cvscaremark.com
RRI2OMNDPW36v.CORP.CVSCAREMARK.COM
rri1sapetu1.corp.cvscaremark.com
rri2ivrapl4v.corp.cvscaremark.com
KIOSKLAH2017DEC.CORP.CVSCAREMARK.COM
splunkdevwest1.corp.cvscaremark.com
dbpl-ext-sit1e.corp.cvscaremark.com
AccClientUAT.corp.cvscaremark.com
rri2omndda003.corp.cvscaremark.com
eph-sit2.corp.cvscaremark.com
f48365inv.corp.cvscaremark.com

Certificate

The complete raw certificate details for sfgretail-uat.corp.cvscaremark.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8hfdxb8wWvYA8rJC0M/
Nas77o67uKk+9GFnr4JGMDhpVHbPZIBSaJuORNBXuhsbC62B8sD/o0A7wg9R8UYo
WBoDkzihB8UgopvGozNY717TvBvzdcYEXFaylWyQ8+O4IDLO+thL15gjGKO8dZC0
7VYIoW4QLdQknr1QhQw/CJVINWMPxp+647LtIbIjwYCRRjoEYLTK+caa8wyYc8oX
SgI6wQgOIxW+Nsgv/h8MRHnl8v++9MHqO8heJb/LhDy0Q3QsZm7vfOCOWDuapqr+
Jo05tcJw5VwLvT9GaQQBDB/lICcj19v6l79MAwfsmNEinfjqq87DUv3P9JY7R2+a
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 23578476850545867640733145902454594963
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rhode Island'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Woonsocket'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CVS Health'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'I/S Security'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'For Intranet Use Only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'sfgretail-uat.corp.cvscaremark.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23200417373769810683763548830080977016195798019327543435682797672712747864826742352662137187933182974590850064207754813126859895315158403185938999548590548392557891352453492188706082582967446808538986262477040331533877982800193599986710192137871210883892080498176978996126418606840992985773470441569080589168706544599700422658882527258098862854074407775754018029106596008859953918474322929232332816638368644192849853461197443278387569674574206717591862156888903593466384223396807148723330261678750311785264633413171714997052335477926945944430438372013679446189226571346311723670958531149394355545335164882401681709721
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rri1psysdl7v.corp.cvscaremark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rri1psysdl6v.corp.cvscaremark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rri1psysdl10v.corp.cvscaremark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rri1psysdl19v.corp.cvscaremark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rri1psysdl9v.corp.cvscaremark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rri1psysdl8v.corp.cvscaremark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rri1psysdl14v.corp.cvscaremark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rri1psysdl29v.corp.cvscaremark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rri1psysdl24v.corp.cvscaremark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfgretail-uat.corp.cvscaremark.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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