nllaba-tcm-236.oraclecorp.com

- Oracle Corporation -

Issued by Oracle SSL CA - G2

About this certificate

This digital certificate with serial number 06:87:ef:2e:e4:5a:7a:a2:39:a7:5f:75:7e:b3:aa:06 was issued on by Oracle Corporation.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Oracle Corporation

Organization: Oracle Corporation
Organization unit: Global IT
State / Province: California
Locality: Redwood City
Country: US

Oracle Corporation

Organization: Oracle Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:87:ef:2e:e4:5a:7a:a2:39:a7:5f:75:7e:b3:aa:06
Serial Number (int): 8681179261674410056935148534357010950
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 53:97:8e:7c:9c:01:57:31:99:ee:21:ed:34:6a:56:95:af:a6:43:49
AuthorityKeyId: 60:8c:66:91:5f:49:c8:55:1f:e6:b5:9a:0c:7a:57:65:73:38:b4:a2

Fingerprint (sha1): 42:bb:93:f9:fc:e3:cd:a6:eb:61:94:4b:66:ae:f8:d5:81:00:dd:7c
Fingerprint (sha256): 00:df:d0:d0:7a:68:3c:e9:18:1c:69:8b:84:13:68:b2:51:c1:79:8a:83:8d:53:0a:b3:53:66:ac:e9:75:22:19

Issuing Certificate URL: http://mssl-aia.ws.symantec.com/PrivateCA/440525369-RSA-SHA256.cer

Revocation information

OCSP Server: http://mssl-ocsp.ws.symantec.com
CRL Distribution Point: http://mssl-crl.ws.symantec.com/PrivateCA/440525369-RSA-SHA256.crl

Check the revocation status for certificate nllaba-tcm-236.oraclecorp.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nllaba-tcm-236.oraclecorp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nllaba-tcm-236.oraclecorp.com
nllaba-tcm-237.oraclecorp.com

Other certificates including the domain name oraclecorp.com

(limited to 100 certificates)
*.pbcs.us12.c9mats.oraclecorp.com
iacademy-dev.oraclecorp.com
git00000893.a2-v1-ash1-oragit.oraclecorp.com
pd-sgd-iad-03.sgddsiiad.peocorpiadssv1.oraclevcn.com
academy-stage.oraclecorp.com
*.oraclecorp.com
*.fs.efops.oraclecorp.com
git00002572.orawin.oraclecorp.com
mydesktopmds.oraclecorp.com
*.omc.internal.us5.c9mats.oraclecorp.com
*.epm.us11.mycloud.oraclecorp.com
*.crm.dv2.oraclecloud.devzone.oraclecorp.com
*.otm.us6.c9mats.oraclecorp.com
gmp-dev.oraclecorp.com
cssemstg.appoci.oraclecorp.com
brmepoapp02.us.oracle.com
utiltw.tw.oracle.com
nllaba-tcm-236.oraclecorp.com
hidmp0761.us.oracle.com
gmp-dev.oraclecorp.com
utilhk.hk.oracle.com
*.oraclecloud.env3.c9qa.oraclecorp.com
jpidgv0001.jp.oracle.com
amer1a-cuc-h1c1n1.oraclecorp.com
salescentral-dev.oraclecorp.com
ngcc-integrations.oraclecorp.com
mandaprimavera.oraclecorp.com
*.builder.region-1.c9dev1.oraclecorp.com
*.integration.us3.c9mats.oraclecorp.com
*.apaas.dc1.c9edgga.oraclecorp.com
*.documents.us1.mycloud.oraclecorp.com
vault.appoci.oraclecorp.com
*.loganalytics.management.dc1.c9qa132.oraclecorp.com
*.analytics.us5.mycloud.oraclecorp.com
mydesktop-mig.oraclecorp.com
*.builder.region-1.c9dev0.oraclecorp.com
*.us1.vfarm.oraclecorp.com
*.us2.fafarm.oraclecorp.com
*.private.uscom.env10.c9qa.oraclecorp.com
*.otm.us10.c9mats.oraclecorp.com
crashplan.us.oracle.com
*.prc.efops.oraclecorp.com
fawf-stage.oraclecorp.com
gitepo-atd-01.us.oracle.com
*.opcinfratestvanity.sites.dc1.c9dev1.oraclecorp.com
*.mobile.us3.mycloud.oraclecorp.com
ol-graal-infra1.oraclecorp.com
*.java.us16.c9mats.oraclecorp.com
*.private.oraclecloud.env19.c9qa.oraclecorp.com
ocsctools.oraclecorp.com
*.otm.us4.mycloud.oraclecorp.com
*.private.uscom.env30.c9qa.oraclecorp.com
cgbu-doccenter.oraclecorp.com
*.fin.efops.oraclecorp.com
india2b-imp-c1n2.oraclecorp.com
*.uscom.env11.c9qa.oraclecorp.com
ngcc-sit-gax-admin.oraclecorp.com
phoenix45039.ad1.fusionappsdphx1.oraclevcn.com
*.mgmt.oraclecloud.env22.c9qa.oraclecorp.com
ohddata-analytics.appoci.oraclecorp.com
*.oraclecorp.com
*.builder.us5.c9mats.oraclecorp.com
*.identity.oraclecloud.env18.c9qa.oraclecorp.com
meteringinternal.c9dev1.oraclecorp.com
*.epm.dc1.c9dev1.oraclecorp.com
*.private.oraclecloud.env14.c9qa.oraclecorp.com
control-plane.graph.oci.oraclecorp.com
*.mgmt.uscom.env3.c9qa.oraclecorp.com
sydney-tcm-2.oraclecorp.com
genesys-admin.ngcc-v1-phx1-oragit.oraclecorp.com
*.identity.oraclecloud.env30.c9qa.oraclecorp.com
*.integration.dc1.c9haga.oraclecorp.com
*.analytics.management.us2.mycloud.oraclecorp.com
*.compute.dc1.c9qa132.oraclecorp.com
*.loganalytics.management.omc.dc1.c9dev2.oraclecorp.com
*.db.dv1.oraclecloudapps.devzone.oraclecorp.com
*.documents.dc1.c9dev0.oraclecorp.com
*.epm.us19.c9mats.oraclecorp.com
*.fs.dc2.c9dev1.oraclecorp.com
*.mobileenv.dc1.c9dev2.oraclecorp.com
oasp-oprod-gar.oraclecorp.com
tanden-config-service.oci.oraclecorp.com
*.identity.oraclecloud.env20.c9qa.oraclecorp.com
*.identity.dc101.c9dev0.oraclecorp.com
myst.oraclecorp.com
*.analytics.us6.mycloud.oraclecorp.com
*.oraclecorp.com
*.mgmt.routing.internal.dc1.c9dev0.oraclecorp.com
psbldfs-oci.oci.oraclecorp.com
*.oraclecloud.env4.c9qa.oraclecorp.com
whqb-tcm-sub-2.oraclecorp.com
*.mobile.us1.mycloud.oraclecorp.com
india1b-imp-c2n2.oraclecorp.com
bb-testing.oci.oraclecorp.com
*.private.uscom.env3.c9qa.oraclecorp.com
*.identity.us4.c9mats.oraclecorp.com
*.identity.env5.c9qa.oraclecorp.com
*.socialnetwork.us9.c9mats.oraclecorp.com
uat-runtime-api-classifier.appoci.oraclecorp.com
krisis.oci.oraclecorp.com

Certificate

The complete raw certificate details for nllaba-tcm-236.oraclecorp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIQBofvLuRaeqI5p191frOqBjANBgkqhkiG9w0BAQsFADBo
MQswCQYDVQQGEwJVUzEbMBkGA1UEChMST3JhY2xlIENvcnBvcmF0aW9uMR8wHQYD
VQQLExZTeW1hbnRlYyBUcnVzdCBOZXR3b3JrMRswGQYDVQQDExJPcmFjbGUgU1NM
IENBIC0gRzIwHhcNMTcwMjIzMDAwMDAwWhcNMTkwMjI0MjM1OTU5WjCBkjELMAkG
A1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExFTATBgNVBAcMDFJlZHdvb2Qg
Q2l0eTEbMBkGA1UECgwST3JhY2xlIENvcnBvcmF0aW9uMRIwEAYDVQQLDAlHbG9i
YWwgSVQxJjAkBgNVBAMMHW5sbGFiYS10Y20tMjM2Lm9yYWNsZWNvcnAuY29tMIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2EO7QoJknQv1k0n9Jmf4uLY
FkzziXUcawKdq4bm2oPdLVLLd382K/2QJUES3XNDqTCS0K0NbuFtWOvPaaz4HKIy
3h634dhQTggQhfaRrdbEp/sSf+jgpTLV1I/fDlolzmc+xk15LVpxQqigWl9Z7fPO
QLf/OEyFfjhodaScOjI85fxsh4mHDHJn4Do0ZK6mDRf+y/C9AQbm4oH16ko8p6i/
L1NcIup9hP1UB6iiIrDrgS9aZC6+ADT2FAXkqfVp0E7eGUt2j+gWfzPZEaK+mizA
/o0QUtYkrqCubfNhfcSxcfrha40lENYGdsYZ0A79557vPot2FVkuPNqrzCHV3wID
AQABo4IB/TCCAfkwRwYDVR0RBEAwPoIdbmxsYWJhLXRjbS0yMzYub3JhY2xlY29y
cC5jb22CHW5sbGFiYS10Y20tMjM3Lm9yYWNsZWNvcnAuY29tMAkGA1UdEwQCMAAw
HQYDVR0OBBYEFFOXjnycAVcxme4h7TRqVpWvpkNJMB8GA1UdIwQYMBaAFGCMZpFf
SchVH+a1mgx6V2VzOLSiMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwOgYDVR0gBDMwMTAvBgZngQwBAgIwJTAjBggrBgEFBQcC
ARYXaHR0cHM6Ly9kLnN5bWNiLmNvbS9jcHMwUwYDVR0fBEwwSjBIoEagRIZCaHR0
cDovL21zc2wtY3JsLndzLnN5bWFudGVjLmNvbS9Qcml2YXRlQ0EvNDQwNTI1MzY5
LVJTQS1TSEEyNTYuY3JsMIGNBggrBgEFBQcBAQSBgDB+MCwGCCsGAQUFBzABhiBo
dHRwOi8vbXNzbC1vY3NwLndzLnN5bWFudGVjLmNvbTBOBggrBgEFBQcwAoZCaHR0
cDovL21zc2wtYWlhLndzLnN5bWFudGVjLmNvbS9Qcml2YXRlQ0EvNDQwNTI1MzY5
LVJTQS1TSEEyNTYuY2VyMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCflgd4oz0mxYFyVHgo/l9JtjMckwcSJM3Y4gHhU5ORcNW3wp0s0Csg
vciursU51eps70L5+A5XOOTwez/HFAsl43nZgMo8WfJQaoJ9TC5QZUxX6aus0KZT
bR/8xBVB8DOA5+OzZxj0Ijjo6/5aww24nQl74cAkaZN5fljigYE1sdlOKhzR898G
3g/cclS851QYw0ew5kSE8sAmreoAEkpnttyRe3idMFITKnIaliezJz2TdKQSncA1
SujVzTGdjhLUiZ0MB9Fn5LEhxWeymwdDXHl7MssJchK30+YEoxAdLAk1j5fedXdY
vzQ6wNH+3L8kQfj3OorUi6C2pOHw1b1r
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2EO7QoJknQv1k0n9Jmf
4uLYFkzziXUcawKdq4bm2oPdLVLLd382K/2QJUES3XNDqTCS0K0NbuFtWOvPaaz4
HKIy3h634dhQTggQhfaRrdbEp/sSf+jgpTLV1I/fDlolzmc+xk15LVpxQqigWl9Z
7fPOQLf/OEyFfjhodaScOjI85fxsh4mHDHJn4Do0ZK6mDRf+y/C9AQbm4oH16ko8
p6i/L1NcIup9hP1UB6iiIrDrgS9aZC6+ADT2FAXkqfVp0E7eGUt2j+gWfzPZEaK+
mizA/o0QUtYkrqCubfNhfcSxcfrha40lENYGdsYZ0A79557vPot2FVkuPNqrzCHV
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8681179261674410056935148534357010950
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oracle Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oracle SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Redwood City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Oracle Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Global IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'nllaba-tcm-236.oraclecorp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25674237141837575531909410427603502706663710757942768103652430007585210019541367030555765073631515431488958696625113692174605926777788530067746922054866799782538999081977851993143349995709973036194043308336284138221080255231801589855096962557870521122428423616954896789885501978265130168412413559984090232544090834612564829523977739541241806752762365564117020593514174350972810080640080199674156685853028494141257848340261752697978907047551125903035868817825921519268929476375680438528951323248548062070545558775491376799860900736021802715722900275511818190077097165232603699515620546065691004486582374082913891374559
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nllaba-tcm-236.oraclecorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nllaba-tcm-237.oraclecorp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							53978e7c9c01573199ee21ed346a5695afa64349
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 608c66915f49c8551fe6b59a0c7a57657338b4a2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mssl-crl.ws.symantec.com/PrivateCA/440525369-RSA-SHA256.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (128 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mssl-ocsp.ws.symantec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mssl-aia.ws.symantec.com/PrivateCA/440525369-RSA-SHA256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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