shared1-pbsmatch1-0-ukb.data.sfdc.net

- salesforce.com, inc. -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 20:e7:96:a8:74:4b:4c:9d:a0:32:72:49:67:e4:d0:5d was issued on by Symantec Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

salesforce.com, inc.

Organization: salesforce.com, inc.
Organization unit: InfraSec
State / Province: California
Locality: San Francisco
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 20:e7:96:a8:74:4b:4c:9d:a0:32:72:49:67:e4:d0:5d
Serial Number (int): 43737772147201995645366735664216068189
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 31:e7:61:f3:ec:92:ae:5a:1b:14:93:38:18:de:3d:69:5d:aa:16:93
Fingerprint (sha256): 00:f0:91:6d:b3:48:ad:bc:9f:30:a0:a0:f3:1a:1a:f9:50:8a:4e:05:f3:9d:67:f2:c1:de:0b:ce:26:f3:b6:7b

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate shared1-pbsmatch1-0-ukb.data.sfdc.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shared1-pbsmatch1-0-ukb.data.sfdc.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shared1-pbsmatch1-0-ukb.data.sfdc.net

Other certificates including the domain name sfdc.net

(limited to 100 certificates)
gezwQ.carrs.canary.test.sfdc.net
twist35-pbsmatch1-0-prd.data.sfdc.net
shared1-pbsmatch1-0-ukb.data.sfdc.net
kms-prd.slb.sfdc.net
dTuxJ.carrs.canary.test.sfdc.net
auth-tmp.ops.sfdc.net
mcc.connectedappqa.sfdc.net
kanchan.sannidhanam.user.sfdc.net
shared0-pbsgeo2-0-dfw.data.sfdc.net
argusdev-ui.data.sfdc.net
cfg0-idbapima1-0-syd.data.sfdc.net
hLvrK.carrs.canary.test.sfdc.net
reportcollector-cdu.data.sfdc.net
auth-tmp.internal.salesforce.com
mchaulagain.user.sfdc.net
Pvwtc.carrs.canary.test.sfdc.net
public0-gateway1-1-par.ops.sfdc.net
deployment1-0-sfm.data.sfdc.net
ops0-csm4-1-sfm.ops.sfdc.net
kaiju-sandbox.data.sfdc.net
deployment1-0-sfz.data.sfdc.net
deployment1-0-chi.data.sfdc.net
testcslifecyclesetting.sfdc.net
public0-gateway2-1-ukb.ops.sfdc.net
alert-manager-api.data.sfdc.net
justatest.pkira.sfdc.net
test12345.sfdc.net
cidb1-0-syd.data.sfdc.net
shared1-pbsmatch1-0-dfw.data.sfdc.net
kaiju-sandbox.data.sfdc.net
twist55-pbsmatch1-0-prd.data.sfdc.net
digicert20j20w6jxl5.urawatchdog.sfdc.net
cstestkms.integration.sfdc.net
kaiju.data.sfdc.net
public0-gateway1-1-phx.ops.sfdc.net
srd-chx.net.salesforce.com
polcore-prd.eng.sfdc.net
kaiju-sandbox.data.sfdc.net
digicert2o7g3hntygh.urawatchdog.sfdc.net
mpreslermarshall.user.sfdc.net
public0-gateway2-1-dfw.ops.sfdc.net
idp.msonline.sfdc.net
LUQlp.carrs.canary.test.sfdc.net
kaiju.data.sfdc.net
shared-pbsmatch2-0-wax.data.sfdc.net
kaiju-sandbox.data.sfdc.net
public0-gateway1-1-dfw.ops.sfdc.net
kaiju.data.sfdc.net
public0-gateway1-1-frf.ops.sfdc.net
this.is.only.a.test.sfdc.net
shared0-pbsgeo2-0-phx.data.sfdc.net
srd-wax.net.salesforce.com
CpEiL.carrs.canary.test.sfdc.net
tdta-acrolinx-test.eng.sfdc.net
ops0-secds1-1-crd.eng.sfdc.net
shared2-pbsmatch1-0-hnd.data.sfdc.net
public0-gateway2-1-iad.ops.sfdc.net
ops0-poldata1-1.frf.ops.sfdc.net
kaiju.data.sfdc.net
MSGuV.carrs.canary.test.sfdc.net
ops0-poldata2-1-prd.eng.sfdc.net
twist34-pbsmatch1-0-prd.data.sfdc.net
auth-sfm.ops.sfdc.net
public0-gateway1-1-ord.ops.sfdc.net
clm.msprod.sfdc.net
svr.x111.sfdc.net
qtcperfeng.eng.sfdc.net
uvSCf.carrs.canary.test.sfdc.net
mcc.connectedappqa.sfdc.net
public0-gateway2-2-xrd.eng.sfdc.net
kaiju.data.sfdc.net
cstestkms.integration.sfdc.net
justatest.pkira.sfdc.net
mruber.gia.user.sfdc.net
cfg0-cidbapima1-0-cdu.data.sfdc.net
mcc.connectedappqa.sfdc.net
idp.msonline.sfdc.net
public0-gateway1-1-ord.ops.sfdc.net
justatest.pkira.sfdc.net
shared0-pbsgeo2-0-phx.data.sfdc.net
digicert1172fcopqzk.urawatchdog.sfdc.net
ops0-csm1-1-crd.ops.sfdc.net
testcslifecyclesetting.sfdc.net
ops0-polcore1-1-prd.eng.sfdc.net
tivNM.carrs.canary.test.sfdc.net
QFBcs.carrs.canary.test.sfdc.net
uuid3f9gn1.urawatchdog.sfdc.net
ops0-csm2-1-crd.ops.sfdc.net
ops0-csm2-1-sfm.ops.sfdc.net
idp.msonline.sfdc.net
wUsjv.carrs.canary.test.sfdc.net
public0-gateway2-1-dfw.ops.sfdc.net
auth-crd.eng.sfdc.net
kaiju.data.sfdc.net
ops0-csm1-1-sfm.ops.sfdc.net
tdr1-splunksrh1-1-sfz.ops.sfdc.net
shared0-pbsgeo2-0-cdu.data.sfdc.net
mcc.connectedapp.sfdc.net
public0-gateway2-1-ord.ops.sfdc.net
auth-crd.ops.sfdc.net

Certificate

The complete raw certificate details for shared1-pbsmatch1-0-ukb.data.sfdc.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7TB1GPUbdKF5lpOG0lRF
qUaGnkrQBh7wSRMFChzXt9zXMZFQKz21Mvv2ua9XwfmDy3FEKm3CFQ9+aUzOh1Cl
BBw0NRQKI33rvD4IjpjgFEJ7QsQyQgnL8BBc3VxirBsSIfgNe8FEnJUqwV7nFCp1
62EzxZUb7PFmz81qNoQXaEK40zPr2njmhkpr8aRvG5HBL6bUsJetyiENpMsxOoLv
Bdd6C0/RZWvrnNPP6uSaRxxU+vQCtwFSd4Gj1AykNEV85CqZUrg2b9SQarlk68Ni
wjS09YR6GRsbRkHtsYNy6zwqpzwWm0tijq2IgWstGqhdDoIRuACiJb31SbGdq7Pp
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 43737772147201995645366735664216068189
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'salesforce.com, inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'InfraSec'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'shared1-pbsmatch1-0-ukb.data.sfdc.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29942373517435650141938090359508986113741801865443425799657380086001694847559752671747557340522741603329144967573370092380224794673948127222722116038077883183110778216991960808992194634461421858198201978027522239370472888112089728405549980182012170609924746136763804120981928780962807578556838323867125560684910156378907715488038925477954173282814127400356982687819622632129975875212768097933139218250484033127120212127538414414478032262016620614523281190657108834404159084201832710590097282471992482054969817484094456578496894912330974332667052918407850472353451879301253858909465054554770665421987550299508010379629
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shared1-pbsmatch1-0-ukb.data.sfdc.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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