nccd.cdc.gov

- Centers for Disease Control and Prevention -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 6a:20:53:ae:2f:2e:78:1b:d3:5d:37:66:12:bb:fc:02 was issued on by Symantec Corporation.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Centers for Disease Control and Prevention

Organization: Centers for Disease Control and Prevention
Organization unit: ITSO
State / Province: Georgia
Locality: Atlanta
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 6a:20:53:ae:2f:2e:78:1b:d3:5d:37:66:12:bb:fc:02
Serial Number (int): 141066018292973550829132369116817783810
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 80:35:ed:8f:eb:09:59:5b:3a:ce:32:29:7a:53:87:69:2d:9b:c8:11
Fingerprint (sha256): 01:7d:6f:d9:07:ea:ba:6d:fa:97:61:d8:bc:d1:ab:e9:78:9f:8c:45:b0:17:7d:43:37:2c:51:1c:99:39:a0:33

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate nccd.cdc.gov

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nccd.cdc.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nccd.cdc.gov
recipes.millionhearts.hhs.gov

Other certificates including the domain name cdc.gov

(limited to 100 certificates)
prism-simulation.cdc.gov
simsrec.cdc.gov
phdirectory.cdc.gov
register.vams.cdc.gov
sharefile-atl-200.cdc.gov
hhs.test.esp.cdc.gov
VTrckS-GRANTEE.CDC.GOV
m.subscribe.cdc.gov
vetoviolence.cdc.gov
sftp.cdc.gov
performs-stage.cdc.gov
vtrcks-grantee2-s1.cdc.gov
npp.cdc.gov
assz-pdir-10.cdc.gov
citgotemp.cdc.gov
dcipher.cdc.gov
securid.cdc.gov
mail.cn.cdc.gov
amp.cdc.gov
dsdv-dtbe-zsql1.hce.cdc.gov
ehseleafio.cdc.gov
nccd.cdc.gov
citgo.cdc.gov
covidresp.cdc.gov
mugsicms.cdc.gov
www.cdc.gov
performs.cdc.gov
diabetespath2prevention.cdc.gov
tbcarefinderadmin-dev.cdc.gov
nppt.cdc.gov
calicinet-usa.cdc.gov
access-ipsas.cdc.gov
npptest.cdc.gov
CL21VCSE1.vtc.cdc.gov
vtrcks-provider-training.cdc.gov
npp.cdc.gov
search.usa.gov
Tools.cdc.gov
share.cdc.gov
www.cdc.gov
pids-stg.cdc.gov
AWWV-SAMS-IIM01.cdc.gov
Saml.cdc.gov
remoteiptv-piv.cdc.gov
cra.cdc.gov
Saml.cdc.gov
ImmunizationInvestmentsAPI.cdc.gov
ut-mmria.services.cdc.gov
webdev.philab.cdc.gov
NDMSIA.cdc.gov
rastauth2.cdc.gov
WIPZ-INFW-ASP.cdcres.org
mvpiccs.viz.cdc.gov
AWPV-SAMS-IIG03.cdc.gov
www.cdc.gov
AWPV-SAMS-IIG04.cdc.gov
ftp.cdc.gov
easauth2.cdc.gov
nhsn2.cdc.gov
prod.12.slot.cdn.salesforce-communities.com
nccd.cdc.gov
az-mmria.services.cdc.gov
www.cdc.gov
testinglocator.cdc.gov
www.cdc.gov
as2-stg.cdc.gov
lgconfweb-ext.cdc.gov
www.cdc.gov
ncird-ifund-api.cdc.gov
wphss.cdc.gov
IMATS.cdc.gov
remoteiptv-piv.cdc.gov
webmail.ug.cdc.gov
fsap.cdc.gov
lrnb.cdc.gov
ehdidash.cdc.gov
WIWV-SAMS-IWB01.cdc.gov
mobam.cdc.gov
webmail.rw.cdc.gov
mets.cdc.gov
SmartFindDEV.cdc.gov
Epix2.cdc.gov
acdc-cdm-splk-shdp0.cdc.gov
phinmqfstg.cdc.gov
xnc.cdc.gov
phinvads.cdc.gov
access-ipsas-piv.cdc.gov
webmail.vn.cdc.gov
cdcmail.cdc.gov
access.cdc.gov
AUPC-CLRPASS3.cdc.gov
API-WSMob.cdc.gov
access-piv.cdc.gov
www.cdc.gov
WIPZ-INFW-ASP.cdcres.org
CL21VCSE1.vtc.cdc.gov
prod.12.slot.cdn.salesforce-communities.com
remoteiptv-piv.cdc.gov
cord.cdc.gov
ephtracking.cdc.gov

Certificate

The complete raw certificate details for nccd.cdc.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGIDCCBQigAwIBAgIQaiBTri8ueBvTXTdmErv8AjANBgkqhkiG9w0BAQsFADB+
MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAd
BgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxLzAtBgNVBAMTJlN5bWFudGVj
IENsYXNzIDMgU2VjdXJlIFNlcnZlciBDQSAtIEc0MB4XDTE3MDQwNDAwMDAwMFoX
DTE4MDQwNTIzNTk1OVowgYwxCzAJBgNVBAYTAlVTMRAwDgYDVQQIDAdHZW9yZ2lh
MRAwDgYDVQQHDAdBdGxhbnRhMTMwMQYDVQQKDCpDZW50ZXJzIGZvciBEaXNlYXNl
IENvbnRyb2wgYW5kIFByZXZlbnRpb24xDTALBgNVBAsMBElUU08xFTATBgNVBAMM
DG5jY2QuY2RjLmdvdjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ4/
2lSmANekfHdYO63xZEcLho8JnHN7Vyn9bYaUiJ/UCeIpcLjEms7xmINSz6Oh2Yzi
vVsS10lsMODWJ5K96AV+otLL6WoH59ET+iINpEjJ9pQS4HDEgtfIAJbMp9Sd5tqk
jxR9crYJI/odcf3+KCPjgiDtToi/RtVJLd9MMO5W1ZM+RA6deHGfIIQOjwJYBBzf
kG7EQsMVmjBaGnQzpBSXAlR+C+lbtZ4CcrlIWK/Mt4EiGmgSSkHN884tooH5eHvi
Yckdl+W4YCjiJVaAQVi7KqvMCkSqFVJV5JETpUBvyV1QvkRsMaT9CCJxx3v8fbDS
ZOFKV53hSo8jCaynNicCAwEAAaOCAokwggKFMDYGA1UdEQQvMC2CDG5jY2QuY2Rj
LmdvdoIdcmVjaXBlcy5taWxsaW9uaGVhcnRzLmhocy5nb3YwCQYDVR0TBAIwADAO
BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMGEG
A1UdIARaMFgwVgYGZ4EMAQICMEwwIwYIKwYBBQUHAgEWF2h0dHBzOi8vZC5zeW1j
Yi5jb20vY3BzMCUGCCsGAQUFBwICMBkMF2h0dHBzOi8vZC5zeW1jYi5jb20vcnBh
MB8GA1UdIwQYMBaAFF9gz2GQVd+EQxSKYCqy9Xr0QxjvMCsGA1UdHwQkMCIwIKAe
oByGGmh0dHA6Ly9zcy5zeW1jYi5jb20vc3MuY3JsMFcGCCsGAQUFBwEBBEswSTAf
BggrBgEFBQcwAYYTaHR0cDovL3NzLnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0
cDovL3NzLnN5bWNiLmNvbS9zcy5jcnQwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEA
dwDd6x0reg1PpiCLga2BaHB+Lo6dAdVciI09EcTNtuy+zAAAAVs5Tx50AAAEAwBI
MEYCIQDM2fMLlZYHNV8nHPO22vX5Clr3kvbdD31HrLT3xrKuEwIhANjbwm49bz1R
S9lRdrP0MHHvIqQlba+tWv7uN/vmwpihAHYApLkJkLQYWBSHuxOizGdwCjw1mAT5
G9+443fNDsgN3BAAAAFbOU8euAAABAMARzBFAiEAhiRgwc2SVEmx7QhMMhAWDSKv
EG26jiacnkNFqaYjyFwCIAPdLEbNcldsAwvaLqBBStTgnWTmXMHDdjbVaptH9zUK
MA0GCSqGSIb3DQEBCwUAA4IBAQBVj29ZZurHpLlCprpmHd3kSuzmd0TwYeWso1LF
cp9xNGy0TRV0Dqp5JkMi0de0TuAeWRWzH1wXizZ4ObyIGVCeeNu1Ye8KU4MAMq/C
UwrzNIjFOBaCJqqwIBwEeSKl3RGm/Ngzzl3XOgPFF+sN0YKyHvUCjSYnIv1EAfCb
k+nEsFlPW/FvtNH3nhyIuXYJ7gJTCC4K58NQCuy1+Mf8X9VqdDFsxbDt7btq3Rbb
URL/Fy+QqXEnhWu4AAF/PYMCtMw6Hch5i4lAOhGq+a8G4SzaEQFLA9/UyxTqYxUy
CTsN5ZoWbvO3vZKiZppOFEsSlgpkihEeHAfZYTnHA1kftq5w
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnj/aVKYA16R8d1g7rfFk
RwuGjwmcc3tXKf1thpSIn9QJ4ilwuMSazvGYg1LPo6HZjOK9WxLXSWww4NYnkr3o
BX6i0svpagfn0RP6Ig2kSMn2lBLgcMSC18gAlsyn1J3m2qSPFH1ytgkj+h1x/f4o
I+OCIO1OiL9G1Ukt30ww7lbVkz5EDp14cZ8ghA6PAlgEHN+QbsRCwxWaMFoadDOk
FJcCVH4L6Vu1ngJyuUhYr8y3gSIaaBJKQc3zzi2igfl4e+JhyR2X5bhgKOIlVoBB
WLsqq8wKRKoVUlXkkROlQG/JXVC+RGwxpP0IInHHe/x9sNJk4UpXneFKjyMJrKc2
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 141066018292973550829132369116817783810
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Georgia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Atlanta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Centers for Disease Control and Prevention'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ITSO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'nccd.cdc.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19977139200547323935843834480907036662861582978904862226005945943661057992783510051746437960435407203771953893358175228144342445204155430417858848818606879003869917516026707631653314514332511454325814928595670349376704303703501530739402517009982149619646283333860900406838958681551197751054898104625895707544761655153636718669039765106797119012916000710197204250433301688027079609935882691248316189120092157286454036916820994957631103580159811089629646638860514847633728032118370441326515341217473331564125906864911061192160372562557936768475846335886270791730022635059259463701699360749547882199925416957487216014887
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nccd.cdc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recipes.millionhearts.hhs.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015b394f1e740000040300483046022100ccd9f30b959607355f271cf3b6daf5f90a5af792f6dd0f7d47acb4f7c6b2ae13022100d8dbc26e3d6f3d514bd95176b3f43071ef22a4256dafad5afeee37fbe6c298a1007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015b394f1eb80000040300473045022100862460c1cd925449b1ed084c3210160d22af106dba8e269c9e4345a9a623c85c022003dd2c46cd72576c030bda2ea0414ad4e09d64e65cc1c37636d56a9b47f7350a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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