Hybrid.sonyusa.com

- Sony Corporation of America -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 76:fc:85:81:5f:b7:e6:b9:14:7f:47:43:9a:7b:b3:b6 was issued on by Symantec Corporation.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Sony Corporation of America

Organization: Sony Corporation of America
Organization unit: Culpeper Operations
State / Province: New York
Locality: New York
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 76:fc:85:81:5f:b7:e6:b9:14:7f:47:43:9a:7b:b3:b6
Serial Number (int): 158160070121504498493737802620607378358
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 38:cb:e3:af:61:b9:56:0b:a9:c1:b4:cf:2c:90:63:9c:c9:18:22:bb
Fingerprint (sha256): 01:88:57:e8:d0:bb:5c:e9:71:b9:ce:2c:d8:ad:28:c6:6f:40:4b:e6:c8:c2:7e:5a:db:c6:04:c1:6e:a0:c5:85

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate Hybrid.sonyusa.com

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Hybrid.sonyusa.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

Hybrid.sonyusa.com
Hybrid.am.sony.com
Autodiscover.am.sony.com
Autodiscover.spe.sony.com
Webmail.spe.sony.com
Owamail.am.sony.com
Hybrid1.am.sony.com
Hybrid2.am.sony.com
Hybrid3.am.sony.com
Hybrid4.am.sony.com
mail.am.sony.com
Hybrid1.Sonyusa.com
Hybrid2.Sonyusa.com
Hybrid3.Sonyusa.com
Hybrid4.Sonyusa.com

Other certificates including the domain name sonyusa.com

(limited to 100 certificates)
as-mail.sonyusa.com
Hybrid.sonyusa.com
encrypt.sonyusa.com
as-mail.sonyusa.com
sca-ext.sonyusa.com
remote.sonyusa.com
webauth.sonyusa.com
Hybrid9.sonyusa.com
tst-dev.sonyusa.com
sca-ext.sonyusa.com
meeteast.sonyusa.com
sip.am.sony.com
Hybrid3.sonyusa.com
meeteast.sonyusa.com
globalras-am-east-ash.sonyusa.com
tst-dev.sonyusa.com
Hybrid4.sonyusa.com
globalras-am-east-ash.sonyusa.com
remote.sonyusa.com
mag.sonyusa.com
tst-dc.sonyusa.com
mft.sonyusa.com
tst-dev.sonyusa.com
tst-dev.sonyusa.com
sftp-dev.sonyusa.com
mft.sonyusa.com
global.sonyusa.com
tst365-ext.sonyusa.com
sip.am.sony.com
portal.sonyusa.com
tst-dc.sonyusa.com
tst-dc.sonyusa.com
globalras-am-test.sonyusa.com
Hybrid1.sonyusa.com
tst-west.sonyusa.com
sra-usin.sonyusa.com
sra-drcw.sonyusa.com
ealert.sonyusa.com
global.sonyusa.com
globalras-israel-dc.sonyusa.com
Hybrid.sonyusa.com
Amculyncpool01.am.sony.com
globalras.am.sony.com
lyncwebext.sonyusa.com
olmwest.sonyusa.com
USCULCISEAPP01V.am.sony.com
tst-dev.sonyusa.com
encrypt.sonyusa.com
GISCAMISEPXG.sonyusa.com
globalras-am-east-ash.sonyusa.com
sra-east.sonyusa.com
sra-usin.sonyusa.com
sra-spi.sonyusa.com
Hybrid1.sonyusa.com
gateway.sonyusa.com
sra-usin.sonyusa.com
gisd-portal.sonyusa.com
Guest-portal.sonyusa.com
ealert.sonyusa.com
vnet-ash.sonyusa.com
USCULSENMVPN01.sonyusa.com
sra-drcw.sonyusa.com
sra-drcw.sonyusa.com
tst-dc.sonyusa.com
Tst365-ext.sonyusa.com
sra-usil.sonyusa.com
Hybrid3.sonyusa.com
global.sonyusa.com
encrypt.sonyusa.com
as-mail.sonyusa.com
tst-dc.sonyusa.com
pic.sonyusa.com
sra-west.sonyusa.com
sra-usil.sonyusa.com
sftp-dev.sonyusa.com
sra-drcw.sonyusa.com
tst-dev.sonyusa.com
sftp-dc.sonyusa.com
sra-drcw.sonyusa.com
mag.sonyusa.com
encrypt.sonyusa.com
Tst365-ext.sonyusa.com
tst-dc.sonyusa.com
meetwest.sonyusa.com
mft.sonyusa.com
Guest-portal.sonyusa.com
sftp-dc.sonyusa.com
encrypt.sonyusa.com
globalras-am-west.sonyusa.com
sftp-dc.sonyusa.com
sra-spi.sonyusa.com
globalras-am-test.sonyusa.com
ealert.sonyusa.com
sca-ext.sonyusa.com
encrypt.sonyusa.com
remote.sonyusa.com
as-mail.sonyusa.com
lyncwebext.sonyusa.com
global.sonyusa.com
tst-dc.sonyusa.com

Certificate

The complete raw certificate details for Hybrid.sonyusa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkOO5anJAaIfFbfFeqFn
DhKMsleHxLvhooknmaWm0Twdqk1vz7XvNYCBfBN1IUrPoReFl2tT/fucn60XLMtm
xf1rHywMA1PGVJQf3VD+yBIz3/d4ogS9PLo786LDPkH/A9HIgtMO/RRM+7Ayu3Xx
Lbuesb2N2X2IiOCEtouFEVXvbrFp00uRijaYRot20nv8AhH3EujDtAJhTUUpwdvb
j7CAijLJxZmm06KHvGAF6412ZIPRvNjRufvkgIhdh9vpKQ/luIKMrEEsnj+uZ4oD
J9cYoYlRseALkPapbEI9CuZmFvWeyWiG/ZMhkfkKceMXc+1mf26YCCK/saLa3cWn
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 158160070121504498493737802620607378358
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sony Corporation of America'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Culpeper Operations'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hybrid.sonyusa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24018592129605206025501259028192717448081158840249323681213909183860546346332789466696355384985096502390913649614252201009608648541554843082871419895543306465153164197013092945924928942182483271860127173471354231833768925149484320686351183017977185478523598149948582923749549506346527333260665412301544066159866700244727143564901138847709037191352760826623827908044856596215721653127777255958511743013080643940331961210517762917591932582928791159335138501696650285137795875027925528129976627936611186033324766568195438201827626194321749564183106137579279721123783339974634392358568150634493213719898963324387503482793
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (326 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Hybrid.sonyusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Hybrid.am.sony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Autodiscover.am.sony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Autodiscover.spe.sony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Webmail.spe.sony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Owamail.am.sony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Hybrid1.am.sony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Hybrid2.am.sony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Hybrid3.am.sony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Hybrid4.am.sony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.am.sony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Hybrid1.Sonyusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Hybrid2.Sonyusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Hybrid3.Sonyusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Hybrid4.Sonyusa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0081b3faebe3e46b131bd7414362e4e8c153dbbabe74c9f10ecee3bb9ba39a1ff020beb53840dbf126fa1f6aa0372e20c32134a5208687cac70d143bed4cc1259edec16c28f9c34009d6d43bcbba9f3da9e7431d293b74352a24beb5b847abeb84e89248911a54728e742c6883e08773fb4d4778cd3e2848431174a2773e8558345ceac0ef5e476a97a0a0888d29b39f7199ec3c80c52fdbddd48aa321c918d2a51a43a7a3ae4c1362136ac82ad0aa908e2146c06552e68aa207e850354b85f9e80dcc2e923f2971575f3f10a11bf29b457b0baff042369a2d4a606831cee03c5702601dcec7f9495aa8e69f734c586752fda408af57185363d1a51d3ce97482e8