www.seeso.com

- NBCUniversal Media, LLC -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 0f:dc:85:bc:8e:eb:0d:cb:b1:ac:07:1a:75:51:20:56 was issued on by Symantec Corporation.

With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

NBCUniversal Media, LLC

Organization: NBCUniversal Media, LLC
State / Province: New York
Locality: New York
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:dc:85:bc:8e:eb:0d:cb:b1:ac:07:1a:75:51:20:56
Serial Number (int): 21083437745254272636192045201645183062
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): d7:91:ad:d1:6a:ad:39:d3:92:5a:8d:b8:4a:65:38:b1:fc:f1:d4:c9
Fingerprint (sha256): 01:fa:40:f9:bb:5f:f9:c3:37:79:a6:5b:5e:9e:2c:82:fb:70:4e:cc:b4:8b:16:f0:22:14:24:20:12:43:2b:13

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate www.seeso.com

28

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.seeso.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.realtimetranslation.net
*.bxjyb2jvda.net
e-corp-online.com
whoismrrobot.com
racksure.com
staticfiles.blastr.com
www.e-corp-online.com
*.seeso.com
e-corp-usa.com
*.e-corp-usa.com
conficturaindustries.com
www.fsoc.sh
www.racksure.com
iammrrobot.com
whereismrrobot.com
www.whoismrrobot.com
www.whereismrrobot.com
*.evil-corp-usa.com
fsoc.sh
*.mvpd-admin.nbcuni.com
realtimetranslation.net
www.e-corp-usa.com
*.serverfarm.evil-corp-usa.com
seeso.com
www.iammrrobot.com
www.conficturaindustries.com
evil-corp-usa.com
www.seeso.com

Other certificates including the domain name seeso.com

(limited to 100 certificates)
www.seeso.com
www.seeso.com
click.mail.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
login.seeso.com
seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
akamai-san9.exacttarget.com
www.seeso.com
akamai-san9.exacttarget.com
www.seeso.com
seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
pages.mail.seeso.com
akamai-san9.exacttarget.com
click.mail.seeso.com
www.seeso.com
akamai-san9.exacttarget.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
akamai-san9.exacttarget.com
akamai-san9.exacttarget.com
akamai-san9.exacttarget.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
akamai-san9.exacttarget.com
akamai-san9.exacttarget.com
seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
akamai-san9.exacttarget.com
click.mail.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
view.mail.seeso.com
akamai-san9.exacttarget.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
akamai-san9.exacttarget.com
akamai-san9.exacttarget.com
www.seeso.com
akamai-san9.exacttarget.com
view.mail.seeso.com
www.seeso.com
www.seeso.com
login.seeso.com
akamai-san9.exacttarget.com
akamai-san9.exacttarget.com
seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
*.seeso.com
www.seeso.com
pages.mail.seeso.com
akamai-san9.exacttarget.com
seeso.com
akamai-san9.exacttarget.com
www.seeso.com
login.seeso.com
seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
akamai-san9.exacttarget.com
login.seeso.com
www.seeso.com
www.seeso.com
akamai-san9.exacttarget.com
www.seeso.com
seeso.com

Certificate

The complete raw certificate details for www.seeso.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EQtITBQ9JbBhaXlAGs4
kSqv3WL19iI5LnfR2GMQKxvjhwbWL9ZIljKvKe4IGhUOWFdCgP1j0fN4cr09zpif
iuthsTYeVsGn5VXZHII9P2h7frEwkVZmEufEO85Y++dXTHNekbC+mPTxq4Q5bnZ7
xtcOHUhMKFWYQpUpRqNIOaCtMC1150btIkvwpq861tXq7xthin4BJAfsTHa6IZ6i
v1pxBNMfk9ETv5n1eTxpLGAdzliI4Yb1gfck0y6RmKAtKKWCx456xoFtlBV2GXLC
9CLB2T3XvcAuk9E0ruxInAzXR61Bw01jFxbadqhpv55GgzyIUSp1VecNILWHShel
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21083437745254272636192045201645183062
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NBCUniversal Media, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.seeso.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27301092853115255989442886725157638566479043834068165623503913825237885779680354297753327490439399339176167516071321803174307197173612940956527562673644682991930151651398599174667920711495642968326614618961573760521735525567549920888127811043510298474110916654012077991100004209738133974223304947477120466474013694220975370504080265176327494969735364756643211249132920395584327733064290882658775785286661518298635698342756101975897920593258542483151278803738978080176265167480150720721611590791985218167386864908960678849186917273002350391451095438215977328373358193412299960351238929154324022212754850316602842785111
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (562 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.realtimetranslation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bxjyb2jvda.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-corp-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whoismrrobot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'racksure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staticfiles.blastr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.e-corp-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seeso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-corp-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-corp-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conficturaindustries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fsoc.sh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.racksure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iammrrobot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whereismrrobot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whoismrrobot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whereismrrobot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.evil-corp-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsoc.sh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mvpd-admin.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realtimetranslation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.e-corp-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.serverfarm.evil-corp-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seeso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iammrrobot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.conficturaindustries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evil-corp-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seeso.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00940af123b771dbad90a4199666fa9750d9cf2640fc9d3fd799f177b92472050af0dea3bcedf437c7dab35d2ec0428644602fa25799dcaf3bc35c2d828c20e575b16ad4bb2b9fda1c0eac9c71730ec6c92bf012fc05e826c2f99679bb1f60d57bb108e1d5d84a9bc4c043f1f745e27eac945aa6832fc1e6a611fc2f6f9e29caa5e2e1fc9ea1900da4c3d11a48ebdab8e1cca7c9a6d94a7a0ef8d22351be64b2164679fe06e5129cac07e99af790e01264225b4e287f17c2863c940735d1198dbdb0d37c78e96a0f5f7ad94c9481978b66c7abd1752bff7c84c69d20ae2958ac267d1f21dd99ff6d932eea07a45d735f343cf54ea2ca22a4f108b0a761d660a6f1