cmn1-wlc-a.internal.salesforce.com
- Salesforce.com Inc. -
Issued by Symantec Class 3 Secure Server CA - G4
About this certificate
This digital certificate with serial number 1b:6d:26:e3:0b:b0:a3:14:7d:d8:15:ec:6a:87:22:bc was issued on by Symantec Corporation.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Salesforce.com Inc.
Organization:
Salesforce.com Inc.
Organization unit: IT
Organization unit: For Intranet Use Only
Organization unit: IT
Organization unit: For Intranet Use Only
State / Province:
California
Locality: San Francisco
Country: US
Locality: San Francisco
Country: US
Symantec Corporation
Organization:
Symantec Corporation
Organization unit: Symantec Trust Network
Organization unit: Symantec Trust Network
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 1b:6d:26:e3:0b:b0:a3:14:7d:d8:15:ec:6a:87:22:bcSerial Number (int): 36455904963748730457419940129415832252
Serial Number lenght: 125 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef
Fingerprint (sha1): 3f:35:38:49:a3:22:b0:b8:b4:27:8e:b8:bb:89:b5:cd:b3:0d:d1:a3
Fingerprint (sha256): 02:4f:ec:e3:a0:39:d6:f0:b4:21:4a:fc:c0:64:41:11:d8:88:7f:fe:ec:2f:06:ee:6c:0a:06:9b:7a:4f:a9:17
Issuing Certificate URL: http://ss.symcb.com/ss.crt
Revocation information
OCSP Server: http://ss.symcd.comCRL Distribution Point: http://ss.symcb.com/ss.crl
Check the revocation status for certificate cmn1-wlc-a.internal.salesforce.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cmn1-wlc-a.internal.salesforce.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cmn1-wlc-a.internal.salesforce.com
guest.corp.salesforce.com
guest.corp.salesforce.com
Other certificates including the domain name salesforce.com
(limited to 100 certificates)
*.cs109.force.com
*.cs26.my.salesforce.com
*.cs16.my.salesforce.com
*.cs54.force.com
mx2-was.mta.salesforce.com
*.cs73.force.com
na156.salesforce.com
*.umps1c4.salesforce.com
*.cs55.force.com
*.na151.force.com
*.c360a.salesforce.com
mx2-chi3.mta.salesforce.com
*.na202.force.com
config.cccnp0010.cnp-dev.commercecloud.salesforce.com
*.cs54.force.com
orgchart-dev.it.salesforce.com
*.na85.force.com
na149.salesforce.com
slotmatching22.salesforce.com
cs290.salesforce.com
emea.salesforce.com
*.eu27.force.com
sfm-ucm1.internal.salesforce.com
devforce.map.fastly.net
slotmatching19.salesforce.com
eef-eu.mce.salesforce.com
*.cs30.force.com
vpn-emea.corp.salesforce.com
ap19.salesforce.com
*.na127.force.com
*.sandbox.us01.dx.commercecloud.salesforce.com
na8-api.salesforce.com
*.cs81.force.com
mx2-phx-sp4.mta.salesforce.com
cs30.salesforce.com
sfm-cup2.internal.salesforce.com
vision-us.mce.salesforce.com
mx4-hio-sp1.mta.salesforce.com
dns-vetting1l.map.fastly.net
www.assistly.com
*.cs1.my.salesforce.com
*.na64.force.com
mx3-dfw-sp4.mta.salesforce.com
*.cs34.force.com
cs122.salesforce.com
*.na72.force.com
na166.salesforce.com
salesforce.com
*.cs68.my.salesforce.com
oid.internal.salesforce.com
spell-sjl.salesforce.com
lo2.my.lightning-container.com
dns-vetting1a.map.fastly.net
*.na36.force.com
ext-am-sbx.am.commercecloud.salesforce.com
slotmatching7.salesforce.com
na140.salesforce.com
vpn-na-east.corp.salesforce.com
*.na36.force.com
hyd-wlc-a.internal.salesforce.com
sfdc-x579t5.perf1i.login.pc-rnd.salesforce.com
*.na107.force.com
*.na86.force.com
*.cs30.my.salesforce.com
sfm-anchor-a.internal.salesforce.com
mobile1.t.force.com
*.eu46.force.com
*.cs4.force.com
prod.13.slot.cdn.salesforce-communities.com
mx2-cdu-sp1.mta.salesforce.com
cs308.salesforce.com
preprod.bluetail.salesforce.com
hyd-wlc-a.internal.salesforce.com
qa-api.docs.salesforce.com
umps1-c2-frf.salesforce.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
mx3-ord-sp1.mta.salesforce.com
mx2-frf-sp1.mta.salesforce.com
*.cs15.force.com
brand.salesforce.com
ora-ccore-wp001.internal.salesforce.com
*.cs173.force.com
dns-vetting1l.map.fastly.net
slotmatchinggs0.salesforce.com
perf1-useast2.cloudatlas.perf1o.pc-rnd.pc-aws.salesforce.com
dns-vetting1a.map.fastly.net
mx4-ord-sp2.mta.salesforce.com
*.eu25.force.com
cs225.salesforce.com
*.na18.force.com
mx3-frf-sp1.mta.salesforce.com
*.na74.force.com
www-perf2-pub.salesforce.com
*.cs115.my.salesforce.com
*.na38.force.com
app.datorama.com
*.na137.force.com
cmn1-wlc-a.internal.salesforce.com
*.cs26.my.salesforce.com
*.cs16.my.salesforce.com
*.cs54.force.com
mx2-was.mta.salesforce.com
*.cs73.force.com
na156.salesforce.com
*.umps1c4.salesforce.com
*.cs55.force.com
*.na151.force.com
*.c360a.salesforce.com
mx2-chi3.mta.salesforce.com
*.na202.force.com
config.cccnp0010.cnp-dev.commercecloud.salesforce.com
*.cs54.force.com
orgchart-dev.it.salesforce.com
*.na85.force.com
na149.salesforce.com
slotmatching22.salesforce.com
cs290.salesforce.com
emea.salesforce.com
*.eu27.force.com
sfm-ucm1.internal.salesforce.com
devforce.map.fastly.net
slotmatching19.salesforce.com
eef-eu.mce.salesforce.com
*.cs30.force.com
vpn-emea.corp.salesforce.com
ap19.salesforce.com
*.na127.force.com
*.sandbox.us01.dx.commercecloud.salesforce.com
na8-api.salesforce.com
*.cs81.force.com
mx2-phx-sp4.mta.salesforce.com
cs30.salesforce.com
sfm-cup2.internal.salesforce.com
vision-us.mce.salesforce.com
mx4-hio-sp1.mta.salesforce.com
dns-vetting1l.map.fastly.net
www.assistly.com
*.cs1.my.salesforce.com
*.na64.force.com
mx3-dfw-sp4.mta.salesforce.com
*.cs34.force.com
cs122.salesforce.com
*.na72.force.com
na166.salesforce.com
salesforce.com
*.cs68.my.salesforce.com
oid.internal.salesforce.com
spell-sjl.salesforce.com
lo2.my.lightning-container.com
dns-vetting1a.map.fastly.net
*.na36.force.com
ext-am-sbx.am.commercecloud.salesforce.com
slotmatching7.salesforce.com
na140.salesforce.com
vpn-na-east.corp.salesforce.com
*.na36.force.com
hyd-wlc-a.internal.salesforce.com
sfdc-x579t5.perf1i.login.pc-rnd.salesforce.com
*.na107.force.com
*.na86.force.com
*.cs30.my.salesforce.com
sfm-anchor-a.internal.salesforce.com
mobile1.t.force.com
*.eu46.force.com
*.cs4.force.com
prod.13.slot.cdn.salesforce-communities.com
mx2-cdu-sp1.mta.salesforce.com
cs308.salesforce.com
preprod.bluetail.salesforce.com
hyd-wlc-a.internal.salesforce.com
qa-api.docs.salesforce.com
umps1-c2-frf.salesforce.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
mx3-ord-sp1.mta.salesforce.com
mx2-frf-sp1.mta.salesforce.com
*.cs15.force.com
brand.salesforce.com
ora-ccore-wp001.internal.salesforce.com
*.cs173.force.com
dns-vetting1l.map.fastly.net
slotmatchinggs0.salesforce.com
perf1-useast2.cloudatlas.perf1o.pc-rnd.pc-aws.salesforce.com
dns-vetting1a.map.fastly.net
mx4-ord-sp2.mta.salesforce.com
*.eu25.force.com
cs225.salesforce.com
*.na18.force.com
mx3-frf-sp1.mta.salesforce.com
*.na74.force.com
www-perf2-pub.salesforce.com
*.cs115.my.salesforce.com
*.na38.force.com
app.datorama.com
*.na137.force.com
cmn1-wlc-a.internal.salesforce.com
Certificate
The complete raw certificate details for cmn1-wlc-a.internal.salesforce.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgIQG20m4wuwoxR92BXsaocivDANBgkqhkiG9w0BAQsFADB+ MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAd BgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxLzAtBgNVBAMTJlN5bWFudGVj IENsYXNzIDMgU2VjdXJlIFNlcnZlciBDQSAtIEc0MB4XDTE2MDcyOTAwMDAwMFoX DTE4MDYyMTIzNTk1OVowgbIxCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxpZm9y bmlhMRYwFAYDVQQHDA1TYW4gRnJhbmNpc2NvMRwwGgYDVQQKDBNTYWxlc2ZvcmNl LmNvbSBJbmMuMQswCQYDVQQLDAJJVDEeMBwGA1UECxMVRm9yIEludHJhbmV0IFVz ZSBPbmx5MSswKQYDVQQDDCJjbW4xLXdsYy1hLmludGVybmFsLnNhbGVzZm9yY2Uu Y29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymmhZC6Gu3XR9TQ2 tNk1+d4DOD3zlR4Lp+OfwhvyqmnqcMjk1S8P7rxLhwBpSjkE1vSiWXltO7CF1FA+ NO6i9jW+1/I0QIfa8WQ02syQHXGhT+gswzZzgnRnZ077K8fRArgSdQNnk4oLz+Ak 03hGKnPwrkx3EGXsvxQlnOc7XCK4SlEzd4QIXgw0x3RhDJy60plbV3XZV8oVlKIA Ys4NfTbM8kMUHSE6ZimNKEjp/+bVZCW9YmsilMpKdRaARhBLm+MvJKjvUsz5Qonp b0tWODEOmrt8e8AIaYIeCBu34mjeljmfuAsdVVizSNt0csVtT3Fb4IRhTDgxI0IA sGLF2QIDAQABo4IBpzCCAaMwSAYDVR0RBEEwP4IiY21uMS13bGMtYS5pbnRlcm5h bC5zYWxlc2ZvcmNlLmNvbYIZZ3Vlc3QuY29ycC5zYWxlc2ZvcmNlLmNvbTAJBgNV HRMEAjAAMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwYQYDVR0gBFowWDBWBgZngQwBAgIwTDAjBggrBgEFBQcCARYXaHR0cHM6 Ly9kLnN5bWNiLmNvbS9jcHMwJQYIKwYBBQUHAgIwGQwXaHR0cHM6Ly9kLnN5bWNi LmNvbS9ycGEwHwYDVR0jBBgwFoAUX2DPYZBV34RDFIpgKrL1evRDGO8wKwYDVR0f BCQwIjAgoB6gHIYaaHR0cDovL3NzLnN5bWNiLmNvbS9zcy5jcmwwVwYIKwYBBQUH AQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8vc3Muc3ltY2QuY29tMCYGCCsGAQUF BzAChhpodHRwOi8vc3Muc3ltY2IuY29tL3NzLmNydDATBgorBgEEAdZ5AgQDAQH/ BAIFADANBgkqhkiG9w0BAQsFAAOCAQEABCGnCLSFX2rNcWk57cSQObAOuzLRI1ey ezsWxC3ZuR+2GfJSIGSp58aUeNidUz3E2Le/6vo87exfHU4dDBUsQMzERL+W3r+Q O/GH5ZAjjNIEecSPMaGVBD+wz/LXHOQomi5eKvu+lyJ2hk47HuIjfzZOAlQnk5H2 UtGVSH7OwZnZnzUh+zUM14uNAEDj1g+DWWhFgkx+Rdgqwh93f0F5E5F8TpKesN0j CtqTuC+VzOOsdZtasBN+hZChRFiA+EUr90H7JvfnroDOEUJihXb2c0LqkjHvqiI5 73jlsyTdGlOCD5JJmbRcoqKTbAcFXU8RkSIJWDliKvFOpdiEihiaAA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymmhZC6Gu3XR9TQ2tNk1 +d4DOD3zlR4Lp+OfwhvyqmnqcMjk1S8P7rxLhwBpSjkE1vSiWXltO7CF1FA+NO6i 9jW+1/I0QIfa8WQ02syQHXGhT+gswzZzgnRnZ077K8fRArgSdQNnk4oLz+Ak03hG KnPwrkx3EGXsvxQlnOc7XCK4SlEzd4QIXgw0x3RhDJy60plbV3XZV8oVlKIAYs4N fTbM8kMUHSE6ZimNKEjp/+bVZCW9YmsilMpKdRaARhBLm+MvJKjvUsz5Qonpb0tW ODEOmrt8e8AIaYIeCBu34mjeljmfuAsdVVizSNt0csVtT3Fb4IRhTDgxI0IAsGLF 2QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 36455904963748730457419940129415832252 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-29 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-21 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Salesforce.com Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'For Intranet Use Only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'cmn1-wlc-a.internal.salesforce.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25552225911951917492979695888298211781825771008127335988211445478387969067692109917575122618364779293591278340439860560343076288548766715686439458750276587350491662289002433238987413603349665678226975857247064537783653269554593683340891352756690190112142116366531903610780453771988633787758220733043007763670677439859092898028113139073681052747898858954669906819781082321317034264970753388446282680128087984691507239348915610418736731284842285875549056093211148331371792635330846656116217855643403760379109072296606980146307658398899573052456759591681096528478770666954901571141394941789543532446138804773872279406041 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmn1-wlc-a.internal.salesforce.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guest.corp.salesforce.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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