owa.corp.cvscaremark.com

- CVS Pharmacy Inc -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 6d:39:6e:71:8b:47:e8:45:b0:3f:07:83:81:96:22:41 was issued on by Symantec Corporation.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

CVS Pharmacy Inc

Organization: CVS Pharmacy Inc
Organization unit: I/S Security
Organization unit: For Intranet Use Only
State / Province: Rhode Island
Locality: Woonsocket
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 6d:39:6e:71:8b:47:e8:45:b0:3f:07:83:81:96:22:41
Serial Number (int): 145184052522436428089866837932832596545
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 09:5f:87:5c:ef:fa:85:57:94:db:f1:ab:05:2a:77:c1:4d:aa:ac:79
Fingerprint (sha256): 02:a5:d3:74:77:f0:e2:0e:dc:25:29:97:57:4d:db:c6:71:fc:64:72:39:3e:ce:21:8a:b1:40:d9:9b:bd:a6:50

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate owa.corp.cvscaremark.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for owa.corp.cvscaremark.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

OFFICEAPPS.OMNICARE.COM
owa.corp.cvscaremark.com

Other certificates including the domain name cvscaremark.com

(limited to 100 certificates)
PAZ1VAWBPW1V.corp.cvscaremark.com
KMPCI-WEST.corp.cvscaremark.com
PAZ1MCSSQLUW2V.corp.cvscaremark.com
rri1kafaul10v.corp.cvscaremark.com
rri2omnada003.corp.cvscaremark.com
f48205inv.corp.cvscaremark.com
PRI1FAZPW9V.corp.cvscaremark.com
PAZ1FAZDW5V.corp.cvscaremark.com
rri2sndapl10v.corp.cvscaremark.com
esl-dev-east.corp.cvscaremark.com
rxcsys.caremarkrx.net
webportaluat.acs-rx.com
preprod-eoms.corp.cvscaremark.com
www.WebPortalCoreAPICommon.corp.cvscaremark.com
eaz1eamppp10p.aetna.com
paz1hdpcdl5p.corp.cvscaremark.com
psfb.corp.cvscaremark.com
eastscim.corp.cvscaremark.com
spmfinder-pt.corp.cvscaremark.com
eaz1sispw05v.corp.cvscaremark.com
RRI2VFINTO1V.corp.cvscaremark.com
RCA1WCSATW1V.corp.cvscaremark.com
rri1pmpau2r1a.corp.cvscaremark.com
sfgretail-uat.corp.cvscaremark.com
rsfb.corp.cvscaremark.com
rri2pnddnl1v.corp.cvscaremark.com
PFL14VDIPROD.corp.cvscaremark.com
sr-api.corp.cvscaremark.com
PAZ1RECDDW11V.corp.cvscaremark.com
eslwsrr-pe-west.corp.cvscaremark.com
policy.corp.cvscaremark.com
PAZ1RXEDQW9V.corp.cvscaremark.com
TfsAppPrd.corp.cvscaremark.com
rri2lwfdnl2v.corp.cvscaremark.com
rri1ccswtl1v.corp.cvscaremark.com
f48378inv.corp.cvscaremark.com
pil12autopw1v.corp.cvscaremark.com
messagesit3.corp.cvscaremark.com
dev1requestcenter.cvscaremark.com
RRI2ISIAPW1V.corp.cvscaremark.com
f48220inv.corp.cvscaremark.com
stressapi03.corp.cvscaremark.com
rxcpharmacy.DEV.corp.cvscaremark.com
RRI1ARCHDPW1C.corp.cvscaremark.com
rri2tibapa1.corp.cvscaremark.com
msdev-west.corp.cvscaremark.com
www.cmsservice.corp.cvscaremark.com
PAZ1ECMWNW11V.corp.cvscaremark.com
PAZ1VUICPO1V.corp.cvscaremark.com
silverscript.sit4a.meddweb.net
RRI1IDMADL1V.corp.cvscaremark.com
PAZ1CTMDTW1V.CORP.CVSCAREMARK.COM
pri2vcrl5v.corp.cvscaremark.com
PRI1FAZDPW9P.corp.cvscaremark.com
PRI1FAZPW10V.corp.cvscaremark.com
KioKno.cvs.com
esldp-sit1-west.corp.cvscaremark.com
paz1sprxwpl2v.corp.cvscaremark.com
IRI1DGW128.sccm.ilab.cvscaremark.com
dev3-dspservices.corp.cvscaremark.com
raz1rxwplxdb04.corp.cvscaremark.com
insight-dev.caremark.com
sr-tag-test.corp.cvscaremark.com
secureappslb.caremark.com
RIN1TKODUL2V.corp.cvscaremark.com
paz1sqldw74p.corp.cvscaremark.com
www.WebPortalCoreAPIPhysician.sit.corp.cvscaremark.com
raz1pbacpw1v.corp.cvscaremark.com
RRI2OTXDUW1V.corp.cvscaremark.com
egrc-uat.cvscaremark.com
rri2blgrpl2v.corp.cvscaremark.com
b2b.cvshealth.com
raz1r2oapl10v.corp.cvscaremark.com
POCS.corp.cvscaremark.com
rri2tibapa1.corp.cvscaremark.com
pedge.corp.cvscaremark.com
PBM-Z-ZLP095.cvs.com
paz1lvedtl10v.corp.cvscaremark.com
rri2incrtw1v.corp.cvscaremark.com
cvsepm-hfm.corp.cvscaremark.com
paz1iceaul1v.corp.cvscaremark.com
rotatordev.corp.cvscaremark.com
FederationE.cvscaremark.com
RRI2VCV3PW1V.corp.cvscaremark.com
f48283inv.corp.cvscaremark.com
uat.myomnicare.corp.cvscaremark.com
owa.corp.cvscaremark.com
Omniview2wayTlsClient-Prd.corp.cvscaremark.com
PAZ1MCSWPW10V.corp.cvscaremark.com
rri1rxieul11v.corp.cvscaremark.com
RRI2OMNDPW36v.CORP.CVSCAREMARK.COM
rri1sapetu1.corp.cvscaremark.com
rri2ivrapl4v.corp.cvscaremark.com
KIOSKLAH2017DEC.CORP.CVSCAREMARK.COM
splunkdevwest1.corp.cvscaremark.com
dbpl-ext-sit1e.corp.cvscaremark.com
AccClientUAT.corp.cvscaremark.com
rri2omndda003.corp.cvscaremark.com
eph-sit2.corp.cvscaremark.com
f48365inv.corp.cvscaremark.com

Certificate

The complete raw certificate details for owa.corp.cvscaremark.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB/7q+trO/qVD298QEx4
r5XPtdN57Gyef+ZrNNtT0D2HkK9sjndblcM7eht7CidflDsa0cvApX7FTcaOPWO1
wIowEXScHmjr0hOtxr3HhglTk0l3BhsukuU3VW/fw48YsNblD5GsHZLkZrue4och
LHRlx3Yzu7fNDZjlkmcPOhyd2JMPuW7PsEzsJEwhce5Ty6wYRUhmgJDrS6IgmPte
f1bUos7rrG+9NdNkwWntm5EmoF7Ou6qvbVyJxBsjGyJLyEm+OFFOtSMmpQfh6gUs
3CKq31Nj+vAtwzpC7rGh5B0YT8BgkvvTKmCKb1vP7y0H7Na7d5TcOA+2fRWElpzx
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 145184052522436428089866837932832596545
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rhode Island'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Woonsocket'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CVS Pharmacy Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'I/S Security'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'For Intranet Use Only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'owa.corp.cvscaremark.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24253526003975718039116772476073228247511253561239894424522875283028289494115167169373685869692272925545618280556026818825744780103497308511612477375513524318985428239324304746214464040685221732514137435056446398075611544605941194618474469358026718181312587081750213449146725387603984177905912609463098235057002380842616210604395084815131531791909222046990680714913129750838077017597094502282072873970222281321462156119148463505371576736308123566255563312056441155932170454358209941157969621588586717731055924681261316877108757763352427072316872574331131293022228739338052336227028904320498165150474124330490495037793
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'OFFICEAPPS.OMNICARE.COM'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.corp.cvscaremark.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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