friends.dm.origin.com

- Electronic Arts, Inc. -

Issued by VeriSign Class 3 Secure Server CA - G3

About this certificate

This digital certificate with serial number 3f:95:38:1c:6e:7c:d3:fe:44:c9:3e:8f:81:7b:ec:96 was issued on by VeriSign, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Electronic Arts, Inc.

Organization: Electronic Arts, Inc.
Organization unit: EA Online/Pogo.com
State / Province: California
Locality: Redwood City
Country: US

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3f:95:38:1c:6e:7c:d3:fe:44:c9:3e:8f:81:7b:ec:96
Serial Number (int): 84516154033892003194273695861745380502
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 0d:44:5c:16:53:44:c1:82:7e:1d:20:ab:25:f4:01:63:d8:be:79:a5

Fingerprint (sha1): d7:ca:46:01:4a:76:95:c8:20:07:62:c1:8c:f2:68:82:50:7b:0d:62
Fingerprint (sha256): 03:e3:79:0f:35:80:48:4a:40:a9:8d:b9:2e:84:e2:22:68:0b:9e:65:3c:e8:30:19:f5:64:55:62:ac:16:21:2b

Issuing Certificate URL: http://sd.symcb.com/sd.crt

Revocation information

OCSP Server: http://sd.symcd.com
CRL Distribution Point: http://sd.symcb.com/sd.crl

Check the revocation status for certificate friends.dm.origin.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for friends.dm.origin.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

friends.dm.origin.com

Other certificates including the domain name origin.com

(limited to 100 certificates)
preprod.chef.x.origin.com
originslashstore.cms.origin.com
fc.qa.dirtybits.dm.origin.com
integration.m.friends.dm.origin.com
lt.oms.origin.com
www.origin.com
voiceregister.dm.origin.com
integration.dirtybits.api.origin.com
storesource.cms.origin.com
dev.dirtybits.dm.origin.com
ecommerce2.dm.origin.com
atom.dm.origin.com
fc.qa.avatar.dm.origin.com
stable.api.oms.origin.com
fc.qa.ecommerce.dm.origin.com
dcmt-origin-auth.dm.origin.com
preorder.origin.com
chat.dm.origin.com
fc.qa.er.dm.origin.com
x.voiceregister.dm.origin.com
eradmin.dm.origin.com
friends.dm.origin.com
er.dm.origin.com
preview.assets.cms.origin.com
fc.qa.avatar.dm.origin.com
qa-main.chat.dm.origin.com
*.free.origin.com
dev.xray.x.origin.com
avatar.dm.origin.com
assets.dm.origin.com
integration.m.friends.dm.origin.com
integration.sims4m.avatar.dm.origin.com
sb1.www.x.origin.com
fc.qa.preview.cms.origin.com
www.origin.com
config.x.origin.com
stage.ecommerce2.dm.origin.com
search.dm.origin.com
*.origin.com
*.origin.com
fc.qa.review.cms.origin.com
checkout.alpha.origin.com
m.friends.dm.origin.com
www.origin.com
preorder.origin.com
*.staging.checkout.ea.com
www.origin.com
*.social.ea.com
loginregistration.dm.origin.com
fc.qa.er.dm.origin.com
avatar.dm.origin.com
account.preprod.origin.com
www.origin.com
promomanager.dm.origin.com
qa.dirtybits.api.origin.com
integration.eradmin.dm.origin.com
originslashstore.cms.origin.com
upgrade.dm.origin.com
integration.avatar.dm.origin.com
fc.qa.approve.assets.cms.origin.com
support.ea.com
upgrade.dm.origin.com
integration.bioware.web.dm.origin.com
integrationx.voiceregister.dm.origin.com
xray.x.origin.com
integration.m.avatar.dm.origin.com
er.dm.origin.com
lvlt.store.thesims3.com
qa.review.cms.x.origin.com
integration.atom.dm.origin.com
qa.x.origin.com
integration.web.dm.origin.com
bioware.web.dm.origin.com
cloudsync.dm.origin.com
m.help.ea.com
www.origin.com
www.dm.origin.com
fc.qa.www.assets.cms.origin.com
*.free.origin.com
fc.qa.avatar.dm.origin.com
fc.qa.dirtybits.dm.origin.com
friends.gs.ea.com
prod.chef.x.origin.com
www.origin.com
integration.cloudsync.dm.origin.com
checkout.preprod.origin.com
eradmin.dm.origin.com
*.free.origin.com
account.origin.com
sandbox.account.origin.com
www.origin.com
qa.dirtybits.dm.origin.com
fc.qa.chat.dm.origin.com
integration.m.friends.dm.origin.com
account.preprod.origin.com
prometheus.x.origin.com
www.origin.com
account.origin.com
account.preprod.origin.com
promo.store.origin.com

Certificate

The complete raw certificate details for friends.dm.origin.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIQP5U4HG580/5EyT6PgXvsljANBgkqhkiG9w0BAQUFADCB
tTELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQL
ExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1c2Ug
YXQgaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYSAoYykxMDEvMC0GA1UEAxMm
VmVyaVNpZ24gQ2xhc3MgMyBTZWN1cmUgU2VydmVyIENBIC0gRzMwHhcNMTQwNDA5
MDAwMDAwWhcNMTUwNDI4MjM1OTU5WjCBljELMAkGA1UEBhMCVVMxEzARBgNVBAgT
CkNhbGlmb3JuaWExFTATBgNVBAcUDFJlZHdvb2QgQ2l0eTEeMBwGA1UEChQVRWxl
Y3Ryb25pYyBBcnRzLCBJbmMuMRswGQYDVQQLFBJFQSBPbmxpbmUvUG9nby5jb20x
HjAcBgNVBAMUFWZyaWVuZHMuZG0ub3JpZ2luLmNvbTCCASIwDQYJKoZIhvcNAQEB
BQADggEPADCCAQoCggEBAMC3v2Q/u5I0dboIFWJoD+0JF3nrn+6KaMs2UU860z9h
2XEOqSzGcyW4myQNuGFH3/1PhH76AOxQmgRP4vCzgAoLHY8v3MdFvaQ5u+ALJ6O3
qW61djRXTsTvNgpQtwBJp1RxzSVQset7tX0VJVO3QytmlkTEkF7XziviHe5tPmC8
7hg3TrsKVJXfZSYvWVjEFqZKwlbi4I7wwfVXAepBnPEQhHihhpT7GL5NYt2OegGn
3t6Tri10IqtEWRbtDlfuogUUggAI2Eqm4JLXV8FjRa6nlW4+0B0cDub2Thyz1udg
QSj7PyIIHzMLtiC2K6AYwqNh9vg5nEJBYMpltebaad8CAwEAAaOCAW4wggFqMCAG
A1UdEQQZMBeCFWZyaWVuZHMuZG0ub3JpZ2luLmNvbTAJBgNVHRMEAjAAMA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwZQYDVR0g
BF4wXDBaBgpghkgBhvhFAQc2MEwwIwYIKwYBBQUHAgEWF2h0dHBzOi8vZC5zeW1j
Yi5jb20vY3BzMCUGCCsGAQUFBwICMBkaF2h0dHBzOi8vZC5zeW1jYi5jb20vcnBh
MB8GA1UdIwQYMBaAFA1EXBZTRMGCfh0gqyX0AWPYvnmlMCsGA1UdHwQkMCIwIKAe
oByGGmh0dHA6Ly9zZC5zeW1jYi5jb20vc2QuY3JsMFcGCCsGAQUFBwEBBEswSTAf
BggrBgEFBQcwAYYTaHR0cDovL3NkLnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0
cDovL3NkLnN5bWNiLmNvbS9zZC5jcnQwDQYJKoZIhvcNAQEFBQADggEBAC+v4JnQ
v3hkaXk9qUKn43d7jKFUM8hDKSqoQhzrveV7QSmDN1S93NzfrATV9cZBeMiAo8yv
PpXuf4YaYSIO0TO/OgU7HdaGBvcwERTkCW0iEHMvZ+kjwf/+H7S4nKn7vX0YIQDy
lcupl6kcQ63ZQD7t9fxVO4rxtY7rEuYI+qfP6qYrpWVH9tSIMPfxTdVbMfTrC3XS
/ddPGnPDBZtIyKzak8EB7W16ojb1rA04Kgxt+P3FsQxGCi6Ft0cBxx1Q98wxswF+
zEX1GHV0Jwge8WOgAVC9TJkUcUBneihgSO0o6K7noy+pl6mkldar6BBD13QOmYXS
XmwaIY0rp44Rv7I=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLe/ZD+7kjR1uggVYmgP
7QkXeeuf7opoyzZRTzrTP2HZcQ6pLMZzJbibJA24YUff/U+EfvoA7FCaBE/i8LOA
Cgsdjy/cx0W9pDm74Asno7epbrV2NFdOxO82ClC3AEmnVHHNJVCx63u1fRUlU7dD
K2aWRMSQXtfOK+Id7m0+YLzuGDdOuwpUld9lJi9ZWMQWpkrCVuLgjvDB9VcB6kGc
8RCEeKGGlPsYvk1i3Y56Aafe3pOuLXQiq0RZFu0OV+6iBRSCAAjYSqbgktdXwWNF
rqeVbj7QHRwO5vZOHLPW52BBKPs/IggfMwu2ILYroBjCo2H2+DmcQkFgymW15tpp
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 84516154033892003194273695861745380502
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)10'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 Secure Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Redwood City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Electronic Arts, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'EA Online/Pogo.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'friends.dm.origin.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24328363883651422864542527680562469210459733567097679695579181502416050142040244926184772109201793157226954850901921331924855451495208677677026980867392344379256765582184258648787734603841146958519127602165513302122669087008056126719802554518306509034223002979019930929474748701083255662157162141206780964794956568654653694676971574199420963960827973354518903947725316174843708976643669607600329833058046411843412185562411069406281760668227648647897452402655664386335105525692923261577953313298491302754573173491745124169775645682064912153996853965295951790111288405598040366069475924272326671651105047097875568945631
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friends.dm.origin.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [104 116 116 112 115 58 47 47 100 46 115 121 109 99 98 46 99 111 109 47 114 112 97]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d445c165344c1827e1d20ab25f40163d8be79a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sd.symcb.com/sd.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sd.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sd.symcb.com/sd.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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