blog.qa.devry.edu

- DeVry University -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 70:04:32:cb:ca:92:e8:20:e0:94:81:52:9b:ef:2a:b3 was issued on by Symantec Corporation.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

DeVry University

Organization: DeVry University
Organization unit: IT Systems
State / Province: Illinois
Locality: Downers Grove
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 70:04:32:cb:ca:92:e8:20:e0:94:81:52:9b:ef:2a:b3
Serial Number (int): 148895334981835461404000218999862274739
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): ff:95:aa:bb:2b:10:43:66:16:25:cd:d5:80:87:eb:44:93:f8:24:f8
Fingerprint (sha256): 04:1c:9e:13:55:e4:7d:c5:fc:22:18:5f:73:fb:b1:80:dd:d2:f7:9f:85:a9:18:87:f3:28:ee:53:8d:df:2e:1f

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate blog.qa.devry.edu

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for blog.qa.devry.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blog.qa.devry.edu
choose.qa.keller.edu
devryworks.qa.devry.edu
information.qa.devry.edu
information.qa.keller.edu
milb.qa.devry.edu
partner.qa.devry.edu
usoc.qa.devry.edu
veterinary.qa.rossu.edu
www.qa.rossu.edu
assets.qa.devry.edu
www.qa.devry.edu
www.qa.keller.edu
static.qa.devry.edu
demcontent.qa.devry.edu

Other certificates including the domain name devry.edu

(limited to 100 certificates)
pwreg.devry.edu
eis.qa.dvgnp.net
libguides.devry.edu
banportals.devry.edu
cert00078-azurecdn.akamaized.net
cert00078-azurecdn.akamaized.net
cert00078-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
www.int.devry.edu
secure10.san1.raxcdn.com
secure10.san1.raxcdn.com
cert00078-azurecdn.akamaized.net
secured3.san1.raxcdn.com
secure11.san1.raxcdn.com
cert00097-azurecdn.akamaized.net
dss.qa2.devry.edu
cert00078-azurecdn.akamaized.net
dc1-a-mraexpc1.dvuadmin.net
cert00088-azurecdn.akamaized.net
nexpose.devry.edu
secure10.san1.raxcdn.com
cert00097-azurecdn.akamaized.net
cert00084-azurecdn.akamaized.net
cert00097-azurecdn.akamaized.net
cert00097-azurecdn.akamaized.net
emailsso.tst1.devry.edu
secure11.san1.raxcdn.com
cert00097-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
login.devry.edu
cert00084-azurecdn.akamaized.net
secure11.san1.raxcdn.com
secure10.san1.raxcdn.com
cert00078-azurecdn.akamaized.net
gdedevapp1.devry.edu
akamai-san22.exacttarget.com
secure11.san1.raxcdn.com
secure10.san1.raxcdn.com
cert00088-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
iconnect.devry.edu
cert00084-azurecdn.akamaized.net
dss.devry.edu
secure11.san1.raxcdn.com
secured3.san1.raxcdn.com
cert00097-azurecdn.akamaized.net
OfficeWebAppA.devry.edu
cert00088-azurecdn.akamaized.net
cert00084-azurecdn.akamaized.net
cert00078-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
cert00084-azurecdn.akamaized.net
blog.qa.devry.edu
encoder.devry.edu
ilios.poc1.devry.edu
secure11.san1.raxcdn.com
cert00078-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
cert00055-azurecdn.akamaized.net
secure11.san1.raxcdn.com
secure10.san1.raxcdn.com
secure12.san1.raxcdn.com
cert00078-azurecdn.akamaized.net
cert00078-azurecdn.akamaized.net
dgw.devry.edu
cert00084-azurecdn.akamaized.net
cert00055-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
cert00078-azurecdn.akamaized.net
cert00097-azurecdn.akamaized.net
cert00078-azurecdn.akamaized.net
cert00078-azurecdn.akamaized.net
cert00085-azurecdn.akamaized.net
cert00078-azurecdn.akamaized.net
secure10.san1.raxcdn.com
web.devry.edu
portal.devry.edu
DC1-A-VWLAN5P.devry.edu
libguides.devry.edu
cert00088-azurecdn.akamaized.net
budget.devry.edu
cert00084-azurecdn.akamaized.net
cert00097-azurecdn.akamaized.net
wlapps.devry.edu
cert00085-azurecdn.akamaized.net
login.devry.edu
cert00097-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
cert00097-azurecdn.akamaized.net
cert00084-azurecdn.akamaized.net
discrpt.tst1.devry.edu
apps.qa.devry.edu
cert00097-azurecdn.akamaized.net
gtwy.devry.edu
cert00097-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
cert00078-azurecdn.akamaized.net

Certificate

The complete raw certificate details for blog.qa.devry.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7n523k4i8UfBYVIwKZGG
Ak3097ao7gYIAOidTkcwbdyqY3FEOjRyIsIiFa7vK/1EcGVh4lzj7x6XwRSUzomD
N+Mpzqa95oCw/kPNUFMPeRUv6+GT77e+SHZdTs3Ag0prnEWGFyowNfT4/sZ9WPqD
7PXrtChKNADj6K3qLx4pvAaNGSvvql2pxI3uZB54oKUala4hzxh/e/OgO8rnXkbK
Y/4e0M1q28xvjlQrVZ8CwhonsT44+AFfNcn8/4jbtVGIyxNVYVza5yS/j7uL01+5
MW6x496WGHZ4/MViirX7mOWlX3EXAtdBitZtbsW78S6pwVOy+CJew7fdv5K81s5p
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 148895334981835461404000218999862274739
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Downers Grove'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DeVry University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT Systems'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'blog.qa.devry.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30107078467111179343024684592646165259622731581472082794218586164734733466824127603690971682370146523420868893742529265048140440046368672112938645795027361134754743623145076205401115007062335564512525461451338606842793755413285907441244236504039409379654309318679119884822264446429918893731333864823341277298120756997102013475972389141693593731610405902837228272775270534162462948743728616113432238081115574236969941933933198902660735238962710441911865767412524943673043563355056019115520628602367356691937164698770934696144515338225427977137924666977500753868647460479107473742195921612547273437327764404421998307597
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (330 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.qa.devry.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'choose.qa.keller.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devryworks.qa.devry.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'information.qa.devry.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'information.qa.keller.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milb.qa.devry.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.qa.devry.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usoc.qa.devry.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veterinary.qa.rossu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa.rossu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.qa.devry.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa.devry.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa.keller.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.qa.devry.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demcontent.qa.devry.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000159fa6a175a0000040300473045022062486ed4e193f91637cd7ba3ae269fe105998e96d1733ced5f6dc4a2efb7d82802210094c9e4623d6f2b9daeb9f782d318eb96f386bba72a1e0ae8df071807904d440c007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000159fa6a177c000004030047304502202a046c7ab9892baea85f09b22caee31cdd8cdf5af9f874ac1b26362e1812b25f022100c8dab1d385c75d3139b3f11001bcdc0b65dbf48e85df12006fa6fd7203d2f5ae
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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