nagus.statestreet.com
- State Street Corporation -
Issued by Symantec Class 3 Secure Server CA - G4
About this certificate
This digital certificate with serial number 6e:ca:26:dd:4f:d0:95:6a:70:8f:73:c3:64:40:48:e2 was issued on by Symantec Corporation.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
State Street Corporation
Organization:
State Street Corporation
Organization unit: Internet Technology Services
Organization unit: Internet Technology Services
State / Province:
Massachusetts
Locality: Quincy
Country: US
Locality: Quincy
Country: US
Symantec Corporation
Organization:
Symantec Corporation
Organization unit: Symantec Trust Network
Organization unit: Symantec Trust Network
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 6e:ca:26:dd:4f:d0:95:6a:70:8f:73:c3:64:40:48:e2Serial Number (int): 147264711767455113558714406483003459810
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef
Fingerprint (sha1): a7:94:62:c3:d5:64:79:fb:16:ba:f6:2d:54:e7:22:f4:55:15:99:64
Fingerprint (sha256): 04:6e:24:49:c9:e6:8b:80:58:a3:63:c2:6c:d8:48:ab:bf:a9:79:9d:0e:77:e3:eb:c4:2d:d1:c6:c1:c6:9c:cd
Issuing Certificate URL: http://ss.symcb.com/ss.crt
Revocation information
OCSP Server: http://ss.symcd.comCRL Distribution Point: http://ss.symcb.com/ss.crl
Check the revocation status for certificate nagus.statestreet.com
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for nagus.statestreet.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
noqcjanc01a.statestr.com
naguestnac.statestr.com
nogrdcnc01a.statestr.com
nagus.statestreet.com
naguestnac.statestr.com
nogrdcnc01a.statestr.com
nagus.statestreet.com
Other certificates including the domain name statestreet.com
(limited to 100 certificates)
lab-pcidlt.statestreet.com
myview-ua.statestreet.com
gpr1.statestreet.com
Replicon-prod.statestreet.com
mblas2.statestreet.com
ehorizon2.statestreet.com
voltage-pp-0000.statestreet.com
mblap3.statestreet.com
myss-reverseproxy.statestreet.com
annualreport.statestreet.com
myss-reverseproxy2.statestreet.com
epass.statestreet.com
api.statestreet.com
edgm-catalog-dev.statestreet.com
psh-int.statestreet.com
mblap4.statestreet.com
lam-ecr-ims.statestreet.com
activeanalytics-uat1.statestreet.com
securemail.statestreet.com
setweb.statestreet.com
fws-uat.statestreet.com
cots.statestreet.com
mjc.statestreet.com
uat-ams.ssga.com
Workday-Prod.statestreet.com
www.ifs.statestreet.com
remote.statestreet.com
nagus.statestreet.com
voltage-pp-0000.ais.statestreet.com
myssc-uat.statestreet.com
clouduat-ssi.statestreet.com
ehorizon.statestreet.com
mobile2.ais.statestreet.com
cloud-nscc.statestreet.com
cdas-tokyo-mss.statestreet.com
depotbank.statestreet.com
NOQCJASB92B.statestreet.com
statestreet.com
iptat-prod.statestreet.com
uat2notifications.cashmanager.statestreet.com
riskservices.statestreet.com
weblend.statestreet.com
demo-ecr-ims-uat.statestreet.com
mail.statestr.com
sf360uat.statestreet.com
www-new-uat.statestreet.com
txrbuat.statestreet.com
mtexprod.statestreet.com
gec.statestreet.com
cot-uat.statestreet.com
ta-ufo.statestreet.com
ebicsuat.statestreet.com
aaam-ims.statestreet.com
epassua6.statestreet.com
www.ssga.com
asg-syd.statestreet.com
sf360dev.statestreet.com
myss-reverseproxy2.statestreet.com
my.statestreet.com
mblac1.statestreet.com
Taxstrm-prod.statestreet.com
tbs20b.statestreet.com
pda-uat.statestreet.com
dca-buat.statestreet.com
ireports30.statestreet.com
globalmarkets.statestreet.com
EOLOCPNC02A.statestr.com
pda-eft.statestreet.com
ehorizon.statestreet.com
mbluaac1.statestreet.com
agt.statestreet.com
aoaushdn21a.statestreet.com
customersupport.cashmanager.statestreet.com
my.statestreet.com
psh.statestreet.com
NOQCJAEX10A.statestreet.com
ssp-uat.statestreet.com
psh.statestreet.com
voltage-pp-0000.statestreet.com
securemail.statestreet.com
dev-ams.ssga.com
myssc-uat2-internal.statestreet.com
ecfm-uat.statestreet.com
voltage-pp-0000.ais.statestreet.com
Advise-prod.statestreet.com
iss-investorportal-ws-uat.statestreet.com
cots.statestreet.com
uat31.cashmanager.statestreet.com
my-preprod.statestreet.com
issmorissondev.statestreet.com
clouduat-venus.statestreet.com
cmw-uat.statestreet.com
ipaybenefits.statestreet.com
glspw3335.statestreet.com
sml-uat.statestreet.com
myss-reverseproxy2.statestreet.com
access.statestreet.com
esp.statestreet.com
cashmanager.statestreet.com
ims-jt.statestreet.com
myview-ua.statestreet.com
gpr1.statestreet.com
Replicon-prod.statestreet.com
mblas2.statestreet.com
ehorizon2.statestreet.com
voltage-pp-0000.statestreet.com
mblap3.statestreet.com
myss-reverseproxy.statestreet.com
annualreport.statestreet.com
myss-reverseproxy2.statestreet.com
epass.statestreet.com
api.statestreet.com
edgm-catalog-dev.statestreet.com
psh-int.statestreet.com
mblap4.statestreet.com
lam-ecr-ims.statestreet.com
activeanalytics-uat1.statestreet.com
securemail.statestreet.com
setweb.statestreet.com
fws-uat.statestreet.com
cots.statestreet.com
mjc.statestreet.com
uat-ams.ssga.com
Workday-Prod.statestreet.com
www.ifs.statestreet.com
remote.statestreet.com
nagus.statestreet.com
voltage-pp-0000.ais.statestreet.com
myssc-uat.statestreet.com
clouduat-ssi.statestreet.com
ehorizon.statestreet.com
mobile2.ais.statestreet.com
cloud-nscc.statestreet.com
cdas-tokyo-mss.statestreet.com
depotbank.statestreet.com
NOQCJASB92B.statestreet.com
statestreet.com
iptat-prod.statestreet.com
uat2notifications.cashmanager.statestreet.com
riskservices.statestreet.com
weblend.statestreet.com
demo-ecr-ims-uat.statestreet.com
mail.statestr.com
sf360uat.statestreet.com
www-new-uat.statestreet.com
txrbuat.statestreet.com
mtexprod.statestreet.com
gec.statestreet.com
cot-uat.statestreet.com
ta-ufo.statestreet.com
ebicsuat.statestreet.com
aaam-ims.statestreet.com
epassua6.statestreet.com
www.ssga.com
asg-syd.statestreet.com
sf360dev.statestreet.com
myss-reverseproxy2.statestreet.com
my.statestreet.com
mblac1.statestreet.com
Taxstrm-prod.statestreet.com
tbs20b.statestreet.com
pda-uat.statestreet.com
dca-buat.statestreet.com
ireports30.statestreet.com
globalmarkets.statestreet.com
EOLOCPNC02A.statestr.com
pda-eft.statestreet.com
ehorizon.statestreet.com
mbluaac1.statestreet.com
agt.statestreet.com
aoaushdn21a.statestreet.com
customersupport.cashmanager.statestreet.com
my.statestreet.com
psh.statestreet.com
NOQCJAEX10A.statestreet.com
ssp-uat.statestreet.com
psh.statestreet.com
voltage-pp-0000.statestreet.com
securemail.statestreet.com
dev-ams.ssga.com
myssc-uat2-internal.statestreet.com
ecfm-uat.statestreet.com
voltage-pp-0000.ais.statestreet.com
Advise-prod.statestreet.com
iss-investorportal-ws-uat.statestreet.com
cots.statestreet.com
uat31.cashmanager.statestreet.com
my-preprod.statestreet.com
issmorissondev.statestreet.com
clouduat-venus.statestreet.com
cmw-uat.statestreet.com
ipaybenefits.statestreet.com
glspw3335.statestreet.com
sml-uat.statestreet.com
myss-reverseproxy2.statestreet.com
access.statestreet.com
esp.statestreet.com
cashmanager.statestreet.com
ims-jt.statestreet.com
Certificate
The complete raw certificate details for nagus.statestreet.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgIQbsom3U/QlWpwj3PDZEBI4jANBgkqhkiG9w0BAQsFADB+ MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAd BgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxLzAtBgNVBAMTJlN5bWFudGVj IENsYXNzIDMgU2VjdXJlIFNlcnZlciBDQSAtIEc0MB4XDTE2MTIxMDAwMDAwMFoX DTE4MTIxMjIzNTk1OVowgaAxCzAJBgNVBAYTAlVTMRYwFAYDVQQIDA1NYXNzYWNo dXNldHRzMQ8wDQYDVQQHDAZRdWluY3kxITAfBgNVBAoMGFN0YXRlIFN0cmVldCBD b3Jwb3JhdGlvbjElMCMGA1UECwwcSW50ZXJuZXQgVGVjaG5vbG9neSBTZXJ2aWNl czEeMBwGA1UEAwwVbmFndXMuc3RhdGVzdHJlZXQuY29tMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAoO9e/vYM/RnNG8x0Oh4rI8UsNtuKi048CD1rmd/n ekw27DFKUPwHotmk44YgV3GFgNnwhDZmglXD423ujzR6yUt4H8XOiCLbNqri5kyO oxPSLo4zX3+kZsSX3JHqvbXKUQu2HCzUXYJWB0Nmjrqv7NZOHzeRJ39gk75AXS3v P/cRiOuRTSJmlDSqtfXhmVzqcZ9fq/UwnLWr0RgeaUHgSze8KtJkhG1AZbXpu1N8 SL5G390eEI9EvicFEJd91fhpjZbgtQVrl2M2BWPlbwS87LdqQ+RK+PVh0yrXFz/3 HkdisUe64THRNwuZ3Ee2puWivmp/UN0cYd3pMqACkMPAqQIDAQABo4IBzDCCAcgw bQYDVR0RBGYwZIIYbm9xY2phbmMwMWEuc3RhdGVzdHIuY29tghduYWd1ZXN0bmFj LnN0YXRlc3RyLmNvbYIYbm9ncmRjbmMwMWEuc3RhdGVzdHIuY29tghVuYWd1cy5z dGF0ZXN0cmVldC5jb20wCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMGEGA1UdIARaMFgwVgYGZ4EMAQICMEww IwYIKwYBBQUHAgEWF2h0dHBzOi8vZC5zeW1jYi5jb20vY3BzMCUGCCsGAQUFBwIC MBkMF2h0dHBzOi8vZC5zeW1jYi5jb20vcnBhMB8GA1UdIwQYMBaAFF9gz2GQVd+E QxSKYCqy9Xr0QxjvMCsGA1UdHwQkMCIwIKAeoByGGmh0dHA6Ly9zcy5zeW1jYi5j b20vc3MuY3JsMFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDovL3Nz LnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL3NzLnN5bWNiLmNvbS9zcy5j cnQwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBADqoHAdF cPu14AAit902peUfIPpBrln1WIOJOfNWY8uMGweDuKj5iSSpripDPxV2RXvvfC91 XgVsKo21g4WSuYX+7i0cvHOYu/fGXMP36vfvYwlj3QttWw5E9aRmF+SKLGWO01Rc Accmp7T/oqjUEciT5BgRQXdZUqfnZtU+eEM3+KJB5mpz8GSFdQllYagKU/x7alNm 091eKjft39BMOD4Ck0JESMQmReuETAx2uEONoEJm2tYYDj7FadkX2eAoGQ5ciRHP fFzjk7MGHZntJqCud7ni4w69pggbGssUtH+ZuY+xoOahzCs0gZjFCsgJucl6VerK IS0kqSpyWeRA5/I= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoO9e/vYM/RnNG8x0Oh4r I8UsNtuKi048CD1rmd/nekw27DFKUPwHotmk44YgV3GFgNnwhDZmglXD423ujzR6 yUt4H8XOiCLbNqri5kyOoxPSLo4zX3+kZsSX3JHqvbXKUQu2HCzUXYJWB0Nmjrqv 7NZOHzeRJ39gk75AXS3vP/cRiOuRTSJmlDSqtfXhmVzqcZ9fq/UwnLWr0RgeaUHg Sze8KtJkhG1AZbXpu1N8SL5G390eEI9EvicFEJd91fhpjZbgtQVrl2M2BWPlbwS8 7LdqQ+RK+PVh0yrXFz/3HkdisUe64THRNwuZ3Ee2puWivmp/UN0cYd3pMqACkMPA qQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 147264711767455113558714406483003459810 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-10 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-12 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Massachusetts' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Quincy' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'State Street Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Internet Technology Services' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'nagus.statestreet.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20316167072427839382230410773911241951204804706374584997219994016350538574355817907652556116897899465162905336778298216890735525239978378923874429893680219207122295418816105327421659077614402760577551615733381226924901342960424895754342141459241066015011217050618244938263847330686948225308859145158179251729108313312803923435421551958200344630699326072259776336071794833986623996334678939044474047860125635969926977198877262260538361952199485584200921285003956217019313782395130397269104254703649389609476494776776262527180458043273699499344321800593645489002718010512861645764880679192052543183666757158415913697449 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noqcjanc01a.statestr.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naguestnac.statestr.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nogrdcnc01a.statestr.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nagus.statestreet.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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