id.nikkei.com

- Nikkei Inc. -

Issued by Symantec Class 3 EV SSL CA - G3

About this certificate

This digital certificate with serial number 12:74:40:38:13:8d:a6:67:c0:f8:4c:1a:76:4f:d7:f8 was issued on by Symantec Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Nikkei Inc.

Company registration number: 0100-01-0033086
Organization: Nikkei Inc.
Organization unit: Digital Strategy and Planning Bureau
State / Province: TOKYO
Locality: CHIYODA-KU
Country: JP

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 12:74:40:38:13:8d:a6:67:c0:f8:4c:1a:76:4f:d7:f8
Serial Number (int): 24529712876761719776815065020417169400
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 01:59:ab:e7:dd:3a:0b:59:a6:64:63:d6:cf:20:07:57:d5:91:e7:6a

Fingerprint (sha1): 0c:8a:81:08:93:da:88:f3:c3:97:ec:3c:b3:a5:67:c6:c4:09:85:51
Fingerprint (sha256): 05:07:64:44:52:d1:86:56:3d:47:eb:c6:26:50:5c:86:2c:6f:3e:d0:e9:a2:f9:07:df:6f:7f:b2:43:e7:68:4b

Issuing Certificate URL: http://sr.symcb.com/sr.crt

Revocation information

OCSP Server: http://sr.symcd.com
CRL Distribution Point: http://sr.symcb.com/sr.crl

Check the revocation status for certificate id.nikkei.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for id.nikkei.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

id.nikkei.com

Other certificates including the domain name nikkei.com

(limited to 100 certificates)
f4.shared.global.fastly.net
id.nikkei.com
h2.shared.global.fastly.net
m2.shared.global.fastly.net
dns-vetting1c.map.fastly.net
*.staging.pre.nikkei.com
*.imgix.net
staging.eb.store.nikkei.com
k3.shared.global.fastly.net
dns-vetting1m.map.fastly.net
imgix2.map.fastly.net
h2.shared.global.fastly.net
h2.shared.global.fastly.net
d3.shared.global.fastly.net
REGIST.ASIA.NIKKEI.COM
sni.cloudflaressl.com
k3.shared.global.fastly.net
my.api.pre4.nikkei.com
d3.shared.global.fastly.net
f4.shared.global.fastly.net
k3.shared.global.fastly.net
m2.shared.global.fastly.net
my.api323.nikkei.com
k3.shared.global.fastly.net
pr.staging.nikkei.com
m2.shared.global.fastly.net
d3.shared.global.fastly.net
dns-vetting1k.map.fastly.net
f4.shared.global.fastly.net
d3.shared.global.fastly.net
m2.shared.global.fastly.net
r.ssl.fastly.net
h2.shared.global.fastly.net
dns-vetting1j.map.fastly.net
comemo.nikkei.com
customer-test.ssl.fastly.net
mw.nikkei.com
k3.shared.global.fastly.net
dns-vetting1k.map.fastly.net
customer-test.ssl.fastly.net
REGIST.ASIA.NIKKEI.COM
q2.shared.global.fastly.net
customer-test.ssl.fastly.net
pr.nikkei.com
d3.shared.global.fastly.net
dns-vetting1c.map.fastly.net
my.api.pre6.nikkei.com
dns-vetting1c.map.fastly.net
f4.shared.global.fastly.net
k3.shared.global.fastly.net
customer-test.ssl.fastly.net
q2.shared.global.fastly.net
d3.shared.global.fastly.net
sni.cloudflaressl.com
d3.shared.global.fastly.net
k3.shared.global.fastly.net
id.nikkei.com
f4.shared.global.fastly.net
q2.shared.global.fastly.net
mw.nikkei.com
customer-test.ssl.fastly.net
d3.shared.global.fastly.net
f4.shared.global.fastly.net
k3.shared.global.fastly.net
customer-test.ssl.fastly.net
dsdb.api.pre.nikkei.com
dns-vetting1k.map.fastly.net
d3.shared.global.fastly.net
article-img.nikkei.com
customer-test.ssl.fastly.net
imgix2.map.fastly.net
customer-test.ssl.fastly.net
m2.shared.global.fastly.net
k3.shared.global.fastly.net
astatbp.nikkei.com
k3.shared.global.fastly.net
m2.shared.global.fastly.net
d3.shared.global.fastly.net
k3.shared.global.fastly.net
dns-vetting1k.map.fastly.net
dns-vetting1c.map.fastly.net
dns-vetting1k.map.fastly.net
d3.shared.global.fastly.net
h2.shared.global.fastly.net
dns-vetting1k.map.fastly.net
q2.shared.global.fastly.net
q2.shared.global.fastly.net
regist.nikkei.com
h2.shared.global.fastly.net
*.api.nikkei.com
m2.shared.global.fastly.net
evernote.nikkei.com
k3.shared.global.fastly.net
dns-vetting1m.map.fastly.net
d3.shared.global.fastly.net
k3.shared.global.fastly.net
dns-vetting1k.map.fastly.net
my.api.pre2.nikkei.com
k3.shared.global.fastly.net
d3.shared.global.fastly.net

Certificate

The complete raw certificate details for id.nikkei.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgIQEnRAOBONpmfA+Ewadk/X+DANBgkqhkiG9w0BAQsFADB3
MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAd
BgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxKDAmBgNVBAMTH1N5bWFudGVj
IENsYXNzIDMgRVYgU1NMIENBIC0gRzMwHhcNMTYxMjA2MDAwMDAwWhcNMTgwMTAx
MjM1OTU5WjCCAR8xEzARBgsrBgEEAYI3PAIBAxMCSlAxHzAdBgsrBgEEAYI3PAIB
AhMOTm90IEFwcGxpY2FibGUxHzAdBgsrBgEEAYI3PAIBARMOTm90IEFwcGxpY2Fi
bGUxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRgwFgYDVQQFEw8wMTAw
LTAxLTAwMzMwODYxCzAJBgNVBAYTAkpQMQ4wDAYDVQQIDAVUT0tZTzETMBEGA1UE
BwwKQ0hJWU9EQS1LVTEUMBIGA1UECgwLTmlra2VpIEluYy4xLTArBgNVBAsMJERp
Z2l0YWwgU3RyYXRlZ3kgYW5kIFBsYW5uaW5nIEJ1cmVhdTEWMBQGA1UEAwwNaWQu
bmlra2VpLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM9ywH3T
4okpuY+0zN1ZILVV7FG9UtMav+9oa/gjdudgktr91gU0IxRVkng6yp1kIxOrammg
GIuUED5FHpnVWi2BuNQAQv3+mTY+vbEmhA05sOFnRYt92GjYcFEz2a32et2B+eax
4nte/fk/YTsS34hzKu4n/36acF8UOs2fHU390ER4YpLkNk2SlywqQ8yNuUGn/jVK
lyVJitvU+pbjo9mxF50wFsFcadHJ7hExxV7EMgmPbugtg70AC3hyU/Vtx3i1RgO5
b26uCXRkYrHkYs7tc8vqDw8zEX0yZaibYF63bWYH9KN//5LHiYS35x1N6RW/41gY
v4h0Ge6Ks+il3M8CAwEAAaOCAYUwggGBMBgGA1UdEQQRMA+CDWlkLm5pa2tlaS5j
b20wCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwKwYDVR0fBCQwIjAgoB6gHIYa
aHR0cDovL3NyLnN5bWNiLmNvbS9zci5jcmwwbwYDVR0gBGgwZjBbBgtghkgBhvhF
AQcXBjBMMCMGCCsGAQUFBwIBFhdodHRwczovL2Quc3ltY2IuY29tL2NwczAlBggr
BgEFBQcCAjAZDBdodHRwczovL2Quc3ltY2IuY29tL3JwYTAHBgVngQwBATAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHwYDVR0jBBgwFoAUAVmr5906C1mm
ZGPWzyAHV9WR52owVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8v
c3Iuc3ltY2QuY29tMCYGCCsGAQUFBzAChhpodHRwOi8vc3Iuc3ltY2IuY29tL3Ny
LmNydDATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0xVE
iGq3Y0DcE5kP1xCCsVnAV7GiiemIHO2wf2ISQav2sDT7pbMN0gtPwYC3v3b4IaJ4
sXbRCnFejSstytPX3Xsk7vsnTqeiAYINttAjB3HWzFZjcLGCNE/M26Mt7UHmTbK/
Ce5GV1ltrsBUH4IW3AMCD4o4NCGrYesjx7QVEThBf27ccUjtspXlaRX9OYkmE8OT
f3d1Am9hqViVHIVSuXpcpweePpt/yDcDq9AsowxbqJ/GgUDfuyz8NqKEkNfhYy7w
oxSuPGizvvP9HDwnJa4ql6FEO2dsvmY8ApEM8jOkFqxiii9HlysWWvHnN4aGVy8b
AnWY+BzOiMe1+n2zCA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3LAfdPiiSm5j7TM3Vkg
tVXsUb1S0xq/72hr+CN252CS2v3WBTQjFFWSeDrKnWQjE6tqaaAYi5QQPkUemdVa
LYG41ABC/f6ZNj69sSaEDTmw4WdFi33YaNhwUTPZrfZ63YH55rHie179+T9hOxLf
iHMq7if/fppwXxQ6zZ8dTf3QRHhikuQ2TZKXLCpDzI25Qaf+NUqXJUmK29T6luOj
2bEXnTAWwVxp0cnuETHFXsQyCY9u6C2DvQALeHJT9W3HeLVGA7lvbq4JdGRiseRi
zu1zy+oPDzMRfTJlqJtgXrdtZgf0o3//kseJhLfnHU3pFb/jWBi/iHQZ7oqz6KXc
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 24529712876761719776815065020417169400
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 EV SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Not Applicable'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Not Applicable'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '0100-01-0033086'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TOKYO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CHIYODA-KU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nikkei Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Digital Strategy and Planning Bureau'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'id.nikkei.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26187915408714830641667022325431999848874951809804929230755705303679140258469581886360357067899431257506720758042716383941689593783229211170246697010814698533681147344941596014505443320693397792069760817736772436007486925670857286701199767847563964585671121442999716125443527997638995908625810166016006805504702170572958284010978244581418659534937974984721599763531875641814999018130302695524349679954720045139372485906033121841710010943789404860258256561876137055130823831791442826250857008315354729909364726161711306447288604047831381551560443002313925220701743901365658298888952463955908019431133831365066565737679
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id.nikkei.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr.symcb.com/sr.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.23.6 (VeriSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0159abe7dd3a0b59a66463d6cf200757d591e76a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr.symcb.com/sr.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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