kai01.centurylink.com

- CenturyLink -

Issued by VeriSign Class 3 Secure Server CA - G3

About this certificate

This digital certificate with serial number 4d:60:32:d8:0a:c2:af:9c:a0:61:86:6d:b9:7d:cb:e9 was issued on by VeriSign, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

CenturyLink

Organization: CenturyLink
Organization unit: IT Operations
State / Province: Louisiana
Locality: Monroe
Country: US

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4d:60:32:d8:0a:c2:af:9c:a0:61:86:6d:b9:7d:cb:e9
Serial Number (int): 102850047410951362341152121215623482345
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 0d:44:5c:16:53:44:c1:82:7e:1d:20:ab:25:f4:01:63:d8:be:79:a5

Fingerprint (sha1): f2:fc:f0:d3:1d:ec:06:be:91:38:68:ec:64:95:5b:11:13:f6:7e:e3
Fingerprint (sha256): 05:2b:da:28:f6:5e:d5:18:c9:ab:6c:76:b4:57:dd:d4:dc:83:6b:04:61:bb:2f:77:61:b1:2a:9b:aa:b6:93:cc

Issuing Certificate URL: http://sd.symcb.com/sd.crt

Revocation information

OCSP Server: http://sd.symcd.com
CRL Distribution Point: http://sd.symcb.com/sd.crl

Check the revocation status for certificate kai01.centurylink.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kai01.centurylink.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kai01.qwest.com
kai01.centurylink.com

Other certificates including the domain name centurylink.com

(limited to 100 certificates)
ctlchangead.centurylink.com
ctlchangead.centurylink.com
*.cloud.centurylink.com
rvmweb.centurylink.com
ipsops-test1.centurylink.com
www.centurylink.com
lab.iaf.centurylink.com
mcoe.centurylink.com
www.centurylink.com
businessvoip.centurylink.com
qxgisp-itv1-basicauth.centurylink.com
gadHCDHHS.ccc.centurylink.com
rmc-itv1.centurylink.com
vbs.level3.com
tcat-test1.centurylink.com
alumni.centurylink.com
pypi.mss.centurylink.com
promotions.centurylink.com
webops.centurylink.com
ctlmft1.centurylink.com
salesforceWFtest.centurylink.com
ixg-notices-test.centurylink.com
mrit.centurylink.com
cole.centurylink.com
ucexe1dmz.centurylink.com
iot7-test1.centurylink.com
ctg-itv1.centurylink.com
communicator6.centurylink.com
nagios.mss.centurylink.com
clustere-p2.alpha.expressway.hcs.centurylink.com
sipp-odc.centurylink.com
pilot.mss.centurylink.com
imaxml-notices-test.centurylink.com
LIVE.AF.CENTURYLINK.COM
cora.centurylink.com
smetrics.centurylink.com
hcde-ppo-itv1.centurylink.com
sapmobile-test1.centurylink.com
kai04.centurylink.com
gadSCOUPD.ccc.centurylink.com
splunk-test-ext.centurylink.com
sv.citedisplay.com
akamaisecure2.qualtrics.com
ebcontent.centurylink.com
sngaccesspool1.centurylink.com
news.centurylink.com
ctg-itv1.centurylink.com
gadCHUBB1.ccc.centurylink.com
ctlchangead.centurylink.com
qxgbc3-dmz.centurylink.com
dn1mtbaccess.centurylink.com
wfm.govccc.centurylink.com
controlnetworx.centurylink.com
ue1psbc02.govccc.centurylink.com
bgksbc.centurylink.com
ERM.Centurylink.com
clustere-p2.mhp.expressway.hcs.centurylink.com
ctlverify-test.centurylink.com
LIVE.IAF.CENTURYLINK.COM
LIVE.AF.CENTURYLINK.COM
de.controlcenter.centurylink.com
www.cert2.centurylink.com
tcat7-test1.centurylink.com
secure4s.scene7.com
qhome-test1.centurylink.com
psba.centurylink.com
gadSOFSUN.ccc.centurylink.com
ecd.lumen.com
bidmaster.centurylink.com
dn1mtbaccess.centurylink.com
tcat-preprod.centurylink.com
cag-ddc.ctlaccess.centurylink.com
eam.centurylink.com
wfmILSLLC.ccc.centurylink.com
promotions.centurylink.com
sipp-odc.centurylink.com
gadIOWAHT.ccc.centurylink.com
sipp-ddc.centurylink.com
jaadu-itv1.centurylink.com
get.centurylink.com
careeropportunities.centurylink.com
controlfederal-itv1.centurylink.com
ocsrp2.centurylink.com
ebus-test.centurylink.com
logs.mss.centurylink.com
ddcaccesspool.centurylink.com
ready.centurylink.com
vdi.centurylink.com
qgsisupplierportal.centurylink.com
selfservice.centurylink.com
controlcenter-e2e.centurylink.com
voiceconfig.centurylink.com
kai01.centurylink.com
hcmadminapi.govccc.centurylink.com
cid-adn.ccc.centurylink.com
qxgbc3-itv1-dmz.centurylink.com
sip.ctltest.centurylink.com
sapmobile-test1.centurylink.com
partnerlinkemea.centurylink.com
w3lweb-itv1-dmz.centurylink.com

Certificate

The complete raw certificate details for kai01.centurylink.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIQTWAy2ArCr5ygYYZtuX3L6TANBgkqhkiG9w0BAQUFADCB
tTELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQL
ExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1c2Ug
YXQgaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYSAoYykxMDEvMC0GA1UEAxMm
VmVyaVNpZ24gQ2xhc3MgMyBTZWN1cmUgU2VydmVyIENBIC0gRzMwHhcNMTQwNjA5
MDAwMDAwWhcNMTUwNjI5MjM1OTU5WjCBgDELMAkGA1UEBhMCVVMxEjAQBgNVBAgT
CUxvdWlzaWFuYTEPMA0GA1UEBxQGTW9ucm9lMRQwEgYDVQQKFAtDZW50dXJ5TGlu
azEWMBQGA1UECxQNSVQgT3BlcmF0aW9uczEeMBwGA1UEAxQVa2FpMDEuY2VudHVy
eWxpbmsuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9oS8hAB
RHRpgOKx8Ltkty9eOehEy1q+7vuMg9rnm5dOr/JVa8sUEcA3RbI4+Xc8woJNPrII
zHAYgWie+61IYQuGwWj96SKWHHu5Ri2OMmcdMd9GEul/y3WznaIDeaJ9Jy2WNXzl
wlUo9KzQCptx05UJg6ZMYo9KkLsU+wgqtniCavNIYhfI/GN0dlPPK1pa2UaUQdoe
1Naby+MSgMgoxwBEtWBy4RsfIWMvHGHmzk/h8MePXUyCGuwsG6fUBEIMRjgRqLAL
gCeoMTKDWadH6xVG3NLEQiPqAukillBFWcOlA6KsKzx1AlmSgZRRU3392rN81y7t
rhHk8hXo7ZkwOwIDAQABo4IBfzCCAXswMQYDVR0RBCowKIIPa2FpMDEucXdlc3Qu
Y29tghVrYWkwMS5jZW50dXJ5bGluay5jb20wCQYDVR0TBAIwADAOBgNVHQ8BAf8E
BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMGUGA1UdIAReMFww
WgYKYIZIAYb4RQEHNjBMMCMGCCsGAQUFBwIBFhdodHRwczovL2Quc3ltY2IuY29t
L2NwczAlBggrBgEFBQcCAjAZGhdodHRwczovL2Quc3ltY2IuY29tL3JwYTAfBgNV
HSMEGDAWgBQNRFwWU0TBgn4dIKsl9AFj2L55pTArBgNVHR8EJDAiMCCgHqAchhpo
dHRwOi8vc2Quc3ltY2IuY29tL3NkLmNybDBXBggrBgEFBQcBAQRLMEkwHwYIKwYB
BQUHMAGGE2h0dHA6Ly9zZC5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9z
ZC5zeW1jYi5jb20vc2QuY3J0MA0GCSqGSIb3DQEBBQUAA4IBAQAigVLzNt4CLlYh
tsxCVynkbz4U/oipiSPoUg0/egxjsbWBg6xuUs0RhcTyPaBYAaL0rp9feJbwBmlS
wQXVB/39KN2yyqyN6s3tTECnsrch4SygMBKBeGUoHkQBGVDvnoBNbyAEF2tJygNE
y8Nte5WBHxot/Hp6deHIc/Yw9Srta/p2sLutVmyczWOZLuy1czp9/yedL/YlZpwe
q+D6ZweshtZwHSPCHmQeWNypz0a5WSiZoWPodKEReAv/BDPhmPwzq/QXye2qgIy9
aNywt+nVpGWTBJwpFG8B3237XP1pxZeH4ndoUb2xyxG+0K76p04kuM6JEtYXn4gJ
RXL/P5Jg
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9oS8hABRHRpgOKx8Ltk
ty9eOehEy1q+7vuMg9rnm5dOr/JVa8sUEcA3RbI4+Xc8woJNPrIIzHAYgWie+61I
YQuGwWj96SKWHHu5Ri2OMmcdMd9GEul/y3WznaIDeaJ9Jy2WNXzlwlUo9KzQCptx
05UJg6ZMYo9KkLsU+wgqtniCavNIYhfI/GN0dlPPK1pa2UaUQdoe1Naby+MSgMgo
xwBEtWBy4RsfIWMvHGHmzk/h8MePXUyCGuwsG6fUBEIMRjgRqLALgCeoMTKDWadH
6xVG3NLEQiPqAukillBFWcOlA6KsKzx1AlmSgZRRU3392rN81y7trhHk8hXo7Zkw
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 102850047410951362341152121215623482345
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)10'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 Secure Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-06-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-06-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Louisiana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Monroe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'CenturyLink'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'IT Operations'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'kai01.centurylink.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26238865428305438016475784007350970227056736292699901105032346978599427589829973849529849033024737387922977225780763851810723227132541164020952508428137629647225096607394802008436830592987478383455360172892509640085123170050768946670801562594434031353336039872788100483853728125009053248016559692163927903754624050541001760141277806139565548813412549170852271588335381967317555120377274676292514743662586491616476281961105878075449759702757018549975030754276266794711406757034411071657891273878011672468417802965027200014952019613382079240240727953067943658174690333231137960247061361439982909386821977342567498985531
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kai01.qwest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kai01.centurylink.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [104 116 116 112 115 58 47 47 100 46 115 121 109 99 98 46 99 111 109 47 114 112 97]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d445c165344c1827e1d20ab25f40163d8be79a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sd.symcb.com/sd.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sd.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sd.symcb.com/sd.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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