TaxReportingEngineUAT.icg.citigroup.net

- Citigroup Inc. -

Issued by Symantec Class 3 EV SSL CA - G3

About this certificate

This digital certificate with serial number 67:30:95:6a:e0:33:a8:50:7f:15:77:c9:13:6c:9d:40 was issued on by Symantec Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Citigroup Inc.

Company registration number: 2154254
Organization: Citigroup Inc.
Organization unit: 33661
Address: 399 Park Avenue
Postal code: 10022
State / Province: New York
Locality: New York
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 67:30:95:6a:e0:33:a8:50:7f:15:77:c9:13:6c:9d:40
Serial Number (int): 137162744361659269505422190691025198400
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 01:59:ab:e7:dd:3a:0b:59:a6:64:63:d6:cf:20:07:57:d5:91:e7:6a

Fingerprint (sha1): 55:97:f8:05:32:be:3e:80:97:12:36:bd:07:67:da:0b:15:63:c5:93
Fingerprint (sha256): 07:27:32:c9:f4:6a:c8:e4:c7:a2:5e:57:d6:b4:41:9d:41:dd:35:e2:63:a6:c3:f3:a5:4d:c1:00:8e:c6:0d:b8

Issuing Certificate URL: http://sr.symcb.com/sr.crt

Revocation information

OCSP Server: http://sr.symcd.com
CRL Distribution Point: http://sr.symcb.com/sr.crl

Check the revocation status for certificate TaxReportingEngineUAT.icg.citigroup.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for TaxReportingEngineUAT.icg.citigroup.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

TaxReportingEngineUAT.icg.citigroup.net

Other certificates including the domain name citigroup.net

(limited to 100 certificates)
contentmanagementqa.globalwealthmanagement.citigroup.net
legalprocesscontrol.brazil.citigroup.net
wechatmediation.enterprise.citigroup.net
giftandentertainmentpreapproval.citigroup.net
uat2premediationassisted.enterprise.citigroup.net
dev.consumerloanapprovalsystem.ndm.korea.citigroup.net
uat.realtime.grosspayment.gateway.citigroup.net
ICGECCEUAPDR01.cob.citibankisrael.citigroup.net
securefiletransferuat.citigroup.net
alliancescreditinitiation.citibankaustralia.citigroup.net
ServiceCorporateactionsincomeUAT.icg.citigroup.net
esbuat.emeaconsumer.citigroup.net
banamexsoaperf.banamex.com
TRADERECORDSINFOINDIA.ICG.CITIGROUP.NET
TRADERECORDSINDIAPRE.ICG.CITIGROUP.NET
securefiletransfer2.uat.citigroup.net
calldetailreporting.ti.citigroup.net
TRADERECORDSINFOINDIA.ICG.CITIGROUP.NET
TaxReportingEngineUAT.icg.citigroup.net
dev.icgtoolbox.citigroup.net
webimaging.p2p.citigroup.net
sd-cd7f-c896.nam.nsroot.net
secureaccessweb.uat.nam.citigroup.com
securitiesbillinguat.gts.citigroup.net
TRACKING.COMMERCIALBUSINESSGROUP.CITIGROUP.NET
p2p.uat2.citigroup.net
uat2.wechatmediation.enterprise.citigroup.net
WEBSCANNING.CITIBANKINDIA.CITIGROUP.NET
esbuat.globalconsumerindia.citigroup.net
CUSTOMERCAREUNIT.CITIBANKINDIA.CITIGROUP.NET
citigroupsoauat.citigroup.net
citigroupsoasit1.citigroup.net
contentmanagementqa.globalwealthmanagement.citigroup.net
secureaccessweb.nam.citigroup.net
ARTEMIS.SG.CITIGROUP.NET
citigroup.net
calldetailreportingtest.ti.citigroup.net
securitiesbilling.gts.citigroup.net
stg.generalledger.west.citigroup.net
contentmanagement.globalwealthmanagement.citigroup.net
creditrisk.asia.citigroup.net
contentmanagement.globalwealthmanagement.citigroup.net
secureaccess.sit.nam.citigroup.net
websocketqa.americas.privatebank.citigroup.net
citigroupaiuat.citigroup.net
cob.assetservices.workbench.icg.citigroup.net
citipay.usprdnewcert.citigroup.net
federationservicesuat.ad.citigroup.net
shieldusrtprodsalesforce.citigroup.net
m.citiprivatebankinviewqa2.americas.privatebank.citigroup.net
uat.sgmarketplace.enterprise.citigroup.net
esbuat.globalconsumerindia.citigroup.net
financingsolutionscenter.citifinancial.citigroup.net
uat.structurednotes.citigroup.net
citiconnecttrademstr.apac.citigroup.net
settlementinstructionmanagerServicesLog.ICG.citigroup.net
tradeimagingindia.icg.citigroup.net
securitiesbilling.gts.citigroup.net
CPWMPRODSFDC.citigroup.net
citigroupaidev.citigroup.net
swiftmessageserviceuat.workbench.icg.citigroup.net
cob.directsalesagent8.citigroup.com
uat.privatebank.citigroup.net
secureaccessweb.nam.citigroup.net
webmonitoring.citidirect.citigroup.net
clientreportinguat.privatebank.asia.citigroup.net
webexternal.p2p.citigroup.net
citigroupaicob.citigroup.net
FundsOfHedgeFundsDEV.Workbench.icg.citigroup.net
verisignuat2normalmediationself.enterprise.citigroup.net
mexicoivr.nam.nsroot.net
AutomatedClearingSystemUAT.CitiSouthAfrica.Citigroup.net
citiuserReportingServiceuat.workbench.icg.citigroup.net
tradeimgindiapre.icg.citigroup.net
securefiletransfer.citigroup.net
esbuat.assistedservices.externalconsumeremea.citigroup.net
generalledger.west.citigroup.net
SettlementinstructionManager.UAT.ICG.citigroup.net
uat.citigroup.com
consumersit.api.citigroup.net
TRADERECORDSINFOINDIA.ICG.CITIGROUP.NET
prod.sgmarketplace.enterprise.citigroup.net
clientdesktopuat.gts.citigroup.net
apac.intlcontentmanagement.citigroup.net
TRADERECORDSINFOASIA.ICG.CITIGROUP.NET
ISTCPWMSFDC.citigroup.net
uat1normalmediationself.enterprise.citigroup.net
gtsmiddleoffice.cob.cai.citigroup.net
calldetailreportingtest.ti.citigroup.net
settlementinstructionmanagerServicesAlert.ICG.citigroup.net
uat.nam.privatebank.citigroup.net
amlmonitoring.asiagts.citigroup.net
citipay.ccsadapteruat.citigroup.net
websocket.americas.privatebank.citigroup.net
websocketqa.americas.privatebank.citigroup.net
secureaccess.citigroup.net
consumeruat.api.citigroup.net
cititradeportal.citihandlowy.citigroup.net
CUSTOMERCAREUNIT.CITIBANKINDIA.CITIGROUP.NET
marketssecuritiesservicesdev.citigroup.net

Certificate

The complete raw certificate details for TaxReportingEngineUAT.icg.citigroup.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFkdN3YiEvLrXyt1nPZ8
ccMxNqvl54vVBiC6Nh8bIOLAppOGkSRBxraleS9P32kl9KbgaY/T2UFO9woGUck2
0SsP/2hsbnnJIrFFzF3JehcyyJdOhha8LHIoeiGt/+ACoC3fR1ZEKBfBRjxFJ2yu
q9CQpq7kz8d6ZusoNIwFtYmceh8E9bYWMF57y1vN9QIxqh2qskw1QBHxm4MOyyld
pOm6+cQvVx60pbWm2SyN6bISpHRy5juVAx99sRyS3ohh1uLfc6FW5p30nwWzL/0p
ZyiWx48PhhPs+V1mcJZkPBfBRicuiSBG39xBrHILy9jiSaw1B1MBjrBkttPJouA+
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 137162744361659269505422190691025198400
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 EV SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2154254'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '10022'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '399 Park Avenue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Citigroup Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '33661'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TaxReportingEngineUAT.icg.citigroup.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17212353289474772598039642438091203748531498543014550099560229400640822557827721020497213684848914079213187712541196002674747236447948836644988147448428584671442591775141772437104328007949624033278476381509093013981164713957014064417253853593921448206800403820181791447127025758818374631027776037388976265703229228269393354992089502024243419414409045089311960838328240427907286549786170011932838567775265420182015777539846419610568903246669389857688647482699891293733206667074826434758082598844380322407821587237371115764866106793852846869495157488470916926700301216496094004192324579746004412375559699131919335702143
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'TaxReportingEngineUAT.icg.citigroup.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.23.6 (VeriSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0159abe7dd3a0b59a66463d6cf200757d591e76a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr.symcb.com/sr.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr.symcb.com/sr.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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