*.origin.com

- Electronic Arts, Inc. -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 0e:9c:f2:e3:26:4d:ec:61:86:a7:68:40:51:5b:81:ff was issued on by Symantec Corporation.

With 54 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Electronic Arts, Inc.

Organization: Electronic Arts, Inc.
Organization unit: EA Online/Pogo.com
State / Province: California
Locality: Redwood City
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:9c:f2:e3:26:4d:ec:61:86:a7:68:40:51:5b:81:ff
Serial Number (int): 19424116590691863711799695232307266047
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 4e:8d:48:ef:94:9e:65:32:d5:57:2c:c0:60:65:15:1a:40:0d:66:c5
Fingerprint (sha256): 08:59:c7:91:05:cd:fd:de:81:9b:06:e9:91:8b:b1:be:8d:1f:e8:e4:bb:99:91:02:60:cc:a9:b0:98:0b:42:2b

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate *.origin.com

54

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.origin.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.dev.data1.origin.com
*.qa.api3.origin.com
*.qa.data1.origin.com
*.api2.origin.com
*.secure.download.dm.origin.com
*.api3.origin.com
*.qa.www.origin.com
*.data3.origin.com
*.ecommerce2.dm.origin.com
api2.origin.com
*.dm.origin.com
*.qa.api1.origin.com
data3.origin.com
*.api4.origin.com
*.voice.dm.origin.com
*.integration.api3.origin.com
*.integration.www.origin.com
*.qa.ecommerce2.dm.origin.com
api4.origin.com
*.integration.data3.origin.com
*.origin.com
*.dev.ecommerce2.dm.origin.com
*.dev.data4.origin.com
*.qa.api4.origin.com
*.download.dm.origin.com
*.integration.data1.origin.com
*.integration.api4.origin.com
*.dev.api2.origin.com
*.qa.data4.origin.com
*.dev.api4.origin.com
*.integration.data2.origin.com
api1.origin.com
api3.origin.com
origin.com
*.api1.origin.com
*.data2.origin.com
*.qa.api2.origin.com
*.dev.data3.origin.com
data2.origin.com
*.www.origin.com
*.dev.www.origin.com
*.integration.data4.origin.com
*.data4.origin.com
*.qa.data3.origin.com
*.data1.origin.com
*.integration.api2.origin.com
data1.origin.com
*.integration.api1.origin.com
*.qa.data2.origin.com
*.dev.api1.origin.com
*.qa.voice.dm.origin.com
*.dev.data2.origin.com
data4.origin.com
*.dev.api3.origin.com

Other certificates including the domain name origin.com

(limited to 100 certificates)
preprod.chef.x.origin.com
originslashstore.cms.origin.com
fc.qa.dirtybits.dm.origin.com
integration.m.friends.dm.origin.com
lt.oms.origin.com
www.origin.com
voiceregister.dm.origin.com
integration.dirtybits.api.origin.com
storesource.cms.origin.com
dev.dirtybits.dm.origin.com
ecommerce2.dm.origin.com
atom.dm.origin.com
fc.qa.avatar.dm.origin.com
stable.api.oms.origin.com
fc.qa.ecommerce.dm.origin.com
dcmt-origin-auth.dm.origin.com
preorder.origin.com
chat.dm.origin.com
fc.qa.er.dm.origin.com
x.voiceregister.dm.origin.com
eradmin.dm.origin.com
friends.dm.origin.com
er.dm.origin.com
preview.assets.cms.origin.com
fc.qa.avatar.dm.origin.com
qa-main.chat.dm.origin.com
*.free.origin.com
dev.xray.x.origin.com
avatar.dm.origin.com
assets.dm.origin.com
integration.m.friends.dm.origin.com
integration.sims4m.avatar.dm.origin.com
sb1.www.x.origin.com
fc.qa.preview.cms.origin.com
www.origin.com
config.x.origin.com
stage.ecommerce2.dm.origin.com
search.dm.origin.com
*.origin.com
*.origin.com
fc.qa.review.cms.origin.com
checkout.alpha.origin.com
m.friends.dm.origin.com
www.origin.com
preorder.origin.com
*.staging.checkout.ea.com
www.origin.com
*.social.ea.com
loginregistration.dm.origin.com
fc.qa.er.dm.origin.com
avatar.dm.origin.com
account.preprod.origin.com
www.origin.com
promomanager.dm.origin.com
qa.dirtybits.api.origin.com
integration.eradmin.dm.origin.com
originslashstore.cms.origin.com
upgrade.dm.origin.com
integration.avatar.dm.origin.com
fc.qa.approve.assets.cms.origin.com
support.ea.com
upgrade.dm.origin.com
integration.bioware.web.dm.origin.com
integrationx.voiceregister.dm.origin.com
xray.x.origin.com
integration.m.avatar.dm.origin.com
er.dm.origin.com
lvlt.store.thesims3.com
qa.review.cms.x.origin.com
integration.atom.dm.origin.com
qa.x.origin.com
integration.web.dm.origin.com
bioware.web.dm.origin.com
cloudsync.dm.origin.com
m.help.ea.com
www.origin.com
www.dm.origin.com
fc.qa.www.assets.cms.origin.com
*.free.origin.com
fc.qa.avatar.dm.origin.com
fc.qa.dirtybits.dm.origin.com
friends.gs.ea.com
prod.chef.x.origin.com
www.origin.com
integration.cloudsync.dm.origin.com
checkout.preprod.origin.com
eradmin.dm.origin.com
*.free.origin.com
account.origin.com
sandbox.account.origin.com
www.origin.com
qa.dirtybits.dm.origin.com
fc.qa.chat.dm.origin.com
integration.m.friends.dm.origin.com
account.preprod.origin.com
prometheus.x.origin.com
www.origin.com
account.origin.com
account.preprod.origin.com
promo.store.origin.com

Certificate

The complete raw certificate details for *.origin.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26uS+qVqwWK4hb5mB26P
pU4TdRDPi+hCbpMT6QHn6DnbzWhOacV+6m9LS2WAZzpI7n9uljclXaMSz3uO2h1q
Z3Y1iR9HXlbLG7DIbP0SXwj639ykAaaZ9G/JoKC6Y9rGYEfqofma8hCnqwTE4yod
dAvMr0ykbr0zgyCGVxDzHtGghoJ4SzRfNGOu8aPiR0D7e+LvSs0cbsxcmKqFeT5i
5IQJeeV49OFrnCMox+/aJnHrB0kNa4+NTI0jSHeq4WX3RSoVI78Lg9eFm3lFW6ZW
0usaXdKRxEiMjaqPoHMA0eVK6p84NgEk65xyS1YdrLxqYifbDozPpE2leIUmVFVr
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19424116590691863711799695232307266047
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Redwood City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Electronic Arts, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'EA Online/Pogo.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.origin.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27730795147871821714586162984006578569211991110458150675047807581641497030409906788273618974414279328302811165213658869045769050691780290278403461426547749480240223950446515165271002213990748096890592194007974269198698352535238883203938461184867887240520147879846221619598474677442254212439019599668544148424680426121127468377564051880562938360053775096458548323365129688556553079020480823931029355920663853603998164748976621486867699919661247089090654456894013476709287999442184040144179077885205666134464306681475838692544396758479860595268780135045568993304007707607856793796120586146998036040158375204506089909181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1253 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.data1.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.api3.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.data1.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api2.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.download.dm.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api3.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.www.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.data3.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ecommerce2.dm.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api2.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dm.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.api1.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data3.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api4.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.voice.dm.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.integration.api3.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.integration.www.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.ecommerce2.dm.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api4.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.integration.data3.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.ecommerce2.dm.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.data4.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.api4.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.download.dm.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.integration.data1.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.integration.api4.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.api2.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.data4.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.api4.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.integration.data2.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api1.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api3.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api1.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.data2.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.api2.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.data3.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data2.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.www.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.integration.data4.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.data4.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.data3.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.data1.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.integration.api2.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data1.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.integration.api1.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.data2.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.api1.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.voice.dm.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.data2.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data4.origin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.api3.origin.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000156e66088060000040300483046022100c26acd35e581313d9eda1e347bc203a0a0b6ce283514bcbd674b87581cea635a0221009f819b81727e74ef5dd91462d5bfe68e8248bc936b9dffe4d5c96533186236d5007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000156e660892d000004030048304602210093b1207cd87b36781d5878c30846d21b55050f81a2f7401278700a88914e4813022100d4ed57d932da39c07064bde09fc38417247565f9de34dd7ab62ef8393aa54ac1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0083ec0a2408f40cd1dd46dac6995b2e42477fbdc017e2135301765960666d069bec9af12b4beb2aa8190b079075b1a446cc9f345e2ed021c811312ecff5c2739bf44d31f9167b0112ecd11ab5983df85ff672dc94d44f6e7409526f6b3ae6d1ac50b62f5a0a3d35a23de36d87ec12cab460c17e089a483ae37c7134ff6d052aea6470f959ed751582d5893ef39f9934acb65af3f445cec0fd3b2bc06afae95e53c43976539a2a3c3f643c6ff12e8942a31ccb41e59a5035ddf53074831c2290ff054af1a3f7ea8edff9ebc1f63f30baa6e592443d6f1a5525cf87b56d887dbe8f678f6983cfa42e32ee500d970cf187a52727c9aa75309992936126052b7f4666