citrix.ext.amc.edu

- Albany Medical Center -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 52:17:2b:93:e8:03:17:8b:e5:9d:3f:f9:6e:e5:89:f5 was issued on by Symantec Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Albany Medical Center

Organization: Albany Medical Center
Organization unit: Information Services
State / Province: New York
Locality: Albany
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 52:17:2b:93:e8:03:17:8b:e5:9d:3f:f9:6e:e5:89:f5
Serial Number (int): 109117002344066509483337119367036242421
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): fc:39:87:ec:6d:91:e4:83:e0:26:13:8c:7a:2d:55:fd:03:dd:e2:1a
Fingerprint (sha256): 08:9d:52:86:9b:1f:7a:d4:18:6a:e4:a6:ba:86:5f:d5:a1:94:05:03:77:32:67:9d:df:60:f6:85:fb:e8:29:f0

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate citrix.ext.amc.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for citrix.ext.amc.edu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

citrix.ext.amc.edu

Other certificates including the domain name amc.edu

(limited to 100 certificates)
citrix.amc.edu
misecure.amc.edu
AHSFHIRPROD.AMC.EDU
amcimeuq02.amc.edu
community.amc.edu
pamsupport.amc.edu
mediasite.amc.edu
sft.amc.edu
www.amc.edu
*.amc.edu
cucmexpe02.amc.edu
www.amc.edu
spauth.amc.edu
citrix.ext.amc.edu
wcms.amc.edu
sharepoint.amc.edu
sft.amc.edu
ms35.amcnt.amc.edu
lifeimg01.amc.edu
isite.amc.edu
mivsp.amc.edu
citrix.amc.edu
academic.amc.edu
ms52.amc.edu
CISEPOL5.amc.edu
ad01.amcnt.amc.edu
*.amc.edu
sakai.amc.edu
connectmeeting.amc.edu
ms35.amcnt.amc.edu
mediasite.amc.edu
cucmexpe02.amc.edu
mail1.amc.edu
sts.amc.edu
intranet.amc.edu
www.amc.edu
sft.amc.edu
test-paygw.amc.edu
AHSACDM01A.amcnt.amc.edu
sakai.amc.edu
prenataltest.amc.edu
cucmexpe02.amc.edu
myaccount.amc.edu
sakai.amc.edu
smail.amc.edu
engage.amc.edu
www.amc.edu
citrix.ext.amc.edu
ms35.amcnt.amc.edu
sft.amc.edu
hcweb01.amcnt.amc.edu
wcms.amc.edu
paygw.amc.edu
cucmexpc02.amc.edu
*.elibrary.amc.edu
cucmexpe02.amc.edu
academic.amc.edu
AHSACDM01B.AMCNT.AMC.EDU
analytics-t.amc.edu
ms387t.amc.edu
amcvpn.amc.edu
secure.iamaccurt1.amcnt.amc.edu
mivsp.amc.edu
ad09.amcnt.amc.edu
myaccount.amc.edu
amcsecurelink.amc.edu
sakai.amc.edu
amcvpn.amc.edu
soarianedm.amc.edu
sharepoint.amc.edu
docs.amc.edu
academic.amc.edu
wcms.amc.edu
connect.amc.edu
sts.amc.edu
connect.amc.edu
www.amc.edu
analytics.amc.edu
pay.amc.edu
prenatal.amc.edu
community.amc.edu
amc.edu
citrix.amc.edu
sharepoint.amc.edu
citrix.amc.edu
prenataltest.amc.edu
guest.amc.edu
webadvisor.amc.edu
md-citrix.amc.edu
webadvisor.amc.edu
vslides.amc.edu
sakai.amc.edu
rationalretention.amc.edu
paygw.amc.edu
sasoffice01.amc.edu
AHSFHIRT.AMC.EDU
*.elibrary.amc.edu
amcvpn.amc.edu
www.amc.edu
mail1.amc.edu

Certificate

The complete raw certificate details for citrix.ext.amc.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGFDCCBPygAwIBAgIQUhcrk+gDF4vlnT/5buWJ9TANBgkqhkiG9w0BAQsFADB+
MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAd
BgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxLzAtBgNVBAMTJlN5bWFudGVj
IENsYXNzIDMgU2VjdXJlIFNlcnZlciBDQSAtIEc0MB4XDTE3MDkwNTAwMDAwMFoX
DTE4MDkxNjIzNTk1OVowgY0xCzAJBgNVBAYTAlVTMREwDwYDVQQIDAhOZXcgWW9y
azEPMA0GA1UEBwwGQWxiYW55MR4wHAYDVQQKDBVBbGJhbnkgTWVkaWNhbCBDZW50
ZXIxHTAbBgNVBAsMFEluZm9ybWF0aW9uIFNlcnZpY2VzMRswGQYDVQQDDBJjaXRy
aXguZXh0LmFtYy5lZHUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC3
MkWDXfqm98YbesEqprpQeYG/OMJaGAnSVw3pMEUJAoIZFcrFmTob6+JLt7GKJU+u
iAgK0UKyDaRh7IYXkaob1n2Ojvv/N6vHCMSz8J8daqbbAIrOy9VR4ObPlaoEjdoE
wF8goDxQCdOSghsROm919L0Ysbgu5MWKeIHYK+8J7XP/FK8YaxlWrXowEnReuRIZ
vxAuVOrV3Arug1fAZJmvk33CputNcoN238xwwZ9r6f8E0YF4O0zwf5L1nnOr5A4I
8lJufAC16wuZ4Nr8ofvLpSP0DKSRhcccJobpC+oGJOwCcIx3GrCrzpoPIy8w05Jc
jS+G/GW4YuFaVLqRKKL0jBDRfYtGqjkjjCQmyJkdhtYBLamLXpj3tI7RWZfa90QN
IvpADU96n8yBy+0NdxtL8caI7lu5EV7tHVd+3UDyRdK1MDD1Z+Ax212IjZjaLz9f
i0SOj/TWW5/7s9MknCouYUouL8uL+oAZXBKSOZatCMr1C6L3KoOpAzNvKAUV8Eks
d4M2GpEbN7CIW5OkHSFCbAcvm4s2EpIUZP5087YksmDXzjge7dZcmKytzXIJ4k5D
ebNe2EnzeyrENQZIW22Vr24Z2JXo7Xw3nVQT7yGA169++tWHCuRayD4pzygB0nfJ
wS8zUaGEgZnYtQMs7aSLUdHgTZFskDdVoHbmqI/oIwIDAQABo4IBfDCCAXgwHQYD
VR0RBBYwFIISY2l0cml4LmV4dC5hbWMuZWR1MAkGA1UdEwQCMAAwDgYDVR0PAQH/
BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBhBgNVHSAEWjBY
MFYGBmeBDAECAjBMMCMGCCsGAQUFBwIBFhdodHRwczovL2Quc3ltY2IuY29tL2Nw
czAlBggrBgEFBQcCAjAZDBdodHRwczovL2Quc3ltY2IuY29tL3JwYTAfBgNVHSME
GDAWgBRfYM9hkFXfhEMUimAqsvV69EMY7zArBgNVHR8EJDAiMCCgHqAchhpodHRw
Oi8vc3Muc3ltY2IuY29tL3NzLmNybDBXBggrBgEFBQcBAQRLMEkwHwYIKwYBBQUH
MAGGE2h0dHA6Ly9zcy5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9zcy5z
eW1jYi5jb20vc3MuY3J0MBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB+89/194QVkfgEIpnmpokbQZB/pWmc6H78Yq4JEAQSRp25p15b2+1/
3vqZW9rIFYxJfnUCEd+MoTYj1Ud/CP59J3jgKcijcrqTsVfb1t2QkKm8jipMgsye
QdF26vYnb+jkA6dp3Xu8BXPTRfq6sa6hNOXN756+gx2fc07bBbKIwj/bUGN+ieqX
c+GT9uiKQoGwX6OBAnJAo2dauQpcOCAt9XOIxZD1Y/bgOvAtF86pKhTe2BmjUus2
gqhuQshc3Qs7c3CNK7EwrDInLE2tooCpzthcpwF2RF0ampF8rUliL0HdLaEgGLEw
VYXSs2l/73HNnv14OaaBdLDBAfr5YaA6
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 109117002344066509483337119367036242421
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Albany'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Albany Medical Center'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Information Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'citrix.ext.amc.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 747375997153248938616547397087487535342249269949205899960675240058596076535886336142065784947767591863706584850936265399084795880042767992741864282878261921016630984412639928211356843852834530644020004070793839953189177035358463270887558711722917528691857847807014343980799714701471082046224319101537295013171959750884791978844427260714616473546938677497709418502598397837638105664971468619287563674475839683862768642047879545526207703131925830071999511787849699428567522598762872593967180168267849683440376525434386091818201499497415986723196928315239481984031436434845621475596985787184593967795123532583948625642815616368770536169929005886290907983667454571353404547480886704056923620933915731472541224863164856417230866644083781142400209355576472769263872748768480726966860669721167530304941028977494042161758212696794195653571923103611469606778211528777626539935618232695814903968090950737848431966472632139078869612937635588010604252165550356726337022122931983751117736789350497859529441405699339960239042736845253106103830319317828544376922933426347267734357729496710467757079942953176575308146902629895565069660233450948643490131186667030664815397695505651663953285030166081203508620876601857940006381161419326703557711751203
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citrix.ext.amc.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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