api.qa.311.dc.gov

- Government of the District of Columbia -

Issued by Symantec Class 3 EV SSL CA - G3

About this certificate

This digital certificate with serial number 36:47:54:84:eb:7e:39:42:40:e4:33:be:eb:ab:84:d9 was issued on by Symantec Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Government of the District of Columbia

Company registration number: Government Entity
Organization: Government of the District of Columbia
Organization unit: Office of the Chief Technology Officer
Address: 441 4th St NW
Postal code: 20001-2714
State / Province: District of Columbia
Locality: Washington
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 36:47:54:84:eb:7e:39:42:40:e4:33:be:eb:ab:84:d9
Serial Number (int): 72148679102747160879977506480574923993
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 01:59:ab:e7:dd:3a:0b:59:a6:64:63:d6:cf:20:07:57:d5:91:e7:6a

Fingerprint (sha1): 38:c5:39:a6:b9:a2:a8:cf:cb:05:95:d2:67:3a:3f:0d:79:db:e5:8c
Fingerprint (sha256): 09:1a:c9:fe:ac:00:d0:02:d8:cb:32:b0:92:03:60:d2:a2:0d:cc:3e:2a:90:df:3a:f0:62:65:9a:56:3d:5b:ca

Issuing Certificate URL: http://sr.symcb.com/sr.crt

Revocation information

OCSP Server: http://sr.symcd.com
CRL Distribution Point: http://sr.symcb.com/sr.crl

Check the revocation status for certificate api.qa.311.dc.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.qa.311.dc.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.qa.311.dc.gov

Other certificates including the domain name dc.gov

(limited to 100 certificates)
010-DCPS-8540-01.in.dc.gov
propertyquest.dc.gov
aclprodcfmx.in.dc.gov
smarterocfo.dc.gov
seats.osse.dc.gov
thelab.dc.gov
idmswebqa.dc.gov
youthspeakout.cfsa.dc.gov
ccsea.osse.dc.gov
mpduccawarpt147.mpdc.dc.gov
enode.dc.gov
sso.dc.gov
dcraonline-rms.dcra.dc.gov
justisportal.dc.gov
tipline.oag.dc.gov
leaf.dpw.dc.gov
smtp5.dc.gov
erap.dhs.dc.gov
leaddc.dcps.dc.gov
dashboard.in.dc.gov
mail.dc.gov
selfserve.cfo.dc.gov
fpp.dc.gov
casesearch.oea.dc.gov
bwc.thelab.dc.gov
textalert.ema.dc.gov
pshcm.dc.gov
sboe.dc.gov
dc.gov
mdm.dc.gov
aspentraining.dcps.dc.gov
visitation.doc.dc.gov
os19.in.dc.gov
TA.DCSTARS.K12.DC.GOV
admin.sportswagering-stg.lottery.dc.gov
github.in.dc.gov
streetlights.dc.gov
services.dcnet.dc.gov
openbudget.dc.gov
secure.cfsa.dc.gov
ldap-k12.dc.gov
servusmdm.in.dc.gov
tunnel.mdm.dc.gov
acaprod2.dcra.dc.gov
ecourtlts.oah.dc.gov
theforum.dc.gov
aclqc.in.dc.gov
efiling.ocf.dc.gov
cson.oag.dc.gov
webapi.dcnet.dc.gov
OSPI.DCRA.DC.GOV
secure.cfsa.dc.gov
cpms.dcra.dc.gov
doh.immunization.doh.dc.gov
eplan.dcra.dc.gov
apply-myschooldctest.in.dc.gov
dc.gov
trainingtrack.hsema.dc.gov
docs.cfsa.dc.gov
mail.tdl.dc.gov
maps2.legacy.dcgis.dc.gov
intime.doc.dc.gov
locus.dmh.dc.gov
EXP-E.UC.DC.GOV
eServices.dcra.dc.gov
events.dcgis.dc.gov
ACCESSCSED.oag.dc.gov
upstream.dc.gov
grid.sccrc.dc.gov
events.dcgis.dc.gov
statehood.dc.gov
ess.dc.gov
OCTOProcessEng.dc.gov
dashboard.in.dc.gov
HEALTHCHECK.DOH.DC.GOV
microstrategy.dc.gov
handbook.dcoz.dc.gov
dc.gov
amprdweb.dc.gov
disb.dc.gov
ESNA01.in.dc.gov
*.dlcp.dc.gov
opendata.dc.gov
qap.osse.dc.gov
studyabroad.dcps.dc.gov
itremote.dc.gov
app.cab.dc.gov
rivacarss.in.dc.gov
mealapps.dcps.dc.gov
vpndc.dc.gov
api.qa.311.dc.gov
signon.dev.dc.gov
dda.dc.gov
data.osse.dc.gov
forms.joinmpd.dc.gov
orchard.osse.dc.gov
app.dcoz.dc.gov
dcpaidfamilyleave.dc.gov
sauth.dc.gov
*.dcas.dc.gov

Certificate

The complete raw certificate details for api.qa.311.dc.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG1jCCBb6gAwIBAgIQNkdUhOt+OUJA5DO+66uE2TANBgkqhkiG9w0BAQsFADB3
MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAd
BgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxKDAmBgNVBAMTH1N5bWFudGVj
IENsYXNzIDMgRVYgU1NMIENBIC0gRzMwHhcNMTUwNzIxMDAwMDAwWhcNMTYwNzIx
MjM1OTU5WjCCAWAxEzARBgsrBgEEAYI3PAIBAxMCVVMxJTAjBgsrBgEEAYI3PAIB
AgwURGlzdHJpY3Qgb2YgQ29sdW1iaWExGjAYBgNVBA8TEUdvdmVybm1lbnQgRW50
aXR5MRowGAYDVQQFExFHb3Zlcm5tZW50IEVudGl0eTELMAkGA1UEBhMCVVMxEzAR
BgNVBBEMCjIwMDAxLTI3MTQxHTAbBgNVBAgMFERpc3RyaWN0IG9mIENvbHVtYmlh
MRMwEQYDVQQHDApXYXNoaW5ndG9uMRYwFAYDVQQJDA00NDEgNHRoIFN0IE5XMS8w
LQYDVQQKDCZHb3Zlcm5tZW50IG9mIHRoZSBEaXN0cmljdCBvZiBDb2x1bWJpYTEv
MC0GA1UECwwmT2ZmaWNlIG9mIHRoZSBDaGllZiBUZWNobm9sb2d5IE9mZmljZXIx
GjAYBgNVBAMMEWFwaS5xYS4zMTEuZGMuZ292MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsHAK1BDBaxjiDL2sZP5R4Y0eyG8MMjoK3uK3jo+8fgF4KtHp
QDeRAjWdyIWZPpffWStl9eMWQ+Uol8QkFnr1m1NpMnIL+3kmVW/gmhzVsc9urTkB
pSew7Id5UxsQZhzSZxGZS9y1WH+tUrmCJhZ5+gLNABsJ9ziLY2U1gpXiItAQNWoQ
vL5Gq4rUAI1e5fUjUevFySrML0oo0qoAL/mnnh0M5yf5Nvqo4QKQVQAx5Pli54YP
tXqD5Ltahb+SadTwBgXdi748CE/PbPrZ6fbXDSB4sruVSsaibp+cEPxBnAPOcuSs
Lk2cx0AmMcfFXO57KZX1V84PjlytTaHRqRWS+QIDAQABo4ICcTCCAm0wHAYDVR0R
BBUwE4IRYXBpLnFhLjMxMS5kYy5nb3YwCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMC
BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMGYGA1UdIARfMF0wWwYL
YIZIAYb4RQEHFwYwTDAjBggrBgEFBQcCARYXaHR0cHM6Ly9kLnN5bWNiLmNvbS9j
cHMwJQYIKwYBBQUHAgIwGRoXaHR0cHM6Ly9kLnN5bWNiLmNvbS9ycGEwHwYDVR0j
BBgwFoAUAVmr5906C1mmZGPWzyAHV9WR52owKwYDVR0fBCQwIjAgoB6gHIYaaHR0
cDovL3NyLnN5bWNiLmNvbS9zci5jcmwwVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUF
BzABhhNodHRwOi8vc3Iuc3ltY2QuY29tMCYGCCsGAQUFBzAChhpodHRwOi8vc3Iu
c3ltY2IuY29tL3NyLmNydDCCAQIGCisGAQQB1nkCBAIEgfMEgfAA7gB1AKS5CZC0
GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABTrD3m/0AAAQDAEYwRAIgbGUM
nB92wrCFQtgFVavVYjsVhUUDjA0fk3ZlunaDtXoCIGkOi0zA8hqFNFaweqg6sm/r
TunTexKXVuaa+m3rWW6oAHUAVhQGmi/XwuzT9eG9RLI+x0Z2ubyZEVzA75SYVdaJ
0N0AAAFOsPecjgAABAMARjBEAiAdplakp0tPcbeBZKkTChA1lFVaBcWiCAzsfzAM
ATKc2AIgfsxXnk2Zn7NV1oukthEbZrYf8/HyCqgk9lcKtym05SAwDQYJKoZIhvcN
AQELBQADggEBAJbR7Z4FPFY/Jnbg8NeUt4P4Yd97joGXf/S7NI8P3OPMyyvt/G95
iNk6dxHZOecBsQC0Hg5FZ7nDimOdOTn3lmBqM3q+LqvC5+L+LFpaDktlGANPr40F
NYCLqxm/gxyDYUFb24FsSftErl5OAzLLAAr7VIHQAjdjjL/jkA0XyyXpDn9jt3XL
fpBNguMmv0hiAFra9z2miPUDJ1WZMFcWu+mAvrzjfzY6SpFBiK1uoFpxTJV827PW
tvdOFm3y1vNWEYaXiVFD0+D9pnOT8bPaQBcB3TzIYsoSpDOwBZVBpsFpS2vVWvLh
N8ft7T/BRmLMUvvIkuPVoxR2tsD+bsdM9Wc=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHAK1BDBaxjiDL2sZP5R
4Y0eyG8MMjoK3uK3jo+8fgF4KtHpQDeRAjWdyIWZPpffWStl9eMWQ+Uol8QkFnr1
m1NpMnIL+3kmVW/gmhzVsc9urTkBpSew7Id5UxsQZhzSZxGZS9y1WH+tUrmCJhZ5
+gLNABsJ9ziLY2U1gpXiItAQNWoQvL5Gq4rUAI1e5fUjUevFySrML0oo0qoAL/mn
nh0M5yf5Nvqo4QKQVQAx5Pli54YPtXqD5Ltahb+SadTwBgXdi748CE/PbPrZ6fbX
DSB4sruVSsaibp+cEPxBnAPOcuSsLk2cx0AmMcfFXO57KZX1V84PjlytTaHRqRWS
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 72148679102747160879977506480574923993
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 EV SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-07-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'District of Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '20001-2714'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'District of Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '441 4th St NW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government of the District of Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Office of the Chief Technology Officer'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'api.qa.311.dc.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22273191790548657104365476676436281917580280091573950883682656201280977331184389497601480730519711687486118565539662306524074002706745591630207148693407342706422501139549519102708779393035898827070308613596160113843813671638528312252181705077854068803221117402223652050831493717142378637688501194075093247556523663078359292140695520618248635933813909437878858873612328316579625826336274228846120857465362197501797878978815607671153383783438336376184874627190384305775188653576491041137673319712555756938554290821287733513053913930633239207626930755700316376223708709545730789028613913374401799020672927301170829300473
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.qa.311.dc.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.23.6 (VeriSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [104 116 116 112 115 58 47 47 100 46 115 121 109 99 98 46 99 111 109 47 114 112 97]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0159abe7dd3a0b59a66463d6cf200757d591e76a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr.symcb.com/sr.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr.symcb.com/sr.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000014eb0f79bfd000004030046304402206c650c9c1f76c2b08542d80555abd5623b158545038c0d1f937665ba7683b57a0220690e8b4cc0f21a853456b07aa83ab26feb4ee9d37b129756e69afa6deb596ea80075005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000014eb0f79c8e000004030046304402201da656a4a74b4f71b78164a9130a103594555a05c5a2080cec7f300c01329cd802207ecc579e4d999fb355d68ba4b6111b66b61ff3f1f20aa824f6570ab729b4e520
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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