site04.remoteoffice.europe.citigroup.com

- Citigroup Inc. -

Issued by Symantec Class 3 EV SSL CA - G3

About this certificate

This digital certificate with serial number 35:7e:1f:34:b4:03:0c:d7:06:f4:4f:a0:fb:c4:63:a9 was issued on by Symantec Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Citigroup Inc.

Company registration number: 2154254
Organization: Citigroup Inc.
Organization unit: CTI2017
Address: 399 Park Avenue
Postal code: 10022
State / Province: New York
Locality: New York
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 35:7e:1f:34:b4:03:0c:d7:06:f4:4f:a0:fb:c4:63:a9
Serial Number (int): 71103946111049082668875153514078430121
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 01:59:ab:e7:dd:3a:0b:59:a6:64:63:d6:cf:20:07:57:d5:91:e7:6a

Fingerprint (sha1): 7b:7b:d3:1f:de:92:45:bc:20:2f:bd:87:f8:7c:ec:0d:e8:dc:ed:9d
Fingerprint (sha256): 09:2a:33:b8:d8:db:88:88:98:ee:03:a7:a2:d3:2c:4c:c3:ba:7e:8e:b7:e0:b2:27:fe:7c:05:98:c1:49:f3:27

Issuing Certificate URL: http://sr.symcb.com/sr.crt

Revocation information

OCSP Server: http://sr.symcd.com
CRL Distribution Point: http://sr.symcb.com/sr.crl

Check the revocation status for certificate site04.remoteoffice.europe.citigroup.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for site04.remoteoffice.europe.citigroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

site04.remoteoffice.europe.citigroup.com

Other certificates including the domain name citigroup.com

(limited to 100 certificates)
businessaccess.citibank.citigroup.com
TESTQC31.CITIDIRECT.CITIGROUP.COM
emeasalesautomationuat.citigroup.com
secureCredentialServer.citigroup.com
webcashmanagercitidirectuat.citibank.citigroup.com
cob.tradeimaging.citigroup.com
cdt1up1.brazil.citigroup.com
catsosuat.citigroup.com
secureaccess.nam.citigroup.com
globaltransferagencyuat.cmb.citigroup.com
uatwealthplanneradvisory.taiwan.citigroup.com
responsivesalesautomationrussia.citigroup.com
uattest.tradeprocessing.citigroup.com
PORTFOLIOANALYTICSUAT.TRANSACTIONSERVICES.CITIGROUP.COM
QC21.CITIDIRECT.CITIGROUP.COM
webcashmanagercitidirectuat.citibank.citigroup.com
uat.remoteoffice.citigroup.com
training.citigroup.com
akamai-san187.exacttarget.com
www.electronicbillingtest10.citigroup.com
securemailcenter.citigroup.com
training.citigroup.com
uat2.customer360view.citigroup.com
globaltransferagency.cmb.citigroup.com
SMTPOUTBOUND.CITIGROUP.COM
businessaccess.citibank.citigroup.com
securefiletransferuat.citigroup.com
qc21.citidirect.citigroup.com
banksearchuat.cib.citigroup.com
citigroupsoa.authentication.citigroup.com
contentdelivery.technologyservices.uat.citigroup.com
uat.secureaccessidp.citigroup.com
cookieutility.citigroup.com
training.citigroup.com
digitalcertificate.citigroup.com
citigroupsoasit.citigroup.com
customertest.citidirect.citigroup.com
debtxportaluat.issuerservices.citigroup.com
wealthplanneradvisory.china.citigroup.com
citidirectonlineqc21.citidirect.citigroup.com
uatwealthplanneronline.taiwan.citigroup.com
uattest.tradeprocessing.citigroup.com
citigroupsoauat.citigroup.com
uat2.directsalesagent.citigroup.com
secureaccessweb.uat.nam.citigroup.com
cob.directsalesagent8.citigroup.com
uat2.directsalesautomation.citigroup.com
assinaturadigital.brazil.citigroup.com
UAT.CenterForCulture.Citigroup.com
thirdpartyassessment.citigroup.com
UAT21.CITIDIRECT.CITIGROUP.COM
uat.emailtracker.citigroup.com
akamai-san187.exacttarget.com
PRIMEBROKER.CITIGROUP.COM
www.investorreporting.transactionservices.citigroup.com
site04.remoteoffice.europe.citigroup.com
citidirectonline31.citidirect.citigroup.com
banksearch.cib.citigroup.com
emeasalesautomationuat.citigroup.com
samluat.citigroup.com
financelearning.citigroup.com
uat2.wealthplanneradvisory.citigroup.com
webcashmanagercitidirectuat.citibank.citigroup.com
mumbaitaxinforeporting.fatca.citigroup.com
malaysia.FATCA.Citigroup.com
citidirectonlineuat31.citidirect.citigroup.com
logintotalcomponline.citigroup.com
uat.assinaturadigital.brazil.citigroup.com
webcashmanagercitibusinessuat.citibank.citigroup.com
CITIDIRECT4.UAT.CITIGROUP.COM
citigroupsoa.xenc.citigroup.com
instantsalesautomation.citigroup.com
site05.remoteoffice.europe.citigroup.com
uat.salesautomationonline.citigroup.com
securefiletransfer3.citigroup.com
www.citigroup.com
site05.remoteoffice.europe.citigroup.com
logintotalcomponline.citigroup.com
digitalcertificate7uat.citigroup.com
globaltransferagency.cmb.citigroup.com
citigroupsoauataspac.citigroup.com
securefiletransfer3.citigroup.com
issuerservices.icg.citigroup.com
dev1.remoteoffice.citigroup.com
citiconnect.trade.transactionservices.citigroup.com
uat.salesstationonline.citigroup.com
citigroupsoauataspac.xenc.citigroup.com
uatwealthplanneronline.taiwan.citigroup.com
thirdpartyassessment.citigroup.com
www.citi.com
koreacitidirect.citigroup.com
scheduleplanning.citigroup.com
assinaturadigital.brazil.citigroup.com
wealthplannerondevices1.emea.citigroup.com
citidirectonlineuat31.citidirect.citigroup.com
thirdpartyassessment.citigroup.com
assinaturadigital.brazil.citigroup.com
citigroupsoauat.citigroup.com
webcashmanagercitibusinessuat.citibank.citigroup.com
TESTQC31.CITIDIRECT.CITIGROUP.COM

Certificate

The complete raw certificate details for site04.remoteoffice.europe.citigroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0OxYikxS7GYGnJJVpg0
8ChHgauscoug/jwWqbfrKHpdgZqJ+P/ACOlsDLbjZmurH/Ipti78mX4mHl0lmTpC
Xff9dxIJ6ZgKZqfvQ1kNFQQJCbbK/RhJdOa0EmltzLx0mHX2cl7Gs0tU9sd/I23A
G7IOg7XFbU3JtsjuZd8b/Ed95DU7pMIABlhffA+E4sfdCpy0jpwJ35wwTN31U4u9
NjCuHK7Mrxmr3VlDxQqdJp5yBn7yAcEZQAkdSaWo6+uRBJALVhAWjmvYKR8ckm5V
D4bjBABdv8EJNcXos46PiC8PxY0pI0vRhfcWkAcBEW42PKLKSAkVNSDg7ut0JaIg
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 71103946111049082668875153514078430121
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 EV SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2154254'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '10022'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '399 Park Avenue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Citigroup Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CTI2017'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'site04.remoteoffice.europe.citigroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25659756523217701527657992902753309435001868433083054173575622111237282437321366104291514807257274455239685822800680746663712894727019040942982987546768832134577657159225999207342590747843580160185454128556669644555928182598242172153660907164756324387010476606139383173448237071510572834807143692177174580802019654934043128052161897847978265632176997604434114187193615441271324500432151067027411141382647683648282739392013707516602753631924892157217182862554914843254867320604624773820601258346909687619036670212195859813658240133147862851111153414730196944059665778052490477178089039063978896760953328705733608480843
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'site04.remoteoffice.europe.citigroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.23.6 (VeriSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0159abe7dd3a0b59a66463d6cf200757d591e76a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr.symcb.com/sr.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr.symcb.com/sr.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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