uat2.wealthplanneradvisory.citigroup.com

- Citigroup Inc. -

Issued by Symantec Class 3 EV SSL CA - G3

About this certificate

This digital certificate with serial number 6c:92:12:f4:8c:4a:9f:cd:0b:ae:56:d8:25:71:87:e7 was issued on by Symantec Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Citigroup Inc.

Company registration number: 2154254
Organization: Citigroup Inc.
Organization unit: ASIA
Address: 399 Park Avenue
Postal code: 10043
State / Province: New York
Locality: New York
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 6c:92:12:f4:8c:4a:9f:cd:0b:ae:56:d8:25:71:87:e7
Serial Number (int): 144315083344579634842277428080741025767
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 01:59:ab:e7:dd:3a:0b:59:a6:64:63:d6:cf:20:07:57:d5:91:e7:6a

Fingerprint (sha1): b4:ae:37:c1:8b:08:d6:5d:04:95:ae:db:12:65:a4:0b:9f:b0:6a:73
Fingerprint (sha256): 09:fb:c9:01:da:a1:f6:ef:84:30:13:7a:7e:8e:95:95:71:bd:ae:98:98:e9:b0:8a:49:22:88:32:ba:a3:88:d2

Issuing Certificate URL: http://sr.symcb.com/sr.crt

Revocation information

OCSP Server: http://sr.symcd.com
CRL Distribution Point: http://sr.symcb.com/sr.crl

Check the revocation status for certificate uat2.wealthplanneradvisory.citigroup.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for uat2.wealthplanneradvisory.citigroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

uat2.wealthplanneradvisory.citigroup.com

Other certificates including the domain name citigroup.com

(limited to 100 certificates)
businessaccess.citibank.citigroup.com
TESTQC31.CITIDIRECT.CITIGROUP.COM
emeasalesautomationuat.citigroup.com
secureCredentialServer.citigroup.com
webcashmanagercitidirectuat.citibank.citigroup.com
cob.tradeimaging.citigroup.com
cdt1up1.brazil.citigroup.com
catsosuat.citigroup.com
secureaccess.nam.citigroup.com
globaltransferagencyuat.cmb.citigroup.com
uatwealthplanneradvisory.taiwan.citigroup.com
responsivesalesautomationrussia.citigroup.com
uattest.tradeprocessing.citigroup.com
PORTFOLIOANALYTICSUAT.TRANSACTIONSERVICES.CITIGROUP.COM
QC21.CITIDIRECT.CITIGROUP.COM
webcashmanagercitidirectuat.citibank.citigroup.com
uat.remoteoffice.citigroup.com
training.citigroup.com
akamai-san187.exacttarget.com
www.electronicbillingtest10.citigroup.com
securemailcenter.citigroup.com
training.citigroup.com
uat2.customer360view.citigroup.com
globaltransferagency.cmb.citigroup.com
SMTPOUTBOUND.CITIGROUP.COM
businessaccess.citibank.citigroup.com
securefiletransferuat.citigroup.com
qc21.citidirect.citigroup.com
banksearchuat.cib.citigroup.com
citigroupsoa.authentication.citigroup.com
contentdelivery.technologyservices.uat.citigroup.com
uat.secureaccessidp.citigroup.com
cookieutility.citigroup.com
training.citigroup.com
digitalcertificate.citigroup.com
citigroupsoasit.citigroup.com
customertest.citidirect.citigroup.com
debtxportaluat.issuerservices.citigroup.com
wealthplanneradvisory.china.citigroup.com
citidirectonlineqc21.citidirect.citigroup.com
uatwealthplanneronline.taiwan.citigroup.com
uattest.tradeprocessing.citigroup.com
citigroupsoauat.citigroup.com
uat2.directsalesagent.citigroup.com
secureaccessweb.uat.nam.citigroup.com
cob.directsalesagent8.citigroup.com
uat2.directsalesautomation.citigroup.com
assinaturadigital.brazil.citigroup.com
UAT.CenterForCulture.Citigroup.com
thirdpartyassessment.citigroup.com
UAT21.CITIDIRECT.CITIGROUP.COM
uat.emailtracker.citigroup.com
akamai-san187.exacttarget.com
PRIMEBROKER.CITIGROUP.COM
www.investorreporting.transactionservices.citigroup.com
site04.remoteoffice.europe.citigroup.com
citidirectonline31.citidirect.citigroup.com
banksearch.cib.citigroup.com
emeasalesautomationuat.citigroup.com
samluat.citigroup.com
financelearning.citigroup.com
uat2.wealthplanneradvisory.citigroup.com
webcashmanagercitidirectuat.citibank.citigroup.com
mumbaitaxinforeporting.fatca.citigroup.com
malaysia.FATCA.Citigroup.com
citidirectonlineuat31.citidirect.citigroup.com
logintotalcomponline.citigroup.com
uat.assinaturadigital.brazil.citigroup.com
webcashmanagercitibusinessuat.citibank.citigroup.com
CITIDIRECT4.UAT.CITIGROUP.COM
citigroupsoa.xenc.citigroup.com
instantsalesautomation.citigroup.com
site05.remoteoffice.europe.citigroup.com
uat.salesautomationonline.citigroup.com
securefiletransfer3.citigroup.com
www.citigroup.com
site05.remoteoffice.europe.citigroup.com
logintotalcomponline.citigroup.com
digitalcertificate7uat.citigroup.com
globaltransferagency.cmb.citigroup.com
citigroupsoauataspac.citigroup.com
securefiletransfer3.citigroup.com
issuerservices.icg.citigroup.com
dev1.remoteoffice.citigroup.com
citiconnect.trade.transactionservices.citigroup.com
uat.salesstationonline.citigroup.com
citigroupsoauataspac.xenc.citigroup.com
uatwealthplanneronline.taiwan.citigroup.com
thirdpartyassessment.citigroup.com
www.citi.com
koreacitidirect.citigroup.com
scheduleplanning.citigroup.com
assinaturadigital.brazil.citigroup.com
wealthplannerondevices1.emea.citigroup.com
citidirectonlineuat31.citidirect.citigroup.com
thirdpartyassessment.citigroup.com
assinaturadigital.brazil.citigroup.com
citigroupsoauat.citigroup.com
webcashmanagercitibusinessuat.citibank.citigroup.com
TESTQC31.CITIDIRECT.CITIGROUP.COM

Certificate

The complete raw certificate details for uat2.wealthplanneradvisory.citigroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKQfBpz1tg6/KtBCTipl
4Jl+kbtcN0ngYh3t+xsLkwwgRLhG3NKAvNODG/Blnp7yV7oZsAx2WAR1VyEAftSV
zuyb4EesWL/l+bWureVcamD66+URUKhggiP0t3eBzWIH0xjDeWpSmCj1mb1KfC2J
omov+tdteLNwHFGHg+vqauxmR3kJI3j+aH0eGO8t895IHAf+lewx3rrqPZI2PAbd
peL4FPU6Nz5X6cbZrkAnsPIz+aa6wwKeuOiUXuOuPG3jlpNjRuhr3ChTWiwVjTre
f9bBQAFLgT6AHLkcDcxcCD6tAywLMUO15TJLSIU7wbP+7ZfDpyMo+DmpZCw9XztY
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 144315083344579634842277428080741025767
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 EV SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2154254'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '10043'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '399 Park Avenue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Citigroup Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ASIA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'uat2.wealthplanneradvisory.citigroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20279059972001662036243594277855862708669965408105636340000145623614575462369396370335884177093043338276837073049750748407144794307794794668648417456988225620443769469648659596823367588412640704326292053008344388122075882545960295896202345172437031678664277024341310392237872810279224792498871143080936928111820652303022630728996924311387861461339918900780573651142400771603895144788601379287034128978279163156146362688163532989203386622106423710254534397533898515985395660220881753460446220284428943590233251673736216009723115195302614410480999016144780610860440857750499574585555631278469349973204768268648005195949
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat2.wealthplanneradvisory.citigroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.23.6 (VeriSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0159abe7dd3a0b59a66463d6cf200757d591e76a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr.symcb.com/sr.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr.symcb.com/sr.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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