ics2wsa.ic3.com

- VISA INTERNATIONAL SERVICE ASSOCIATION -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 1f:30:c6:d4:bf:e2:98:14:4d:62:19:eb:33:36:70:b1 was issued on by Symantec Corporation.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

VISA INTERNATIONAL SERVICE ASSOCIATION

Organization: VISA INTERNATIONAL SERVICE ASSOCIATION
State / Province: California
Locality: Foster City
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1f:30:c6:d4:bf:e2:98:14:4d:62:19:eb:33:36:70:b1
Serial Number (int): 41459330891399612126297133846350950577
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 10:0f:12:6b:a6:60:ab:1b:df:18:9c:27:d7:1f:6e:84:53:90:6c:65
Fingerprint (sha256): 0c:8c:e5:c9:ed:6d:fb:8b:31:9f:75:af:19:1e:dc:4a:c9:6a:5e:57:22:34:73:ea:61:11:b3:f4:91:51:f2:ef

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate ics2wsa.ic3.com

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ics2wsa.ic3.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

trialpay.visa.com
gdf.cybersource.com
ics2a.ic3.com
storedvalue.ic3.com
wfgateway.cybersource.com
rtmclientcenter.visa.com
ump.cybersource.com
pnr.ic3.com
apia.cybersource.com
businesscenter.cybersource.com
ebc2.cybersource.com
apply.cybersource.com
secureacceptance.cybersource.com
api.accountupdater.cybersource.com
secureacceptancea.cybersource.com
ebc.cybersource.com
ics2wsa.ic3.com

Other certificates including the domain name ic3.com

(limited to 100 certificates)
ics2ws.in.ic3.com
ics2wstesta.ic3.com
cybsgatekeepertest.ic3.com
auth.ic3.com
ics2wstesta.ic3.com
ics2wsa.ic3.com
ics2wstest.ic3.com
paypal.ic3.com
Cashprosit.sso.ic3.com
mobile.ic3.com
sbobsamlsit.ic3.com
ics2ws.ic3.com
ics2wsa.ic3.com
ics2wsa.ic3.com
paypaltest.ic3.com
mobile.ic3.com
ics2wsc.ic3.com
*.ic3.com
reportingrestservice.ic3.com
svtest.ic3.com
reportingrestservice.ic3.com
ics2wsitest.ic3.com
*.ic3.com
paypaltest.ic3.com
svtest.ic3.com
sni.cloudflaressl.com
*.ic3.com
paypal.ic3.com
ics2wstest.ic3.com
mobiletest.ic3.com
reportingrestservicetest.ic3.com
mobile.ic3.com
paypaltest.ic3.com
authtest.ic3.com
reportingrestservice.ic3.com
ics2wsa.ic3.com
ics2wstest.ic3.com
ics2ws.ic3.com
authtest.ic3.com
auth.ic3.com
paypal.ic3.com
paypaltest.ic3.com
ics2wstesta.ic3.com
smartreg.ic3.com
pnrstage.ic3.com
ics2testc.ic3.com
mobiletest.ic3.com
auth.ic3.com
ics2wstesta.ic3.com
ics2wstest.ic3.com
reportingrestservicetest.ic3.com
mobiletest.ic3.com
ics2wstesta.ic3.com
ics2testc.ic3.com
ics2wsa.ic3.com
reportingrestservicetest.ic3.com
ics2wstest.ic3.com
mobile.ic3.com
cashpro.sso.ic3.com
authtest.ic3.com
security.ic3.com
ics2ws.ic3.com
ics2wstest.ic3.com
paypal.ic3.com
authtest.ic3.com
authtest.ic3.com
paypaltest.ic3.com
mobiletest.ic3.com
cashprosamltest.ic3.com
ics2wsc.ic3.com
paypaltest.ic3.com
processorcallbacktest.ic3.com
ics2wstesta.ic3.com
ics2wstesta.ic3.com
authtest.ic3.com
ics2wstesta.ic3.com
ics2wstest.ic3.com
ics2wsa.ic3.com
ics2testc.ic3.com
cashpro.sso.ic3.com
ics2ws.ic3.com
reportingrestservicetest.ic3.com
mobile.ic3.com
authtest.ic3.com
ics2wsc.ic3.com
paypaltest.ic3.com
paypal.ic3.com
authtest.ic3.com
auth.ic3.com
ics2wsa.ic3.com
reportingrestservicetest.ic3.com
auth.ic3.com
reportingrestservice.ic3.com
mobiletest.ic3.com
svtest.ic3.com
reportingrestservicetest.ic3.com
ics2wsitest.ic3.com
cashprosamltest.ic3.com
ics2wstesta.ic3.com
ics2wsa.ic3.com

Certificate

The complete raw certificate details for ics2wsa.ic3.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIADCCBuigAwIBAgIQHzDG1L/imBRNYhnrMzZwsTANBgkqhkiG9w0BAQsFADB+
MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAd
BgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxLzAtBgNVBAMTJlN5bWFudGVj
IENsYXNzIDMgU2VjdXJlIFNlcnZlciBDQSAtIEc0MB4XDTE3MDcxMTAwMDAwMFoX
DTE4MTAxMDIzNTk1OVowgYMxCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxpZm9y
bmlhMRQwEgYDVQQHDAtGb3N0ZXIgQ2l0eTEvMC0GA1UECgwmVklTQSBJTlRFUk5B
VElPTkFMIFNFUlZJQ0UgQVNTT0NJQVRJT04xGDAWBgNVBAMMD2ljczJ3c2EuaWMz
LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMadvjzJ/9wigu7C
HDUqLd+KRH6BepX2bnpctO7QtjMqgxfFNrKP7ezflclSMwLt987hnPYeUVwqIcUt
qnPsC/6vhDNJMeUnllBnxbl5lrccInL8MWczDbE/nhyy8iVBXfg5MNTNoM5ZBR52
PkNMLPMdZNbF8mCKQV1KRGw+54+moeXCWG2jLU1J2prHwZo1vpmw3uMwh0zgRT4v
GySZdGuLVO5fmRm2XOif+9wfgAq4FDaZHmG/DezKyYTzsgkeqtmDXoxfUMswEr88
yFoS1pBYbwcMq3EWa5GQ2uVcoBljRMqPxgiFvY1Lyfk6gnKk+6Jn7nTgo9oycAE1
gr3Zb5kCAwEAAaOCBHIwggRuMIIBogYDVR0RBIIBmTCCAZWCEXRyaWFscGF5LnZp
c2EuY29tghNnZGYuY3liZXJzb3VyY2UuY29tgg1pY3MyYS5pYzMuY29tghNzdG9y
ZWR2YWx1ZS5pYzMuY29tghl3ZmdhdGV3YXkuY3liZXJzb3VyY2UuY29tghhydG1j
bGllbnRjZW50ZXIudmlzYS5jb22CE3VtcC5jeWJlcnNvdXJjZS5jb22CC3Buci5p
YzMuY29tghRhcGlhLmN5YmVyc291cmNlLmNvbYIeYnVzaW5lc3NjZW50ZXIuY3li
ZXJzb3VyY2UuY29tghRlYmMyLmN5YmVyc291cmNlLmNvbYIVYXBwbHkuY3liZXJz
b3VyY2UuY29tgiBzZWN1cmVhY2NlcHRhbmNlLmN5YmVyc291cmNlLmNvbYIiYXBp
LmFjY291bnR1cGRhdGVyLmN5YmVyc291cmNlLmNvbYIhc2VjdXJlYWNjZXB0YW5j
ZWEuY3liZXJzb3VyY2UuY29tghNlYmMuY3liZXJzb3VyY2UuY29tgg9pY3Myd3Nh
LmljMy5jb20wCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwYQYDVR0gBFowWDBW
BgZngQwBAgIwTDAjBggrBgEFBQcCARYXaHR0cHM6Ly9kLnN5bWNiLmNvbS9jcHMw
JQYIKwYBBQUHAgIwGQwXaHR0cHM6Ly9kLnN5bWNiLmNvbS9ycGEwKwYDVR0fBCQw
IjAgoB6gHIYaaHR0cDovL3NzLnN5bWNiLmNvbS9zcy5jcmwwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFF9gz2GQVd+EQxSKYCqy9Xr0
QxjvMFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDovL3NzLnN5bWNk
LmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL3NzLnN5bWNiLmNvbS9zcy5jcnQwggGA
BgorBgEEAdZ5AgQCBIIBcASCAWwBagB3AN3rHSt6DU+mIIuBrYFocH4ujp0B1VyI
jT0RxM227L7MAAABXTNPATsAAAQDAEgwRgIhAMsyzSxvQaEDV9cw3tcT+VNvxWEn
RUo386JbQNrdkE0YAiEAtJuz3jBaThgYiUeG+QqMnSzZYe+b3omIZdE+L2smJZkA
dwCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAV0zTwFrAAAEAwBI
MEYCIQC7h63+sSv9sBxMsk4SikQ2ImQP6riokPSh5Jw9pSs0gQIhAPJdSUMzcApK
M5v759+qZOHerRjrjTrPXNA9jlfoDD76AHYA7ku9t3XOYLrhQmkfq+GeZqMPfl+w
ctiDAMR7iXqo/csAAAFdM08BdwAABAMARzBFAiANyv6vQ+c9hD0AzpPYJnmFwMsB
m9AwCnk9bRF7gUr+swIhANfHIFDa5lIMcWvVl1PThEeH0x2MOpeLmr2TfVIR7oWt
MA0GCSqGSIb3DQEBCwUAA4IBAQAimUifCrl70yDDaJ68W2YTU7Pj0+KIEk04px1m
5ihKxjbpUUumfDlD5AeZG0HqczabQJdG5ehYy5cXXKjPM+OCI4N8JaP9OWV9Q0pe
m7TxjC5nPwX3kVQsh9lLNIcL0oHPujRBcTKCNXaJsUlznbTDcZja7gCUXTIgcMal
BCj6um3oNu1zu+tTVrJauxnYL7ZtebUq9S75f0KeWiCvvYw1kOS2x/XoLiuAhiQL
ew1vlzuWr3L+Zkf9YAXXNHU4hxMtx0tu+UWkagPy/TT9EKhCjL2zRWTHLFFyZgEN
cnjjDSOe0zR8eBew/5qh+KQ3cBqWTJC2bvGN27rtvTsywXiG
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxp2+PMn/3CKC7sIcNSot
34pEfoF6lfZuely07tC2MyqDF8U2so/t7N+VyVIzAu33zuGc9h5RXCohxS2qc+wL
/q+EM0kx5SeWUGfFuXmWtxwicvwxZzMNsT+eHLLyJUFd+Dkw1M2gzlkFHnY+Q0ws
8x1k1sXyYIpBXUpEbD7nj6ah5cJYbaMtTUnamsfBmjW+mbDe4zCHTOBFPi8bJJl0
a4tU7l+ZGbZc6J/73B+ACrgUNpkeYb8N7MrJhPOyCR6q2YNejF9QyzASvzzIWhLW
kFhvBwyrcRZrkZDa5VygGWNEyo/GCIW9jUvJ+TqCcqT7omfudOCj2jJwATWCvdlv
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 41459330891399612126297133846350950577
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Foster City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'VISA INTERNATIONAL SERVICE ASSOCIATION'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ics2wsa.ic3.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25072970412444375768421663050229660944674802721196814432239237094257871286403612243548711881200558460045121725766733468670269567671361172227828450018562248895915137094446933435810623013599908991587024682632916404539863074872485074457217421210461418503824737108163779461846374288629050517444374674047540731665398389154478509050640847786634336429184970978229943160244766055955206447283815656080636340855686092277733517597767528982683374975367241285370174306537934410743191120478040804236997916925051264792472458270151293591207633385452863545112608801365668538133545706767557830586949604822733761226165493132270461611929
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (409 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trialpay.visa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gdf.cybersource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ics2a.ic3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storedvalue.ic3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wfgateway.cybersource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtmclientcenter.visa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ump.cybersource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pnr.ic3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apia.cybersource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businesscenter.cybersource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebc2.cybersource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apply.cybersource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureacceptance.cybersource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.accountupdater.cybersource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureacceptancea.cybersource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebc.cybersource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ics2wsa.ic3.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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