dev1.remoteoffice.citigroup.com

- Citigroup Inc. -

Issued by Symantec Class 3 EV SSL CA - G3

About this certificate

This digital certificate with serial number 4a:47:c3:33:a4:98:a0:a2:da:f0:fb:e0:cc:2c:01:97 was issued on by Symantec Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Citigroup Inc.

Company registration number: 2154254
Organization: Citigroup Inc.
Organization unit: CTI
Address: 399 Park Avenue
Postal code: 10043
State / Province: New York
Locality: New York
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4a:47:c3:33:a4:98:a0:a2:da:f0:fb:e0:cc:2c:01:97
Serial Number (int): 98735483926488804577789475112058880407
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 01:59:ab:e7:dd:3a:0b:59:a6:64:63:d6:cf:20:07:57:d5:91:e7:6a

Fingerprint (sha1): 14:7f:5e:a1:55:cf:a6:21:aa:c0:42:88:36:c4:88:83:40:ec:0d:d6
Fingerprint (sha256): 0e:36:d3:b0:f8:11:96:ba:2c:47:26:95:ee:f9:38:7a:e9:fd:c8:37:bf:3a:5f:26:f2:c7:30:e6:cc:a3:85:a4

Issuing Certificate URL: http://sr.symcb.com/sr.crt

Revocation information

OCSP Server: http://sr.symcd.com
CRL Distribution Point: http://sr.symcb.com/sr.crl

Check the revocation status for certificate dev1.remoteoffice.citigroup.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev1.remoteoffice.citigroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev1.remoteoffice.citigroup.com

Other certificates including the domain name citigroup.com

(limited to 100 certificates)
businessaccess.citibank.citigroup.com
TESTQC31.CITIDIRECT.CITIGROUP.COM
emeasalesautomationuat.citigroup.com
secureCredentialServer.citigroup.com
webcashmanagercitidirectuat.citibank.citigroup.com
cob.tradeimaging.citigroup.com
cdt1up1.brazil.citigroup.com
catsosuat.citigroup.com
secureaccess.nam.citigroup.com
globaltransferagencyuat.cmb.citigroup.com
uatwealthplanneradvisory.taiwan.citigroup.com
responsivesalesautomationrussia.citigroup.com
uattest.tradeprocessing.citigroup.com
PORTFOLIOANALYTICSUAT.TRANSACTIONSERVICES.CITIGROUP.COM
QC21.CITIDIRECT.CITIGROUP.COM
webcashmanagercitidirectuat.citibank.citigroup.com
uat.remoteoffice.citigroup.com
training.citigroup.com
akamai-san187.exacttarget.com
www.electronicbillingtest10.citigroup.com
securemailcenter.citigroup.com
training.citigroup.com
uat2.customer360view.citigroup.com
globaltransferagency.cmb.citigroup.com
SMTPOUTBOUND.CITIGROUP.COM
businessaccess.citibank.citigroup.com
securefiletransferuat.citigroup.com
qc21.citidirect.citigroup.com
banksearchuat.cib.citigroup.com
citigroupsoa.authentication.citigroup.com
contentdelivery.technologyservices.uat.citigroup.com
uat.secureaccessidp.citigroup.com
cookieutility.citigroup.com
training.citigroup.com
digitalcertificate.citigroup.com
citigroupsoasit.citigroup.com
customertest.citidirect.citigroup.com
debtxportaluat.issuerservices.citigroup.com
wealthplanneradvisory.china.citigroup.com
citidirectonlineqc21.citidirect.citigroup.com
uatwealthplanneronline.taiwan.citigroup.com
uattest.tradeprocessing.citigroup.com
citigroupsoauat.citigroup.com
uat2.directsalesagent.citigroup.com
secureaccessweb.uat.nam.citigroup.com
cob.directsalesagent8.citigroup.com
uat2.directsalesautomation.citigroup.com
assinaturadigital.brazil.citigroup.com
UAT.CenterForCulture.Citigroup.com
thirdpartyassessment.citigroup.com
UAT21.CITIDIRECT.CITIGROUP.COM
uat.emailtracker.citigroup.com
akamai-san187.exacttarget.com
PRIMEBROKER.CITIGROUP.COM
www.investorreporting.transactionservices.citigroup.com
site04.remoteoffice.europe.citigroup.com
citidirectonline31.citidirect.citigroup.com
banksearch.cib.citigroup.com
emeasalesautomationuat.citigroup.com
samluat.citigroup.com
financelearning.citigroup.com
uat2.wealthplanneradvisory.citigroup.com
webcashmanagercitidirectuat.citibank.citigroup.com
mumbaitaxinforeporting.fatca.citigroup.com
malaysia.FATCA.Citigroup.com
citidirectonlineuat31.citidirect.citigroup.com
logintotalcomponline.citigroup.com
uat.assinaturadigital.brazil.citigroup.com
webcashmanagercitibusinessuat.citibank.citigroup.com
CITIDIRECT4.UAT.CITIGROUP.COM
citigroupsoa.xenc.citigroup.com
instantsalesautomation.citigroup.com
site05.remoteoffice.europe.citigroup.com
uat.salesautomationonline.citigroup.com
securefiletransfer3.citigroup.com
www.citigroup.com
site05.remoteoffice.europe.citigroup.com
logintotalcomponline.citigroup.com
digitalcertificate7uat.citigroup.com
globaltransferagency.cmb.citigroup.com
citigroupsoauataspac.citigroup.com
securefiletransfer3.citigroup.com
issuerservices.icg.citigroup.com
dev1.remoteoffice.citigroup.com
citiconnect.trade.transactionservices.citigroup.com
uat.salesstationonline.citigroup.com
citigroupsoauataspac.xenc.citigroup.com
uatwealthplanneronline.taiwan.citigroup.com
thirdpartyassessment.citigroup.com
www.citi.com
koreacitidirect.citigroup.com
scheduleplanning.citigroup.com
assinaturadigital.brazil.citigroup.com
wealthplannerondevices1.emea.citigroup.com
citidirectonlineuat31.citidirect.citigroup.com
thirdpartyassessment.citigroup.com
assinaturadigital.brazil.citigroup.com
citigroupsoauat.citigroup.com
webcashmanagercitibusinessuat.citibank.citigroup.com
TESTQC31.CITIDIRECT.CITIGROUP.COM

Certificate

The complete raw certificate details for dev1.remoteoffice.citigroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnDKlXEBYCEOmfZPUEaW
2DTIpQVT4btNGtdURtHB80OSOEEoqTozKbE94VpDjF7Zkg/VGESDSQ/ijyc21NP+
cfhINNlBl5W7mI/Ss9CvtniQe0I9Bsve9K/2/0vhEl61Vuqx6yZPukeGFapljW05
hlERp9Rh9j/C1h41BA20qnlIpjvUZGVhU5jhplaVa8MSAAFqSIgo1kRC1rURRNAl
3hP3tnBhGq5tS2RcPV4Yc34qrvolsJ7aMv/JyNJ93fRrWQfLIwMHMiL1lXmea26Y
isAuv0n7gPVlg4wmuueTXNHRc892ajwffQ/tVrwCnhGQFsL8tFeLOoD9yAowAyd1
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 98735483926488804577789475112058880407
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 EV SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2154254'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '10043'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '399 Park Avenue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Citigroup Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CTI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'dev1.remoteoffice.citigroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21011178108464612799043732010903999848176130409984798061433203079838957304545522182540228196494310964323529142688298745795098885624627120863153203373614568400424218980514359815144168621643888991781148001949036930448959049193972994478122965822305320144017388529401417035527272596683838127276205111939476061515471387569640191278953686340343515881552200599551900918185288330621684223043894944953579517935654798407685522749553620258412132700322062773229980596642020787083490934740503570624320728746534384961778822154522581486171851583673281599474038242982001877359635780757811455702438698682196598738266030080087294440889
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev1.remoteoffice.citigroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.23.6 (VeriSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [104 116 116 112 115 58 47 47 100 46 115 121 109 99 98 46 99 111 109 47 114 112 97]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0159abe7dd3a0b59a66463d6cf200757d591e76a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr.symcb.com/sr.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr.symcb.com/sr.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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