www.hawaiianairlines.com

- Hawaiian Airlines -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 12:37:f7:1c:94:67:cf:3c:b1:b6:7c:75:09:af:41:69 was issued on by Symantec Corporation.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Hawaiian Airlines

Organization: Hawaiian Airlines
Organization unit: IT
State / Province: Hawaii
Locality: Honolulu
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 12:37:f7:1c:94:67:cf:3c:b1:b6:7c:75:09:af:41:69
Serial Number (int): 24216692270837833056285406821436309865
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): a7:95:ae:60:33:20:38:60:6d:85:fb:8f:a7:36:d6:6e:42:65:3c:b2
Fingerprint (sha256): 0e:c7:c1:64:fa:44:5f:3d:f8:a5:25:a5:5f:d4:a8:3d:d1:2f:1b:36:e3:c4:03:a5:40:05:a2:cf:9f:f9:cc:be

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate www.hawaiianairlines.com

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.hawaiianairlines.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hawaiianair.com
hawaiianairlines.co.jp
hawaiianairlines.co.kr
hawaiianairlines.co.nz
hawaiianairlines.com
hawaiianairlines.com.au
hawaiianairlines.com.cn
hawaiianairlines.com.tw
www.hawaiianair.com
www.hawaiianairlines.co.jp
www.hawaiianairlines.co.kr
www.hawaiianairlines.co.nz
www.hawaiianairlines.com
www.hawaiianairlines.com.au
www.hawaiianairlines.com.cn
www.hawaiianairlines.com.tw

Other certificates including the domain name hawaiianairlines.com

(limited to 100 certificates)
web-trips-test.kalea.aws.hawaiianairlines.com
cartrawler.test.hawaiianairlines.com
*.reg-nonprod.itservices.hawaiianairlines.com
web-dark-site-prod.kalea.aws.hawaiianairlines.com
Guest.HawaiianAirlines.com
test.api.hawaiianairlines.com
testonlinemall.hawaiianairlines.com
newsroom.hawaiianairlines.com
test.hawaiianairlines.com
www.airportrentals.com
*.itservices.hawaiianairlines.com
www.hawaiianairlines.com
cloudapi.hawaiianairlines.com
www.hawaiianairlines.com
hawaiianairlines.com
b2b-devtest.svc.hawaiianairlines.com
devcheckin.hawaiianairlines.com
checkin.hawaiianairlines.com
services.hawaiianairlines.com
upadmin.hawaiianairlines.com
www.hawaiianairlines.com
test2.hawaiianairlines.com
www.airportrentals.com
m.hawaiianairlines.com
web.svc.hawaiianairlines.com
medialibrary.hawaiianairlines.com
testpartners.hawaiianairlines.com
www2.hawaiianairlines.com
www.hawaiianairlines.com
mobile.itservices.hawaiianairlines.com
*.test.svc.hawaiianairlines.com
test.hawaiianairlines.com
kiosk.hawaiianairlines.com
advocacy.hawaiianairlines.com
common-dev.kalea.aws.hawaiianairlines.com
forms.hawaiianairlines.com
*.itservices.hawaiianairlines.com
b2b.svc.hawaiianairlines.com
www.assets.hawaiianairlines.com
common-test.kalea.aws.hawaiianairlines.com
shop.hawaiianairlines.com
www.QA1.hawaiianairlines.com
em.hawaiianairlines.com
www.hawaiianairlines.com
*.load.svc.hawaiianairlines.com
activities.hawaiianairlines.com
api.test.svc.hawaiianairlines.com
testws.hawaiianairlines.com
b2b-development.svc.hawaiianairlines.com
test.hawaiianairlines.com
selfservice-development.cloudapi.hawaiianairlines.com
web.test.svc.hawaiianairlines.com
www.airportrentals.com
partners.hawaiianairlines.com
selfservice-development.cloudapi.hawaiianairlines.com
onlinemall.hawaiianairlines.com
*.dev.svc.hawaiianairlines.com
services.hawaiianairlines.com
devws.hawaiianairlines.com
test3.hawaiianairlines.com
shop.hawaiianairlines.com
web.svc.hawaiianairlines.com
hawaiianairlines.com
*.load.svc.hawaiianairlines.com
onlinemall.hawaiianairlines.com
*.staging.svc.hawaiianairlines.com
selfservice-mock.cloudapi.hawaiianairlines.com
test.hawaiianairlines.com
web-common-prod.kalea.aws.hawaiianairlines.com
prod.itservices.hawaiianairlines.com
www.airportrentals.com
www.devcheckin.hawaiianairlines.com
web-flight-status-live.test-parent.aws.hawaiianairlines.com
partners.hawaiianairlines.com
explore.hawaiianairlines.com
www.hawaiianairlines.com
*.hawaiianairlines.com
checkin.hawaiianairlines.com
checkin.hawaiianairlines.com
checkin.hawaiianairlines.com
web-checkin-test.kalea.aws.hawaiianairlines.com
partners.hawaiianairlines.com
octopus.hawaiianairlines.com
mi.hawaiianairlines.com
test4.hawaiianairlines.com
explore.hawaiianairlines.com
em.hawaiianairlines.com
test.hawaiianairlines.com
hawaiianairlines.com
testws.hawaiianairlines.com
test.hawaiianairlines.com
www.airportrentals.com
dev.api.hawaiianairlines.com
action.hawaiianairlines.com
web.dev.svc.hawaiianairlines.com
buyandfly.staging.hawaiianairlines.com
Testapps.hawaiianairlines.com
www.hawaiianairlines.com
dataaccess.staging.svc.hawaiianairlines.com
cloudapi.hawaiianairlines.com

Certificate

The complete raw certificate details for www.hawaiianairlines.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHezCCBmOgAwIBAgIQEjf3HJRnzzyxtnx1Ca9BaTANBgkqhkiG9w0BAQsFADB+
MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAd
BgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxLzAtBgNVBAMTJlN5bWFudGVj
IENsYXNzIDMgU2VjdXJlIFNlcnZlciBDQSAtIEc0MB4XDTE3MTEyODAwMDAwMFoX
DTE4MDYwMTIzNTk1OVowfTELMAkGA1UEBhMCVVMxDzANBgNVBAgMBkhhd2FpaTER
MA8GA1UEBwwISG9ub2x1bHUxGjAYBgNVBAoMEUhhd2FpaWFuIEFpcmxpbmVzMQsw
CQYDVQQLDAJJVDEhMB8GA1UEAwwYd3d3Lmhhd2FpaWFuYWlybGluZXMuY29tMIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+5MgHt4xsysEaUnQqlW7zkN
YAXAnqf2/JhVTDB4AmEqv18TJXp5TK0KQDlsa1H+dz+sr2huKJbqfDGaKhySgbhw
s5qovr4sx0HsbZNMLQ9X7NQwWCAOhxOYLEH6e5d+QiGN02UOGsSmXA1j7EbAvwbm
8o4J5OtS3pyk8EdEhgcKLkBOl1DXppVp+CW1c/Vefq+tL0Yq2ONC9QV3xN8q1GtO
CHhI/2kB/LGw85djN8dNCVgKm04ryVV6XJE79TvDoKe/iHcGzQytTymHjJH09vSS
eil7L0T4ALc4185osWLKGsACqI5ipylua1VqaM69nDPj9voeRNzEdl1L0QnDPQID
AQABo4ID9DCCA/AwggGhBgNVHREEggGYMIIBlIIPaGF3YWlpYW5haXIuY29tghZo
YXdhaWlhbmFpcmxpbmVzLmNvLmpwghZoYXdhaWlhbmFpcmxpbmVzLmNvLmtyghZo
YXdhaWlhbmFpcmxpbmVzLmNvLm56ghRoYXdhaWlhbmFpcmxpbmVzLmNvbYIXaGF3
YWlpYW5haXJsaW5lcy5jb20uYXWCF2hhd2FpaWFuYWlybGluZXMuY29tLmNughdo
YXdhaWlhbmFpcmxpbmVzLmNvbS50d4ITd3d3Lmhhd2FpaWFuYWlyLmNvbYIad3d3
Lmhhd2FpaWFuYWlybGluZXMuY28uanCCGnd3dy5oYXdhaWlhbmFpcmxpbmVzLmNv
Lmtyghp3d3cuaGF3YWlpYW5haXJsaW5lcy5jby5ueoIYd3d3Lmhhd2FpaWFuYWly
bGluZXMuY29tght3d3cuaGF3YWlpYW5haXJsaW5lcy5jb20uYXWCG3d3dy5oYXdh
aWlhbmFpcmxpbmVzLmNvbS5jboIbd3d3Lmhhd2FpaWFuYWlybGluZXMuY29tLnR3
MAkGA1UdEwQCMAAwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB
BggrBgEFBQcDAjBhBgNVHSAEWjBYMFYGBmeBDAECAjBMMCMGCCsGAQUFBwIBFhdo
dHRwczovL2Quc3ltY2IuY29tL2NwczAlBggrBgEFBQcCAjAZDBdodHRwczovL2Qu
c3ltY2IuY29tL3JwYTAfBgNVHSMEGDAWgBRfYM9hkFXfhEMUimAqsvV69EMY7zAr
BgNVHR8EJDAiMCCgHqAchhpodHRwOi8vc3Muc3ltY2IuY29tL3NzLmNybDBXBggr
BgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9zcy5zeW1jZC5jb20wJgYI
KwYBBQUHMAKGGmh0dHA6Ly9zcy5zeW1jYi5jb20vc3MuY3J0MIIBAwYKKwYBBAHW
eQIEAgSB9ASB8QDvAHYA3esdK3oNT6Ygi4GtgWhwfi6OnQHVXIiNPRHEzbbsvswA
AAFgAEbP+wAABAMARzBFAiA26aMBi5nUgrmETk7KaHarcfWLjm8qx98oVMHl7m0p
0QIhANuToBs+3BchbLWYFOUicHIZe56F2Gie6TDaG1o1qeXDAHUApLkJkLQYWBSH
uxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFgAEbQcgAABAMARjBEAiAQpyzNuWyv
vIr5IE6AEcCx0UWXGkbQYtzkea0v2AUpuwIgVT+0bhK6JbXzYdW46mi6DL1hJ5Qr
j8KrrhWRNoxxuNIwDQYJKoZIhvcNAQELBQADggEBAB5VzVR7wgcYp6cAbZJ+IoEa
i2HkQWjUdlEe/jYdaCfFMOR6DpjBLNu2RfMSyPB4vMGzN1DVilmQsAut2vNKKoCo
FWzhrAJquKdLZ38/udsbb03vhfagq5USWXTrXePW8hpXkFtw87dsQtanZM6YrCuU
2su2B/ltna2NBzSi20/YD0Q6X3Kq4m3LE/Yp6C98jgsK7oYTtlhzlbdyh9kJmrwI
INXkiJBArAOTHwthGpN+cfgkUPM8GVLSTzZIawfBYlnuwREpAD+y6Heo85+BVs9A
Hon2WFahZJVVhSgqWbSDNbiaG7o4+08qJtEH5ZZdGahq5MxYrIHWAaGfFgOieW0=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+5MgHt4xsysEaUnQqlW
7zkNYAXAnqf2/JhVTDB4AmEqv18TJXp5TK0KQDlsa1H+dz+sr2huKJbqfDGaKhyS
gbhws5qovr4sx0HsbZNMLQ9X7NQwWCAOhxOYLEH6e5d+QiGN02UOGsSmXA1j7EbA
vwbm8o4J5OtS3pyk8EdEhgcKLkBOl1DXppVp+CW1c/Vefq+tL0Yq2ONC9QV3xN8q
1GtOCHhI/2kB/LGw85djN8dNCVgKm04ryVV6XJE79TvDoKe/iHcGzQytTymHjJH0
9vSSeil7L0T4ALc4185osWLKGsACqI5ipylua1VqaM69nDPj9voeRNzEdl1L0QnD
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 24216692270837833056285406821436309865
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hawaii'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Honolulu'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hawaiian Airlines'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.hawaiianairlines.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24229025783934962114138635468931738453844980599721704607582737576165877203367929715767578783627243235410330182706327905846536423194816022608861441468062892877353327752217768974914793709620293419611051937289980971941767247125666868522612364956864628390776169659565357463707014352748951028645608753918768906483574638292786140651083661870996652604005026829671009795997276412195327739073424063146738381582869502929878890406940523896829696735372248927206999234916117664972936131200696900082176879310554402712635448986304367556575119259287480011281111769565654329120331849285390128524188368172986822193755931194182091785021
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (408 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawaiianair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawaiianairlines.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawaiianairlines.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawaiianairlines.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawaiianairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawaiianairlines.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawaiianairlines.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawaiianairlines.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawaiianair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawaiianairlines.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawaiianairlines.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawaiianairlines.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawaiianairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawaiianairlines.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawaiianairlines.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawaiianairlines.com.tw'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc000001600046cffb0000040300473045022036e9a3018b99d482b9844e4eca6876ab71f58b8e6f2ac7df2854c1e5ee6d29d1022100db93a01b3edc17216cb59814e5227072197b9e85d8689ee930da1b5a35a9e5c3007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001600046d0720000040300463044022010a72ccdb96cafbc8af9204e8011c0b1d145971a46d062dce479ad2fd80529bb0220553fb46e12ba25b5f361d5b8ea68ba0cbd6127942b8fc2abae1591368c71b8d2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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