www.jeuhautefidelite.societegenerale.fr

- Societe Generale -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 40:55:cc:27:51:24:dd:54:b8:e6:1b:4d:c0:79:4a:4a was issued on by Symantec Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Societe Generale

Organization: Societe Generale
Organization unit: Securite Production
State / Province: PARIS
Locality: PARIS
Country: FR

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 40:55:cc:27:51:24:dd:54:b8:e6:1b:4d:c0:79:4a:4a
Serial Number (int): 85516077689780411542222055601971219018
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 02:72:65:36:a3:9c:b2:4e:e3:bd:ba:0f:ac:11:a4:d2:20:db:dc:fe
Fingerprint (sha256): 10:18:79:7f:d0:3e:8f:20:8d:c0:ed:a8:53:95:e4:51:e8:af:79:4c:65:cd:27:a5:13:67:cc:6d:a3:6e:ac:1d

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate www.jeuhautefidelite.societegenerale.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.jeuhautefidelite.societegenerale.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.jeuhautefidelite.societegenerale.fr

Other certificates including the domain name societegenerale.fr

(limited to 100 certificates)
dca.homologation.societegenerale.fr
dca.societegenerale.fr
entreprises.societegenerale.fr
particuliers.secure.societegenerale.fr
infact.factoring.societegenerale.fr
developer.retail.homologation.societegenerale.fr
statse.par.societegenerale.fr
replay.societegenerale.fr
transferts.homologation.societegenerale.fr
privatebanking.societegenerale.com
dca.societegenerale.fr
entreprises.societegenerale.fr
professionnels.homologation.societegenerale.fr
transferts.homologation.societegenerale.fr
bo-tablette-clicom.societegenerale.fr
particuliers.secure.societegenerale.fr
associations.societegenerale.fr
hscriptso.par.societegenerale.fr
hstatso.par.societegenerale.fr
www.panelclients.societegenerale.fr
www.equipmentfinance.societegenerale.com
solutionsgestionprivee.portail.homologation.societegenerale.fr
scriptso.par.societegenerale.fr
hscriptso.par.societegenerale.fr
professionnels.homologation.societegenerale.fr
hscriptsp.par.societegenerale.fr
m.societegenerale.fr
entreprises.societegenerale.fr
devenirclient.particuliers.homologation.societegenerale.fr
statso.par.societegenerale.fr
hietemi.socgen.com
lecashback.societegenerale.fr
docsp.par.societegenerale.fr
entreprises.societegenerale.fr
m.entreprises.societegenerale.fr
entreprises.certif.homologation.societegenerale.fr
infact.factoring.societegenerale.fr
eip-voteag.societegenerale.fr
particuliers.hml.societegenerale.fr
www.equipmentfinance.societegenerale.com
reglement.societegenerale.com
bo-tablette-clicom.societegenerale.fr
pch.societegenerale.fr
entreprises.secure.homologation.societegenerale.fr
particuliers.secure.homologation.societegenerale.fr
scriptsp.par.societegenerale.fr
afrique.societegenerale.com
static.homologation.societegenerale.fr
idees.societegenerale.fr
entreprises.homologation.societegenerale.fr
hscriptse.par.societegenerale.fr
entreprises.societegenerale.fr
mobile.societegenerale.fr
static.homologation.societegenerale.fr
filetransfer.prd.tomg.societegenerale.com
sgetvous.societegenerale.fr
particuliers.secure.societegenerale.fr
www.jeuhautefidelite.societegenerale.fr
particuliers.hml.societegenerale.fr
www.equipmentfinance.societegenerale.com
entreprises.certif.homologation.societegenerale.fr
m.homologation.societegenerale.fr
www.carteespeces.societegenerale.fr
transferts.societegenerale.fr
global.societegenerale.com
afrique.societegenerale.com
infact-hom.societegenerale.cga.fr
orl105.societegenerale.fr
solutionsgestionprivee.portail.homologation.societegenerale.fr
coupdenvoi.societegenerale.fr
equipmentfinance.societegenerale.com
particuliers.sandbox.societegenerale.fr
particuliers.homologation.societegenerale.fr
hscriptse.par.societegenerale.fr
professionnels.secure.societegenerale.fr
transferts.homologation.societegenerale.fr
*.exp.gumgum.com
infact.factoring.societegenerale.fr
pch.homologation.societegenerale.fr
www.warrants.com
lecashback.societegenerale.fr
static.homologation.societegenerale.fr
entreprises.societegenerale.fr
reglement.societegenerale.com
entreprises.homologation.societegenerale.fr
votations.24heures.ch
m.particuliers.societegenerale.fr
admin-bo-tablette-clicom-dev.societegenerale.fr
www.solutions.sgcib.com
associations.hml.societegenerale.fr
www.homopar1.societegenerale.fr
m.entreprises.homologation.societegenerale.fr
infact.factoring.societegenerale.fr
mediateur.societegenerale.fr
www.equipmentfinance.societegenerale.com
www.societegenerale.fr
scriptse.par.societegenerale.fr
logitelnet.socgen.com
docsp.par.societegenerale.fr
www.parade.societegenerale.fr

Certificate

The complete raw certificate details for www.jeuhautefidelite.societegenerale.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHoTCCBomgAwIBAgIQQFXMJ1Ek3VS45htNwHlKSjANBgkqhkiG9w0BAQsFADB+
MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAd
BgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxLzAtBgNVBAMTJlN5bWFudGVj
IENsYXNzIDMgU2VjdXJlIFNlcnZlciBDQSAtIEc0MB4XDTE3MTEyNzAwMDAwMFoX
DTE5MTEyODIzNTk1OVowgZgxCzAJBgNVBAYTAkZSMQ4wDAYDVQQIDAVQQVJJUzEO
MAwGA1UEBwwFUEFSSVMxGTAXBgNVBAoMEFNvY2lldGUgR2VuZXJhbGUxHDAaBgNV
BAsME1NlY3VyaXRlIFByb2R1Y3Rpb24xMDAuBgNVBAMMJ3d3dy5qZXVoYXV0ZWZp
ZGVsaXRlLnNvY2lldGVnZW5lcmFsZS5mcjCCAiIwDQYJKoZIhvcNAQEBBQADggIP
ADCCAgoCggIBALD7oaxvlJc9xrg/HMIhMt1KxALambQG71pQs4bYeErW+pWUkwyu
mr1V3fK8q6CGTUxGJ3DcPp43iyNT/JxJRMjqTCqIGWHfP5NpqtAfCcyN98oypN9l
QFKspNnpPRiTz5rFuLdIbRhoKHrmz+3c+Fdo+V0c0VOgHaH807SLSz/ne4XLqNBu
q1gi1vIpeDUHJcu5q1SFlSU7zL73n6eJorQtoGrrmT9VGgBpZ2Eu292mPDrH5XnA
qjBhMb2GAL9RJJhCi8SVEnT5xdakSlOoQ4pVtcjRD3nM0cMFERWk3+w3cP8eDJW2
8Z2vwDZZ4ZDk3FZwl/W+XBWV+oOPHK+/xkEvVyq85/Ba/69xkQDXbq8Ecbbdfb3a
/vm+2on6skQvZH2nqMtxHkVn7MQw1wkB0nRdXRZudwlHPy1KzK3pXd+TVxjHFtlt
E51EFAD/Iu7vciX3eX2tXKCMndx9oPoV0Uh1P6BjMfD8B1+dr2nnaUMfJOGBYygi
6tbesFfjKQCZ/hQx5aI2BRMJ7erZOPw8PFdOWgAIsmIFNmYHYJBptpWQj8GbFvz5
AHEt1j26aF4E+8Zm05gjxUDclMzGDh0MvPSbxazgUZRRudtdtU5i++jb/wDbrynH
eTd7szlg0CMElR03ZNUp9yeeMB01/Jalx0qvw4H8iCKsNLFlaAfsgLavAgMBAAGj
ggL+MIIC+jAyBgNVHREEKzApgid3d3cuamV1aGF1dGVmaWRlbGl0ZS5zb2NpZXRl
Z2VuZXJhbGUuZnIwCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMGEGA1UdIARaMFgwVgYGZ4EMAQICMEwwIwYI
KwYBBQUHAgEWF2h0dHBzOi8vZC5zeW1jYi5jb20vY3BzMCUGCCsGAQUFBwICMBkM
F2h0dHBzOi8vZC5zeW1jYi5jb20vcnBhMB8GA1UdIwQYMBaAFF9gz2GQVd+EQxSK
YCqy9Xr0QxjvMCsGA1UdHwQkMCIwIKAeoByGGmh0dHA6Ly9zcy5zeW1jYi5jb20v
c3MuY3JsMFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDovL3NzLnN5
bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL3NzLnN5bWNiLmNvbS9zcy5jcnQw
ggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB2AN3rHSt6DU+mIIuBrYFocH4ujp0B
1VyIjT0RxM227L7MAAABX/34Z5IAAAQDAEcwRQIhALBp9uhK0PYfUrc4I2h/ne15
Tn+L3dOtYHgwOuRA6lqDAiAEr4w+Dz0765NnI2ErepYBUouRHI9xjZnWjyRhM3eU
xwB2AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABX/34Z8YAAAQD
AEcwRQIgAwenl2wwowPmCw0fdZlKieidZaNsYbOcL2JPbdVW/PcCIQDiTsagwPt5
IEemZyAekbFFTfB8vUeaKIcBwJ1dLcWGowB2AO5Lvbd1zmC64UJpH6vhnmajD35f
sHLYgwDEe4l6qP3LAAABX/34aYgAAAQDAEcwRQIhAIB1cZzCDZRbKKxlpUdj9EoJ
9MEY79CmeASA1K7pfYsnAiBvAM7nuYcJbFjaM1cVDiA2cDaFvMQ+zqUXGQXVI3m9
YzANBgkqhkiG9w0BAQsFAAOCAQEApOGbSbJVzac6cnRiJY8Rj+WQHX68nfFpyDFP
d4CajELnY5DXPwHZyIwJ2lTCbh4VqjkPE1lGVFNA2jQMCAqkOzIdFIOyyIqwb3qT
nHzoeX32WEX92ztl+QZwE2wb6QxRE/jEXyNBlytUCC1ZzBrznxXeIoRlZjvqc+gN
3kLxBB1ABUEF0wan4iW6fyhOs3hjrGqVCbUqwZEez2ZvnDZBVp1yuyZ8hwAqp1qc
bJJJUSiuZOclvRPJlq0xieQ2IFNlPgT2dszLxfKrASvqQclrgM/ety/K111gJAJX
VCnOYk5qXeEafTXX3Ev4qulHYigky9DFpdoS4K3/NyZhHXjygA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 85516077689780411542222055601971219018
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Societe Generale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Securite Production'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.jeuhautefidelite.societegenerale.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 722027383740805660850983086887409748231510507522198245233186755549042356163743749425702061277043508354883711398208562989776128056167392235268746176010527495746224844800565941872279303614010561034866812483094018118076333169020893394238028466284750049261704912788358675834545115207163003098302846335277130912425565608263748133008529911870418011329060597359568005242948094574984131590846638432359885144306249228462678361962938999575558866123830927902522059522104752233584863197001509997138471279792310034478776028534522854213886839738590964518257566069470117678988493601161520545535257812371393280147400138270832597118256199577929103303256898599798083691998066527317713126190823911548578560366220154553249311067539939112275069124711140550550403842365264661379938637736209788052509669337050295928509199737804734539689047523988483325721796788277074769293330149817322474972750226659321655188406913967826168696352906626780381701661338816822097376792652932127045849448862564622417966368969100692663440408153389232667278564295808094262244631036587208970195384441212442731252678287515622253249331799942755500076125067414912239847079787892533300462669956725841747991805091038568532271087395068328067932571918723614351246415380330946167752930991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jeuhautefidelite.societegenerale.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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