dirwebA-ext.devry.edu

- DeVry University -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 74:c2:94:e8:3d:0d:4d:e9:54:02:46:d5:71:97:6b:f1 was issued on by Symantec Corporation.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

DeVry University

Organization: DeVry University
Organization unit: IT Systems
State / Province: Illinois
Locality: Downers Grove
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 74:c2:94:e8:3d:0d:4d:e9:54:02:46:d5:71:97:6b:f1
Serial Number (int): 155200773298055711134446669415952378865
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): d3:d4:ea:93:93:f1:71:ca:f9:7f:ad:5c:60:c5:b1:01:ed:67:fb:fa
Fingerprint (sha256): 12:c3:8b:ca:17:a8:ae:32:34:11:fc:06:9d:cd:f9:a3:4e:3f:13:64:cb:19:8b:d2:bd:7d:4e:da:1e:1f:00:41

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate dirwebA-ext.devry.edu

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dirwebA-ext.devry.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dirwebA-ext.devry.edu
lync.devry.edu
lyncdiscover.devry.edu
lyncdiscover.devry.com
lyncdiscover.becker.com
lyncdiscover.keller.edu
lyncdiscover.carringtononline.edu
lyncdiscover.chamberlain.edu
lyncdiscover.acams.org
lyncdiscover.devryfoundation.org
lyncdiscover.carrington.edu
lyncdiscover.aucmed.edu
lyncdiscover.devrymedical.org
lyncdiscover.rossu.edu
lyncdiscover.rossmed.edu
lyncdiscover.rossvet.edu.kn
lyncdiscover.devrygroup.com
lyncdiscover.atc-global.com

Other certificates including the domain name devry.edu

(limited to 100 certificates)
pwreg.devry.edu
eis.qa.dvgnp.net
libguides.devry.edu
banportals.devry.edu
cert00078-azurecdn.akamaized.net
cert00078-azurecdn.akamaized.net
cert00078-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
www.int.devry.edu
secure10.san1.raxcdn.com
secure10.san1.raxcdn.com
cert00078-azurecdn.akamaized.net
secured3.san1.raxcdn.com
secure11.san1.raxcdn.com
cert00097-azurecdn.akamaized.net
dss.qa2.devry.edu
cert00078-azurecdn.akamaized.net
dc1-a-mraexpc1.dvuadmin.net
cert00088-azurecdn.akamaized.net
nexpose.devry.edu
secure10.san1.raxcdn.com
cert00097-azurecdn.akamaized.net
cert00084-azurecdn.akamaized.net
cert00097-azurecdn.akamaized.net
cert00097-azurecdn.akamaized.net
emailsso.tst1.devry.edu
secure11.san1.raxcdn.com
cert00097-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
login.devry.edu
cert00084-azurecdn.akamaized.net
secure11.san1.raxcdn.com
secure10.san1.raxcdn.com
cert00078-azurecdn.akamaized.net
gdedevapp1.devry.edu
akamai-san22.exacttarget.com
secure11.san1.raxcdn.com
secure10.san1.raxcdn.com
cert00088-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
iconnect.devry.edu
cert00084-azurecdn.akamaized.net
dss.devry.edu
secure11.san1.raxcdn.com
secured3.san1.raxcdn.com
cert00097-azurecdn.akamaized.net
OfficeWebAppA.devry.edu
cert00088-azurecdn.akamaized.net
cert00084-azurecdn.akamaized.net
cert00078-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
cert00084-azurecdn.akamaized.net
blog.qa.devry.edu
encoder.devry.edu
ilios.poc1.devry.edu
secure11.san1.raxcdn.com
cert00078-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
cert00055-azurecdn.akamaized.net
secure11.san1.raxcdn.com
secure10.san1.raxcdn.com
secure12.san1.raxcdn.com
cert00078-azurecdn.akamaized.net
cert00078-azurecdn.akamaized.net
dgw.devry.edu
cert00084-azurecdn.akamaized.net
cert00055-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
cert00078-azurecdn.akamaized.net
cert00097-azurecdn.akamaized.net
cert00078-azurecdn.akamaized.net
cert00078-azurecdn.akamaized.net
cert00085-azurecdn.akamaized.net
cert00078-azurecdn.akamaized.net
secure10.san1.raxcdn.com
web.devry.edu
portal.devry.edu
DC1-A-VWLAN5P.devry.edu
libguides.devry.edu
cert00088-azurecdn.akamaized.net
budget.devry.edu
cert00084-azurecdn.akamaized.net
cert00097-azurecdn.akamaized.net
wlapps.devry.edu
cert00085-azurecdn.akamaized.net
login.devry.edu
cert00097-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
cert00097-azurecdn.akamaized.net
cert00084-azurecdn.akamaized.net
discrpt.tst1.devry.edu
apps.qa.devry.edu
cert00097-azurecdn.akamaized.net
gtwy.devry.edu
cert00097-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
cert00078-azurecdn.akamaized.net

Certificate

The complete raw certificate details for dirwebA-ext.devry.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkowtKivy0WpdMJM2IrJb
GFhvU5I6IHaGRWhQRzIQeFlqniM8SaoT1PgzReFXv4SSpyKoU5ofKTMScfMznwW3
4CvcF+gj07O/5kmUOvwmz9sgyD29adRtFOXXYU7ocHtDmzCT3qZUPEUVmL8LSwAm
eZufYUbX9zWcTjTn1tWqn0c0sU1NGt06U2H5IgpBJGcSsmsOcbLXw+6yWFTThrSm
Vf6qikJDjEWf9ZNL7H+32Lncg5vWm8FpyGTriJU+SMUYbfojo1F08yDHjzvwtMx1
mLXevRqY5b1HED8No807TYOT9Xah7RMeujaMFAiQd4Do7kBZLX2eMsWMjpaGMSnd
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 155200773298055711134446669415952378865
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Downers Grove'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DeVry University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT Systems'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'dirwebA-ext.devry.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18499916096353983552509250577334175860904888826588412837946315452260155865414024921629737192175993970793731897331808309468875793161195954128954501397948825058919688928551826484353632901073664103808820269301010323688360902720082111387160909609958545856015241033462595213415893401275175035190720799571288988785454217133624055136647101009068952458174503890253007717653375389078974296355417542514813755927338210736557032369834307245693660249837514088198798524609854007291512316683401832506280636461147231906901579213716424179243039167942986079367295839910933588198179409114968013538614177233924662543645755066916956396969
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dirwebA-ext.devry.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lync.devry.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.devry.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.devry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.becker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.keller.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.carringtononline.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.chamberlain.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.acams.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.devryfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.carrington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.aucmed.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.devrymedical.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.rossu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.rossmed.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.rossvet.edu.kn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.devrygroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.atc-global.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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