*.test.www.easports.com

- Electronic Arts, Inc. -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 7a:d2:74:12:8e:ae:d9:49:da:a1:ec:de:09:79:04:25 was issued on by Symantec Corporation.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Electronic Arts, Inc.

Organization: Electronic Arts, Inc.
Organization unit: EA Online/Pogo.com
State / Province: California
Locality: Redwood City
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7a:d2:74:12:8e:ae:d9:49:da:a1:ec:de:09:79:04:25
Serial Number (int): 163258552055831249749920298887309493285
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 43:8d:8d:1a:44:e2:b5:eb:42:c4:a9:ec:3c:d6:97:d2:06:76:9f:f9
Fingerprint (sha256): 13:c1:fd:71:9c:41:aa:8f:30:7e:a0:93:33:c5:8a:61:d4:1f:85:a5:ad:7e:3f:f2:91:a2:db:8f:b1:08:f7:8e

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate *.test.www.easports.com

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.test.www.easports.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.test.www.easports.com
fifa.betatest.www.easports.com
fifa.eacert1.www.easports.com
fifa.eacert2.www.easports.com
fifa.eacert3.www.easports.com
fifa.eacert4.www.easports.com
fifa.eacert5.www.easports.com
fifa.eacert6.www.easports.com
fifa.gencert1.www.easports.com
fifa.gencert2.www.easports.com
fifa.gencert3.www.easports.com
fifa.gencert4.www.easports.com
fifa.gencert5.www.easports.com
fifa.gencert6.www.easports.com
fifa.gencert7.www.easports.com
fifa.press1.www.easports.com
fifa.press2.www.easports.com

Other certificates including the domain name easports.com

(limited to 100 certificates)
nhl15.cert.service.easports.com
www.origin.com
service.stageb.easports.com
ufc15.cert.content.easports.com
motm.easports.com
wildcard.service.easports.com
nba15.test.service.easports.com
*.test.www.easports.com
fifa19tickets-de.easports.com
pvz.stagea.service.easports.com
nhl15.test.service.easports.com
service.load.easports.com
*.test.content.easports.com
server.fifa.eacert7.api.easports.com
wildcard.xmshd.easports.com
ufc15.load.content.easports.com
fifa15.content.easports.com
dlc-cdn.scorpion-ea.com
ufcf2p.test.content.easports.com
*.load.service.easports.com
ufc15.service.easports.com
www.origin.com
fifa15.press1.content.easports.com
easts.ea.com
www.origin.com
www.origin.com
load.easports.com
nhl15.content.easports.com
*.stagea.service.easports.com
*.stagea.content.easports.com
ufcf2p.stagea.service.easports.com
cdn.stagea.easports.com
easts.ea.com
*.cert.www.easports.com
motm.easports.com
www.origin.com
fifamobile19.api.easports.com
*.content.easports.com
beta.stageb.easports.com
plpotm.easports.com
support.ea.com
support.ea.com
lvlt.store.thesims3.com
fifa15.load.service.easports.com
madden15.cert.service.easports.com
fifa15.press1.content.easports.com
fifa14.mscert1.content.easports.com
m.help.ea.com
www.origin.com
www.easports.com
*.test.www.easports.com
*.test.www.easports.com
ufc15.test.service.easports.com
www.origin.com
config.stagea.easports.com
www.origin.com
nhl15.cert.service.easports.com
ufcf2p.load.service.easports.com
www.origin.com
wildcard.load.service.easports.com
config.stagea.easports.com
service.load.easports.com
ufc15.cert.service.easports.com
www.origin.com
fifaforums.easports.com
*.content.easports.com
www.origin.com
*.test.service.easports.com
wildcard.stagea.content.easports.com
fifa17.mobilecert1.service.easports.com
laligapotm.easports.com
www.easports.com
nhl15.test.service.easports.com
madden.cert.ondemand.easports.com
nba15.load.service.easports.com
support.ea.com
service.easw.easports.com
fifa15.press1.content.easports.com
*.cert.www.easports.com
www.origin.com
beta.easports.com
www.easports.com
www.origin.com
totyfanvote.easports.com
fifa19tickets-de.easports.com
totyfanvote.easports.com
nhl15.cert.service.easports.com
totswatch.easports.com
plpotm.easports.com
config.cert.easports.com
nba15.cert.content.easports.com
service.load.easports.com
eflypots.easports.com
ufcf2p.load.content.easports.com
www.origin.com
totswatch.easports.com
fifa17.mobilecert1.service.easports.com
www.origin.com
*.load.service.easports.com
ufc15.test.content.easports.com

Certificate

The complete raw certificate details for *.test.www.easports.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8bbp/JCMLbh1ZqLinfp
AlA907YPSflnxiOxYIBX/JtPgyuulrTCp8P+zRV0XXDo/a60NxB/p2YjAnIeEHB9
NS+FnHy/0UTLY2ZTaM0Oiy4Y6ipd1F6aFkYZbHWqQsVSG9HwcARydmtN3O4KJN97
RX2yFCNdyZ7hMPOnLxkqXnYvDKHIOMnW4TlQAscfXPUWMSs7yLfsBQ4y3f/D4PT0
rloHs8v1CCgbggnYDaUy48VU564lxqxLS5OJMhLLhqsgjWIUZCdLBUzIzjIT4if2
piMwNCDzD+tTMAY2ykUop/NFA1vbeIVEozD3zE9eATdSJZ4J6ws3pRbEzKZi28kG
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 163258552055831249749920298887309493285
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Redwood City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Electronic Arts, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'EA Online/Pogo.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.test.www.easports.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25219483238299459325621099658569798928458139900608158484585832912915098010561210464418303503817883273043104964604015254908411339500810081603037655678083276855777907257897286733304278037938301489993889672158578675181969630984067934318077680242371117230163081922347580686881576641829509463376842980210884884070690231337603381325022020038379985377144267481089842696101520334251439694123995697611206260511584333918337454555072354512442399350939933383602372728232482337599719916576493360464314446156317767416665112593074217710209134577033942260219013114801145630935440009636930943961117453190836867966378414937461544781417
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (531 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.www.easports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fifa.betatest.www.easports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fifa.eacert1.www.easports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fifa.eacert2.www.easports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fifa.eacert3.www.easports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fifa.eacert4.www.easports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fifa.eacert5.www.easports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fifa.eacert6.www.easports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fifa.gencert1.www.easports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fifa.gencert2.www.easports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fifa.gencert3.www.easports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fifa.gencert4.www.easports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fifa.gencert5.www.easports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fifa.gencert6.www.easports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fifa.gencert7.www.easports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fifa.press1.www.easports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fifa.press2.www.easports.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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