www.derwesten.de

- FUNKE Corporate IT GmbH -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 5a:9d:a1:93:46:b8:cf:d7:10:4c:8f:65:f7:22:ed:58 was issued on by Symantec Corporation.

With 45 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

FUNKE Corporate IT GmbH

Organization: FUNKE Corporate IT GmbH
State / Province: Nordrhein Westfalen
Locality: Essen
Country: DE

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5a:9d:a1:93:46:b8:cf:d7:10:4c:8f:65:f7:22:ed:58
Serial Number (int): 120448987363805848550207452821267344728
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 2b:7a:b5:7d:44:75:fe:9a:67:14:7a:c2:66:9d:c7:2a:54:da:0e:e4
Fingerprint (sha256): 13:f9:8b:34:b1:30:0f:0c:b5:49:24:c9:b4:d2:37:3b:ce:0d:c4:cf:e3:f1:35:80:d3:54:7c:2c:46:77:d2:46

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate www.derwesten.de

45

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.derwesten.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.waz.de
*.abendblatt.de
*.wr.de
*.funkemediennrw.de
*.nrz.de
*.ikz-online.de
*.bergedorfer-zeitung.de
*.wp.de
tvgenial.hoerzu.de
games.hoerzu.de
images.hoerzu.de
mobile.hoerzu.de
www.hoerzu.de
text.hoerzu.de
m.hoerzu.de
hoerzu.de
rss.hoerzu.de
epgdata.de
www.epgdata.de
character.images.dvbdata.com
hzmobil.images.dvbdata.com
hoerzu.images.dvbdata.com
tvdigitalepg.images.dvbdata.com
persons.images.dvbdata.com
ersatzbild.images.dvbdata.com
tvdmobil.images.dvbdata.com
senderlogos.images.dvbdata.com
unitedinternetimages.images.dvbdata.com
series.images.dvbdata.com
onair.images.dvbdata.com
funke.images.dvbdata.com
iphoneapp.images.dvbdata.com
epgdata.com
www.epgdata.com
*.morgenpost.de
m.tvdigital.de
rss.tvdigital.de
tvdigital.de
images.tvdigital.de
www.tvdigital.de
mobile.tvdigital.de
games.tvdigital.de
*.derwesten.de
derwesten.de
www.derwesten.de

Other certificates including the domain name derwesten.de

(limited to 100 certificates)
www.derwesten.de
runforrest.derwesten.de
www.weltsport.net
sso.funkemedien.de
derwesten.de
*.funkemedien.de
dev3.aws.funkedigital.de
funkedigital.de
data-fdf4690b14.derwesten.de
*.waz.de
secure.derwesten.de
eventum.derwesten.de
dev2.aws.funkedigital.de
derwesten.de
www.weltsport.net
www.derwesten.de
secure.derwesten.de
*.waz.de
tv.morgenpost.de
www.weltfussball.de
www.deutschland-spielt.de
www.weltsport.net
www.derwesten.de
agnes.derwesten.de
www.derwesten.de
sso.funkemedien.de
www.weltsport.net
www.weltsport.net
www.weltsport.net
www.derwesten.de
files1.derwesten.de
www.derwesten.de
www.weltsport.net
www.derwesten.de
www.weltsport.net
www.weltsport.net
www.weltsport.net
www.weltsport.net
www.derwesten.de
www.adventskalender.derwesten.de
www.weltsport.net
www.derwesten.de
angebote.derwesten.de
www.weltsport.net
dev1.aws.funkedigital.de
derwesten.de
www.derwesten.de
www.derwesten.de
www.weltsport.net
www.derwesten.de
www.weltfussball.de
www.derwesten.de
derosten.com
www.weltsport.net
www.weltfussball.de
www.derwesten.de
www.weltsport.net
www.derwesten.de
www.weltsport.net
*.waz.de
www.deutschland-spielt.de
cp.derwesten.de
shop.derwesten.de
www.weltsport.net
sso.funkemedien.de
www.derwesten.de
*.funkemedien.de
*.waz.de
*.waz.de
dev2.aws.funkedigital.de
uat.aws.bildderfrau.de
www.weltsport.net
*.funkemedien.de
aditory.derwesten.de
funkedigital.de
uat.aws.bildderfrau.de
dev5.aws.funkedigital.de
www.weltfussball.de
dev2.aws.funkedigital.de
www.weltsport.net
*.waz.de
www.weltfussball.de
sso.derwesten.de
www.derwesten.de
uat.aws.bildderfrau.de
www.weltfussball.de
funkedigital.de
derwesten.de
interaktiv.derwesten.de
*.waz.de
*.geschenke38.de
tippspiel.derwesten.de
www.weltsport.net
*.waz.de
dev1.aws.funkedigital.de
secure.derwesten.de
www.weltsport.net
derwesten.de
tv.morgenpost.de
www.derwesten.de

Certificate

The complete raw certificate details for www.derwesten.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtl0F4IvMJ1cf00wu9BDN
b42kDSLvcisNcAhnwr1M7wpPmDER7KtI60wJ7aD3jmqVE1CgghHj1WQYIILwKbQ3
A4apcv5TEnIpE3qNWgn7qyPOeEEO1TwWxULJeZ9hC6+ACEBxsHf4lZ5vqve7AJ8J
PJnHpf9IVZErihmZjkAL48L/v2sMRGxRhKB2Du5HbtdyhbY9EflL6gYOiFf3wRN2
rdFAeG+BwME7puSVpmh01jMmjHJW5NYNY8RWRGlc/wCC9w3rYZhZPTMw4TGrnVmL
7SYz34Gs1FOEZeW+dIw1l/2fpnmP68AiDqMFmfB7NalLpbVyB1ZsDd4/WPwbS4i0
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 120448987363805848550207452821267344728
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Essen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'FUNKE Corporate IT GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.derwesten.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23021242833839112134886912110710609915953159260282808879324479025195786011983410527788743586054492672708471774514310484471027312061469197212695682592037404773093852353238556340017293614122649144832697478807270721276958077341031707191908498552930523806868276960938694974426714709744583132928954113585133791578782434014710244771044823527906526705539991417999321688758383887994528597765293265051031631798512162385235319163488215809157757376965104928320600823092929030010100733183602548304833503028208040538795888464188290777237256331041957205105114933339014739249237438407698448359904191861155208897105960582664465986651
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (905 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.waz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abendblatt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funkemediennrw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nrz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ikz-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bergedorfer-zeitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wp.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvgenial.hoerzu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'games.hoerzu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.hoerzu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.hoerzu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hoerzu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'text.hoerzu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.hoerzu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoerzu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rss.hoerzu.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epgdata.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epgdata.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'character.images.dvbdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hzmobil.images.dvbdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoerzu.images.dvbdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvdigitalepg.images.dvbdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'persons.images.dvbdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ersatzbild.images.dvbdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvdmobil.images.dvbdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'senderlogos.images.dvbdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitedinternetimages.images.dvbdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'series.images.dvbdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onair.images.dvbdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funke.images.dvbdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iphoneapp.images.dvbdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epgdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epgdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.morgenpost.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tvdigital.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rss.tvdigital.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tvdigital.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.tvdigital.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tvdigital.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.tvdigital.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'games.tvdigital.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.derwesten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derwesten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.derwesten.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000158aae548240000040300473045022100a8cfb20ee4476f4f1cef7085341a318dcb1a742d0da6420a39b2ab687686b9a80220100627861c6fd61ae27848df931e91adc8a66d39ad51b5cb2bdee9e984472b12007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000158aae5486c0000040300473045022028629e0bc9dd1ce0c0b48226b271b6fd93e0beeff3c7bc107167fed2d1cd200f022100ea1a7e8a9c6e4cd631e16dc29dbf30a19e6b49fa249b015327026f1e4b227276
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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