sas.1195.manchesterfort.specsavers.com
- Specsavers BV -
Issued by Symantec Class 3 Secure Server SHA256 SSL CA
About this certificate
This digital certificate with serial number 33:39:fe:09:e0:f9:1c:9d:25:e9:f0:9a:c4:ec:e0:c9 was issued on by Symantec Corporation.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Specsavers BV
Organization:
Specsavers BV
Organization unit: SOG
Organization unit: SOG
State / Province:
Noord-Holland
Locality: Huizen
Country: NL
Locality: Huizen
Country: NL
Symantec Corporation
Organization:
Symantec Corporation
Organization unit: Symantec Trust Network
Organization unit: Symantec Trust Network
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 33:39:fe:09:e0:f9:1c:9d:25:e9:f0:9a:c4:ec:e0:c9Serial Number (int): 68091741220685784699784776486600106185
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: db:62:20:fb:7d:02:89:7c:d2:3b:6f:c7:e4:32:6c:05:52:1d:ad:b1
Fingerprint (sha1): d8:b7:b3:de:60:58:9b:b2:fa:48:90:78:76:ff:7a:e6:36:65:67:25
Fingerprint (sha256): 15:5c:0f:8b:59:f7:50:04:63:d4:e6:04:c1:55:b6:0b:50:46:40:71:01:06:76:55:ae:f1:be:c9:8c:c0:93:97
Issuing Certificate URL: http://sg.symcb.com/sg.crt
Revocation information
OCSP Server: http://sg.symcd.comCRL Distribution Point: http://sg.symcb.com/sg.crl
Check the revocation status for certificate sas.1195.manchesterfort.specsavers.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sas.1195.manchesterfort.specsavers.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
sas.1195.manchesterfort.specsavers.com
Other certificates including the domain name specsavers.com
(limited to 100 certificates)
ebssitx.az.specsavers.com
hyptst.az.specsavers.com
apipot-management.az.specsavers.com
oemnpbi.az.specsavers.com
*.bookings.specsavers.com
ssl503523.cloudflaressl.com
ukhs-slvapp47.uk.specsavers.com
sonarqube-dev.apps.specsavers.com
openaccounts-uat.gg.specsavers.com
ssl503525.cloudflaressl.com
gglv-smacfile02.gg.specsavers.com
openaccounts-smt.gg.specsavers.com
sodprf.az.specsavers.com
spark-emea.ad.specsavers.com
oidadmprf.az.specsavers.com
esmt.apps.specsavers.com
osb.co.ad.specsavers.com
adfuat.az.specsavers.com
ebssitx.az.specsavers.com
adbuilder.specsavers.com
jhsams.co.ad.specsavers.com
bb-emea.internal.specsavers.com
airwatchds.specsavers.com
oiddsmpre.co.ad.specsavers.com
omsprf.az.specsavers.com
osb.co.ad.specsavers.com
apiportal.ad.specsavers.com
edqpre3.ad.specsavers.com
retailcomms.ec.specsavers.com
vc.specsavers.com
gglv-smacswupd.gg.specsavers.com
odiprd.co.ad.specsavers.com
soaprf.az.specsavers.com
vcpprd.co.ad.specsavers.com
sclub.specsavers.com
osbsit.az.specsavers.com
specslink-no.specsavers.com
adfs.specsavers.com
voemaprd2.co.ad.specsavers.com
hubbletest.az.specsavers.com
adfpre.co.ad.specsavers.com
EDQOCHSIT.co.ad.specsavers.com
airwatchcn.specsavers.com
ap-sodtat.az.specsavers.com
terpander.gg.specsavers.com
mftdsit.az.specsavers.com
join.specsavers.com
dem.co.ad.specsavers.com
ap-sodtat.az.specsavers.com
edqsit.ad.specsavers.com
asaudiopaddr.apps.specsavers.com
stibo.apps.specsavers.com
ebsuat.az.specsavers.com
orchestrator-emea.apps.specsavers.com
specsavers.com
fridm-dev.ad.specsavers.com
vcpuat.az.specsavers.com
rundeck.gg.specsavers.com
mftdsit.az.specsavers.com
oidadmprd.co.ad.specsavers.com
content.specsavers.com
oemnp.az.specsavers.com
demuat.az.specsavers.com
sas.1195.manchesterfort.specsavers.com
vcpsit.az.specsavers.com
*.bookings.specsavers.com
iron.specsavers.com
ssl332136.cloudflaressl.com
sod.co.ad.specsavers.com
apipot.az.specsavers.com
odisit.az.specsavers.com
adfs.specsavers.com
shsdub.co.ad.specsavers.com
dhue-emea.ad.specsavers.com
oraclesob.gg.specsavers.com
odisit.az.specsavers.com
sni.cloudflaressl.com
audiopadpre02.apps.specsavers.com
iron2.specsavers.com
airwatchcnintuat.specsavers.com
dresourcemgr-emea.ad.specsavers.com
audiopadpre01.apps.specsavers.com
odiqa.co.ad.specsavers.com
notification.specsavers.com
ukao-slvapp47.uk.specsavers.com
gitscm.uk.specsavers.com
rtnsvcdev.ad.specsavers.com
grafanadr-emea.ad.specsavers.com
vendorportal.specsavers.com
gglv-smdc01.gg.specsavers.com
nevtest_sha1.specsavers.com
stibo-qa.specsavers.com
sso.co.ad.specsavers.com
ap-osbtst.az.specsavers.com
booking.specsavers.com
ochdevmig.ad.specsavers.com
app-genesysescrow.specsavers.com
spvwa.ad.specsavers.com
soduat.az.specsavers.com
soapre.co.ad.specsavers.com
hyptst.az.specsavers.com
apipot-management.az.specsavers.com
oemnpbi.az.specsavers.com
*.bookings.specsavers.com
ssl503523.cloudflaressl.com
ukhs-slvapp47.uk.specsavers.com
sonarqube-dev.apps.specsavers.com
openaccounts-uat.gg.specsavers.com
ssl503525.cloudflaressl.com
gglv-smacfile02.gg.specsavers.com
openaccounts-smt.gg.specsavers.com
sodprf.az.specsavers.com
spark-emea.ad.specsavers.com
oidadmprf.az.specsavers.com
esmt.apps.specsavers.com
osb.co.ad.specsavers.com
adfuat.az.specsavers.com
ebssitx.az.specsavers.com
adbuilder.specsavers.com
jhsams.co.ad.specsavers.com
bb-emea.internal.specsavers.com
airwatchds.specsavers.com
oiddsmpre.co.ad.specsavers.com
omsprf.az.specsavers.com
osb.co.ad.specsavers.com
apiportal.ad.specsavers.com
edqpre3.ad.specsavers.com
retailcomms.ec.specsavers.com
vc.specsavers.com
gglv-smacswupd.gg.specsavers.com
odiprd.co.ad.specsavers.com
soaprf.az.specsavers.com
vcpprd.co.ad.specsavers.com
sclub.specsavers.com
osbsit.az.specsavers.com
specslink-no.specsavers.com
adfs.specsavers.com
voemaprd2.co.ad.specsavers.com
hubbletest.az.specsavers.com
adfpre.co.ad.specsavers.com
EDQOCHSIT.co.ad.specsavers.com
airwatchcn.specsavers.com
ap-sodtat.az.specsavers.com
terpander.gg.specsavers.com
mftdsit.az.specsavers.com
join.specsavers.com
dem.co.ad.specsavers.com
ap-sodtat.az.specsavers.com
edqsit.ad.specsavers.com
asaudiopaddr.apps.specsavers.com
stibo.apps.specsavers.com
ebsuat.az.specsavers.com
orchestrator-emea.apps.specsavers.com
specsavers.com
fridm-dev.ad.specsavers.com
vcpuat.az.specsavers.com
rundeck.gg.specsavers.com
mftdsit.az.specsavers.com
oidadmprd.co.ad.specsavers.com
content.specsavers.com
oemnp.az.specsavers.com
demuat.az.specsavers.com
sas.1195.manchesterfort.specsavers.com
vcpsit.az.specsavers.com
*.bookings.specsavers.com
iron.specsavers.com
ssl332136.cloudflaressl.com
sod.co.ad.specsavers.com
apipot.az.specsavers.com
odisit.az.specsavers.com
adfs.specsavers.com
shsdub.co.ad.specsavers.com
dhue-emea.ad.specsavers.com
oraclesob.gg.specsavers.com
odisit.az.specsavers.com
sni.cloudflaressl.com
audiopadpre02.apps.specsavers.com
iron2.specsavers.com
airwatchcnintuat.specsavers.com
dresourcemgr-emea.ad.specsavers.com
audiopadpre01.apps.specsavers.com
odiqa.co.ad.specsavers.com
notification.specsavers.com
ukao-slvapp47.uk.specsavers.com
gitscm.uk.specsavers.com
rtnsvcdev.ad.specsavers.com
grafanadr-emea.ad.specsavers.com
vendorportal.specsavers.com
gglv-smdc01.gg.specsavers.com
nevtest_sha1.specsavers.com
stibo-qa.specsavers.com
sso.co.ad.specsavers.com
ap-osbtst.az.specsavers.com
booking.specsavers.com
ochdevmig.ad.specsavers.com
app-genesysescrow.specsavers.com
spvwa.ad.specsavers.com
soduat.az.specsavers.com
soapre.co.ad.specsavers.com
Certificate
The complete raw certificate details for sas.1195.manchesterfort.specsavers.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIQMzn+CeD5HJ0l6fCaxOzgyTANBgkqhkiG9w0BAQsFADCB hDELMAkGA1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFudGVjIENvcnBvcmF0aW9uMR8w HQYDVQQLExZTeW1hbnRlYyBUcnVzdCBOZXR3b3JrMTUwMwYDVQQDEyxTeW1hbnRl YyBDbGFzcyAzIFNlY3VyZSBTZXJ2ZXIgU0hBMjU2IFNTTCBDQTAeFw0xNjA5MjIw MDAwMDBaFw0xNzA5MjMyMzU5NTlaMIGNMQswCQYDVQQGEwJOTDEWMBQGA1UECAwN Tm9vcmQtSG9sbGFuZDEPMA0GA1UEBwwGSHVpemVuMRYwFAYDVQQKDA1TcGVjc2F2 ZXJzIEJWMQwwCgYDVQQLDANTT0cxLzAtBgNVBAMMJnNhcy4xMTk1Lm1hbmNoZXN0 ZXJmb3J0LnNwZWNzYXZlcnMuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAq2xgrb86BMWDZIRKxxl4CtC6EgP9VrC6E2/JLTJx8FDT6AMLSpjMhlca KAHTE/XCNF0uyUCcNnI6ZCWA8yVA8yKdSzGKLIJNjh9l7Bf22QD6pHrYl2JbSxk1 QOrmXBoxF1MZsxAAF3UE5oYpiHxENib4GHrmVbLJTIfL7HM7S8+8d4KtdaepnDeM mzWmKoJcItqr/gxFbzyZ+folY+5GxEW0O4XbA7724mcIQFdevibRfh1y14T7ZqEZ YFzMfOwvBXNXkWGT8NFo0h8NmHvkL2qEHhs1iUPAnX9Gh5Gh/2BWT6vLLFST/dnm BROC3jqyZKJt8zuo4tmtgzJPo2CgMwIDAQABo4IBkDCCAYwwMQYDVR0RBCowKIIm c2FzLjExOTUubWFuY2hlc3RlcmZvcnQuc3BlY3NhdmVycy5jb20wCQYDVR0TBAIw ADAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MGEGA1UdIARaMFgwVgYGZ4EMAQICMEwwIwYIKwYBBQUHAgEWF2h0dHBzOi8vZC5z eW1jYi5jb20vY3BzMCUGCCsGAQUFBwICMBkMF2h0dHBzOi8vZC5zeW1jYi5jb20v cnBhMB8GA1UdIwQYMBaAFNtiIPt9Aol80jtvx+QybAVSHa2xMCsGA1UdHwQkMCIw IKAeoByGGmh0dHA6Ly9zZy5zeW1jYi5jb20vc2cuY3JsMFcGCCsGAQUFBwEBBEsw STAfBggrBgEFBQcwAYYTaHR0cDovL3NnLnN5bWNkLmNvbTAmBggrBgEFBQcwAoYa aHR0cDovL3NnLnN5bWNiLmNvbS9zZy5jcnQwEwYKKwYBBAHWeQIEAwEB/wQCBQAw DQYJKoZIhvcNAQELBQADggEBAEl7jHfpodu5DkV0Rtq1IxMzjgHuJSUkAHbExZOn /Q5+Vv55J4+gGA+purGuFG2QlxpJluEUNAovfv0NasEK88Q0DpCyzulB3KUeoCUr 87zAaraYfcxUTviklfY9lmrae+4GM+C72G82e5Q3U1ks/BoUWTFzgBkFvNxaW2Az LPxzDZDm8VNJeGgJPJkUbePX3jfFAkOIScaldvhTy7rcmXGy9T7xsHiKI+trxr+g 5oxWMR1eGJqoFIKbqJ5rD9wHQ9ugWFHEDb4XIKSxBWgO8chRZ7+BIbyAVRY6RGV+ 508lT08TPk42k+2VwZ7B/33KpdXi1K8E9GzWPwI8Ho67Zs8= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2xgrb86BMWDZIRKxxl4 CtC6EgP9VrC6E2/JLTJx8FDT6AMLSpjMhlcaKAHTE/XCNF0uyUCcNnI6ZCWA8yVA 8yKdSzGKLIJNjh9l7Bf22QD6pHrYl2JbSxk1QOrmXBoxF1MZsxAAF3UE5oYpiHxE Nib4GHrmVbLJTIfL7HM7S8+8d4KtdaepnDeMmzWmKoJcItqr/gxFbzyZ+folY+5G xEW0O4XbA7724mcIQFdevibRfh1y14T7ZqEZYFzMfOwvBXNXkWGT8NFo0h8NmHvk L2qEHhs1iUPAnX9Gh5Gh/2BWT6vLLFST/dnmBROC3jqyZKJt8zuo4tmtgzJPo2Cg MwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 68091741220685784699784776486600106185 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server SHA256 SSL CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-22 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-23 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Noord-Holland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Huizen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Specsavers BV' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SOG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'sas.1195.manchesterfort.specsavers.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21640193160835534806767087308283351382051190457751028007102760744211589124216526959988590303844536652969049694767828742807391201531462063632727763653742157205501112957404798589762540071289454585902233726567564171319698824452477218045391590972354812269910665311845985984471568475527414912600247727720681208237302721890143947561431523444017032827010576634783338649464717617668737330373484346871970415689519595329532243517769292311545748886540361881477689362315030718111025605573022610056100196700247506501102436690881449505619643886276316809796472230660775215067306050314192066030302608586090561324878751850156641001523 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sas.1195.manchesterfort.specsavers.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName db6220fb7d02897cd23b6fc7e4326c05521dadb1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcb.com/sg.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcb.com/sg.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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