*.apps.acp-prod.us-east-1.prod.aws.symcpe.net

- Symantec Corporation -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 40:6d:22:43:64:3f:7e:a1:c4:b6:9c:02:78:b9:87:f7 was issued on by Symantec Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Cloud Platform Engineering
State / Province: California
Locality: Mountain View
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 40:6d:22:43:64:3f:7e:a1:c4:b6:9c:02:78:b9:87:f7
Serial Number (int): 85637247029053586000906063296459278327
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 18:2e:fd:3e:74:1d:e5:54:3b:91:92:ff:ed:33:15:cf:37:0b:17:5b
Fingerprint (sha256): 17:61:a3:5f:20:6c:bd:d1:c2:05:53:65:6f:8c:58:25:83:3f:44:53:6a:55:6c:53:7e:1a:bb:4a:e1:05:5e:97

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate *.apps.acp-prod.us-east-1.prod.aws.symcpe.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.apps.acp-prod.us-east-1.prod.aws.symcpe.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.apps.acp-prod.us-east-1.prod.aws.symcpe.net

Other certificates including the domain name symcpe.net

(limited to 100 certificates)
vault-002-prod.ash2.symcpe.net
sparkhist-adl-devtest.us-east-1.aws.symcpe.net
spark-analytics-cp1dev.ash2.symcpe.net
ds-2016.aws.symcpe.net
volta-logs-unifiedsecurity.us-east-1.aws.symcpe.net
volta-metrics-cpe.us-west-2.aws.symcpe.net
cmp.symcpe.net
jenkins.spinnaker.symcpe.net
jenkins-cf.symcpe.net
hbase01-cynic-hbase-prod.us-east-1.aws.symcpe.net
v-ldapm-prod-2019.ash2.symcpe.net
contrail-web.lhr1.symcpe.net
metrics-kafka-cynic-dev.us-east-1.ec2.aws.symcpe.net
volta-influxdb-cf.ash2.symcpe.net
volta-metrics-epmpi.us-east-1.aws.symcpe.net
volta-metrics-riskinsight.us-east-1.aws.symcpe.net
sparkhist-adl-prod1.us-east-1.aws.symcpe.net
volta-logs-cf-us-east.aws.symcpe.net
ganglia-mss-hadoop-prod.ash2.symcpe.net
ambari-hbase-cynic-dev.us-east-1.aws.symcpe.net
logs-sepmobile.eu-central-1.volta.aws.symcpe.net
designate-api.lhr1.symcpe.net
hbase02-cynic-hbase-prod.eu-central-1.aws.symcpe.net
kubernetes.ash2.symcpe.net
openshift-dev.us-east-1.aws.symcpe.net
oozie-jetstream-spark-prd-useast1.dpe-prod.aws.symcpe.net
nimbus-spaas-prod-2.ash2.symcpe.net
jenkins.symcpe.net
ingest-web.volta.aws.symcpe.net
puppetdb.phx2.symcpe.net
ranger-jetstream-kafka-stg-useast1.symc.dev.aws.symcpe.net
ae15-smallpoint.phx2.symcpe.net
ambari-spaas-qa.ash2.symcpe.net
swift.ash2.symcpe.net
knox-mss-prod3.phx2.symcpe.net
jenkins-dev-infraeng.us-west-2.aws.symcpe.net
v-ldapm-001-dev.tus1.symcpe.net
vault-acp3-dev.us-east-2.symc.dev.aws.symcpe.net
smtp.symcpe.net
falcon-mss-prod4.ash2.symcpe.net
manage.eu-central-1.volta.aws.symcpe.net
stormui-cynic-dev.us-east-1.ec2.aws.symcpe.net
ambari-ndf-prod-central.eu-west-1.aws.symcpe.net
volta-ps-prod.phx2.symcpe.net
hbase02-ri-prod.us-east-1.aws.symcpe.net
nimbus-mss-devtest.ash2.symcpe.net
vault-acp.eu-central-1.prod.aws.symcpe.net
elasticsearch-atppi-devtest.ash2.symcpe.net
hbase01-ndf-qa.us-east-1.ec2.aws.symcpe.net
metrics-hbase-ndf-qa.us-east-1.ec2.aws.symcpe.net
volta-logs-epmpi.us-east-1.aws.symcpe.net
dnsadmin.symcpe.net
cfbroker.aws.symcpe.net
metrics-hbase-ndf-perf.us-east-1.ec2.aws.symcpe.net
oozie-adl-prod1.us-east-1.aws.symcpe.net
ambari-hbase-ndf-prod-central.eu-west-1.aws.symcpe.net
metrics-api-cpe.eu-central-1.volta.aws.symcpe.net
volta-manage.us-west-2.aws.symcpe.net
oozie-bpaas-prod.ash2.symcpe.net
vault.us-east-1.prod.aws.symcpe.net
pdns-masterapi1.ash2.symcpe.net
volta-webui-cf.lhr1.symcpe.net
hbase02-cynic-hbase-prod.eu-central-1.aws.symcpe.net
volta-sla-prod.ash2.symcpe.net
volta-metrics-riskinsight.ash2.symcpe.net
metrics-storm-cynic-dev.us-east-1.ec2.aws.symcpe.net
kb-09-jetstream-kafka-prd-useast1.dpe.prod.aws.symcpe.net
volta-metrics-mss.us-east-1.aws.symcpe.net
kafka-kaas-dev.us-east-1.aws.symcpe.net
volta-logs-wss.us-east-1.aws.symcpe.net
volta-logs-cpe.us-west-2.aws.symcpe.net
ds-2016.aws.symcpe.net
www-preprod.securitycloud.symcpe.com
swift-proxy.ash2.symcpe.net
logs-beachhead.eu-central-1.volta.aws.symcpe.net
vault-acp-dev.eu-central-1.prod.aws.symcpe.net
v-puppetdb-001-prod.phx2.symcpe.net
nagios-mss-hadoop-prod.ash2.symcpe.net
obs-prod.ash2.symcpe.net
rm-spaas-prod-2.ash2.symcpe.net
yarn-jetstream-spark-prd-useast1.dpe-prod.aws.symcpe.net
*.apps.acp-prod.us-east-1.prod.aws.symcpe.net
skyline-analytics-dev.us-east-1.aws.symcpe.net
idm-acp-dev.aws.symcpe.net
oozie-jetstream-spark-stg-useast1.symc.dev.aws.symcpe.net
activity-monitor-star-prod2.phx2.symcpe.net
zeppelin-adl-prod1.us-east-1.aws.symcpe.net
ambari-cynic-dev.us-east-1.aws.symcpe.net
keystone-admin.phx2.symcpe.net
acp-prod.eu-west-1.prod.aws.symcpe.net
volta-watch-us-east.aws.symcpe.net
*.apps.acp-ci.us-east-1.symc.dev.aws.symcpe.net
ircgw.symcpe.net
volta-logs-riskinsight.us-east-1.aws.symcpe.net
volta-logs-cyberinsurance.us-east-1.aws.symcpe.net
vmx1.ash2.symcpe.net
b0d002ash2007.prod.symcpe.net
ambari-cynic-prod-hbase.us-east-1.aws.symcpe.net
neutron.ash2.symcpe.net
*.apps.acp-prod.eu-central-1.prod.aws.symcpe.net

Certificate

The complete raw certificate details for *.apps.acp-prod.us-east-1.prod.aws.symcpe.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpQKDD9PiqLrPXrBNd6N
8Y6diGZRykHXGpHLBZKShpp5M+d+o9Ksy+Bsmc1s4bC74jHHE3MpuCFREB3qYNSI
FeXfI3pZU++XDae9aFHysrmoiXBcyy0OcJV0bL5fB6dWfAjUU8atju3m+M6471il
LcfuVIjQFG7KbQmbWTITPlkdnPmWiHpRTwfH4iGyUIHEEU26tfOyrhIWFXny9+V/
TijbAP+xzUn6+GUJsdCsW+8HAvjLb89gnI4/iesKayPRJ3NNP0GcYPF4H7FSckyh
xFGC13NsiqNXAYzgQV2m5hq2WLqkIh7Qf+/JycBaN9WAxmgzG7ofTJ/gaFnQteMT
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 85637247029053586000906063296459278327
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Mountain View'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Cloud Platform Engineering'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.apps.acp-prod.us-east-1.prod.aws.symcpe.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25068185257928290185755516153599703068067779347198719454327244154810665750706015885044587680016654700592903290779645567663325896607287337773874477350808337320203441825234410999620885498149252723076585880656779727714125356897958994214777876372411723782773572969092453808778686518600362803487897634442487803638237430120546185508212223515640619261067419390357330849477988412047610846426860572917838071605813448345482487805142421500514733328974146401361920530505429686697436212658819169043458472493894876964159660534951473020511701929342803204516825848755407712528813350399180127571104211899672080030075005096230033494869
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apps.acp-prod.us-east-1.prod.aws.symcpe.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0040fba6b4242c54ac75203d86a21081e289c468279fb6a6944deff52f1a6675111ac4e3298651198d8eca2f727a6a849d97d14c545bddca62a55dbf65500d00e1aba64df718e0c8ae25325ec7bd58b227c201beb7e29fa8694114442f34a716f7f08800288c93284c2e41f23288480bde3ac3d22c31aeec89a03de3abbc545468f6abe82201882dece3b90162e650d4ea1d8402617e36ea604a7711f48f2fc0f314a691fee9409ce20692d9587bc9f6cb78480bc72be3a3eb83034c51ab9708bf73349f6366c919b252bccf62d635a0f3cf76e385f727bd8f06ba49caf15f3279819343d358d69e2eab5691ebeb963a94e3fa767295e65941904e319b9d94cf3e