digitalid.crosscert.com
- Korea Electronic Certification Authority, Inc. -
Issued by Symantec Class 3 EV SSL SGC CA - G2
About this certificate
This digital certificate with serial number 41:bf:ee:37:6f:88:2b:1e:38:c9:01:d1:df:ed:d9:a4 was issued on by Symantec Corporation.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
- Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)
Korea Electronic Certification Authority, Inc.
Company registration number:
214-86-30830
Organization: Korea Electronic Certification Authority, Inc.
Organization unit: DataCenter
Organization: Korea Electronic Certification Authority, Inc.
Organization unit: DataCenter
State / Province:
Kyonggi-do
Locality: Suwon-Si
Country: KR
Locality: Suwon-Si
Country: KR
Symantec Corporation
Organization:
Symantec Corporation
Organization unit: Symantec Trust Network
Organization unit: Symantec Trust Network
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 41:bf:ee:37:6f:88:2b:1e:38:c9:01:d1:df:ed:d9:a4Serial Number (int): 87396380031551744818786032347427756452
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 46:4f:c1:e0:88:da:7d:d3:78:9b:c8:6e:59:2f:b0:e4:f7:1d:90:e2
Fingerprint (sha1): a7:b9:64:3b:d3:e5:63:0c:73:0d:45:ee:61:36:a2:7d:5f:4b:41:5d
Fingerprint (sha256): 17:ac:c5:98:7e:2f:80:38:77:58:3e:c9:a6:08:12:0e:6f:ef:83:40:6b:0b:ce:12:02:9a:39:d4:48:f7:51:86
Issuing Certificate URL: http://su.symcb.com/su.crt
Revocation information
OCSP Server: http://su.symcd.comCRL Distribution Point: http://su.symcb.com/su.crl
Check the revocation status for certificate digitalid.crosscert.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for digitalid.crosscert.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Netscape Server-Gated Cryptography
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
digitalid.crosscert.com
Other certificates including the domain name crosscert.com
(limited to 100 certificates)
test1.crosscert.com
ebill.crosscert.com
www.crosscert.com
board.crosscert.com
dr-raadmin.crosscert.com
raadmin.crosscert.com
support2.cdnetworks.net
www.crosscert.com
hm.crosscert.com
support2.cdnetworks.net
marketing-picc.crosscert.com
www.crosscert.com
support2.cdnetworks.net
marketing-unisign.crosscert.com
raadmin.crosscert.com
testraadmin.crosscert.com
onsite.crosscert.com
support2.cdnetworks.net
auth.crosscert.com
support2.cdnetworks.net
support2.cdnetworks.net
cert.crosscert.com
*.crosscert.com
onsite-admin.crosscert.com
support11b.cdnetworks.net
digitalid.crosscert.com
svn.crosscert.com
support2.cdnetworks.net
support2.cdnetworks.net
support2.cdnetworks.net
digitalid.crosscert.com
aa-ttp.crosscert.com
mpki-admin.crosscert.com
*.crosscert.com
support2.cdnetworks.net
crmra.crosscert.com
support2.cdnetworks.net
cert.crosscert.com
pcsprelay3.crosscert.com
support2.cdnetworks.net
support2.cdnetworks.net
support2.cdnetworks.net
support11b.cdnetworks.net
*.crosscert.com
onsite-admin.crosscert.com
raadmin.crosscert.com
billing.crosscert.com
onsite.crosscert.com
crmra.crosscert.com
support11b.cdnetworks.net
test.crosscert.com
marketing-etrade.crosscert.com
1.crosscert.com
fidoserver3.crosscert.com
marketing-picc.crosscert.com
support2.cdnetworks.net
support2.cdnetworks.net
*.crosscert.com
mpki.crosscert.com
support2.cdnetworks.net
*.crosscert.com
marketing-g2b.crosscert.com
testhmkim.crosscert.com
support2.cdnetworks.net
1dy.crosscert.com
digitalid.crosscert.com
star.crosscert.com
raadmin.crosscert.com
support11b.cdnetworks.net
auth.crosscert.com
www.crosscert.com
billing.crosscert.com
cm-test2.crosscert.com
support2.cdnetworks.net
kecacrl.crosscert.com
mail.crosscert.com
support2.cdnetworks.net
support2.cdnetworks.net
support2.cdnetworks.net
m.crosscert.com
support11b.cdnetworks.net
support2.cdnetworks.net
cert.crosscert.com
support2.cdnetworks.net
support2.cdnetworks.net
onsite-admin.crosscert.com
support11b.cdnetworks.net
fidotestserver.crosscert.com
api.crosscert.com
*.crosscert.com
eeapi.crosscert.com
www.crosscert.com
raadmin.crosscert.com
ev-rsa.crosscert.com
chatapp.crosscert.com
support2.cdnetworks.net
onsite.crosscert.com
board.crosscert.com
support2.cdnetworks.net
support11b.cdnetworks.net
ebill.crosscert.com
www.crosscert.com
board.crosscert.com
dr-raadmin.crosscert.com
raadmin.crosscert.com
support2.cdnetworks.net
www.crosscert.com
hm.crosscert.com
support2.cdnetworks.net
marketing-picc.crosscert.com
www.crosscert.com
support2.cdnetworks.net
marketing-unisign.crosscert.com
raadmin.crosscert.com
testraadmin.crosscert.com
onsite.crosscert.com
support2.cdnetworks.net
auth.crosscert.com
support2.cdnetworks.net
support2.cdnetworks.net
cert.crosscert.com
*.crosscert.com
onsite-admin.crosscert.com
support11b.cdnetworks.net
digitalid.crosscert.com
svn.crosscert.com
support2.cdnetworks.net
support2.cdnetworks.net
support2.cdnetworks.net
digitalid.crosscert.com
aa-ttp.crosscert.com
mpki-admin.crosscert.com
*.crosscert.com
support2.cdnetworks.net
crmra.crosscert.com
support2.cdnetworks.net
cert.crosscert.com
pcsprelay3.crosscert.com
support2.cdnetworks.net
support2.cdnetworks.net
support2.cdnetworks.net
support11b.cdnetworks.net
*.crosscert.com
onsite-admin.crosscert.com
raadmin.crosscert.com
billing.crosscert.com
onsite.crosscert.com
crmra.crosscert.com
support11b.cdnetworks.net
test.crosscert.com
marketing-etrade.crosscert.com
1.crosscert.com
fidoserver3.crosscert.com
marketing-picc.crosscert.com
support2.cdnetworks.net
support2.cdnetworks.net
*.crosscert.com
mpki.crosscert.com
support2.cdnetworks.net
*.crosscert.com
marketing-g2b.crosscert.com
testhmkim.crosscert.com
support2.cdnetworks.net
1dy.crosscert.com
digitalid.crosscert.com
star.crosscert.com
raadmin.crosscert.com
support11b.cdnetworks.net
auth.crosscert.com
www.crosscert.com
billing.crosscert.com
cm-test2.crosscert.com
support2.cdnetworks.net
kecacrl.crosscert.com
mail.crosscert.com
support2.cdnetworks.net
support2.cdnetworks.net
support2.cdnetworks.net
m.crosscert.com
support11b.cdnetworks.net
support2.cdnetworks.net
cert.crosscert.com
support2.cdnetworks.net
support2.cdnetworks.net
onsite-admin.crosscert.com
support11b.cdnetworks.net
fidotestserver.crosscert.com
api.crosscert.com
*.crosscert.com
eeapi.crosscert.com
www.crosscert.com
raadmin.crosscert.com
ev-rsa.crosscert.com
chatapp.crosscert.com
support2.cdnetworks.net
onsite.crosscert.com
board.crosscert.com
support2.cdnetworks.net
support11b.cdnetworks.net
Certificate
The complete raw certificate details for digitalid.crosscert.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgIQQb/uN2+IKx44yQHR3+3ZpDANBgkqhkiG9w0BAQUFADB7 MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAd BgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxLDAqBgNVBAMTI1N5bWFudGVj IENsYXNzIDMgRVYgU1NMIFNHQyBDQSAtIEcyMB4XDTE1MDcwOTAwMDAwMFoXDTE2 MDkwNjIzNTk1OVowgfAxEzARBgsrBgEEAYI3PAIBAxMCS1IxHTAbBgNVBA8TFFBy aXZhdGUgT3JnYW5pemF0aW9uMRUwEwYDVQQFEwwyMTQtODYtMzA4MzAxCzAJBgNV BAYTAktSMRMwEQYDVQQIFApLeW9uZ2dpLWRvMREwDwYDVQQHFAhTdXdvbi1TaTE3 MDUGA1UEChQuS29yZWEgRWxlY3Ryb25pYyBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0 eSwgSW5jLjETMBEGA1UECxQKRGF0YUNlbnRlcjEgMB4GA1UEAxQXZGlnaXRhbGlk LmNyb3NzY2VydC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE ajJQrJUIQTPCjXc4x8/vgumrr5n4aZ9K19PjJ4p6izwmKhOIQTZe+HNh3j1gWQzf Z50imxk5CWjZgcox+NhwE9II2+Gyzcq9tujVhmzMwlAxa0d+WSrRC4jyI3QXi58G FZTd/yrWrRHliMexpOCjWtDe0RN0TROdkEUVudEIQmmuHaLA7FFn2tYzQ9kP7R7w dl0E2v0c2v0SpkIJo85zT7xmF0yY7XfyN0aW7EQPznofifyYrEY+sAW//1W6D6w9 nbUFfy2b1CoNrhoHh58PC6ROV71dg4lYm0AJT6lUuIqQT4Zejz43qjGjbHQO0Drs ImR+CjrPAMzgEMzVFGpDAgMBAAGjggGRMIIBjTAiBgNVHREEGzAZghdkaWdpdGFs aWQuY3Jvc3NjZXJ0LmNvbTAJBgNVHRMEAjAAMA4GA1UdDwEB/wQEAwIFoDBmBgNV HSAEXzBdMFsGC2CGSAGG+EUBBxcGMEwwIwYIKwYBBQUHAgEWF2h0dHBzOi8vZC5z eW1jYi5jb20vY3BzMCUGCCsGAQUFBwICMBkMF2h0dHBzOi8vZC5zeW1jYi5jb20v cnBhMCsGA1UdHwQkMCIwIKAeoByGGmh0dHA6Ly9zdS5zeW1jYi5jb20vc3UuY3Js MCgGA1UdJQQhMB8GCCsGAQUFBwMBBggrBgEFBQcDAgYJYIZIAYb4QgQBMB8GA1Ud IwQYMBaAFEZPweCI2n3TeJvIblkvsOT3HZDiMFcGCCsGAQUFBwEBBEswSTAfBggr BgEFBQcwAYYTaHR0cDovL3N1LnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDov L3N1LnN5bWNiLmNvbS9zdS5jcnQwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZI hvcNAQEFBQADggEBABVzgWlMMfj1GpyKhP6LcqJC2DzCcJmQDb3d8ziAO+QUWdCi eOIfotXaXM+4c5AqOY+TgUERYwXRzKjVxtwlgXdUYiWnZkQ7yV4mjsCm0I4IIccw IPz46oYdROHPDZVeJEylYmkIe3L9afNBl0T0OFIUfp8Udetf6ObPIxSFVStqqtHP 62smGpM88XZTE0mK6i1v3ftVfzsXA+AaymXb4zap7vTMMURB+yr/WWfkJGmM2WP5 3hhPEOVHg8B8fHZCJvF+HSEYEvv2axxUJxdfzaUDVMC45WqG0+4mRLuR1EHMo6qC eHqNkKTCf3fyYQ7pWSnhWNYRS2oMrwKC8MGKl08= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGoyUKyVCEEzwo13OMfP 74Lpq6+Z+GmfStfT4yeKeos8JioTiEE2XvhzYd49YFkM32edIpsZOQlo2YHKMfjY cBPSCNvhss3Kvbbo1YZszMJQMWtHflkq0QuI8iN0F4ufBhWU3f8q1q0R5YjHsaTg o1rQ3tETdE0TnZBFFbnRCEJprh2iwOxRZ9rWM0PZD+0e8HZdBNr9HNr9EqZCCaPO c0+8ZhdMmO138jdGluxED856H4n8mKxGPrAFv/9Vug+sPZ21BX8tm9QqDa4aB4ef DwukTle9XYOJWJtACU+pVLiKkE+GXo8+N6oxo2x0DtA67CJkfgo6zwDM4BDM1RRq QwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 87396380031551744818786032347427756452 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 EV SSL SGC CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-07-09 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-06 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '214-86-30830' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Kyonggi-do' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Suwon-Si' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Korea Electronic Certification Authority, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'DataCenter' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'digitalid.crosscert.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24795075240704558735506027288089029073550019121644323626127734375970470890138710628072683001849112875701460726309957518535262251295947850693930854307603386886224444703776908430424315086473593807595841221726348174228361151202591161099827602555118685935062236817407957189621388932795429252566672622420892891077520640119451211868834962417495221578376422437027810815934478524324008741235539340966247795922733871560912413203400324094667948620776815787706933287746114374281262028399013795813866195881140315592330687741481090867615763817778643109927009537346961777955444384895399920417960801992295264445136460753270543247939 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalid.crosscert.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.23.6 (VeriSign EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://su.symcb.com/su.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.4.1 (serverGatedCrypto) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 464fc1e088da7dd3789bc86e592fb0e4f71d90e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://su.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://su.symcb.com/su.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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