smtp02.harlandclarke.com

- Harland Clarke Holdings -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 56:7b:c5:fd:d7:35:47:9e:d9:b7:3d:48:55:32:e6:29 was issued on by Symantec Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Harland Clarke Holdings

Organization: Harland Clarke Holdings
State / Province: Texas
Locality: San Antonio
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 56:7b:c5:fd:d7:35:47:9e:d9:b7:3d:48:55:32:e6:29
Serial Number (int): 114956275897123272754310274728577918505
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 73:81:44:80:f1:ab:f8:71:67:cb:43:ff:d7:95:b0:47:73:01:fb:1b
Fingerprint (sha256): 17:ec:44:84:7a:3c:63:58:9f:40:55:0a:e9:a7:9d:fc:b9:73:e1:2b:9a:63:ab:df:d8:73:d9:50:23:15:bc:df

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate smtp02.harlandclarke.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for smtp02.harlandclarke.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

smtp02.harlandclarke.com

Other certificates including the domain name harlandclarke.com

(limited to 100 certificates)
bcpstage.harlandclarke.com
marketingservices.harlandclarke.com
cfs.harlandclarke.com
efilter1.harlandclarke.com
bcpstage.harlandclarke.com
fs.harlandclarke.com
smtp02.harlandclarke.com
meeting.hchgrp.com
fs.harlandclarke.com
hcconnectda1.harlandclarke.com
pkywfh.harlandclarke.com
sipexternal.hchgrp.com
www.harlandclarke.com
efilter3.harlandclarke.com
myreports.harlandclarke.com
vpw.harlandclarke.com
bcp.harlandclarke.com
*.vip.harlandclarke.com
cunexusonline-test.harlandclarke.com
myreportsqa.harlandclarke.com
service-uat.harlandclarke.com
slcwfh.harlandclarke.com
vpw.harlandclarke.com
myreportsqa.harlandclarke.com
hcconnectda1.harlandclarke.com
myreportsqa.harlandclarke.com
staging.insight.harlandclarke.com
hcc1.harlandclarke.com
vservices.harlandclarke.com
dev-paymentprocessing.harlandclarke.com
hcconnect.harlandclarke.com
crm.harlandclarke.com
gitlab.os.harlandclarke.com
meeting.hchgrp.com
securetransfer.harlandclarke.com
inside.harlandclarke.com
efilter2.harlandclarke.com
staging.insight.harlandclarke.com
secureuat.harlandclarke.com
securetransfer.harlandclarke.com
www.hc.rock.rivetica.com
myreports.harlandclarke.com
hcconnectda1drhcd.harlandclarke.com
inside.harlandclarke.com
*.harlandclarke.com
cfs.harlandclarke.com
togo1.harlandclarke.com
efilter1.harlandclarke.com
vpw.harlandclarke.com
www.hc.rock.rivetica.com
smtp02.harlandclarke.com
inside.harlandclarke.com
www.hc.rock.rivetica.com
inside.harlandclarke.com
hs1.harlandclarke.com
hcconnectda1drhcd.harlandclarke.com
togo1.harlandclarke.com
webmail.hchgrp.com
insight.harlandclarke.com
myreports.harlandclarke.com
www.harlandclarke.com
hcconnect2.harlandclarke.com
inside.harlandclarke.com
marketingservices.harlandclarke.com
www.hc.rock.rivetica.com
paymentprocessing.harlandclarke.com
hcc2dr.harlandclarke.com
fs.harlandclarke.com
hcconnect.harlandclarke.com
bcpstage.harlandclarke.com
www.hc.rock.rivetica.com
cfs.harlandclarke.com
epm.harlandclarke.com
epm.harlandclarke.com
drtestbcp.harlandclarke.com
crmqa.harlandclarke.com
sipexternal.hchgrp.com
staging.insight.harlandclarke.com
insight.harlandclarke.com
insight.harlandclarke.com
secureftp.harlandclarke.com
smtp01.harlandclarke.com
mobinet-uat.harlandclarke.com
HCCS.HARLANDCLARKE.COM
smtp01.harlandclarke.com
bcppartner.harlandclarke.com
pkywfh.harlandclarke.com
meeting.hchgrp.com
inside.harlandclarke.com
bcpstage.harlandclarke.com
mobinet.harlandclarke.com
epm.harlandclarke.com
epm.harlandclarke.com
hcj1.harlandclarke.com
taxhelpdesk.harlandclarke.com
myreports.harlandclarke.com
marketingservices.harlandclarke.com
dsa.harlandclarke.com
insight.harlandclarke.com
mobinet-uat.harlandclarke.com

Certificate

The complete raw certificate details for smtp02.harlandclarke.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHcDCCBligAwIBAgIQVnvF/dc1R57Ztz1IVTLmKTANBgkqhkiG9w0BAQsFADB+
MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAd
BgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxLzAtBgNVBAMTJlN5bWFudGVj
IENsYXNzIDMgU2VjdXJlIFNlcnZlciBDQSAtIEc0MB4XDTE3MDkyMDAwMDAwMFoX
DTE5MTIyMDIzNTk1OVoweDELMAkGA1UEBhMCVVMxDjAMBgNVBAgMBVRleGFzMRQw
EgYDVQQHDAtTYW4gQW50b25pbzEgMB4GA1UECgwXSGFybGFuZCBDbGFya2UgSG9s
ZGluZ3MxITAfBgNVBAMMGHNtdHAwMi5oYXJsYW5kY2xhcmtlLmNvbTCCAiIwDQYJ
KoZIhvcNAQEBBQADggIPADCCAgoCggIBALWUc5xpa05l7hUDM2yZCa05a1G9V3wl
0JH266iAWsWC0mI65Qf/QQNL6ZuOqx2I7qGc0VJmH3kki3joRK5YInTMu38K9AwA
23+6FceEqaweK+ROfJszNIV4t9UR8UmJI4Sd74mglAbV+sryLpc3F9hjIT0UrBaQ
QXuEpK/VoYE76KAJgyu9WtWGDWemvbA1gBoPAOkL/MUfb2udY2w8HmBgbXEFs934
V9Q9IwlWE1NAIuTikgciZ5ydn4frP8Fy3W2RKUkTs/tPPV0nnrqxGlbHUevfYLcF
cl16PLV6S51Ch/VHSOTIU4VkAJmkOMlGpwZYjp4HeLnUyz4CMwuNh60/c+h8gMIA
tocsSpNu1dr3WdsjJhcZs2piTIrytK/iLc1rmjoEhxsVBZag75VjSxZXCmdN85D+
a1OyM7enpm9dbVpigJ9PNOvx+S+7FAH9aBuo0S8wRXF7eJDxGGESLu8TdCcIwce2
Som97H7E6sHZPVWX6uwcE2gnxqkoNi3l2p0I88iq5+3NPIpFLQs8IDBYStDZ6Uvb
s84LT8x4gy3kOm2tw2yIHt3xZGpRiWbT53ht6zSXWMgPoTYK8GJXAgU4xc2X62XQ
CoKY1ZHsNvau//46mnZ5gYvfO8W/vmUuL3gmi5ouk6W2dY8Wg2fsmN1tsjV2Tpry
62om+UTJawbVAgMBAAGjggLuMIIC6jAjBgNVHREEHDAaghhzbXRwMDIuaGFybGFu
ZGNsYXJrZS5jb20wCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwKwYDVR0fBCQw
IjAgoB6gHIYaaHR0cDovL3NzLnN5bWNiLmNvbS9zcy5jcmwwYQYDVR0gBFowWDBW
BgZngQwBAgIwTDAjBggrBgEFBQcCARYXaHR0cHM6Ly9kLnN5bWNiLmNvbS9jcHMw
JQYIKwYBBQUHAgIwGQwXaHR0cHM6Ly9kLnN5bWNiLmNvbS9ycGEwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFF9gz2GQVd+EQxSKYCqy
9Xr0QxjvMFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDovL3NzLnN5
bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL3NzLnN5bWNiLmNvbS9zcy5jcnQw
ggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB2AN3rHSt6DU+mIIuBrYFocH4ujp0B
1VyIjT0RxM227L7MAAABXp97OukAAAQDAEcwRQIgQfHpQCx8Bz8x9c3yofSPuKnY
CqPU+KK6Qp65JCKlkEICIQCEVhL8ewVi+1MKOI7tO6vV5C+upUxzOQib9qB8BI5R
GgB1AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABXp97Ow0AAAQD
AEYwRAIgZMS9GqZDaFz1BnJCQPRimQV+/yOrUYa8NRF8DJVlVAcCIANxFaBTPBc/
qPhi5Phqzfwszya1y9jIMsOH1YfQyzs3AHYA7ku9t3XOYLrhQmkfq+GeZqMPfl+w
ctiDAMR7iXqo/csAAAFen3s87QAABAMARzBFAiEAj3/tFq39W2ukGn2oZa09NMTW
DIxHtHGvEutO2gnMJXMCIDBINwHyN5NAflHYCEL4T9VR9eGLqJJJVqm9CVv5nb7f
MA0GCSqGSIb3DQEBCwUAA4IBAQCjb+R/Hppow66VCgy3uEI2/vqADcmElVFc8EzU
ZB9heOypSNekaEuWKbfl/fjNqe1YZfh5rZ9gV2gbIPGTU3f+m/E600V5qZZh7J6F
TVm25HGoowDPTEbbNnpmR6h4qfv2QxxYejJMkbTZkQnd47ns8sYOyzQLPZWT1xQ7
zVSpaGR7rPGoguYJXvRDWg7oMCEQ20t0tT2j98GZbpDZjoYHy4jX9BPhrAiisMYB
RzWpKIrbvDFDO53gUb+FM3iGaY8tf54f5hozDym1l4F8Lk4AzdWhWqjAhHV2XWrJ
NdT32EI43z2D2SEsfIgo9NsFxn/bt3L+GpK7BDjMymCNZEyu
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 114956275897123272754310274728577918505
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Antonio'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Harland Clarke Holdings'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'smtp02.harlandclarke.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 740781317371708611399936307317500642389247189655034562281338737263834638942852812629899119647192082958559777180368905669167425036516351392852504670395069889811004307350718788772189937180196864659656327999322935911323228950648487532923657932949064700179326518751320688676260558779548334030804412334570818273125766367881090635381523290995563593711762568407689928180945372560879539903026317360436210259601353218374098453657758609516094200215307914207444172508894830209563799671829914965986775412960487262599979136706745318782434745008002226461415888446739997884433687752731932524156447817398980534805093124398376678808282916412640541425249906910404080158092678379600131879124243113518253388374946348126302238722969467536492560748967558390789840933101461396923687991412872158042036326151971637936675831587575340803068753287484540202473909252694326622208057369494582249070619337164046577346493065881827923142186343150685055198613320294228880861914727261123904996671119717874974683762281452204644931976487813611669471904793083916473663814315275118329296727007734683663324037490324388654599678644390248627333379455086374062703187233836803846008163119185178743244859922358228653610871863470942766054299448498820025164593043330605864312309461
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp02.harlandclarke.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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