mobile.devry.edu

- DeVry University -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 3b:36:c4:51:02:5e:57:d1:21:83:e8:66:34:0e:e8:bd was issued on by Symantec Corporation.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

DeVry University

Organization: DeVry University
Organization unit: IT Networks
State / Province: Illinois
Locality: Downers Grove
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3b:36:c4:51:02:5e:57:d1:21:83:e8:66:34:0e:e8:bd
Serial Number (int): 78708817552167420326434717791790491837
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 67:70:6d:e7:65:d2:7c:18:de:dd:69:c3:ef:b7:a7:fa:30:d5:47:b2
Fingerprint (sha256): 1a:13:cc:d6:a8:e4:56:19:30:7e:28:e8:8a:3a:5c:ec:d7:2b:c0:fb:82:c9:2a:fd:f6:a9:19:7f:e1:14:1d:95

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate mobile.devry.edu

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mobile.devry.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mobileapps.devry.edu
mobile.keller.edu
mobile.carrington.edu
mobile.chamberlain.edu
mobile.aucmed.edu
my.devry.edu
my.keller.edu
my.carrington.edu
my.chamberlain.edu
my.aucmed.edu
my.rossu.edu
my.rossmed.edu
mobile.rossmed.edu
mobile.devry.edu
mobile.rossu.edu

Other certificates including the domain name devry.edu

(limited to 100 certificates)
pwreg.devry.edu
eis.qa.dvgnp.net
libguides.devry.edu
banportals.devry.edu
cert00078-azurecdn.akamaized.net
cert00078-azurecdn.akamaized.net
cert00078-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
www.int.devry.edu
secure10.san1.raxcdn.com
secure10.san1.raxcdn.com
cert00078-azurecdn.akamaized.net
secured3.san1.raxcdn.com
secure11.san1.raxcdn.com
cert00097-azurecdn.akamaized.net
dss.qa2.devry.edu
cert00078-azurecdn.akamaized.net
dc1-a-mraexpc1.dvuadmin.net
cert00088-azurecdn.akamaized.net
nexpose.devry.edu
secure10.san1.raxcdn.com
cert00097-azurecdn.akamaized.net
cert00084-azurecdn.akamaized.net
cert00097-azurecdn.akamaized.net
cert00097-azurecdn.akamaized.net
emailsso.tst1.devry.edu
secure11.san1.raxcdn.com
cert00097-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
login.devry.edu
cert00084-azurecdn.akamaized.net
secure11.san1.raxcdn.com
secure10.san1.raxcdn.com
cert00078-azurecdn.akamaized.net
gdedevapp1.devry.edu
akamai-san22.exacttarget.com
secure11.san1.raxcdn.com
secure10.san1.raxcdn.com
cert00088-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
iconnect.devry.edu
cert00084-azurecdn.akamaized.net
dss.devry.edu
secure11.san1.raxcdn.com
secured3.san1.raxcdn.com
cert00097-azurecdn.akamaized.net
OfficeWebAppA.devry.edu
cert00088-azurecdn.akamaized.net
cert00084-azurecdn.akamaized.net
cert00078-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
cert00084-azurecdn.akamaized.net
blog.qa.devry.edu
encoder.devry.edu
ilios.poc1.devry.edu
secure11.san1.raxcdn.com
cert00078-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
cert00055-azurecdn.akamaized.net
secure11.san1.raxcdn.com
secure10.san1.raxcdn.com
secure12.san1.raxcdn.com
cert00078-azurecdn.akamaized.net
cert00078-azurecdn.akamaized.net
dgw.devry.edu
cert00084-azurecdn.akamaized.net
cert00055-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
cert00078-azurecdn.akamaized.net
cert00097-azurecdn.akamaized.net
cert00078-azurecdn.akamaized.net
cert00078-azurecdn.akamaized.net
cert00085-azurecdn.akamaized.net
cert00078-azurecdn.akamaized.net
secure10.san1.raxcdn.com
web.devry.edu
portal.devry.edu
DC1-A-VWLAN5P.devry.edu
libguides.devry.edu
cert00088-azurecdn.akamaized.net
budget.devry.edu
cert00084-azurecdn.akamaized.net
cert00097-azurecdn.akamaized.net
wlapps.devry.edu
cert00085-azurecdn.akamaized.net
login.devry.edu
cert00097-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
cert00097-azurecdn.akamaized.net
cert00084-azurecdn.akamaized.net
discrpt.tst1.devry.edu
apps.qa.devry.edu
cert00097-azurecdn.akamaized.net
gtwy.devry.edu
cert00097-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
cert00078-azurecdn.akamaized.net

Certificate

The complete raw certificate details for mobile.devry.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NAOOw7ssnSC1T7zQbFj
h0ZxydC4X2q2Ufe4dCjWUl4Pql1IipEgqYFR9RUNXnr5zlcj+rgw1eQ8p/+AHTz7
jfEG1pzm/LLeyKS7l1dRpPQI7h0a68SErTJptNQvPPve9fFxvUPU2nTV4EM9EKoj
TrsT3IlqY95ExfFwvzuDXdzBQvtFWBWzXEdSb3/QGZY6lXDIQPgB9Aq+8sbYiMzE
ASpEyIpvFH0nutaDfIRJPig22MnQExIsj3LFTdl6aaMnHBXcOPzb9jA0PBrXKiKt
g9AMybglnJB/zEemh+MPqMiR45hcheNn9AF02GOetaqEc5fPUeOwi83pgFzVKdfQ
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 78708817552167420326434717791790491837
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Downers Grove'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DeVry University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT Networks'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mobile.devry.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26360163467514091356396075913937364711159565571014046987566992176423354341688010190919944801243494792322276103084620327953011484904007302870080693534963296647252253057007821437221784201016577664092203217955866650503293931773147019180234652971940964804715309733458457199160918576194490465874209291069839042680206675938170119217420993440955222297119864905368436513646330054508323512519802215690043771995496989121709477014215116592407432203294427854985792554325883788551016674950723901024770366452067434717964018451346399200603861270730937147793111925817773140589462934292101165613902674179544496032393538437963790667867
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (280 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileapps.devry.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.keller.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.carrington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.chamberlain.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.aucmed.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.devry.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.keller.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.carrington.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.chamberlain.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.aucmed.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.rossu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.rossmed.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.rossmed.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.devry.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.rossu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015ce5c61d6d00000403004830460221009e0f5f293b61a88dcfbd94116c30d952cd521067278b076c5a72f96e64d0828c022100e6c99b99712839ed12fb0248ac291e60d0619199ecbea1d1e4f01756399005d4007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015ce5c61da900000403004730450220185ab95e1cca8bd4105100916c0ebdc3410253546f2884fa9b579481647fefcb022100ff95bd1eaa252a00cf05be83dc1351dd24e9890e3d3bd25c941da773bc58341f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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