ircgw.symcpe.net

- Symantec Corporation -

Issued by VeriSign Class 3 Secure Server CA - G3

About this certificate

This digital certificate with serial number 1c:86:9c:f8:c2:a2:27:61:8c:bd:07:6e:f1:64:a9:a8 was issued on by VeriSign, Inc..

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Norton Cloud
State / Province: California
Locality: Mountain View
Country: US

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1c:86:9c:f8:c2:a2:27:61:8c:bd:07:6e:f1:64:a9:a8
Serial Number (int): 37917335425739908401558333599951137192
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 0d:44:5c:16:53:44:c1:82:7e:1d:20:ab:25:f4:01:63:d8:be:79:a5

Fingerprint (sha1): 47:da:39:1d:29:bc:03:ab:0f:4c:23:b3:27:26:b4:5c:63:18:ec:78
Fingerprint (sha256): 1a:3e:d4:72:f8:b4:95:67:65:b7:3d:96:18:f1:85:46:f2:d6:31:90:dc:e2:25:7b:d7:39:36:de:6e:ea:33:ea

Issuing Certificate URL: http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer

Revocation information

OCSP Server: http://ocsp.verisign.com
CRL Distribution Point: http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl

Check the revocation status for certificate ircgw.symcpe.net

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ircgw.symcpe.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ircgw.ash1.symcpe.net
ircgw.ash2.symcpe.net
ircgw.ash3.symcpe.net
ircgw.symcpe.net

Other certificates including the domain name symcpe.net

(limited to 100 certificates)
vault-002-prod.ash2.symcpe.net
sparkhist-adl-devtest.us-east-1.aws.symcpe.net
spark-analytics-cp1dev.ash2.symcpe.net
ds-2016.aws.symcpe.net
volta-logs-unifiedsecurity.us-east-1.aws.symcpe.net
volta-metrics-cpe.us-west-2.aws.symcpe.net
cmp.symcpe.net
jenkins.spinnaker.symcpe.net
jenkins-cf.symcpe.net
hbase01-cynic-hbase-prod.us-east-1.aws.symcpe.net
v-ldapm-prod-2019.ash2.symcpe.net
contrail-web.lhr1.symcpe.net
metrics-kafka-cynic-dev.us-east-1.ec2.aws.symcpe.net
volta-influxdb-cf.ash2.symcpe.net
volta-metrics-epmpi.us-east-1.aws.symcpe.net
volta-metrics-riskinsight.us-east-1.aws.symcpe.net
sparkhist-adl-prod1.us-east-1.aws.symcpe.net
volta-logs-cf-us-east.aws.symcpe.net
ganglia-mss-hadoop-prod.ash2.symcpe.net
ambari-hbase-cynic-dev.us-east-1.aws.symcpe.net
logs-sepmobile.eu-central-1.volta.aws.symcpe.net
designate-api.lhr1.symcpe.net
hbase02-cynic-hbase-prod.eu-central-1.aws.symcpe.net
kubernetes.ash2.symcpe.net
openshift-dev.us-east-1.aws.symcpe.net
oozie-jetstream-spark-prd-useast1.dpe-prod.aws.symcpe.net
nimbus-spaas-prod-2.ash2.symcpe.net
jenkins.symcpe.net
ingest-web.volta.aws.symcpe.net
puppetdb.phx2.symcpe.net
ranger-jetstream-kafka-stg-useast1.symc.dev.aws.symcpe.net
ae15-smallpoint.phx2.symcpe.net
ambari-spaas-qa.ash2.symcpe.net
swift.ash2.symcpe.net
knox-mss-prod3.phx2.symcpe.net
jenkins-dev-infraeng.us-west-2.aws.symcpe.net
v-ldapm-001-dev.tus1.symcpe.net
vault-acp3-dev.us-east-2.symc.dev.aws.symcpe.net
smtp.symcpe.net
falcon-mss-prod4.ash2.symcpe.net
manage.eu-central-1.volta.aws.symcpe.net
stormui-cynic-dev.us-east-1.ec2.aws.symcpe.net
ambari-ndf-prod-central.eu-west-1.aws.symcpe.net
volta-ps-prod.phx2.symcpe.net
hbase02-ri-prod.us-east-1.aws.symcpe.net
nimbus-mss-devtest.ash2.symcpe.net
vault-acp.eu-central-1.prod.aws.symcpe.net
elasticsearch-atppi-devtest.ash2.symcpe.net
hbase01-ndf-qa.us-east-1.ec2.aws.symcpe.net
metrics-hbase-ndf-qa.us-east-1.ec2.aws.symcpe.net
volta-logs-epmpi.us-east-1.aws.symcpe.net
dnsadmin.symcpe.net
cfbroker.aws.symcpe.net
metrics-hbase-ndf-perf.us-east-1.ec2.aws.symcpe.net
oozie-adl-prod1.us-east-1.aws.symcpe.net
ambari-hbase-ndf-prod-central.eu-west-1.aws.symcpe.net
metrics-api-cpe.eu-central-1.volta.aws.symcpe.net
volta-manage.us-west-2.aws.symcpe.net
oozie-bpaas-prod.ash2.symcpe.net
vault.us-east-1.prod.aws.symcpe.net
pdns-masterapi1.ash2.symcpe.net
volta-webui-cf.lhr1.symcpe.net
hbase02-cynic-hbase-prod.eu-central-1.aws.symcpe.net
volta-sla-prod.ash2.symcpe.net
volta-metrics-riskinsight.ash2.symcpe.net
metrics-storm-cynic-dev.us-east-1.ec2.aws.symcpe.net
kb-09-jetstream-kafka-prd-useast1.dpe.prod.aws.symcpe.net
volta-metrics-mss.us-east-1.aws.symcpe.net
kafka-kaas-dev.us-east-1.aws.symcpe.net
volta-logs-wss.us-east-1.aws.symcpe.net
volta-logs-cpe.us-west-2.aws.symcpe.net
ds-2016.aws.symcpe.net
www-preprod.securitycloud.symcpe.com
swift-proxy.ash2.symcpe.net
logs-beachhead.eu-central-1.volta.aws.symcpe.net
vault-acp-dev.eu-central-1.prod.aws.symcpe.net
v-puppetdb-001-prod.phx2.symcpe.net
nagios-mss-hadoop-prod.ash2.symcpe.net
obs-prod.ash2.symcpe.net
rm-spaas-prod-2.ash2.symcpe.net
yarn-jetstream-spark-prd-useast1.dpe-prod.aws.symcpe.net
*.apps.acp-prod.us-east-1.prod.aws.symcpe.net
skyline-analytics-dev.us-east-1.aws.symcpe.net
idm-acp-dev.aws.symcpe.net
oozie-jetstream-spark-stg-useast1.symc.dev.aws.symcpe.net
activity-monitor-star-prod2.phx2.symcpe.net
zeppelin-adl-prod1.us-east-1.aws.symcpe.net
ambari-cynic-dev.us-east-1.aws.symcpe.net
keystone-admin.phx2.symcpe.net
acp-prod.eu-west-1.prod.aws.symcpe.net
volta-watch-us-east.aws.symcpe.net
*.apps.acp-ci.us-east-1.symc.dev.aws.symcpe.net
ircgw.symcpe.net
volta-logs-riskinsight.us-east-1.aws.symcpe.net
volta-logs-cyberinsurance.us-east-1.aws.symcpe.net
vmx1.ash2.symcpe.net
b0d002ash2007.prod.symcpe.net
ambari-cynic-prod-hbase.us-east-1.aws.symcpe.net
neutron.ash2.symcpe.net
*.apps.acp-prod.eu-central-1.prod.aws.symcpe.net

Certificate

The complete raw certificate details for ircgw.symcpe.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0u5i6kkCsyl3lraKiiKv
suwMPU8+rKaX3ToD0bKpMxTRenxTH5xPrLWCUC+YECwGeWbnHowh+C+Ds61t+N2J
usy3xuRo09AeXwp+/cpX390qOly3PEt/3T7iqkDFdojXfc1U9Lv1/B8JSB37gzFs
ek9WVaSm+gs1GVMReWA1U3ECy1qNmCFtXMmA7vyf5mmDJL7kEQvz8IQmsvsHhnS3
mhsZfCyEr8AGvxJHM22Jm6wEYNvk/Nlp8bc156PeLQ/EDNFa987mBqRz0H1TAcro
OowePty7R8Pd11RjaMotatuttmaA58uE6rNUV+2y9S92U3+5UVz3b0mDYN8E9V3o
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 37917335425739908401558333599951137192
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)10'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 Secure Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-03-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Mountain View'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Norton Cloud'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'ircgw.symcpe.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26627596751752856162076402540029786023565999293523485408997501729094196302892956858087075392144285452615035465896966834371237842288550028719009764937703713764872699312459844455073022098832651137077891641033018052137198541009527396365862934790888707543360058448420754048116589122951234184798558803864015453310162978506752093953496710235028500201685481824494269762167588028527046516023846155415481071699123876641682208635208539493705308850484025093696676881220216015208445917331168849870400990918620150877226149794858235007420065858076878137905612028931949310889985429392375791997898349279076300001127819721118987446443
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ircgw.ash1.symcpe.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ircgw.ash2.symcpe.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ircgw.ash3.symcpe.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ircgw.symcpe.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d445c165344c1827e1d20ab25f40163d8be79a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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