ldapsslprod.ocaso.es

- OCASO,S.A.SEGUROS Y REASEGUROS -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 43:0c:5f:4f:6d:cf:c6:bb:ee:4e:16:2b:1d:10:f3:9c was issued on by Symantec Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

OCASO,S.A.SEGUROS Y REASEGUROS

Organization: OCASO,S.A.SEGUROS Y REASEGUROS
Organization unit: DIVISION DE SISTEMAS DE INFORMACION
State / Province: Madrid
Locality: Madrid
Country: ES

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 43:0c:5f:4f:6d:cf:c6:bb:ee:4e:16:2b:1d:10:f3:9c
Serial Number (int): 89122516401814019162133661380819088284
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 6e:dc:a9:f7:e9:11:ae:b7:30:3f:02:ca:ab:af:18:be:87:67:cd:55
Fingerprint (sha256): 1a:4c:ca:c1:43:5a:4e:0f:1f:66:9c:1e:86:d0:24:ba:92:e1:98:4d:65:c8:c9:25:e4:65:48:f7:4f:db:22:42

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate ldapsslprod.ocaso.es

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ldapsslprod.ocaso.es

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ldapsslprod.ocaso.es

Other certificates including the domain name ocaso.es

(limited to 100 certificates)
aplicaciones.ocaso.es
autenticacion.ocaso.es
docker-registry-default.master-devops.openshift.ocaso.es
aplicaciones.pruebas.ocaso.es
svc27010.ocaso.es
autenticacion.ocaso.es
clientes.pruebas.ocaso.es
portalclientes.ocaso.es
gestioncontenidos.ocaso.es
promociones.ocaso.es
dental.ocaso.es
invitados.ocaso.es
dni.ocaso.es
correo.ocaso.es
wwwtest.ocaso.es
guarda.ocaso.es
www.ocaso.es
acs.ocaso.es
agentes.ocaso.es
portalfunerario.ocaso.es
svc27010.ocaso.es
agentes.ocaso.es
webservices.ocaso.es
ldapsslprod.ocaso.es
cookierepo.openshift.ocaso.es
portalclientes.ocaso.es
correo.proveedores.ocaso.es
empleados.eterna-aseguradora.ocaso.es
promociones.ocaso.es
devops.ocaso.es
protecciondelmenor.ocaso.es
atencionmedica.ocaso.es
vdi.ocaso.es
colaboradores.ocaso.es
agentes.ocaso.es
empleados.eterna-aseguradora.ocaso.es
portalclientes.ocaso.es
invitados.ocaso.es
portalclientes.ocaso.es
empleados.ocaso.es
*.mail.ocaso.es
itsm.ocaso.es
clientes.ocaso.es
gue.pruebas.ocaso.es
cpd.ocaso.es
dni.ocaso.es
protecciondelmenor.ocaso.es
www.ocaso.es
webservices.ocaso.es
contacto.ocaso.es
devops.ocaso.es
testagentes.ocaso.es
wwwedit.ocaso.es
www.ocaso.es
colaboradores.ocaso.es
docker-registry-default.master-devops.openshift.ocaso.es
empleados.ocaso.es
contacto.ocaso.es
www.ocaso.es
guarda.ocaso.es
adfs.ocaso.es
scrstudio.ocaso.es
proveedores.ocaso.es
www.ocaso.es
colaboradores.ocaso.es
agentes.ocaso.es
adfs.ocaso.es
cpd.ocaso.es
colaboradores.ocaso.es
*.pruebas.ocaso.es
empleados.eterna-aseguradora.ocaso.es
*.ocaso.es
dental.ocaso.es
chat.ocaso.es
dental.ocaso.es
autenticacion.pruebas.ocaso.es
brand.ocaso.es
guarda.ocaso.es
dental.ocaso.es
vdi.ocaso.es
*.pruebas.ocaso.es
dental.ocaso.es
portalclientes.ocaso.es
empleados.pruebas.ocaso.es
acs.ocaso.es
www.ocaso.es
autenticacion.ocaso.es
guarda.ocaso.es
autenticacion.pruebas.ocaso.es
clientes.pruebas.ocaso.es
dental.ocaso.es
CENTRAL.OCASO.ES
itsm.ocaso.es
prevabanrstudio.ocaso.es
gue.empleados.ocaso.es
gestionclientes.ocaso.es
empleados.eterna-aseguradora.ocaso.es
colaboradores.ocaso.es
atencionmedica.ocaso.es
proveedores.ocaso.es

Certificate

The complete raw certificate details for ldapsslprod.ocaso.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgIQQwxfT23PxrvuThYrHRDznDANBgkqhkiG9w0BAQsFADB+
MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAd
BgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxLzAtBgNVBAMTJlN5bWFudGVj
IENsYXNzIDMgU2VjdXJlIFNlcnZlciBDQSAtIEc0MB4XDTE2MDUxMDAwMDAwMFoX
DTE4MDUxMDIzNTk1OVowgaUxCzAJBgNVBAYTAkVTMQ8wDQYDVQQIDAZNYWRyaWQx
DzANBgNVBAcMBk1hZHJpZDEnMCUGA1UECgweT0NBU08sUy5BLlNFR1VST1MgWSBS
RUFTRUdVUk9TMSwwKgYDVQQLDCNESVZJU0lPTiBERSBTSVNURU1BUyBERSBJTkZP
Uk1BQ0lPTjEdMBsGA1UEAwwUbGRhcHNzbHByb2Qub2Nhc28uZXMwggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCI/wynbPNbTFO5pE21RdyTsaP4ZCUpoV3k
GtfKBiOOlVNHG2fA4EXaWfPWk2YNigJVanw1/SqLXj5HBdj+tjl6BwBub94Bfc1i
m+IgA0tir+3rqhnO4/ihLJGwVTNCsFUU6JJrghVzpUYHUjzNWWwDWmNzASyz5kW/
Bh1U4ixN5eUah+bhG2yQoJ0ELFSzRy6Kqhr+A7NkXh408d3zrEynoa8kxz3vGGWP
QOorfQG+MLyIlv2JlMLmTzyHOf2l0g5KTdXYbuQnjuR9mq3AXJCxC79NGlyIeL3D
iaUfm9U44ov5o1QHIRGCKoGHCIDJ14SKehbUV82faBeMgElspUtJAgMBAAGjggF+
MIIBejAfBgNVHREEGDAWghRsZGFwc3NscHJvZC5vY2Fzby5lczAJBgNVHRMEAjAA
MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
YQYDVR0gBFowWDBWBgZngQwBAgIwTDAjBggrBgEFBQcCARYXaHR0cHM6Ly9kLnN5
bWNiLmNvbS9jcHMwJQYIKwYBBQUHAgIwGQwXaHR0cHM6Ly9kLnN5bWNiLmNvbS9y
cGEwHwYDVR0jBBgwFoAUX2DPYZBV34RDFIpgKrL1evRDGO8wKwYDVR0fBCQwIjAg
oB6gHIYaaHR0cDovL3NzLnN5bWNiLmNvbS9zcy5jcmwwVwYIKwYBBQUHAQEESzBJ
MB8GCCsGAQUFBzABhhNodHRwOi8vc3Muc3ltY2QuY29tMCYGCCsGAQUFBzAChhpo
dHRwOi8vc3Muc3ltY2IuY29tL3NzLmNydDATBgorBgEEAdZ5AgQDAQH/BAIFADAN
BgkqhkiG9w0BAQsFAAOCAQEAKUXi+blvARxyLZbolmT7hEBN/qbTa6GMDpsGWmSF
rlt5ShK5IsJAnTHkKI8rourGCdgvp1+ciQYcbCc5OK4TvNCl1B+k0CwiKa045QL9
mk0m1kT1a8ieOVZWqcbcvrtnVbJmqs1+zqsIjcgfHdP/ZYh9cCtVrgR7Xr1y42lT
hSJQ6DvkbsWn/pMtWM+4DbORuJYy/9UPl7G/Gg6iw2WQ4+gFVXrftb0MGBd8nwpe
OdUuqfbWQIE6Zm40bmLQ623lz8MesHawxObgOS9X0G6YFaBDrBmFASbcQ9YRr6nM
wYu++Lu16qn3B/QQngMXjG1gyEe39N5nzMhZzDqvAsd/qA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiP8Mp2zzW0xTuaRNtUXc
k7Gj+GQlKaFd5BrXygYjjpVTRxtnwOBF2lnz1pNmDYoCVWp8Nf0qi14+RwXY/rY5
egcAbm/eAX3NYpviIANLYq/t66oZzuP4oSyRsFUzQrBVFOiSa4IVc6VGB1I8zVls
A1pjcwEss+ZFvwYdVOIsTeXlGofm4RtskKCdBCxUs0cuiqoa/gOzZF4eNPHd86xM
p6GvJMc97xhlj0DqK30BvjC8iJb9iZTC5k88hzn9pdIOSk3V2G7kJ47kfZqtwFyQ
sQu/TRpciHi9w4mlH5vVOOKL+aNUByERgiqBhwiAydeEinoW1FfNn2gXjIBJbKVL
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 89122516401814019162133661380819088284
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Madrid'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Madrid'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'OCASO,S.A.SEGUROS Y REASEGUROS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DIVISION DE SISTEMAS DE INFORMACION'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ldapsslprod.ocaso.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17294179036670572068004758439016004084047216168037339355674709448989313517079657305426853640566712738385792660345681979675902249608566218938687863343179590132567347247043388215902182934687822847537942037598311953594664950903298085807733844211761933035598446898483876485332103894046875630806902995048690210951824580419498248564026268659452789783792555228341776195763531424923628183861837196166361883028271256803644532904987431245395143099411691934986843681810318955522130908374929677043307582342967792840237486349778556424705750470539598442932994826399705439206521646318303549814095935469395499144327783145545096579913
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ldapsslprod.ocaso.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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