www.seeso.com

- NBCUniversal Media, LLC -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 1e:51:85:93:4b:84:f8:b9:1e:d2:af:e3:07:b9:e2:49 was issued on by Symantec Corporation.

With 58 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

NBCUniversal Media, LLC

Organization: NBCUniversal Media, LLC
State / Province: New York
Locality: New York
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1e:51:85:93:4b:84:f8:b9:1e:d2:af:e3:07:b9:e2:49
Serial Number (int): 40300125149478101000595640716027880009
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): b7:0a:5a:2c:3a:bf:79:b6:b6:0c:f3:2f:83:1d:94:fe:4b:04:bb:bb
Fingerprint (sha256): 1e:7c:05:c6:44:ad:31:2d:81:d6:20:2e:b3:6d:5c:e7:01:ec:59:c3:ec:e6:cd:e2:b0:3b:59:5e:99:00:a5:51

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate www.seeso.com

58

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.seeso.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.tvecms.bravo.nbcuni.com
*.fiftyshadesnightin.com
*.tvecms.msnbc.nbcuni.com
*.syfy.com
whereismrrobot.com
staticfiles.blastr.com
citywalkhollywood.com
www.fsoc.sh
*.mvpd-admin.nbcuni.com
betaidentity.apps.nbcuni.com
*.apps.nbcuni.com
*.tvecms.nbcuniverso.nbcuni.com
fsoc.sh
*.tvecms.telemundo.nbcuni.com
*.tvecms.cnbc.nbcuni.com
*.13thstreet.de
*.evil-corp-usa.com
*.tvecms.chiller.nbcuni.com
*.tvecms.eonline.nbcuni.com
*.syfy.de
*.bxjyb2jvda.net
www.realtimetranslation.net
realtimetranslation.net
iammrrobot.com
seeso.com
evil-corp-usa.com
*.tvecms.esquire.nbcuni.com
www.racksure.com
*.eonline.com
conficturaindustries.com
www.citywalkhollywood.com
m.citywalkhollywood.com
*.seeso.com
www.whoismrrobot.com
www.iammrrobot.com
static.nbcuniarchives.com
*.serverfarm.evil-corp-usa.com
*.e-corp-usa.com
e-corp-usa.com
whoismrrobot.com
*.universalchannel.de
www.e-corp-usa.com
www.whereismrrobot.com
universalstudios.com
*.tvecms.oxygen.nbcuni.com
betastage.idxapi.nbcuni.com
www.e-corp-online.com
e-corp-online.com
www.conficturaindustries.com
www.universalstudios.com
*.roku.usa.nbcuni.com
betaqa.idxapi.nbcuni.com
racksure.com
*.tvecms.syfy.nbcuni.com
betadev.idxapi.nbcuni.com
www.erasethehate.com
*.tvecms.sprout.nbcuni.com
www.seeso.com

Other certificates including the domain name seeso.com

(limited to 100 certificates)
www.seeso.com
www.seeso.com
click.mail.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
login.seeso.com
seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
akamai-san9.exacttarget.com
www.seeso.com
akamai-san9.exacttarget.com
www.seeso.com
seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
pages.mail.seeso.com
akamai-san9.exacttarget.com
click.mail.seeso.com
www.seeso.com
akamai-san9.exacttarget.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
akamai-san9.exacttarget.com
akamai-san9.exacttarget.com
akamai-san9.exacttarget.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
akamai-san9.exacttarget.com
akamai-san9.exacttarget.com
seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
akamai-san9.exacttarget.com
click.mail.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
view.mail.seeso.com
akamai-san9.exacttarget.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
akamai-san9.exacttarget.com
akamai-san9.exacttarget.com
www.seeso.com
akamai-san9.exacttarget.com
view.mail.seeso.com
www.seeso.com
www.seeso.com
login.seeso.com
akamai-san9.exacttarget.com
akamai-san9.exacttarget.com
seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
*.seeso.com
www.seeso.com
pages.mail.seeso.com
akamai-san9.exacttarget.com
seeso.com
akamai-san9.exacttarget.com
www.seeso.com
login.seeso.com
seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
akamai-san9.exacttarget.com
login.seeso.com
www.seeso.com
www.seeso.com
akamai-san9.exacttarget.com
www.seeso.com
seeso.com

Certificate

The complete raw certificate details for www.seeso.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsM1zRzKOq2eIJIxyUNIQ
rXhH8ZwdIteys9Eew7RL0Uy3K1717ArDqttMrwhIyew7Gj1XrbQoh+3AtLe9xArC
5pW68ZZfvsJNh+Ti4K700JSGkNzh6kmf5IYQQiDHpNqH+KTJkAuyWkgt5XcmxfPo
TjH3jiKuI+Zez8rLLCQuALaRTW1yAt7Lz7rxRrKcqA8vW2EX4YNWUqHSyOGvr7uX
IfLLxoJskToD1VOqrrRqLxByZXptGkhI97mt4f4p2hl0n8ykZdm+No2soYPylel5
bd0DyC7OpOxDDASRmQNG1YEKFqm3hIYYMnIlAwISGSRw7/HGMGZqFgLk7voQ+4Ha
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 40300125149478101000595640716027880009
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NBCUniversal Media, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.seeso.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22319252995414263545098753872479076135050460779309403516516462721202620812694111798344458260747547015989315000116649976469890050414409442011887429093829443871619160769440182530607358574880574604953961062393923978032966057703524181979337772277854224619421573049517282414065674861921166703054302164242365709728215640024683389254447647103578518266643204156889606981967883656614253711888437751619467586708956106856940134774167459674903648889668636123134491905700947883157605898929029313961388226188375185161846261640760331137848840876687662917247298308128540208939300839433356467583975075794163811557415283179022085904913
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1305 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tvecms.bravo.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fiftyshadesnightin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tvecms.msnbc.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.syfy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whereismrrobot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staticfiles.blastr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citywalkhollywood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fsoc.sh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mvpd-admin.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betaidentity.apps.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apps.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tvecms.nbcuniverso.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsoc.sh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tvecms.telemundo.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tvecms.cnbc.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.13thstreet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.evil-corp-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tvecms.chiller.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tvecms.eonline.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.syfy.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bxjyb2jvda.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.realtimetranslation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realtimetranslation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iammrrobot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seeso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evil-corp-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tvecms.esquire.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.racksure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conficturaindustries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citywalkhollywood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.citywalkhollywood.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seeso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whoismrrobot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iammrrobot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.nbcuniarchives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.serverfarm.evil-corp-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-corp-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-corp-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whoismrrobot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.universalchannel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.e-corp-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whereismrrobot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universalstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tvecms.oxygen.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betastage.idxapi.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.e-corp-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-corp-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.conficturaindustries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.roku.usa.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betaqa.idxapi.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'racksure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tvecms.syfy.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betadev.idxapi.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.erasethehate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tvecms.sprout.nbcuni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seeso.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a3ed57b5a7010b8c29decfe75a303c130c7512be5dc93b19b613f2dbdd06842914966fba28b4c9af4ab5f572e2ac826c41034151f708fc07a26e325d5c94a3af2d2cae808c0c90d129e353b7f824f317b79c55ebb9045003b45798dff4115fd4c5eeec27020b9db442ef2653a3fc9adbeddc1a6326892d57e388467a43e3ace5ddb4f7daed76e456576a8acc0daac53fe923457497d6c278f85df88ff39e1f805612e9925877055c4609cc3f765461cfdc3e7a60f61422df64dea3b4b9d4cfccc361f133a662cb6e5ea0e717e257f6069910707e8dc4ac18647f8660b3130a926e9918ede0c56b7d5e7774c84294bd5a114bd6b4c67979336a3da7e6aeae0349