testclient.verisign-grs.com
- Verisign, Inc -
Issued by Symantec Class 3 Secure Server SHA256 SSL CA
About this certificate
This digital certificate with serial number 49:64:fd:d8:46:1a:51:1f:ed:6a:91:5e:52:7f:74:1c was issued on by Symantec Corporation.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Verisign, Inc
Organization:
Verisign, Inc
Organization unit: Technology Services Group
Organization unit: Technology Services Group
State / Province:
Virginia
Locality: Reston
Country: US
Locality: Reston
Country: US
Symantec Corporation
Organization:
Symantec Corporation
Organization unit: Symantec Trust Network
Organization unit: Symantec Trust Network
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 49:64:fd:d8:46:1a:51:1f:ed:6a:91:5e:52:7f:74:1cSerial Number (int): 97558021962760934297991103757808530460
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: db:62:20:fb:7d:02:89:7c:d2:3b:6f:c7:e4:32:6c:05:52:1d:ad:b1
Fingerprint (sha1): bd:38:ba:ed:ed:e9:06:54:d0:61:d3:55:6a:66:49:42:9e:5e:40:0e
Fingerprint (sha256): 1e:81:0b:74:2f:9a:8c:2f:b2:fc:c1:0a:4c:29:7b:5d:f3:73:7b:36:4d:ed:6e:06:25:6a:bd:68:d3:6d:b2:5d
Issuing Certificate URL: http://sg.symcb.com/sg.crt
Revocation information
OCSP Server: http://sg.symcd.comCRL Distribution Point: http://sg.symcb.com/sg.crl
Check the revocation status for certificate testclient.verisign-grs.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for testclient.verisign-grs.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
testclient.verisign-grs.com
Other certificates including the domain name verisign-grs.com
(limited to 100 certificates)
rzms-kex.verisign-grs.com
ote-sugapi.verisign-grs.com
qa-auth-spa.verisign-grs.com
ote-ctldepp.verisign-grs.com
namestoreote-otp.verisign-grs.com
zms-epp.verisign-grs.com
rzm-ote-client.verisign-grs.com
ote-sugapi.verisign-grs.com
manifest.verisign-grs.com
coreui.verisign-grs.com
ote-dnssecsigningservice.verisign-grs.com
mbv-builder.verisign-grs.com
zms-kex-ote.verisign-grs.com
rzms-kex-ote.verisign-grs.com
ote-sugapi.verisign-grs.com
qa-namesuggestion.verisign-grs.com
domainscope.verisign-grs.com
namestoressl.verisign-grs.com
epp-ote.verisign-grs.com
naming.verisign-grs.com
namestoreote-otp.verisign-grs.com
mbv-mobileview.verisign-grs.com
vscc-dacust-ilg.verisign-grs.com
sugapi.verisign-grs.com
epp-ote.verisign-grs.com
namestoreote.verisign-grs.com
epptool-ctld.verisign-grs.com
epptool-ctld.verisign-grs.com
sugapi.verisign-grs.com
rzm-ote-client.verisign-grs.com
registrar.verisign-grs.com
ntia-ui.verisign-grs.com
sslftp-srs.verisign-grs.com
rzms-kex.verisign-grs.com
mbv-csrtool.verisign-grs.com
qa-epptool-ctld.verisign-grs.com
registrar.verisign-grs.com
ctldui.verisign-grs.com
mbv-api.verisign-grs.com
sugapi.verisign-grs.com
dnssecsigningservice.verisign-grs.com
sugapi.verisign-grs.com
registrar.verisign-grs.com
nsmanager-otp.verisign-grs.com
registrar.verisign-grs.com
csr.verisign-grs.com
client.verisign-grs.com
vscc-dacust-ilg.verisign-grs.com
ote-zms-web.verisign-grs.com
namestoressl.verisign-grs.com
otessl.verisign-grs.com
registrar.verisign-grs.com
testclient.verisign-grs.com
hud.verisign-grs.com
namestoreote-otp.verisign-grs.com
rzm-client.verisign-grs.com
csrote.verisign-grs.com
ctldui.verisign-grs.com
namestoreote-otp.verisign-grs.com
sugapi.verisign-grs.com
naming.verisign-grs.com
zms-web.verisign-grs.com
qa-akms.verisign-grs.com
ote-naming.verisign-grs.com
epptool-ctld.verisign-grs.com
nameweb.verisign-grs.com
nsmanager-otp.verisign-grs.com
qa-mbv-webtool.verisign-grs.com
otessl.verisign-grs.com
ipsapi.verisign-grs.com
namestoreote-otp.verisign-grs.com
ntia-ui-ote.verisign-grs.com
namestoreote.verisign-grs.com
namestoreote-otp.verisign-grs.com
zms-epp-ote.verisign-grs.com
nsmanager-otp.verisign-grs.com
ipsapi.verisign.com
ote-sugapi.verisign-grs.com
mbv-ote-csrtool.verisign-grs.com
knowledge.verisign-grs.com
vcc-reports.verisign-grs.com
namestoreote.verisign-grs.com
?.verisign-grs.com
nameepp.verisign-grs.com
epp-ote.verisign-grs.com
qa-akms.verisign-grs.com
rzms.verisign-grs.com
registrar.verisign-grs.com
ote-dnssecsigningservice.verisign-grs.com
ote-sugapi.verisign-grs.com
ote-sugepp.verisign-grs.com
namestoressl.verisign-grs.com
epptool-ctld.verisign-grs.com
epptool.verisign-grs.com
mbv-ote-api.verisign-grs.com
qa-mbv-mobileview.verisign-grs.com
rzm-client.verisign-grs.com
mbv-webtool.verisign-grs.com
lb1-cn1.verisign-grs.com
dnssecsigningservice.verisign-grs.com
ote-sugapi.verisign-grs.com
qa-auth-spa.verisign-grs.com
ote-ctldepp.verisign-grs.com
namestoreote-otp.verisign-grs.com
zms-epp.verisign-grs.com
rzm-ote-client.verisign-grs.com
ote-sugapi.verisign-grs.com
manifest.verisign-grs.com
coreui.verisign-grs.com
ote-dnssecsigningservice.verisign-grs.com
mbv-builder.verisign-grs.com
zms-kex-ote.verisign-grs.com
rzms-kex-ote.verisign-grs.com
ote-sugapi.verisign-grs.com
qa-namesuggestion.verisign-grs.com
domainscope.verisign-grs.com
namestoressl.verisign-grs.com
epp-ote.verisign-grs.com
naming.verisign-grs.com
namestoreote-otp.verisign-grs.com
mbv-mobileview.verisign-grs.com
vscc-dacust-ilg.verisign-grs.com
sugapi.verisign-grs.com
epp-ote.verisign-grs.com
namestoreote.verisign-grs.com
epptool-ctld.verisign-grs.com
epptool-ctld.verisign-grs.com
sugapi.verisign-grs.com
rzm-ote-client.verisign-grs.com
registrar.verisign-grs.com
ntia-ui.verisign-grs.com
sslftp-srs.verisign-grs.com
rzms-kex.verisign-grs.com
mbv-csrtool.verisign-grs.com
qa-epptool-ctld.verisign-grs.com
registrar.verisign-grs.com
ctldui.verisign-grs.com
mbv-api.verisign-grs.com
sugapi.verisign-grs.com
dnssecsigningservice.verisign-grs.com
sugapi.verisign-grs.com
registrar.verisign-grs.com
nsmanager-otp.verisign-grs.com
registrar.verisign-grs.com
csr.verisign-grs.com
client.verisign-grs.com
vscc-dacust-ilg.verisign-grs.com
ote-zms-web.verisign-grs.com
namestoressl.verisign-grs.com
otessl.verisign-grs.com
registrar.verisign-grs.com
testclient.verisign-grs.com
hud.verisign-grs.com
namestoreote-otp.verisign-grs.com
rzm-client.verisign-grs.com
csrote.verisign-grs.com
ctldui.verisign-grs.com
namestoreote-otp.verisign-grs.com
sugapi.verisign-grs.com
naming.verisign-grs.com
zms-web.verisign-grs.com
qa-akms.verisign-grs.com
ote-naming.verisign-grs.com
epptool-ctld.verisign-grs.com
nameweb.verisign-grs.com
nsmanager-otp.verisign-grs.com
qa-mbv-webtool.verisign-grs.com
otessl.verisign-grs.com
ipsapi.verisign-grs.com
namestoreote-otp.verisign-grs.com
ntia-ui-ote.verisign-grs.com
namestoreote.verisign-grs.com
namestoreote-otp.verisign-grs.com
zms-epp-ote.verisign-grs.com
nsmanager-otp.verisign-grs.com
ipsapi.verisign.com
ote-sugapi.verisign-grs.com
mbv-ote-csrtool.verisign-grs.com
knowledge.verisign-grs.com
vcc-reports.verisign-grs.com
namestoreote.verisign-grs.com
?.verisign-grs.com
nameepp.verisign-grs.com
epp-ote.verisign-grs.com
qa-akms.verisign-grs.com
rzms.verisign-grs.com
registrar.verisign-grs.com
ote-dnssecsigningservice.verisign-grs.com
ote-sugapi.verisign-grs.com
ote-sugepp.verisign-grs.com
namestoressl.verisign-grs.com
epptool-ctld.verisign-grs.com
epptool.verisign-grs.com
mbv-ote-api.verisign-grs.com
qa-mbv-mobileview.verisign-grs.com
rzm-client.verisign-grs.com
mbv-webtool.verisign-grs.com
lb1-cn1.verisign-grs.com
dnssecsigningservice.verisign-grs.com
Certificate
The complete raw certificate details for testclient.verisign-grs.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIQSWT92EYaUR/tapFeUn90HDANBgkqhkiG9w0BAQsFADCB hDELMAkGA1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFudGVjIENvcnBvcmF0aW9uMR8w HQYDVQQLExZTeW1hbnRlYyBUcnVzdCBOZXR3b3JrMTUwMwYDVQQDEyxTeW1hbnRl YyBDbGFzcyAzIFNlY3VyZSBTZXJ2ZXIgU0hBMjU2IFNTTCBDQTAeFw0xNzA5MTIw MDAwMDBaFw0xOTA5MTMyMzU5NTlaMIGTMQswCQYDVQQGEwJVUzERMA8GA1UECAwI VmlyZ2luaWExDzANBgNVBAcMBlJlc3RvbjEWMBQGA1UECgwNVmVyaXNpZ24sIElu YzEiMCAGA1UECwwZVGVjaG5vbG9neSBTZXJ2aWNlcyBHcm91cDEkMCIGA1UEAwwb dGVzdGNsaWVudC52ZXJpc2lnbi1ncnMuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEApswgkR1AwmUQejWt8L50XrSpqUD5K2ixfz4hHZysHIodySXj a0+iVqXIop5f2AXEuwtnhIk7WmG0Q7uNeXaxE2cTirrkdQtiGjQF/G6J/JMhNY+5 yJcEiaoCGRuIppYZpNcXllj3Ip+7nwtOlIZXpGPq8JoBCE/UHkeyph/szptWRU7M QZgepPqPteMvmAtyucMHM/aC+s38+oTMIYkZzUgeFarnOvFMGvhZrbJbPjYKf7Me OMq9lfxQoEitPDZxiCygZ2fDo75hMwxx0+XP4wRZ/hnw4HtYSywdQwvYkk++UYKJ KwrnUTm/i8WcZc2bEi4cd1HCxcY563LVUJgRuwIDAQABo4IBhTCCAYEwJgYDVR0R BB8wHYIbdGVzdGNsaWVudC52ZXJpc2lnbi1ncnMuY29tMAkGA1UdEwQCMAAwDgYD VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBhBgNV HSAEWjBYMFYGBmeBDAECAjBMMCMGCCsGAQUFBwIBFhdodHRwczovL2Quc3ltY2Iu Y29tL2NwczAlBggrBgEFBQcCAjAZDBdodHRwczovL2Quc3ltY2IuY29tL3JwYTAf BgNVHSMEGDAWgBTbYiD7fQKJfNI7b8fkMmwFUh2tsTArBgNVHR8EJDAiMCCgHqAc hhpodHRwOi8vc2cuc3ltY2IuY29tL3NnLmNybDBXBggrBgEFBQcBAQRLMEkwHwYI KwYBBQUHMAGGE2h0dHA6Ly9zZy5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6 Ly9zZy5zeW1jYi5jb20vc2cuY3J0MBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQA+5G/NcUEMmRXyycIBoag6FVIZdFRxioHYLhdT5f8kQctN 0ZHwzbTmzSOXdjE7Zo8ZeUZMn46skY3pp7n7SavT8I/nEOig/J8JaZPENITyJaMN wQTkrZUfQM2o/qH9kauVR8v5KeZ8iRetes3GMAuEBWCRythJ1nxobl2ItmmHAHWn AFbaRIfdAi+4T/7B+gWvjUG99tZxjNqn9GVcJJ9y1npVjaVJqSf4Rk4kOQxVrwIq h39sWRMcwjPKmFMF494s7Qz/8WJeYok/9NgK7TLf0Ach0LQRkKpFsoVurxpR+5Wp /LXrK3olEkedprI7hFNLriM9DQC4XePuq6ehHxjm -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApswgkR1AwmUQejWt8L50 XrSpqUD5K2ixfz4hHZysHIodySXja0+iVqXIop5f2AXEuwtnhIk7WmG0Q7uNeXax E2cTirrkdQtiGjQF/G6J/JMhNY+5yJcEiaoCGRuIppYZpNcXllj3Ip+7nwtOlIZX pGPq8JoBCE/UHkeyph/szptWRU7MQZgepPqPteMvmAtyucMHM/aC+s38+oTMIYkZ zUgeFarnOvFMGvhZrbJbPjYKf7MeOMq9lfxQoEitPDZxiCygZ2fDo75hMwxx0+XP 4wRZ/hnw4HtYSywdQwvYkk++UYKJKwrnUTm/i8WcZc2bEi4cd1HCxcY563LVUJgR uwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 97558021962760934297991103757808530460 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server SHA256 SSL CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-12 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-13 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Virginia' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Reston' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verisign, Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Technology Services Group' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'testclient.verisign-grs.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21056217505329165477601621378432584405965550816906381765898630708305819693417098573216007888442117592097683246706947585320687462086738757513754697788907031705570431894390112924240068612357212312886291268578268652822771806462016884433032068245652818948283621367255816845823283629602770449122103094590605612890160802373145653899241493071350283644910768767123192148349533405446827594225441270651818467860837763863648491734365025545375067175528012985878032531281666471422206075430534926680981808476108635566470524300660305508209397119843149545875153431093899572544356578084160466061846870144492685240778037431036055916987 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testclient.verisign-grs.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName db6220fb7d02897cd23b6fc7e4326c05521dadb1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcb.com/sg.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcb.com/sg.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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