fix.accesswca.com

- Wells Fargo & Company -

Issued by Wells Fargo Certificate Authority WS1

About this certificate

This digital certificate with serial number 48:c6:14:c8:2f:10:02:45:c2:a4:4c:3a:2b:d6:2e:52 was issued on by Wells Fargo.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Wells Fargo & Company

Organization: Wells Fargo & Company
Organization unit: Secure Environments
State / Province: California
Locality: San Francisco
Country: US

Wells Fargo

Organization: Wells Fargo
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 48:c6:14:c8:2f:10:02:45:c2:a4:4c:3a:2b:d6:2e:52
Serial Number (int): 96732911982893563612099922341561511506
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 6b:9a:e1:35:37:43:92:ac:28:9c:90:24:0e:42:99:77:cd:06:59:35
AuthorityKeyId: fe:08:e3:63:85:07:7e:f5:00:58:89:b3:89:a9:4f:ed:0f:0a:41:4f

Fingerprint (sha1): 94:6d:23:a8:ac:9e:5e:73:e8:f9:d7:69:bb:85:af:5f:d6:83:bf:54
Fingerprint (sha256): 1f:4e:10:29:09:68:2b:b7:b3:f4:93:cd:78:39:0d:c9:56:23:70:a3:fd:59:0b:d4:6a:59:0a:72:ea:1d:77:87

Issuing Certificate URL: http://mssl-aia.ws.symantec.com/PrivateCA/821017909-RSA-SHA256.cer

Revocation information

OCSP Server: http://mssl-ocsp.ws.symantec.com
CRL Distribution Point: http://mssl-crl.ws.symantec.com/PrivateCA/821017909-RSA-SHA256.crl

Check the revocation status for certificate fix.accesswca.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fix.accesswca.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fix.accesswca.com

Other certificates including the domain name accesswca.com

(limited to 100 certificates)
wellswcapa.sec.wellsfargo.com
wellswcapffix.sec.wellsfargo.com
fix.accesswca.com
wifpt-uat.accesswca.com
www.accesswca.com
wifpt-fix.accesswca.com
www.accesswca.com
fs.accesswca.com
wellspauat.wellsfargo.com
wellspafix.wellsfargo.com
fix.accesswca.com
fs.accesswca.com
adminfix.accesswca.com
wellspauat.wellsfargo.com
fix.accesswca.com
ciamfix.wellsfargo.com
fsuat.accesswca.com
fs.accesswca.com
adminfix.accesswca.com
wellspafix.wellsfargo.com
dev.accesswca.com
fix.accesswca.com
fsfix.accesswca.com
www.accesswca.com
dev.accesswca.com
www.accesswca.com
wifpt-fix.accesswca.com
uat.accesswca.com
adminuat.accesswca.com
www.accesswca.com
wellspafix.wellsfargo.com
sit.accesswca.com
fix.accesswca.com
fix.accesswca.com
www.accesswca.com
www.accesswca.com
fs.accesswca.com
wifpt-uat.accesswca.com
fix.accesswca.com
fs.accesswca.com
wellspauat.wellsfargo.com
fsfix.accesswca.com
dev.accesswca.com
fsuat.accesswca.com
wifpt-uat.accesswca.com
uat.accesswca.com
fix.accesswca.com
adminfix.accesswca.com
fsuat.accesswca.com
wellspauat.wellsfargo.com
www.accesswca.com
www.accesswca.com
fs.accesswca.com
www.accesswca.com
fs.accesswca.com
wifpt-uat.accesswca.com
uat.accesswca.com
fs.accesswca.com
admin.accesswca.com
fsuat.accesswca.com
sit.accesswca.com
fssit.accesswca.com
adminfix.accesswca.com
wifpt.accesswca.com
sit.accesswca.com
fs.accesswca.com
www.accesswca.com
fsfix.accesswca.com
fs.accesswca.com
fsfix.accesswca.com
fsuat.accesswca.com
fssit.accesswca.com
fix.accesswca.com
wifpt.accesswca.com
www.accesswca.com
adminfix.accesswca.com
www.accesswca.com
admindev.accesswca.com
fsuat.accesswca.com
www.accesswca.com
fsfix.accesswca.com
wellswcapauat.sec.wellsfargo.com
wellspafix.wellsfargo.com
fix.accesswca.com
wifpt-fix.accesswca.com
wifpt-fix.accesswca.com
wellswcapauat.sec.wellsfargo.com
fsuat.accesswca.com
wellspauat.wellsfargo.com
fix.accesswca.com
sit.accesswca.com
admin.accesswca.com
www.accesswca.com
wellspa.wellsfargo.com
fs.accesswca.com
adminfix.accesswca.com
dev.accesswca.com
fix.accesswca.com
www.accesswca.com
fsfix.accesswca.com

Certificate

The complete raw certificate details for fix.accesswca.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFZzCCBE+gAwIBAgIQSMYUyC8QAkXCpEw6K9YuUjANBgkqhkiG9w0BAQsFADB0
MQswCQYDVQQGEwJVUzEUMBIGA1UEChMLV2VsbHMgRmFyZ28xHzAdBgNVBAsTFlN5
bWFudGVjIFRydXN0IE5ldHdvcmsxLjAsBgNVBAMTJVdlbGxzIEZhcmdvIENlcnRp
ZmljYXRlIEF1dGhvcml0eSBXUzEwHhcNMTcwMjE0MDAwMDAwWhcNMTkwMjE1MjM1
OTU5WjCBlDELMAkGA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExFjAUBgNV
BAcMDVNhbiBGcmFuY2lzY28xHjAcBgNVBAoMFVdlbGxzIEZhcmdvICYgQ29tcGFu
eTEcMBoGA1UECwwTU2VjdXJlIEVudmlyb25tZW50czEaMBgGA1UEAwwRZml4LmFj
Y2Vzc3djYS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbXIa4
BZz5W23VCY7DauibcnRcEUra4INDoE708f7bjSO0KHHKW/go+gChEu4J0y5BRMyN
fg5cufFRkICQXk87tQSCGV+pnV/bI6/8vZDY/i9JzU8pPki0rYTRAA9tyJTprwLR
v4RwqdXz6SJk52VAMBYRwxWwZZdEtw9cnZl59fAnXcbjWarljANekz+mTl1T7R9q
RMwaOCbQ3hdCXmyyu5uJP6C1tdZIrxLJ01wTqfKgrXiSBCSxXLnslsMeqYjpk7nP
1tN5rgv/u/b/C+BR14sQ29of08XBgpOtoez6QwHYzgr7x+XzYP1pTv8daRNkMqLb
0dCxsPf52BVeJrT9AgMBAAGjggHSMIIBzjAcBgNVHREEFTATghFmaXguYWNjZXNz
d2NhLmNvbTAJBgNVHRMEAjAAMB0GA1UdDgQWBBRrmuE1N0OSrCickCQOQpl3zQZZ
NTAfBgNVHSMEGDAWgBT+CONjhQd+9QBYibOJqU/tDwpBTzAOBgNVHQ8BAf8EBAMC
BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDoGA1UdIAQzMDEwLwYG
Z4EMAQICMCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8vZC5zeW1jYi5jb20vY3BzMFMG
A1UdHwRMMEowSKBGoESGQmh0dHA6Ly9tc3NsLWNybC53cy5zeW1hbnRlYy5jb20v
UHJpdmF0ZUNBLzgyMTAxNzkwOS1SU0EtU0hBMjU2LmNybDCBjQYIKwYBBQUHAQEE
gYAwfjAsBggrBgEFBQcwAYYgaHR0cDovL21zc2wtb2NzcC53cy5zeW1hbnRlYy5j
b20wTgYIKwYBBQUHMAKGQmh0dHA6Ly9tc3NsLWFpYS53cy5zeW1hbnRlYy5jb20v
UHJpdmF0ZUNBLzgyMTAxNzkwOS1SU0EtU0hBMjU2LmNlcjATBgorBgEEAdZ5AgQD
AQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlnrOPIlHVA/nCgipsUvBh60kd6xJ
VcBu47jJovZXvLcaloHrc8aoBs3QhCNVpTddPg33vJR4hJIIoj8qFn9+wHPlbd1B
fN0HGBCoHnoMIwTfaQgVT5Y3V7dm0j3iaWfKfyWGNYlo6o5eftXpkPqAbUakBWfT
qYnZLFxH7L4poe843VBPTPe+64DuKxBgBopqfYblX+cjOPmmKIV7A2wqIi1rZ2kh
4zX3Qqj0KSOSmhAz5kmr3WgyCXqCnngNd7p3ZDJdL8QvKc2iUurf68iA95eFOysa
tihm5ka4dvWfqN0OiWNSkJ5CTA81Tq3DPTMS+eSb4541oB/mbBuQP1Pd+Q==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21yGuAWc+Vtt1QmOw2ro
m3J0XBFK2uCDQ6BO9PH+240jtChxylv4KPoAoRLuCdMuQUTMjX4OXLnxUZCAkF5P
O7UEghlfqZ1f2yOv/L2Q2P4vSc1PKT5ItK2E0QAPbciU6a8C0b+EcKnV8+kiZOdl
QDAWEcMVsGWXRLcPXJ2ZefXwJ13G41mq5YwDXpM/pk5dU+0fakTMGjgm0N4XQl5s
srubiT+gtbXWSK8SydNcE6nyoK14kgQksVy57JbDHqmI6ZO5z9bTea4L/7v2/wvg
UdeLENvaH9PFwYKTraHs+kMB2M4K+8fl82D9aU7/HWkTZDKi29HQsbD3+dgVXia0
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 96732911982893563612099922341561511506
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wells Fargo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wells Fargo Certificate Authority WS1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Wells Fargo & Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Secure Environments'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'fix.accesswca.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27691815179718024053963744644914154386650302862407667280572333520951248122620108926939883551448921840222571344460018226324678471123225918181610219577596593396881424386669304371788604305717791162906484914024302066906289291184909610018017279849225340151932239887227973875427627302678032924316046465078912241870598131498558725298849318226288634393639000702453470559568550847165402702773608500460296558062625346744173252753045813709633888603054060470256418567305910723106975167637467610128120688575094336577963814521724105097713100329821754050627917856655527088893137899732561313880613676212015530137089476681713276335357
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fix.accesswca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6b9ae135374392ac289c90240e429977cd065935
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fe08e36385077ef5005889b389a94fed0f0a414f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mssl-crl.ws.symantec.com/PrivateCA/821017909-RSA-SHA256.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (128 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mssl-ocsp.ws.symantec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://mssl-aia.ws.symantec.com/PrivateCA/821017909-RSA-SHA256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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