zalera.zalecorp.com
- Zale Corporation -
Issued by Symantec Class 3 Secure Server CA - G4
About this certificate
This digital certificate with serial number 67:e6:ef:a2:8e:a7:a8:b0:f3:6f:f0:f8:3f:e9:52:d9 was issued on by Symantec Corporation.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Zale Corporation
Organization:
Zale Corporation
Organization unit: IT
Organization unit: IT
State / Province:
Texas
Locality: Irving
Country: US
Locality: Irving
Country: US
Symantec Corporation
Organization:
Symantec Corporation
Organization unit: Symantec Trust Network
Organization unit: Symantec Trust Network
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 67:e6:ef:a2:8e:a7:a8:b0:f3:6f:f0:f8:3f:e9:52:d9Serial Number (int): 138109572218316503951952380838791434969
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef
Fingerprint (sha1): 96:6c:63:f7:08:22:a7:54:76:7b:3e:5e:4c:d3:9f:ba:49:ee:da:18
Fingerprint (sha256): 21:e0:3c:60:b1:c4:79:a7:a6:d9:a4:8b:1a:5e:cd:63:46:30:b3:55:27:ca:75:24:5d:39:47:8a:3b:44:75:1e
Issuing Certificate URL: http://ss.symcb.com/ss.crt
Revocation information
OCSP Server: http://ss.symcd.comCRL Distribution Point: http://ss.symcb.com/ss.crl
Check the revocation status for certificate zalera.zalecorp.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for zalera.zalecorp.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
zalera.zalecorp.com
Other certificates including the domain name zalecorp.com
(limited to 100 certificates)
qlgrd1app00.irving.zalecorp.com
zvision.zalecorp.com
sapcaruxp.zalecorp.com
plgrd1app00.irving.zalecorp.com
zalera.zalecorp.com
sslvpn.zalecorp.com
znet.zalecorp.com
bi.zalecorp.com
zmc.zalecorp.com
oemserver.irving.zalecorp.com
intranet.zalecorp.com
repair.zalecorp.com
bitbucket.zalecorp.com
myz.zalecorp.com
oemserver.irving.zalecorp.com
repair.zalecorp.com
zalera.zalecorp.com
dev-bitbucket.zalecorp.com
znet.zalecorp.com
myzapps.zalecorp.com
saps4h.zalecorp.com
saps4h.zalecorp.com
stores.zalecorp.com
myz.zalecorp.com
supplychain.zalecorp.com
sapbpc.zalecorp.com
myzapps.zalecorp.com
zvision.zalecorp.com
zalera.zalecorp.com
airwatch.zalecorp.com
www.zalecorp.com
zvision.zalecorp.com
znet.zalecorp.com
intranet.zalecorp.com
myz.zalecorp.com
srsprod.jewels.com
supplychaindev.zalecorp.com
zalera.zalecorp.com
sapfiori.zalecorp.com
intranet.zalecorp.com
wvweb019ad.irving.zalecorp.com
myzapps.zalecorp.com
apidev.zalecorp.com
intranet.zalecorp.com
reports.zalecorp.com
supplychaintest.zalecorp.com
api4dev.zalecorp.com
myzapps.zalecorp.com
api4.jewels.com
sapsolman.zalecorp.com
sapslt.zalecorp.com
repair.zalecorp.com
BI.ZALECORP.COM
zmc.zalecorp.com
*.zalecorp.com
reports.zalecorp.com
intranet.zalecorp.com
zvision.zalecorp.com
dlfesbapp00.irving.zalecorp.com
atlas.zalecorp.com
repairwebservice.zalecorp.com
sapcaruxp.zalecorp.com
pwservices.zalecorp.com
supplychain.zalecorp.com
email.zalecorp.com
email.zalecorp.com
webmail.zalecorp.com
www.zalecorp.com
myz.zalecorp.com
intranet.zalecorp.com
intranet.zalecorp.com
myzapps.zalecorp.com
myzapps.zalecorp.com
myzapps.zalecorp.com
pgp.zalecorp.com
zmc.zalecorp.com
api4dev.zalecorp.com
pgpreporting.zalecorp.com
zalera.zalecorp.com
sapfioriuxp.zalecorp.com
myz.zalecorp.com
www.zalecorp.com
www.zalecorp.com
znet.zalecorp.com
storeinventorytest.zalecorp.com
repair.zalecorp.com
zvision.zalecorp.com
signetra.zalecorp.com
zvision.zalecorp.com
sapbpcuxp.zalecorp.com
myzweb.zalecorp.com
saps4h.zalecorp.com
ztest.zalecorp.com
bi.zalecorp.com
myz.zalecorp.com
sapsltuxp.zalecorp.com
intranet.zalecorp.com
webmail.zalecorp.com
repair.zalecorp.com
twservices.zalecorp.com
zvision.zalecorp.com
sapcaruxp.zalecorp.com
plgrd1app00.irving.zalecorp.com
zalera.zalecorp.com
sslvpn.zalecorp.com
znet.zalecorp.com
bi.zalecorp.com
zmc.zalecorp.com
oemserver.irving.zalecorp.com
intranet.zalecorp.com
repair.zalecorp.com
bitbucket.zalecorp.com
myz.zalecorp.com
oemserver.irving.zalecorp.com
repair.zalecorp.com
zalera.zalecorp.com
dev-bitbucket.zalecorp.com
znet.zalecorp.com
myzapps.zalecorp.com
saps4h.zalecorp.com
saps4h.zalecorp.com
stores.zalecorp.com
myz.zalecorp.com
supplychain.zalecorp.com
sapbpc.zalecorp.com
myzapps.zalecorp.com
zvision.zalecorp.com
zalera.zalecorp.com
airwatch.zalecorp.com
www.zalecorp.com
zvision.zalecorp.com
znet.zalecorp.com
intranet.zalecorp.com
myz.zalecorp.com
srsprod.jewels.com
supplychaindev.zalecorp.com
zalera.zalecorp.com
sapfiori.zalecorp.com
intranet.zalecorp.com
wvweb019ad.irving.zalecorp.com
myzapps.zalecorp.com
apidev.zalecorp.com
intranet.zalecorp.com
reports.zalecorp.com
supplychaintest.zalecorp.com
api4dev.zalecorp.com
myzapps.zalecorp.com
api4.jewels.com
sapsolman.zalecorp.com
sapslt.zalecorp.com
repair.zalecorp.com
BI.ZALECORP.COM
zmc.zalecorp.com
*.zalecorp.com
reports.zalecorp.com
intranet.zalecorp.com
zvision.zalecorp.com
dlfesbapp00.irving.zalecorp.com
atlas.zalecorp.com
repairwebservice.zalecorp.com
sapcaruxp.zalecorp.com
pwservices.zalecorp.com
supplychain.zalecorp.com
email.zalecorp.com
email.zalecorp.com
webmail.zalecorp.com
www.zalecorp.com
myz.zalecorp.com
intranet.zalecorp.com
intranet.zalecorp.com
myzapps.zalecorp.com
myzapps.zalecorp.com
myzapps.zalecorp.com
pgp.zalecorp.com
zmc.zalecorp.com
api4dev.zalecorp.com
pgpreporting.zalecorp.com
zalera.zalecorp.com
sapfioriuxp.zalecorp.com
myz.zalecorp.com
www.zalecorp.com
www.zalecorp.com
znet.zalecorp.com
storeinventorytest.zalecorp.com
repair.zalecorp.com
zvision.zalecorp.com
signetra.zalecorp.com
zvision.zalecorp.com
sapbpcuxp.zalecorp.com
myzweb.zalecorp.com
saps4h.zalecorp.com
ztest.zalecorp.com
bi.zalecorp.com
myz.zalecorp.com
sapsltuxp.zalecorp.com
intranet.zalecorp.com
webmail.zalecorp.com
repair.zalecorp.com
twservices.zalecorp.com
Certificate
The complete raw certificate details for zalera.zalecorp.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE+zCCA+OgAwIBAgIQZ+bvoo6nqLDzb/D4P+lS2TANBgkqhkiG9w0BAQsFADB+ MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAd BgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxLzAtBgNVBAMTJlN5bWFudGVj IENsYXNzIDMgU2VjdXJlIFNlcnZlciBDQSAtIEc0MB4XDTE2MDgzMDAwMDAwMFoX DTE3MDgzMTIzNTk1OVowdDELMAkGA1UEBhMCVVMxDjAMBgNVBAgMBVRleGFzMQ8w DQYDVQQHDAZJcnZpbmcxGTAXBgNVBAoMEFphbGUgQ29ycG9yYXRpb24xCzAJBgNV BAsMAklUMRwwGgYDVQQDDBN6YWxlcmEuemFsZWNvcnAuY29tMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ixo6Q5U1ti57kQZBsGeN2E1/OUTT9h5lM96 eWo9HSNt+rJyTYLoPKo/MR5c01j3B+YPGCTPXZvgty/n3CRwKr0VpurZXahTy5DQ DDbt2Eo9CmwCg/yxjQ/EVfCnfNDiRcD9IfKMezGwYUjtQGwaOIR9YQy1ZCFvQsdP sppU9wH1nNz4Q2ZFDsiVRfflGfJqLiFW7hT+3ojE7Rx2nF0K1UtWgBsd4mtjo3Vz YFiLunS0qkFs1ImNDirSqL5e0U3PBfftgESOmWruPTZyqrU5axdzHkuC0KS9PH4r Ulizfis0J8/GTaEuKEeNelvl0pfXaZ5CEvZ9GSzxQbhmdXX6MwIDAQABo4IBfTCC AXkwHgYDVR0RBBcwFYITemFsZXJhLnphbGVjb3JwLmNvbTAJBgNVHRMEAjAAMA4G A1UdDwEB/wQEAwIFoDBhBgNVHSAEWjBYMFYGBmeBDAECAjBMMCMGCCsGAQUFBwIB FhdodHRwczovL2Quc3ltY2IuY29tL2NwczAlBggrBgEFBQcCAjAZDBdodHRwczov L2Quc3ltY2IuY29tL3JwYTArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8vc3Muc3lt Y2IuY29tL3NzLmNybDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHwYD VR0jBBgwFoAUX2DPYZBV34RDFIpgKrL1evRDGO8wVwYIKwYBBQUHAQEESzBJMB8G CCsGAQUFBzABhhNodHRwOi8vc3Muc3ltY2QuY29tMCYGCCsGAQUFBzAChhpodHRw Oi8vc3Muc3ltY2IuY29tL3NzLmNydDATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkq hkiG9w0BAQsFAAOCAQEACZjD739lK0ro1qGyS3SAOaXGYb1j903NdGdmrSdp8yaS uShpX4q3ud/tVX/7XST5dw4z9Puw7WHwWRW/VbfN/Sr97RPCjER04PzjfC4YWLAu 9nmPXx+gKq2zUyp9sGIHAkijaw1JnYU3okW0v4gW3sqEOyZVO2MuU8W2fGL+ls0z GHudXwkUaW0vZhTuY35UB12D6nviYbmE7GCFyNkHQxmhL59VG8JtSg+Zzq/ZwEH/ kqA2B05gzlS6BFiHjWSdEXi2QgMEO3d8PQTUjty7HQWBVOItTtWQ9a0oEe8vQUmf MYgFCHYqFT4R/S8a40jlr6ReLRWhSz7Lmg4bHwg3GQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ixo6Q5U1ti57kQZBsGe N2E1/OUTT9h5lM96eWo9HSNt+rJyTYLoPKo/MR5c01j3B+YPGCTPXZvgty/n3CRw Kr0VpurZXahTy5DQDDbt2Eo9CmwCg/yxjQ/EVfCnfNDiRcD9IfKMezGwYUjtQGwa OIR9YQy1ZCFvQsdPsppU9wH1nNz4Q2ZFDsiVRfflGfJqLiFW7hT+3ojE7Rx2nF0K 1UtWgBsd4mtjo3VzYFiLunS0qkFs1ImNDirSqL5e0U3PBfftgESOmWruPTZyqrU5 axdzHkuC0KS9PH4rUlizfis0J8/GTaEuKEeNelvl0pfXaZ5CEvZ9GSzxQbhmdXX6 MwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 138109572218316503951952380838791434969 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-30 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-31 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Irving' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zale Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'zalera.zalecorp.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27841665748506530325378869938196827734138774209370086802638749147483296816982440465481198536501483407827200572311533180435723959245275501243920484967507570775643495302572612493609539603482175749849439887054648210328573456389361419711519194745206836634358320069396162718431894487456190254570743852906970710253620997802799371628429070784235529182157107221368831001385103086629481529732336980238249063332032512742613413627719091980924755931266209179877769220982109402991982028497673175037192667765161224608873767352165242419948546469824213581560261615904693049753187355019143456369619135495395842849006469899400894609971 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zalera.zalecorp.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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