subscribe.hearstmags.com

- Hearst Communications, Inc. -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 5b:7d:99:e8:a1:cb:d9:b5:80:bb:0e:54:d7:a3:76:a0 was issued on by Symantec Corporation.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Hearst Communications, Inc.

Organization: Hearst Communications, Inc.
State / Province: New York
Locality: New York
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5b:7d:99:e8:a1:cb:d9:b5:80:bb:0e:54:d7:a3:76:a0
Serial Number (int): 121611906363420786526995749614959949472
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 5c:28:93:7c:e7:e6:71:f8:4a:75:4b:d5:b0:a9:aa:e7:36:87:b7:ae
Fingerprint (sha256): 22:59:19:d0:d1:74:50:87:e4:b0:ad:1e:e0:01:e9:d1:61:ce:0d:52:fb:7c:b5:fd:c7:50:5e:38:42:14:b8:5f

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate subscribe.hearstmags.com

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for subscribe.hearstmags.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

subscribeandsave.marieclaire.com
subscribeandsave.harpersbazaar.com
subscribeandsave.redbookmag.com
subscribeandsave.theoprahmag.com
subscribeandsave.countryliving.com
subscribeandsave.seventeen.com
subscribeandsave.housebeautiful.com
subscribeandsave.esquire.com
subscribeandsave.drozthegoodlife.com
subscribeandsave.cosmopolitan.com
subscribeandsave.hgtvmag.com
subscribeandsave.goodhousekeeping.com
subscribeandsave.thepioneerwomanmagazine.com
subscribeandsave.foodnetworkmag.com
subscribeandsave.veranda.com
subscribeandsave.roadandtrack.com
subscribeandsave.townandcountrymag.com
subscribeandsave.ocircleoffriends.com
subscribeandsave.womansday.com
subscribeandsave.popularmechanics.com
subscribeandsave.caranddriver.com
subscribeandsave.elledecor.com
subscribeandsave.elle.com
subscribe.hearstmags.com

Other certificates including the domain name hearstmags.com

(limited to 100 certificates)
wpm.ccmp.eu
*.25ans.jp
subscribe.hearstmags.com
wpm03.eccmp.com
cosmopolitan.com
services.hearstmags.com
preferences.hearstmags.com
wpm.ccmp.eu
preferences.hearstmags.com
cosmopolitan.com
wpm03.eccmp.com
subscribe.hearstmags.com
wpm.ccmp.eu
admin.hearstmags.com
wpm.ccmp.eu
subscribe.hearstmags.com
services.hearstmags.com
hearst-hdm.map.fastly.net
hearst-hdm.map.fastly.net
wpm03.eccmp.com
hearst-hdm.map.fastly.net
wpm.ccmp.eu
hearst-hdm.map.fastly.net
wpm.ccmp.eu
wpm03.eccmp.com
cosmopolitan.com
subscribe.hearstmags.com
subscribe.hearstmags.com
subscribe.hearstmags.com
stage.services.hearstmags.com
cosmopolitan.com
wpm.ccmp.eu
services.hearstmags.com
wpm03.eccmp.com
stage.services.hearstmags.com
wpm.ccmp.eu
subscribe.hearstmags.com
admin.hearstmags.com
subscribe.hearstmags.com
cosmopolitan.com
wpm.ccmp.eu
admin.hearstmags.com
wpm03.eccmp.com
hearst-hdm.map.fastly.net
subscribe.hearstmags.com
cosmopolitan.com
wpm.ccmp.eu
wpm.ccmp.eu
stage.services.hearstmags.com
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
hearst-hdm.map.fastly.net
hearst-hdm.map.fastly.net
wpm.ccmp.eu
wpm.ccmp.eu
hearst-hdm.map.fastly.net
subscribe.hearstmags.com
wpm.ccmp.eu
subscribe.hearstmags.com
wpm.ccmp.eu
services.hearstmags.com
subscribe.hearstmags.com
services.hearstmags.com
hearst-hdm.map.fastly.net
hearst-hdm.map.fastly.net
hearst-hdm.map.fastly.net
subscribe.hearstmags.com
subscribe.hearstmags.com
subscribe.hearstmags.com
cosmopolitan.com
subscribe.hearstmags.com
hearst-hdm.map.fastly.net
cosmopolitan.com
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
subscribe.hearstmags.com
cosmopolitan.com
hearst-hdm.map.fastly.net
cosmopolitan.com
wpm.ccmp.eu
optout.hearstmags.com
cosmopolitan.com
cosmopolitan.com
hearst-hdm.map.fastly.net
preferences.hearstmags.com
wpm.ccmp.eu
subscribe.hearstmags.com
admin.hearstmags.com
subscribe.hearstmags.com
subscribe.hearstmags.com
hearst-hdm.map.fastly.net
hearst-hdm.map.fastly.net
wpm.ccmp.eu
wpm.ccmp.eu
subscribe.hearstmags.com
hearst-hdm.map.fastly.net
cosmopolitan.com
subscribe.hearstmags.com

Certificate

The complete raw certificate details for subscribe.hearstmags.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lNZd43X6lZN3GBO6avt
XlSS0476oguCP0Z+ObuFUkixb4W7zX5kkb+b7YiF7+ToIRsNwAyi4+LegLBTTsXb
+KMroiwEqRzne8/MyLQ4Cb6uaQjaV0oURf8q6TBgUCV2CtcwFCek3H0jXlh4cRvZ
a0PJTWM7OgVUlYq6lQDnUXw3pwmLTBsPLl3NN2kj4H8cUUZkm3d45005JgxUAAlJ
4kALwAv4QAHPjZ5WASX36cYOoZSfEEsktLQE/AmJ1g/9B8kx8LGMbtvAejda0KD5
sgckp3+mJEBC3970duuQ1MySn74LMom0iVla8DTLMtpQkWznv5Z+j69cHZtvrUCt
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 121611906363420786526995749614959949472
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hearst Communications, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'subscribe.hearstmags.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27056098423432542103373565379327786566661879187254261073167244994106620686824170801748159998282631118763384831769285809353271742027045750865556590895250211499997709191721731664804317681630287847620526910106454458634284690114463948531151233128774004775027214853317893393922135107403923958195971205224243647077264464851436456214543479437876115945450109762120037150640514603425286431934338558342010671214051130113477318378504268664804892740803717299808847297813207277296169556278353103469661175529738364825192563273356175669785383513279168035573059392055450613809852064712345027338848844505319928707282308928366817881547
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (836 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.marieclaire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.harpersbazaar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.redbookmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.theoprahmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.countryliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.seventeen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.housebeautiful.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.esquire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.drozthegoodlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.cosmopolitan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.hgtvmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.goodhousekeeping.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.thepioneerwomanmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.foodnetworkmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.veranda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.roadandtrack.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.townandcountrymag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.ocircleoffriends.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.womansday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.popularmechanics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.caranddriver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.elledecor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribeandsave.elle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribe.hearstmags.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015dd1618dec0000040300463044022051b9fdd7afab139844399e8a02aaef8a535a97183575a51b5a12d615592e65f302207dfe26de669b5dbfc33057f9ec6d4a9152a13bd36b37cbd5fb9ff111940796d6007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015dd1618e1c0000040300473045022100c3326f52841111eb47c9f6184a30f13411d3ddfaac9f49267cd82b6fbdc5a38f02200fd98ae7548f70b1b6bc40233b1a1099bcd39a2042a90cbe70c8bf305a518962
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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