rapidtest1.accountonline.citibankonlineqa.com

- Citigroup Inc. -

Issued by Symantec Class 3 EV SSL CA - G3

About this certificate

This digital certificate with serial number 09:eb:03:ef:11:a9:f3:fd:52:3c:1e:66:cc:91:86:6d was issued on by Symantec Corporation.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Citigroup Inc.

Company registration number: 2154254
Organization: Citigroup Inc.
Organization unit: Citi
Address: 399 Park Avenue
Postal code: 10022
State / Province: New York
Locality: New York
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:eb:03:ef:11:a9:f3:fd:52:3c:1e:66:cc:91:86:6d
Serial Number (int): 13183321512046285051511857986378237549
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 01:59:ab:e7:dd:3a:0b:59:a6:64:63:d6:cf:20:07:57:d5:91:e7:6a

Fingerprint (sha1): 88:5b:54:c3:09:db:90:3b:a6:2b:97:61:6c:88:d1:fe:47:0b:ec:52
Fingerprint (sha256): 23:89:1e:b7:1f:69:ab:cf:1a:81:36:c2:61:79:47:a7:dd:89:16:28:4a:bf:18:d4:a4:7a:8d:10:76:72:cc:7c

Issuing Certificate URL: http://sr.symcb.com/sr.crt

Revocation information

OCSP Server: http://sr.symcd.com
CRL Distribution Point: http://sr.symcb.com/sr.crl

Check the revocation status for certificate rapidtest1.accountonline.citibankonlineqa.com

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rapidtest1.accountonline.citibankonlineqa.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rapidtest2.accountonline.citibankonlineqa.com
rapidtest1.accountonline.citibankonlineqa.com
dit15.accountonline.citi.com
dit13.accountonline.citi.com
dit14.accountonline.citi.com
sit15.accountonline.citi.com
sit13.accountonline.citi.com
sit14.accountonline.citi.com
sit06.accountonline.com
sit06.accountonline.citi.com
sit07.accountonline.com
sit07.accountonline.citi.com

Other certificates including the domain name citibankonlineqa.com

(limited to 100 certificates)
uat.accountonline.com
mispagosaldia.uat1.citibankonlineqa.com
brazilmobileqa1.citibankonlineqa.com
brazil.uat2.citibankonlineqa.com
portal.banamex.uat1.citibankonlineqa.com
web-uat2.citibankonlineqa.com
olb-usmtcmweb1.citibankonlineqa.com
venezuela.uat2.citibankonlineqa.com
uat1.online.citi.com
latam.uat1.citibankonlineqa.com
productest5.accountonline.com
portal.banamex.uat1.citibankonlineqa.com
productest5.web.citibankonlineqa.com
colombia.uat1.citibankonlineqa.com
ebillsuat.citibankonlineqa.com
colombiacitigold.uat1.citibankonlineqa.com
mobileuat3.citibankonlineqa.com
sit01.accountonline.com
uat.accountonline.com
argentinacomercios.uat1.citibankonlineqa.com
citimobileqa1.citibankonlineqa.com
argentinaempresas.uat1.citibankonlineqa.com
rapidtest1.accountonline.citibankonlineqa.com
web-jfp-qa.citibankonlineqa.com
finapp.financialapplications1.citibankonlineqa.com
productest5.accountonline.com
sit01.accountonline.com
web-ao-uat1.citibankonlineqa.com
venezuela.uat1.citibankonlineqa.com
URUGUAY.UAT1.CITIBANKONLINEQA.COM
iOSAppBrazilMobile.brazilmobilesit1.citibankonlineqa.com
brazilmobilesit1.citibankonlineqa.com
mexicoemaildelivery.uat1.citibankonlineqa.com
static.finapp.stage.yodlee.com
brazilcitigold.uat2.citibankonlineqa.com
citimobileqa.citibankonlineqa.com
brazilcitigold.uat1.citibankonlineqa.com
citimobileuat1.citibankonlineqa.com
sit01.accountonline.com
www.latam.uat1.citibankonlineqa.com
ebills.citibankonlineqa.com
argentinacorporate.uat1.citibankonlineqa.com
venezuela.uat1.citibankonlineqa.com
web-jfp-qa.citibankonlineqa.com
uatpaper.citibankonlineqa.com
productest5.accountonline.com
web.qa1.citibankonlineqa.com
citiwallet.uat1.citibank.com
rapidtest1.accountonline.citibankonlineqa.com
fin.colombia.uat1.citibankonlineqa.com
sit01.accountonline.com
peru.uat1.citibankonlineqa.com
web.qa1.citibankonlineqa.com
mispagosaldia.uat1.citibankonlineqa.com
citimobileuat2.citibankonlineqa.com
uat.accountonline.com
colombiacorporate.uat2.citibankonlineqa.com
citimobileuat1.citibankonlineqa.com
mobilelatam.uat2.citibankonlineqa.com
web-jfp-qa.citibankonlineqa.com
citimobileuat1.citibankonlineqa.com
rapidtest1.accountonline.citibankonlineqa.com
web-jfp-qa.citibankonlineqa.com
web-jfp-qa.citibankonlineqa.com
brazilmobilesit2.citibankonlineqa.com
ebills.citibankonlineqa.com
web-jfp-qa.citibankonlineqa.com
web-jfp-qa.citibankonlineqa.com
mispagosaldia.uat1.citibankonlineqa.com
ELECTRONICDELIVERY.LATAM.UAT1.CITIBANKONLINEQA.COM
colombiapayment.uat1.citibankonlineqa.com
uat.accountonline.com
colombiacorporate.uat1.citibankonlineqa.com
brazilmobileqa1.citibankonlineqa.com
brazilciticard.uat1.citibankonlineqa.com
fin.colombia.uat1.citibankonlineqa.com
brazil.uat1.citibankonlineqa.com
citimobileuat1.citibankonlineqa.com
citimobileuat4.citibankonlineqa.com
brazil.uat1.citibankonlineqa.com
citiwallet.uat1.citibank.com
mexicomobilelite.sit.citibankonlineqa.com
citimobileuat1.citibankonlineqa.com
brazilcorporate.uat2.citibankonlineqa.com
venezuela.uat1.citibankonlineqa.com
portal.banamex.uat1.citibankonlineqa.com
brazilmobilesit1.citibankonlineqa.com
www.mobilelatam.uat1.citibankonlineqa.com
rapidtest1.accountonline.citibankonlineqa.com
colombia.uat1.citibankonlineqa.com
billpresentment.citibankonlineqa.com
productest7.web.citibankonlineqa.com
brazil.uat1.citibankonlineqa.com
uat.accountonline.com
colombiacitigold.uat1.citibankonlineqa.com
mexicoemaildelivery.uat1.citibankonlineqa.com
www.mobilelatam.uat1.citibankonlineqa.com
rapidtest1.accountonline.citibankonlineqa.com
olb-caecu1web1.citibankonlineqa.com
centralamerica.uat2.citibankonlineqa.com

Certificate

The complete raw certificate details for rapidtest1.accountonline.citibankonlineqa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLAsF+mWNFfc2wBSIRxW
GQgBuf+W73bDP/dmbsZvLWZpljnNVJnE0bJqplzyNuL6bZD0yxbHF+dqHci44kkl
Jpzc/eaQ3l/PaSQrX9M7krHeob6nBXkwu/vWi5ufBga6dStte26M6kJLfz9A9xJw
kFg2mDJJTCiD53Yf6ji976yAmxzVmWC4Eg8NdTUkKv0VosOVz+FE0lObEw3yORpd
1/VuIW/0V58rMTSq93YNjiMRqdV2unlHeX04NkcbNTgIK4E+WVXVDSyKx1RWG+kg
PN7lgeeOBObuaWBHhbhwTkETvHqEBzjDahRZ/MklT8+Kwm2K59OoIa37jnllPYEQ
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13183321512046285051511857986378237549
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 EV SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2154254'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '10022'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '399 Park Avenue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Citigroup Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Citi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'rapidtest1.accountonline.citibankonlineqa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21799862223474169928474189309510183915623824588873188097259777771052279030578948286689939176701056692360079250920617450848931796735358866219391882171280780604195013054554842058747491029049686785967517475853181301125386234922008195819258243883887305717880225691308774733108317604700917341781063528394419183636859825063204987239209491640538205330082329043588809324357054094306065559031957247446874750818529997349224872147933148033650350879757654472594077292190040319603630861896371278511907828876865585453784789558593490297489453387260041415193250249770882336337585750815321740345345564946893092036163129863982840614943
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (388 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapidtest2.accountonline.citibankonlineqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapidtest1.accountonline.citibankonlineqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dit15.accountonline.citi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dit13.accountonline.citi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dit14.accountonline.citi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit15.accountonline.citi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit13.accountonline.citi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit14.accountonline.citi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit06.accountonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit06.accountonline.citi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit07.accountonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit07.accountonline.citi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.23.6 (VeriSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0159abe7dd3a0b59a66463d6cf200757d591e76a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr.symcb.com/sr.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr.symcb.com/sr.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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