preferencesorigin-dev.em.fiacardservices.com

- Bank of America Corporation -

Issued by Symantec Class 3 EV SSL CA - G3

About this certificate

This digital certificate with serial number 34:2d:cc:c5:e2:28:d6:31:2d:77:08:b5:0d:a1:2b:5b was issued on by Symantec Corporation.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Bank of America Corporation

Company registration number: 2927442
Organization: Bank of America Corporation
Organization unit: Microsites Center of Excellence - VZ AIT 70127
Address: 135 S La Salle St
Postal code: 60603
State / Province: Illinois
Locality: Chicago
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 34:2d:cc:c5:e2:28:d6:31:2d:77:08:b5:0d:a1:2b:5b
Serial Number (int): 69357662428949833631125291879092005723
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 01:59:ab:e7:dd:3a:0b:59:a6:64:63:d6:cf:20:07:57:d5:91:e7:6a

Fingerprint (sha1): 55:76:75:1a:2b:44:c5:ff:8f:28:47:36:2e:d7:39:b1:92:c4:b9:ac
Fingerprint (sha256): 2d:e0:5e:6e:1c:30:e9:3f:ad:11:89:64:45:87:fb:bb:7a:22:7e:23:64:ce:3c:ab:12:8d:d6:e5:6f:33:74:98

Issuing Certificate URL: http://sr.symcb.com/sr.crt

Revocation information

OCSP Server: http://sr.symcd.com
CRL Distribution Point: http://sr.symcb.com/sr.crl

Check the revocation status for certificate preferencesorigin-dev.em.fiacardservices.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for preferencesorigin-dev.em.fiacardservices.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

preferencesorigin-dev.em.fiacardservices.com
preferences-dev.em.fiacardservices.com

Other certificates including the domain name fiacardservices.com

(limited to 100 certificates)
www.managerewardsonline.fiacardservices.com
godirectdebit.fiacardservices.com
epass-uat.bankofamerica.com
www.managerewardsonline.fiacardservices.com
affinityweb.fiacardservices.com
wwwn.managerewardsonline.fiacardservices.com
Easyrewards.fiacardservices.com
affinityweb.fiacardservices.com
shopsafe-devps.ecnp.fiacardservices.com
reward-redemption.fiacardservices.com
mydirectdebit.fiacardservices.com
campus.bankofamerica.com
ddoxlogin.dynamicdox.com
travelcenter.fiacardservices.com
travelcenter.fiacardservices.com
www.staging.managerewardsonline.fiacardservices.com
affinityweb.fiacardservices.com
wwwa.managerewardsonline.fiacardservices.com
about-dev.bankofamerica.com
www5-staging.managerewardsonline.com
www5-staging.managerewardsonline.com
shopsafe-qaps.ecnp.fiacardservices.com
easyrewards.fiacardservices.com
mydirectdebit.fiacardservices.com
shopsafe-cert1.ecnp.fiacardservices.com
secure.fiacardservices.com
www.managerewardsonline.fiacardservices.com
mynewcard.fiacardservices.com
reward-redemption.fiacardservices.com
secure-cert2.ecnp.fiacardservices.com
onlinedirectdebit.fiacardservices.com
mynewcard.fiacardservices.com
travelcenterfaq.fiacardservices.com
secure.fiacardservices.com
ddoxlogin.dynamicdox.com
mydirectdebit.fiacardservices.com
shopsafe-devflex.ecnp.fiacardservices.com
epass-uat.bankofamerica.com
shopsafe-devflex.ecnp.fiacardservices.com
preferences.em.fiacardservices.com
sso-fi.fiacardservices.com
secure-pt2.ecnp.fiabusinesscard.com
preferences.em.fiacardservices.com
campus.bankofamerica.com
reward-redemption.fiacardservices.com
ddoxlogin-uat.bankofamerica.com
eesorigin.bankofamerica.com
www.managerewardsonline.fiacardservices.com
secure-pt2.ecnp.fiacardservices.com
businesscard.fiacardservices.com
www.managerewardsonline.fiacardservices.com
www.managerewardsonline.fiacardservices.com
secure-preview2.ecnp.fiacardservices.com
wwwn.staging.managerewardsonline.fiacardservices.com
preferencesorigin-dev.em.fiacardservices.com
www.staging.managerewardsonline.fiacardservices.com
godirectdebit.fiacardservices.com
www.managerewardsonline.fiacardservices.com
secure.fiacardservices.com
wwwa.managerewardsonline.fiacardservices.com
secure-dev1.ecnp.fiacardservices.com
sso-fi.fiacardservices.com
ddoxlogin.dynamicdox.com
secure.fiacardservices.com
aboutorigin-dev.bankofamerica.com
preferences-qa.em.fiacardservices.com
www5-staging.managerewardsonline.com
giftcard.fiacardservices.com
rewardsshoppingmall.fiacardservices.com
www.managerewardsonline.fiacardservices.com
shopsafe-pt1.ecnp.fiacardservices.com
secure-dev3.ecnp.fiacardservices.com
testSymantecStandardSSL-FIACardServices-SHA1.fiacardservices.com
mynewcard.fiacardservices.com
ddoxlogin.dynamicdox.com
www.staging.managerewardsonline.fiacardservices.com
redorigin-dev.bankofamerica.com
secure-qa2.ecnp.fiacardservices.com
ddoxlogin-uat-ah.dynamicdox.com
wwwa.managerewardsonline.fiacardservices.com
redorigin-dev.bankofamerica.com
uat.travelcenter.fiacardservices.com
choosedirectdebit.fiacardservices.com
campus.bankofamerica.com
onlinedirectdebit.fiacardservices.com
mynewcard.fiacardservices.com
mynewcarda.fiacardservices.com
choosedirectdebit.fiacardservices.com
secure-pt2.ecnp.fiacardservices.com
shopsafe-dev2.ecnp.fiacardservices.com
secure-dev2.ecnp.fiacardservices.com
redorigin-dev.bankofamerica.com
campus.bankofamerica.com
epass-uat.bankofamerica.com
miu-test.fiacardservices.com
travelcenter.sit1.fiacardservices.com
wwwn.managerewardsonline.fiacardservices.com
secure-preview2.ecnp.fiacardservices.com
affinityweb.fiacardservices.com
mynewcardn.fiacardservices.com

Certificate

The complete raw certificate details for preferencesorigin-dev.em.fiacardservices.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01rFuYw6rmws1DuTTW2V
TrUotlcMoo4hUYPH7+mqtycv8aSst7GECD4aCGXHAS+u58MCtAv9aPIft/eBCgNY
XX2UeikZlLENSB7bj3JZofVBHbyc8D9jn6SQ1PQ6aPy8aLu1c5ofqa9T4m1Ejt3X
fC0H6TsZejqfX0XN0yI3ZWYdPnQIOaX/rouCF3TIxatQ1Xq12XVo7sC9rm9lz3eh
n0lL2FPPdm/zYsa/KWX38rJ489D4Vx7sUTTP/C1wqfKONUiDrLiA8s8sc2tRWVHF
8krgCPQ5ty0z38m0tzeJgN61G+WXtGnoyrRAS0B/clIHU/vE5uSlDECwo+KygWAz
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 69357662428949833631125291879092005723
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 EV SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2927442'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '60603'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '135 S La Salle St'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bank of America Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Microsites Center of Excellence - VZ AIT 70127'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'preferencesorigin-dev.em.fiacardservices.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26681043868064077794118130772044747536276248742689095119562559654992742197241310443459277218801003145298706006756054643411528881531316471898131078916529008746552190258301503026127128390825892530928991174181101503091467357525319010814177099142802287049777259120393242519353157390529475485875419598730142174854575296411185553031445167197317571734797504941444128288152403488567399325903811163538730293171409987281929019474190959589990603931905821262157744982299785219972789588304998911369066850137826840038161443979899278509186830986738614248631829797584813274298602888203404635917429635694053646636669080165638358447011
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preferencesorigin-dev.em.fiacardservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preferences-dev.em.fiacardservices.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.23.6 (VeriSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0159abe7dd3a0b59a66463d6cf200757d591e76a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr.symcb.com/sr.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr.symcb.com/sr.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015f7cdcc89b0000040300463044022012f63151b7de790b86d0f2678f7bcbf14b6883bd789983e069a16dbee7a9d01502207555d23ea7e0554d6d505afc23ee71e219fa171189edd6503b450767702d89af007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015f7cdcc8cb000004030047304502201a2eec2803f2e5ec2f2c5de0824d88f1621c19190a352df0eb6c1db65887240002210099cccfb13e4fd38c34cd4220f49f6a6100f858ec10b316dd389fcddf86ea0795
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006ba9326266c03331d67708ca28064c18825277decb069daceed309999e435bf8a66930d7f7b4f76c731113ef6d6867b795b27f37a3483ac58a1de257684713aecdac960bfcaf54c0b2c310a11fbcb22232011d9cad9d0160f0695ecedd8053fd32197b3c5afc16777bb50d4846280d96ca8f3b020c6465d203d2bd2b90afe7282134064e23a2072829b83765c9de3575088907adf0f0560a15c62cbee246ec6b82d07b572f7ed70307372ce5408a731be83b3a339ebabc057a29f2dd89332780eb035947743bae296ac718f55638a1e4d49f8cc140183b3bb22928cbdb05cc7b79ddd756f8e4f6077e75606d57c7ae7d56a200cbfaf1cb456a16717ce96c8570