www.seeso.com

- NBCUniversal Media, LLC -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 7d:e6:89:c6:70:af:b1:2a:05:c9:e7:c4:ab:bd:c4:52 was issued on by Symantec Corporation.

With 26 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

NBCUniversal Media, LLC

Organization: NBCUniversal Media, LLC
State / Province: New York
Locality: New York
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7d:e6:89:c6:70:af:b1:2a:05:c9:e7:c4:ab:bd:c4:52
Serial Number (int): 167350522162744092323195867084034524242
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 9d:59:7d:48:84:cc:64:9a:e2:61:b2:f0:ba:4f:b6:24:b4:f0:57:00
Fingerprint (sha256): 30:a1:1c:2d:a9:e9:52:32:17:10:39:a8:7d:50:51:ef:ad:26:3d:c2:af:cd:3e:3d:96:a7:a2:62:37:f6:f7:ef

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate www.seeso.com

26

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.seeso.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.serverfarm.evil-corp-usa.com
www.e-corp-online.com
*.evil-corp-usa.com
www.conficturaindustries.com
*.bxjyb2jvda.net
www.whoismrrobot.com
conficturaindustries.com
www.realtimetranslation.net
www.e-corp-usa.com
fsoc.sh
e-corp-usa.com
www.whereismrrobot.com
*.seeso.com
www.fsoc.sh
racksure.com
e-corp-online.com
www.iammrrobot.com
www.racksure.com
evil-corp-usa.com
*.e-corp-usa.com
seeso.com
realtimetranslation.net
iammrrobot.com
whereismrrobot.com
whoismrrobot.com
www.seeso.com

Other certificates including the domain name seeso.com

(limited to 100 certificates)
www.seeso.com
www.seeso.com
click.mail.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
login.seeso.com
seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
akamai-san9.exacttarget.com
www.seeso.com
akamai-san9.exacttarget.com
www.seeso.com
seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
pages.mail.seeso.com
akamai-san9.exacttarget.com
click.mail.seeso.com
www.seeso.com
akamai-san9.exacttarget.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
akamai-san9.exacttarget.com
akamai-san9.exacttarget.com
akamai-san9.exacttarget.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
akamai-san9.exacttarget.com
akamai-san9.exacttarget.com
seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
akamai-san9.exacttarget.com
click.mail.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
view.mail.seeso.com
akamai-san9.exacttarget.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
akamai-san9.exacttarget.com
akamai-san9.exacttarget.com
www.seeso.com
akamai-san9.exacttarget.com
view.mail.seeso.com
www.seeso.com
www.seeso.com
login.seeso.com
akamai-san9.exacttarget.com
akamai-san9.exacttarget.com
seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
*.seeso.com
www.seeso.com
pages.mail.seeso.com
akamai-san9.exacttarget.com
seeso.com
akamai-san9.exacttarget.com
www.seeso.com
login.seeso.com
seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
akamai-san9.exacttarget.com
login.seeso.com
www.seeso.com
www.seeso.com
akamai-san9.exacttarget.com
www.seeso.com
seeso.com

Certificate

The complete raw certificate details for www.seeso.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtpZUhOosmcNg29LwejE
dbN4n/CtgaltKLWHzN8EJwuae58+yiy/yHh3aZZv7hr+kuaQUsN+YxEflVEcHKJc
sL6RTD/Q+MIAUm5y0LnkxF3sRp6+p+wwTLrZeIRcPWHzBmObDaUfTUMv1EKtc+g9
G9v53GolLbfi91HmEFtF1ZbbmbKnKQfb+33cqTmeT24af2bbi91qT4vvj+LgYGeF
H1QPeLO6uUAwGKQOIkxGNFKMo/wRDt25OCTpqkytZuiYeCQ/qhoqZ1Frvy68mjSO
x9MKHATiPLUF2d0lItqUKmPlkImc+DvAz/oeT/rKjSHsGF2PvLfHCBaHPGDsWW5g
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 167350522162744092323195867084034524242
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NBCUniversal Media, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.seeso.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24597903023252146538500750197809348750103249299359429726743275292748335818817261812225104222536312067060864160255140930619371134327541310419116317696156863894188454276660954092642583553540784612761020837414482656451523105077600913336635792743905977128557367267913054215418479429294727753143035844036874968995202512864721334840611591381694044850044155271109575339477303676389970440833760081925583793199207894935458578686960854120648656227883607637906445647083569644048481158884257870897090578560177177941960856901485649660007039479374252406024927744302007232407877970062978062336809062541955757636633159327165801455851
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (513 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.serverfarm.evil-corp-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.e-corp-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.evil-corp-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.conficturaindustries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bxjyb2jvda.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whoismrrobot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conficturaindustries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.realtimetranslation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.e-corp-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsoc.sh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-corp-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whereismrrobot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seeso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fsoc.sh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'racksure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-corp-online.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iammrrobot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.racksure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evil-corp-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.e-corp-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seeso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realtimetranslation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iammrrobot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whereismrrobot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whoismrrobot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seeso.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc000001570572fd110000040300483046022100e97c69e9733e3bd7988efbd6d68baf302e74c18313633bc218965e3852d4f388022100b0f4c6bf6783f47d7e591af7001f45131b0e14bfe397c4ef1954511147d90b1c007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001570572fe67000004030046304402206941b78717e706e9c0c4ba37df379bb176049aa661f509277b2d3c6286a5f53d022076522b8083c0fae6fc9248bd52977942e6a21c73104a9029fd16f3753e9591ed
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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