etfus.deutscheawm.com

- Deutsche Bank AG -

Issued by VeriSign Class 3 Secure Server CA - G3

About this certificate

This digital certificate with serial number 46:e1:86:84:1a:ca:2a:59:1b:e7:c7:a9:31:50:c2:6e was issued on by VeriSign, Inc..

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Deutsche Bank AG

Organization: Deutsche Bank AG
Organization unit: Deutsche Bank AG
State / Province: Hessen
Locality: Frankfurt am Main
Country: DE

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 46:e1:86:84:1a:ca:2a:59:1b:e7:c7:a9:31:50:c2:6e
Serial Number (int): 94216954807409801780495652426691428974
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 0d:44:5c:16:53:44:c1:82:7e:1d:20:ab:25:f4:01:63:d8:be:79:a5

Fingerprint (sha1): 4f:b2:b5:47:75:3d:95:fa:15:04:b5:b6:03:7b:22:04:b4:1d:d9:e5
Fingerprint (sha256): 30:d6:52:b4:3e:e1:82:d8:39:2e:86:56:98:88:9c:79:a6:07:b1:76:85:c7:a6:7f:f6:0c:47:72:04:42:74:14

Issuing Certificate URL: http://sd.symcb.com/sd.crt

Revocation information

OCSP Server: http://sd.symcd.com
CRL Distribution Point: http://sd.symcb.com/sd.crl

Check the revocation status for certificate etfus.deutscheawm.com

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for etfus.deutscheawm.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.etfus.deutscheawm.com
etfs-us.deutscheawm.com
www.etfs-us.deutscheawm.com
etf-us.deutscheawm.com
www.etf-us.deutscheawm.com
dbxus.com
www.dbxus.com
deutsche-etfs.com
www.deutsche-etfs.com
deutscheetfs.com
www.deutscheetfs.com
deutschextrackers.com
www.deutschextrackers.com
deutsche-xtrackers.com
www.deutsche-xtrackers.com
etfus.deutscheawm.com

Other certificates including the domain name deutscheawm.com

(limited to 100 certificates)
clientconnect.deutscheam.com
mediamanager.deutscheam.com
etfus.deutscheam.com
etfus.deutscheawm.com
clientconnect.deutscheam.com
clientconnect.deutscheam.com
institutional.deutscheawm.com
cioview.deutscheawm.com
deutscheawm.com
institutional.deutscheawm.com
institutional.dws.com
lighthouse.dws.de
clientconnect.deutscheam.com
dws.com
institutional.lighthouse.dws.de
fundsus.deutscheawm.com
ml.fundsus.deutscheawm.com
lighthouse.dws.de
cioview.deutscheawm.com
dws.com
cioview.dws.com
ml.fundsus.deutscheawm.com
dws.at
institutional.deutscheawm.com
institutional.deutscheawm.com
ml.fundsus.deutscheawm.com
institutional.deutscheawm.com
crocianalysis.deutscheawm.com
croci.db.com
institutional.deutscheawm.com
ml.fundsus.deutscheawm.com
ml.fundsus.deutscheawm.com
etfus.deutscheam.com
institutional.lighthouse.dws.de
crocianalysis.deutscheam.com
dws.com
fundsus.deutscheawm.com
mediamanager.deutscheam.com
live.cioview.dws.com
etfus.deutscheawm.com
institutional.deutscheawm.com
ml.fundsus.deutscheawm.com
clientconnect.deutscheam.com
dws.com
fundsus.deutscheawm.com
wealth.deutscheawm.com
lighthouse.dws.de
crocianalysis.deutscheam.com
live.uat.cioview.deutscheam.com
clientconnect.deutscheam.com
croci.db.com
dws.at
etfus.deutscheam.com
clientconnect.deutscheawm.com
lighthouse.dws.de
fundsus.deutscheawm.com
www.institutional.deutscheawm.com
crocianalysis.deutscheam.com
uat.lighthouse.dws.de
ml.fundsus.deutscheawm.com
mediamanager.deutscheam.com
liquidity.deutscheawm.com
uat.cioview.deutscheawm.com
lighthouse.dws.de
deutscheawm.com
liquidity.deutscheawm.com
liquidity.deutscheawm.com
fundsus.deutscheawm.com
etfus.deutscheam.com
fundsus.deutscheawm.com
cioview.dws.com
www.fundsus.deutscheam.com
croci.db.com
ml.fundsus.deutscheawm.com
liquidity.deutscheawm.com
liquidity.deutscheawm.com
deutscheam.com
mediamanager.deutscheam.com
liquidity.deutscheawm.com
etfus.deutscheam.com
etfus.deutscheam.com
ml.fundsus.deutscheawm.com
croci.deutscheawm.com
ml.fundsus.deutscheawm.com
dws.com
ml.fundsus.deutscheawm.com
mediamanager.deutscheam.com
dws.com
institutional.deutscheawm.com
lighthouse.dws.de
dws.com
cioview.dws.com
ml.fundsus.deutscheawm.com
crocianalysis.deutscheawm.com
live.cioview.dws.com
lighthouse.dws.de
liquidity.deutscheawm.com
dws.com
www.deutsche-etfs.com
institutional.lighthouse.dws.de

Certificate

The complete raw certificate details for etfus.deutscheawm.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NFI85zhGFYg079WvflU
8XFfoVRK22u3hYfCoLhx1v05tSqrJIPNgO7lT2wTK+UXwNbOfSGK7jlx5ZAc9PHa
RKPk24OeEQR4ry09ABoe1PPOJK5bgIDqc7ZopHsH8HZiY+eLHNmVy5eE1NGUF01Y
GHuQrAPgIdolsOFskFuTCtMpCPJ5PYP3iPid6QeMtCVGCkMVdLBSguPyd+AGFkDD
GR/7z7uVhRApAtcRV/NhRXEWNtILhQWzR2LK2H9jQUYjRLAQYJgbkcfYcGW7o70P
FJS1rDsf4M7nyss3jCdkG5vBFSpbO8bFhoEc3v7MX04rAH77rEWceSvCsCuTsbkV
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 94216954807409801780495652426691428974
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)10'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 Secure Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-09-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Frankfurt am Main'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Deutsche Bank AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Deutsche Bank AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'etfus.deutscheawm.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27370676136414013266163830394175159947083465885682389752759912550195710540032662642993702596042729994603155197282420915412561500563886299923493284601486320637409382899689816546554005471305219016928301747640263320477932244904373554932862122928555019307063965466995196336892610186313788649758483269938771857374591982974052656747650786255981405152285617235002260423591581605875525577169710167292728183056811701279475257262275997892507854112501325098189599873301421670392420670743841025671925339170205516983911924539914105304768708671355083471368196260838830930408130754360886174862237581598535652754723595272528051377621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (370 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.etfus.deutscheawm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etfs-us.deutscheawm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.etfs-us.deutscheawm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etf-us.deutscheawm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.etf-us.deutscheawm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbxus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dbxus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deutsche-etfs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deutsche-etfs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deutscheetfs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deutscheetfs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deutschextrackers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deutschextrackers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deutsche-xtrackers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deutsche-xtrackers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etfus.deutscheawm.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [104 116 116 112 115 58 47 47 100 46 115 121 109 99 98 46 99 111 109 47 114 112 97]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d445c165344c1827e1d20ab25f40163d8be79a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sd.symcb.com/sd.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sd.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sd.symcb.com/sd.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b1420bc32a6c7f0663de86881a96823b6ead6f31fce492986141bd2244f7636b017e930604fe9bc1be6e197e1df6f62fd1b5e126d18454115f346fbfcdad031d50f8b61a2bbb6503da3fea5607604ec69615f18555ed702cc72575580e7b23fa9e8a5f92f5137f9715681c89c9581e3c49c0eb3c1e9e48687808ce46eac8511116950d446d52cbe90fe73e9a70551037f4e806ac69d48d6f2bc38e084c5ec99ec13e706be9b4f9cb3964aaeb5221d582566e7652270d12edfc9518e2327d1cee0dca40543bce9859db508064459caae4738f5d703022f6f3ba1105ca3c331e5836067aa8800e84027d24406b79a76919cf620fe40b5518da2793afc65b9ee73a