nstg-apis.vrsn.com
- Verisign, Inc -
Issued by Symantec Class 3 Secure Server CA - G4
About this certificate
This digital certificate with serial number 1c:9f:00:75:a9:d7:28:5e:5f:19:d5:98:6e:a9:a0:4d was issued on by Symantec Corporation.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Verisign, Inc
Organization:
Verisign, Inc
Organization unit: Production Operations
Organization unit: For Intranet Use Only
Organization unit: Production Operations
Organization unit: For Intranet Use Only
State / Province:
Virginia
Locality: Reston
Country: US
Locality: Reston
Country: US
Symantec Corporation
Organization:
Symantec Corporation
Organization unit: Symantec Trust Network
Organization unit: Symantec Trust Network
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 1c:9f:00:75:a9:d7:28:5e:5f:19:d5:98:6e:a9:a0:4dSerial Number (int): 38043968404742772549700907809083334733
Serial Number lenght: 125 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef
Fingerprint (sha1): 1d:3d:9c:92:8e:fb:5c:4d:e8:27:31:07:83:d4:17:5f:53:24:c6:28
Fingerprint (sha256): 35:9b:ce:2e:5e:42:b5:28:75:0d:2c:23:1d:1f:51:57:e8:9d:a4:ba:c9:42:fe:41:62:f8:01:d5:62:eb:60:c4
Issuing Certificate URL: http://ss.symcb.com/ss.crt
Revocation information
OCSP Server: http://ss.symcd.comCRL Distribution Point: http://ss.symcb.com/ss.crl
Check the revocation status for certificate nstg-apis.vrsn.com
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for nstg-apis.vrsn.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
nstg-ext-apis.vrsn.com
nstqa-accounts.vrsn.com
nstqa-ext-accounts.vrsn.com
nstg-apis.vrsn.com
nstqa-accounts.vrsn.com
nstqa-ext-accounts.vrsn.com
nstg-apis.vrsn.com
Other certificates including the domain name vrsn.com
(limited to 100 certificates)
?.?.?.vrsn.com
acctmgmt.vrsn.com
cofense-reporter.verisign.com
jamfdp.verisign.com
ote.sis.tools.vrsn.com
?.?.vrsn.com
?.vrsn.com
apdevcln2-vip.misqa.edc.vrsn.com
uat-dashboard.vrsn.com
acano.vrsn.com
*.arch.vrsn.com
lwas.verisign.com
kibana.tools.vrsn.com
dev.sis.tools.vrsn.com
obieetest.misqa.edc.vrsn.com
ncadmin-ote.vrsn.com
webmail.verisign.com
ote-accounts.vrsn.com
?.vrsn.com
epptool-ctld.verisign-grs.com
?.?.vrsn.com
matrix.corpit.vrsn.com
portal.vrsn.com
?.?.?.vrsn.com
devint-support-csr.vrsn.com
bdna.verisign.com
pp-app1-dev.cde.vrsn.com
tldmanager.vrsn.com
lwas.verisign.com
*.cde.vrsn.com
lbrmail.vrsn.com
spam.verisign.com
dwobi1.corpit.vrsn.com
qa-epptool-ctld.verisign-grs.com
jamfdp.verisign.com
?.?.?.vrsn.com
eq-nswc.vrsn.com
?.vrsn.com
webex-admin.vcorp.ad.vrsn.com
*.grafana.vrsn.com
dev-apis.cde.vrsn.com
ebs-ptch.misqa.edc.vrsn.com
ote-srswebproxy1-brn1.corpit.vrsn.com
byod-portal.verisign.com
apis.vrsn.com
jss.verisign.com
jamfdp.verisign.com
byod-portal.verisign.com
webex-admin.vcorp.ad.vrsn.com
statuschange.verisign.com
nonprod-naemon-legacy.vrsn.com
obieetesthr.misqa.edc.vrsn.com
teamcity-test.vrsn.com
qa-mdns.b13tests.com
?.vrsn.com
grafana.vrsn.com
qavm-intA-actapp2.qa.vrsn.com
webmail.verisign.com
inventory.tools.vrsn.com
prodinta-support-csr.vrsn.com
brn1lxmatrixproxy.vcorp.ad.vrsn.com
query-admin.vrsn.com
dev-unavapis.devcd-login.vrsn.com
pingaccess.verisign.com
*.lagos.vrsn.com
lwas.verisign.com
lwas.verisign.com
mcaweb.verisign.com
?.?.?.vrsn.com
ilg1lxoid02.vcorp.ad.vrsn.com
apdevcln2-vip.misqa.edc.vrsn.com
lwas.verisign.com
?.?.vrsn.com
?.vrsn.com
owas.vrsn.com
obieetest.misqa.edc.vrsn.com
byod-portal.verisign.com
?.vrsn.com
qa-nsmanager-otp.vrsn.com
ote-tldmanager.vrsn.com
sipaccess.verisign.com
mis-webapps.verisign.com
sigma-apis.vrsn.com
jamfdp.verisign.com
webmail.verisign.com
crosso.vrsn.com
gnats.vrsn.com
idefense.com
?.vrsn.com
webmail.verisign.com
brl1lxoam02.misqa.edc.vrsn.com
?.vrsn.com
nstg-apis.vrsn.com
byod-portal.verisign.com
?.?.vrsn.com
frsqa-ext-apis.vrsn.com
jart.vrsn.com
?.vrsn.com
?.vrsn.com
bdna.verisign.com
acctmgmt.vrsn.com
cofense-reporter.verisign.com
jamfdp.verisign.com
ote.sis.tools.vrsn.com
?.?.vrsn.com
?.vrsn.com
apdevcln2-vip.misqa.edc.vrsn.com
uat-dashboard.vrsn.com
acano.vrsn.com
*.arch.vrsn.com
lwas.verisign.com
kibana.tools.vrsn.com
dev.sis.tools.vrsn.com
obieetest.misqa.edc.vrsn.com
ncadmin-ote.vrsn.com
webmail.verisign.com
ote-accounts.vrsn.com
?.vrsn.com
epptool-ctld.verisign-grs.com
?.?.vrsn.com
matrix.corpit.vrsn.com
portal.vrsn.com
?.?.?.vrsn.com
devint-support-csr.vrsn.com
bdna.verisign.com
pp-app1-dev.cde.vrsn.com
tldmanager.vrsn.com
lwas.verisign.com
*.cde.vrsn.com
lbrmail.vrsn.com
spam.verisign.com
dwobi1.corpit.vrsn.com
qa-epptool-ctld.verisign-grs.com
jamfdp.verisign.com
?.?.?.vrsn.com
eq-nswc.vrsn.com
?.vrsn.com
webex-admin.vcorp.ad.vrsn.com
*.grafana.vrsn.com
dev-apis.cde.vrsn.com
ebs-ptch.misqa.edc.vrsn.com
ote-srswebproxy1-brn1.corpit.vrsn.com
byod-portal.verisign.com
apis.vrsn.com
jss.verisign.com
jamfdp.verisign.com
byod-portal.verisign.com
webex-admin.vcorp.ad.vrsn.com
statuschange.verisign.com
nonprod-naemon-legacy.vrsn.com
obieetesthr.misqa.edc.vrsn.com
teamcity-test.vrsn.com
qa-mdns.b13tests.com
?.vrsn.com
grafana.vrsn.com
qavm-intA-actapp2.qa.vrsn.com
webmail.verisign.com
inventory.tools.vrsn.com
prodinta-support-csr.vrsn.com
brn1lxmatrixproxy.vcorp.ad.vrsn.com
query-admin.vrsn.com
dev-unavapis.devcd-login.vrsn.com
pingaccess.verisign.com
*.lagos.vrsn.com
lwas.verisign.com
lwas.verisign.com
mcaweb.verisign.com
?.?.?.vrsn.com
ilg1lxoid02.vcorp.ad.vrsn.com
apdevcln2-vip.misqa.edc.vrsn.com
lwas.verisign.com
?.?.vrsn.com
?.vrsn.com
owas.vrsn.com
obieetest.misqa.edc.vrsn.com
byod-portal.verisign.com
?.vrsn.com
qa-nsmanager-otp.vrsn.com
ote-tldmanager.vrsn.com
sipaccess.verisign.com
mis-webapps.verisign.com
sigma-apis.vrsn.com
jamfdp.verisign.com
webmail.verisign.com
crosso.vrsn.com
gnats.vrsn.com
idefense.com
?.vrsn.com
webmail.verisign.com
brl1lxoam02.misqa.edc.vrsn.com
?.vrsn.com
nstg-apis.vrsn.com
byod-portal.verisign.com
?.?.vrsn.com
frsqa-ext-apis.vrsn.com
jart.vrsn.com
?.vrsn.com
?.vrsn.com
bdna.verisign.com
Certificate
The complete raw certificate details for nstg-apis.vrsn.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIQHJ8AdanXKF5fGdWYbqmgTTANBgkqhkiG9w0BAQsFADB+ MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAd BgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxLzAtBgNVBAMTJlN5bWFudGVj IENsYXNzIDMgU2VjdXJlIFNlcnZlciBDQSAtIEc0MB4XDTE2MDQxMTAwMDAwMFoX DTE3MDQxMjIzNTk1OVowgaYxCzAJBgNVBAYTAlVTMREwDwYDVQQIDAhWaXJnaW5p YTEPMA0GA1UEBwwGUmVzdG9uMRYwFAYDVQQKDA1WZXJpc2lnbiwgSW5jMR4wHAYD VQQLDBVQcm9kdWN0aW9uIE9wZXJhdGlvbnMxHjAcBgNVBAsTFUZvciBJbnRyYW5l dCBVc2UgT25seTEbMBkGA1UEAwwSbnN0Zy1hcGlzLnZyc24uY29tMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+H2CkMU6knm9IS9ltI6W6qHAMlFT8eV 6EB7hzgKBSyjTouQG1ntpcpsWNGJwPcVg+c8Hrlmsvpniggtrnm5+fdg/G3CQq5m 5jkMQW/A9HnO4uZt+Fv1FNvy949tMNryyHn6cHiiXT9aHQ0YMvfBQqghUHoH7wE9 e8bawFsrr5wfECzQDbCX5C52ef8Uyeehz5H1DHyH64Z82bfasgqSvcnyz91SBstP i8gsAda5YKeZe02Ul238IggjyfWhfj116u23k7r5iRIQThv4xpw5vME422lBy8b7 32YNfyAJsT2O8nCduBvjGT2X74BFU1jk6lyIupIpWQkI5d5xDewpLwIDAQABo4IB yjCCAcYwawYDVR0RBGQwYoIWbnN0Zy1leHQtYXBpcy52cnNuLmNvbYIXbnN0cWEt YWNjb3VudHMudnJzbi5jb22CG25zdHFhLWV4dC1hY2NvdW50cy52cnNuLmNvbYIS bnN0Zy1hcGlzLnZyc24uY29tMAkGA1UdEwQCMAAwDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBhBgNVHSAEWjBYMFYGBmeBDAEC AjBMMCMGCCsGAQUFBwIBFhdodHRwczovL2Quc3ltY2IuY29tL2NwczAlBggrBgEF BQcCAjAZDBdodHRwczovL2Quc3ltY2IuY29tL3JwYTAfBgNVHSMEGDAWgBRfYM9h kFXfhEMUimAqsvV69EMY7zArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8vc3Muc3lt Y2IuY29tL3NzLmNybDBXBggrBgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6 Ly9zcy5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9zcy5zeW1jYi5jb20v c3MuY3J0MBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBo UaIRJ7oKo1093umC97UtXGy5pOqgT+adnBcY1lUBwMJe4wfw5gDu9FGRg4DdbQvp mAh7MCDx87nFiu4j4vShA5NTENBNFvf3nyoYNwv5Oj1xqreXJ4EGR5quuo/+0vP/ Tc6wB74ra7BahgurWRp7LL10kqKXGbQolf+3U9niIbxBviNCWbGM2AgPEvdJ+YmF 9CfGGR/jlnhOWl09TXzDWnGPtQ00ZhJgfmi2kmBdSq9etN5ojwkJzOUAVi4eA2ZP 3t+sBiAGuAywPPd9e7SR7B/frw0mUptqTqrlaBGoj+k2BanAMv8K4Rt0l5qg3c1O r8wRxVddtDjOzJMGo7tj -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+H2CkMU6knm9IS9ltI6 W6qHAMlFT8eV6EB7hzgKBSyjTouQG1ntpcpsWNGJwPcVg+c8Hrlmsvpniggtrnm5 +fdg/G3CQq5m5jkMQW/A9HnO4uZt+Fv1FNvy949tMNryyHn6cHiiXT9aHQ0YMvfB QqghUHoH7wE9e8bawFsrr5wfECzQDbCX5C52ef8Uyeehz5H1DHyH64Z82bfasgqS vcnyz91SBstPi8gsAda5YKeZe02Ul238IggjyfWhfj116u23k7r5iRIQThv4xpw5 vME422lBy8b732YNfyAJsT2O8nCduBvjGT2X74BFU1jk6lyIupIpWQkI5d5xDewp LwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 38043968404742772549700907809083334733 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-11 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-12 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Virginia' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Reston' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verisign, Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Production Operations' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'For Intranet Use Only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'nstg-apis.vrsn.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19678362838120832583938345635018400643152676236346407602853030242946285830022010363283645971186162983131575841947841407187949154352541466908967714955565961135506820201619228471754031431951085895930140619635180966772301373247003925448679990089598360157609596130386580789841731084163005446863417599945422911557704207496144936538058979558502273380052696041827802784299850238937701506480301534333892814761027811524549264119542692975121034434365943871814578102088836194807356475884267727216039855777652655022327764395494347981060044234733129452079670372724853604396875719127187438679922030305513747540924098385173749180719 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nstg-ext-apis.vrsn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nstqa-accounts.vrsn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nstqa-ext-accounts.vrsn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nstg-apis.vrsn.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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