www.libertyiu.com

- Liberty Mutual Group -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 47:34:76:97:f2:69:ac:57:bd:18:d1:55:44:6f:fe:a5 was issued on by Symantec Corporation.

With 41 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: Global Specialties
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 47:34:76:97:f2:69:ac:57:bd:18:d1:55:44:6f:fe:a5
Serial Number (int): 94647592500181732017231591013021122213
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): dc:fd:fd:3d:12:cf:b0:9b:5f:e8:18:8f:2e:76:89:9c:ef:94:34:a1
Fingerprint (sha256): 37:21:b7:4f:51:37:e9:e0:15:5b:b8:e0:b5:a8:ba:a4:3e:c6:7a:b8:88:b4:8e:04:cb:58:69:ca:e5:0c:c7:88

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate www.libertyiu.com

41

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.libertyiu.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.liurisk.com
sme1.liuquote.com
www.libertysegurosperu.com
www.primerofianzas.com
passport.lmig.com
cloudmonitor-www.libertyiu.com
myPassword.lmig.com
myPassword-prod-kdc.lmig.com
agents.libertymutualsurety.com
www.liuquote.co.uk
www.libertyiu.com
www.liu-latinamerica.com
passport-prod-pdc.lmig.com
qiservicing.libertymutualsurety.com
www.ae-libertyiu.com
www.agents.libertymutualsurety.com
www.libertyfianzas.com
www.liu-eil.com
ofacpayment.libertymutual.com
execute.lmig.com
www.liu-usa.com
accidenthealth.libertyiu.com.au
qi.libertymutualsurety.com
www.liucargo.com
serf.primerofianzas.com
lmsuretyext.libertymutual.com
myPassword-prod-pdc.lmig.com
passport-prod-kdc.lmig.com
cfdi.primerofianzas.com
serf.libertyfianzas.com
www.liucanada.com
cfdi.libertyfianzas.com
validador.primerofianzas.com
www.1rofianzas.com
sme2.liuquote.com
www.liuquote.com.au
www.lms.ae-libertyiu.com
www.liuquote.ie
www.liupal.com
bfl.libertymutualsurety.com
validador.libertyfianzas.com

Other certificates including the domain name libertyiu.com

(limited to 100 certificates)
storagetanks.libertyiu.com
www.libertyiu.com
www.libertyiu.com
cswebext-pool-03p.libertymutual.com
cswebext-pool-02k.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
risk-lifecycle-id.libertymutual.com
cs-pool-03k.lm.lmig.com
cswebext-pool-02p.libertymutual.com
www.libertyiu.com
vmsip-hlyncf01.lm.lmig.com
cswebext-pool-02p.libertymutual.com
cswebext-pool-03p.libertymutual.com
sip-kdc-03.libertymutual.com
risk-lifecycle-id.libertymutual.com
test-www.libertyiu.com
cswebext-pool-03p.libertymutual.com
secure.libertyiu.com
sip-pdc-03.libertymutual.com
secure.libertyiu.com
cswebext-pool-02p.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
connect.libertyiu.com
cswebext-pool-03p.libertymutual.com
access-kdc-02.libertymutual.com
int-www.libertyiu.com
www.libertyiu.com
www.libertyiu.com
cms.libertyiu.com
test-www.libertyiu.com
cswebext-pool-02k.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
isoresponse.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
cswebext-pool-02k.libertymutual.com
test-www.libertyiu.com
cswebext-pool-03p.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
us-extranet.libertyiu.com
test-www.libertyiu.com
pdc-vpn-01.libertyiu.com
test-www.libertyiu.com
cswebext-pool-03p.libertymutual.com
mail-na.lm.lmig.com
uk-secure.libertyiu.com
Cs-pool-03p.lm.lmig.com
test-www.libertyiu.com
cs-pool-02p.lm.lmig.com
cs-pool-02p.lm.lmig.com
cas-pdc.lm.lmig.com
cas-pdc.lm.lmig.com
uk-secure.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
secure.libertyiu.com
Cs-pool-03k.lm.lmig.com
www.libertyiu.com
connect.libertyiu.com
secure.libertyiu.com
webmail-ap.libertyiu.com
eu-access-01.libertymutual.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
storagetanks.libertyiu.com
vmsip-hsfbfe01.lm.lmig.com
cswebext-pool-02p.libertymutual.com
www.libertyiu.com
vmqip-hlyncf01.lm.lmig.com
www.libertyiu.com
www.libertyiu.com
cswebext-pool-02p.libertymutual.com
www.libertyiu.com
www.libertyiu.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
test-www.libertyiu.com
www.libertyiu.com
eu-pool-02.lm.lmig.com
test-www.libertyiu.com
sip-kdc-03.libertymutual.com
test-www.libertyiu.com
storagetanks.libertyiu.com
mail-na.lm.lmig.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
cswebext-pool-02k.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
test-www.libertyiu.com
cs-pool-02k.lm.lmig.com
cswebext-pool-03k.libertymutual.com
us-mdm.libertyiu.com
int-www.libertyiu.com
www.libertyiu.com
cs-pool-02k.lm.lmig.com
test-risk-lifecycle-id.libertymutual.com

Certificate

The complete raw certificate details for www.libertyiu.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqYSZSIlq+G/KPWlJqXL
QXK0PQRRIbEjzEucT2BH3Qkiqn0Vuf1i/tP8H5/RNF13Epwl/usuS95UEURnIH2m
0QMbIEXmBSD+9CMwAtID/TbpOOsHlcKqVAQjjs08Z4q8CLcu5h3nwS6MjbVQ4981
CVuU6vOJZpWM6Icl6GtEMu/7EhpjPW4dtadTkf8TVxmeZCT/3Z7CtcWflkmdIlCB
LHLaRVmWBt7YUIxThHoakQUmtm692zpFIY+Ec0j4ko5wQwYhcKcGUDPoHBy/TJip
UoqZ6SxkqosGuPiATb1hSDtFCt5kNF13xLGbm9L2PVhw8oNc1LscBJBmB5RGKjo6
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 94647592500181732017231591013021122213
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Global Specialties'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.libertyiu.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26086983907237492255850621176228044962997061475802311728726570660336645322011745467563853065105109088027903837487344430978531667032773473679903183746778265458219326643017363325971171116380139213868299618809014896295080291939795176853154667732966443907131191876232760840800923796047480752728737076152498419403657155755269760102829078415610780950162531592877601499379744527089511175018814770509702638244626990204417739838542329064205503173860675231862207262803593848342576803017029710364174707598958636527354489855858874722667326406809142314223279990332223260350021717900134611496756040016474238070955604382663703149283
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1016 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liurisk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sme1.liuquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertysegurosperu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primerofianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passport.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudmonitor-www.libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myPassword.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myPassword-prod-kdc.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agents.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liuquote.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liu-latinamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passport-prod-pdc.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qiservicing.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ae-libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agents.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liu-eil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofacpayment.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'execute.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liu-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accidenthealth.libertyiu.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liucargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serf.primerofianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmsuretyext.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myPassword-prod-pdc.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passport-prod-kdc.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfdi.primerofianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serf.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liucanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfdi.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'validador.primerofianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1rofianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sme2.liuquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liuquote.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lms.ae-libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liuquote.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liupal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bfl.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'validador.libertyfianzas.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
							01de007500ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015b340ad7f900000403004630440220298a86c32ffe1b5a8e583aa4ec03e735412680f3ea378ecf4edd0d370e2a5810022002c34fa693a801c354b8e85eced37e3f90721f478fe94b57e1228bfb1fe072e1007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015b340ad8290000040300473045022100c0542a048bb505afe062da6708a1f5e6b26e03480798e48bf8664987e2f2cfc0022032b25630c2fafa3be91f434b0573821862befcf9a7b599b9066cc9ff8fac792a007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000015b340ad9ef0000040300463044022070af1f686cfdb3b8a0cea4efe584dd74a79db757b419bd31626e6af1fee7367102207336c40027add73156f92eaa88acc3842da92c26bd1ee555cef62b872f232a9f007600bc78e1dfc5f63c684649334da10fa15f0979692009c081b4f3f6917f3ed9b8a50000015b340adac50000040300473045022100c508e362b42a99c71d50f7e4c5eca5981d966b75d9fef47672a849b71cacad79022042edf8f8d2e34fed7ea0f24a4ffc78d1f33207d43e393112e43790f774dc7da9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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