san2.rogersmedia.com

- Rogers Media Inc. -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 01:a9:11:64:85:21:77:7e:5d:31:22:78:a6:19:50:7c was issued on by Symantec Corporation.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Rogers Media Inc.

Organization: Rogers Media Inc.
Organization unit: IT
State / Province: Ontario
Locality: Toronto
Country: CA

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:a9:11:64:85:21:77:7e:5d:31:22:78:a6:19:50:7c
Serial Number (int): 2207078929858780397859005496894771324
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 36:8d:ec:b4:bf:bb:b4:18:a0:2e:9f:ef:33:f6:12:25:62:a1:c8:41
Fingerprint (sha256): 3a:32:ba:da:90:2e:24:b0:58:c5:6c:3e:a5:8e:9f:f9:d0:3d:87:5e:bb:4c:0d:93:60:12:96:e1:3a:74:ac:37

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate san2.rogersmedia.com

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san2.rogersmedia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.rogersdigitalmedia.com
*.citytv.com
*.macleans.ca
*.sportsnet.ca
*.btmontreal.ca
*.todaysparent.com
*.bttoronto.ca
*.omnitv.ca
*.btvancouver.ca
*.g4tv.ca
*.breakfasttelevision.ca
san.rogersbroadcasting.com
*.dinnertelevision.ca
*.btcalgary.ca
*.oln.ca
*.cityline.ca
*.rogersmedia.com
san2.rogersmedia.com

Other certificates including the domain name rogersmedia.com

(limited to 100 certificates)
san.rogersmedia.com
san2.rogersmedia.com
li.lisecurelink.com
uc18.janrainengage.com
san2.rogersmedia.com
san.rogers.com
li.lisecurelink.com
san2.rogersmedia.com
san.rogersmedia.com
san.rogersmedia.com
san.rogersmedia.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
shared.rogersmedia.com
li.lisecurelink.com
analytics.rogersmedia.com
li.lisecurelink.com
li.lisecurelink.com
www.rogersmedia.com
li.lisecurelink.com
san2.rogersmedia.com
li.lisecurelink.com
san2.rogersmedia.com
li.lisecurelink.com
san2.rogersmedia.com
san.rogersmedia.com
san2.rogersmedia.com
san2.rogersmedia.com
oms.rogersmedia.com
*.rogersmedia.com
www.rogersmedia.com
san.rogersmedia.com
san2.rogersmedia.com
san.rogersmedia.com
san2.rogersmedia.com
oms.rogersmedia.com
san.rogersmedia.com
www.rogersmedia.com
uc18.janrainengage.com
li.lisecurelink.com
oms.rogersmedia.com
www.rogersmedia.com
li.lisecurelink.com
san2.rogersmedia.com
li.lisecurelink.com
oms.rogersmedia.com
*.rogersmedia.com
san.rogersmedia.com
li.lisecurelink.com
uc18.janrainengage.com
li.lisecurelink.com
san2.rogersmedia.com
san2.rogersmedia.com
li.lisecurelink.com
li.lisecurelink.com
san2.rogersmedia.com
oms.rogersmedia.com
san.rogersmedia.com
*.rogersmedia.com
san2.rogersmedia.com
li.lisecurelink.com
www.rogersmedia.com
san.rogersmedia.com
san2.rogersmedia.com
uc18.janrainengage.com
oms.rogersmedia.com
li.lisecurelink.com
san.rogersmedia.com
li.lisecurelink.com
li.lisecurelink.com
san2.rogersmedia.com
san2.rogersmedia.com
uc18.janrainengage.com
san2.rogersmedia.com
li.lisecurelink.com
li.lisecurelink.com
analytics.rogersmedia.com
li.lisecurelink.com
*.rogersmedia.com
sli.rogersmedia.com
san.rogersmedia.com
li.lisecurelink.com
san.rogersmedia.com
san2.rogersmedia.com
uc18.janrainengage.com
san2.rogersmedia.com
li.lisecurelink.com
san.rogers.com
uc18.janrainengage.com
li.lisecurelink.com
li.lisecurelink.com
san.rogersmedia.com
watch.rogersmedia.com
san.rogersmedia.com
oms.rogersmedia.com
san.rogersmedia.com
san.rogers.com
san2.rogersmedia.com
li.lisecurelink.com

Certificate

The complete raw certificate details for san2.rogersmedia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIQAakRZIUhd35dMSJ4phlQfDANBgkqhkiG9w0BAQsFADB+
MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAd
BgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxLzAtBgNVBAMTJlN5bWFudGVj
IENsYXNzIDMgU2VjdXJlIFNlcnZlciBDQSAtIEc0MB4XDTE3MDUwNDAwMDAwMFoX
DTE4MDUwNDIzNTk1OVoweTELMAkGA1UEBhMCQ0ExEDAOBgNVBAgMB09udGFyaW8x
EDAOBgNVBAcMB1Rvcm9udG8xGjAYBgNVBAoMEVJvZ2VycyBNZWRpYSBJbmMuMQsw
CQYDVQQLDAJJVDEdMBsGA1UEAwwUc2FuMi5yb2dlcnNtZWRpYS5jb20wggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUolczlXQ6wtuHzdAZ60wbMJutUx1m
z8A4ssnlqQi3om3c2SSKu6SqNU72QN+1WrCKzWP55KTsfQ/dftPOQX84/pxHWo7K
k5rKaYkwjdg4NP3ppyZwkZhUA/tMC6QyWepIszFWhl74KHF4JuyXX632Fnr7//zl
wsGDt5LrlD8p3NsEBFa+kdl+Qli3bA7kBnghn+H5g7nu4D9uLGcOlXrU/WmP5GIm
JByLeP+cG4XBQFcQv0M8NVLdOjiXhzFKPmkMLHQFCNLeoJVehCP3Lzxy9+ZIE99w
ZRESbel5TLJ+TfOp/9aosgcx/CX1DnuiFzyBkktdKf7LTJjXriX95h0hAgMBAAGj
ggKzMIICrzCCAVIGA1UdEQSCAUkwggFFghgqLnJvZ2Vyc2RpZ2l0YWxtZWRpYS5j
b22CDCouY2l0eXR2LmNvbYINKi5tYWNsZWFucy5jYYIOKi5zcG9ydHNuZXQuY2GC
DyouYnRtb250cmVhbC5jYYISKi50b2RheXNwYXJlbnQuY29tgg4qLmJ0dG9yb250
by5jYYILKi5vbW5pdHYuY2GCECouYnR2YW5jb3V2ZXIuY2GCCSouZzR0di5jYYIY
Ki5icmVha2Zhc3R0ZWxldmlzaW9uLmNhghpzYW4ucm9nZXJzYnJvYWRjYXN0aW5n
LmNvbYIVKi5kaW5uZXJ0ZWxldmlzaW9uLmNhgg4qLmJ0Y2FsZ2FyeS5jYYIIKi5v
bG4uY2GCDSouY2l0eWxpbmUuY2GCESoucm9nZXJzbWVkaWEuY29tghRzYW4yLnJv
Z2Vyc21lZGlhLmNvbTAJBgNVHRMEAjAAMA4GA1UdDwEB/wQEAwIFoDBhBgNVHSAE
WjBYMFYGBmeBDAECAjBMMCMGCCsGAQUFBwIBFhdodHRwczovL2Quc3ltY2IuY29t
L2NwczAlBggrBgEFBQcCAjAZDBdodHRwczovL2Quc3ltY2IuY29tL3JwYTArBgNV
HR8EJDAiMCCgHqAchhpodHRwOi8vc3Muc3ltY2IuY29tL3NzLmNybDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHwYDVR0jBBgwFoAUX2DPYZBV34RDFIpg
KrL1evRDGO8wVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8vc3Mu
c3ltY2QuY29tMCYGCCsGAQUFBzAChhpodHRwOi8vc3Muc3ltY2IuY29tL3NzLmNy
dDATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHVA+Pzhr
Tn1tbGc/888eXziSs7b6r9zszVjBNLSdXfHFix1GKf+tJpV3Ea+GCL0RInggrDuU
vjzth+6Ux4nRsVoUkLGhGF+/JEVtzrpfp6AB9zKAx7G+VjQF/vmnsGJNPePpLGua
N10zuse5J53lpEyyq+Naz1EDa8dnQ5QPPHeAL+omSPqM8+1Ao/QoYoBC9mNtDOjD
7Jf0iMSgew22yI1ubnQxKIw/nOOmQDsO/AwGFPamUK7Vs95vBpCl4RV0aDOxYidH
FZV44idy2aKPnu8C7Ew0Q5hNrUxP5g7/BmoWjVv2DXIGQqy7Ijt/WGZhN006ElH5
1PPeEjGBuKhcjQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KJXM5V0OsLbh83QGetM
GzCbrVMdZs/AOLLJ5akIt6Jt3NkkirukqjVO9kDftVqwis1j+eSk7H0P3X7TzkF/
OP6cR1qOypOaymmJMI3YODT96acmcJGYVAP7TAukMlnqSLMxVoZe+ChxeCbsl1+t
9hZ6+//85cLBg7eS65Q/KdzbBARWvpHZfkJYt2wO5AZ4IZ/h+YO57uA/bixnDpV6
1P1pj+RiJiQci3j/nBuFwUBXEL9DPDVS3To4l4cxSj5pDCx0BQjS3qCVXoQj9y88
cvfmSBPfcGUREm3peUyyfk3zqf/WqLIHMfwl9Q57ohc8gZJLXSn+y0yY164l/eYd
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2207078929858780397859005496894771324
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Toronto'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rogers Media Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'san2.rogersmedia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26842573801501428201876055099270674155869029584460851689455217030837531853108179436007682632749433561995183660783846363200991689350003459191142211604427535531148658797923202048065885503517092173913033851307259133180604697716151372222833968078940583430381706543214823660212119933276957285374064849659954062631617987958883524373007465274432527554059299410767912641841728792213214777083015248329854406479727223704476423354369032289190655430056381420776635993777823483551506568982592172608382724180591805864260342483750313554508188907101643823052239374881083086931860829758499170444881910776451272851117286926156304882977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (329 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rogersdigitalmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.citytv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.macleans.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sportsnet.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btmontreal.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.todaysparent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bttoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.omnitv.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btvancouver.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.g4tv.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.breakfasttelevision.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san.rogersbroadcasting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dinnertelevision.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btcalgary.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oln.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cityline.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rogersmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san2.rogersmedia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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