pilot-ssl-certificate-center-ncsa-ilg.verisign.net

- Symantec Corporation -

Issued by VeriSign Class 3 Extended Validation SSL SGC CA

About this certificate

This digital certificate with serial number 64:17:e7:73:46:65:35:89:7b:73:e1:f4:91:f5:e9:08 was issued on by VeriSign, Inc..

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

Symantec Corporation

Company registration number: 2158113
Organization: Symantec Corporation
Organization unit: Infrastructure Operations
Address: 350 Ellis Street
Postal code: 94043
State / Province: California
Locality: Mountain View
Country: US

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)06
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 64:17:e7:73:46:65:35:89:7b:73:e1:f4:91:f5:e9:08
Serial Number (int): 133046916775881326018902127192516716808
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 4e:43:c8:1d:76:ef:37:53:7a:4f:f2:58:6f:94:f3:38:e2:d5:bd:df

Fingerprint (sha1): 4d:7c:1a:8e:e0:5b:91:c1:3e:05:99:4c:32:46:36:00:94:db:88:4b
Fingerprint (sha256): 3e:ca:e1:20:ae:8c:20:2a:5e:d1:e2:a9:8d:98:bb:63:4f:e9:74:76:01:33:3c:89:40:45:c4:29:56:cb:65:55

Issuing Certificate URL: http://sb.symcb.com/sb.crt

Revocation information

OCSP Server: http://sb.symcd.com
CRL Distribution Point: http://sb.symcb.com/sb.crl

Check the revocation status for certificate pilot-ssl-certificate-center-ncsa-ilg.verisign.net

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pilot-ssl-certificate-center-ncsa-ilg.verisign.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication
Netscape Server-Gated Cryptography

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pilot-ssl-certificate-center.verisign.com
pilot-trust-center.verisign.com
pilot-trustcenter.websecurity.symantec.com
pilot-ssl-certificate-center-ncsa-ilg.verisign.net

Other certificates including the domain name verisign.net

(limited to 100 certificates)
www.verisign.com
ssl-certificate-center-emea-ilg.verisign.net
ssl-certificate-center-enterprise-ncsa-ilg.verisign.net
query-emea-ilg.verisign.net
pilot-ssl-certificate-center-enterprise-apac-ilg.verisign.net
pilot-ssl-certificate-center-enterprise-apac.verisign.net
pkiservices.verisign.com
SSL-CERTIFICATE-CENTER.THAWTE.FR
eol-redirect.verisign.net
ssl-certificate-center-ncsa-ilg.verisign.net
ssl-certificate-center.thawte.com
www.verisign.com
www.verisign.com
pilot-ssl-certificate-center-enterprise-emea-ilg.verisign.net
pilot-ssl-certificate-center-enterprise-apac-ilg.verisign.net
ssl-certificate-center-ncsa.verisign.net
trustseal.verisign.com
pilot-ssl-certificate-center-enterprise-ncsa-ilg.verisign.net
ssl-certificate-center-ncsa-ilg.verisign.net
pilot-ssl-certificate-center.thawte.com
pilot-verify-ilg.verisign.net
query-ncsa.verisign.net
ssl-certificate-center-enterprise-emea.verisign.net
ssl-certificate-center-ncsa-ilg.verisign.net
www.verisign.com
ssl-certificate-center-emea-ilg.verisign.net
pilot-ssl-certificate-center-ncsa-ilg.verisign.net
pilot-ssl-certificate-center-emea-ilg.verisign.net
eol-redirect-thawte.verisign.net
vipuserservices.verisign.com
ssl-certificate-center-enterprise.thawte.fr
pilot-ssl-certificate-center-apac-ilg.verisign.net
pilot-ssl-certificate-center-emea-ilg.verisign.net
maintenance.verisign.net
www.verisign.com
www.verisign.com
pilot-ssl-certificate-center-enterprise-apac.verisign.net
blogs.thawte.com
pilot-ssl-certificate-center-enterprise-emea-ilg.verisign.net
pilot-ssl-certificate-center-ncsa-ilg.verisign.net
ssl-certificate-center-enterprise-apac-ilg.verisign.net
ssl-certificate-center-ncsa-ilg.verisign.net
ssl-certificate-center.thawte.de
pilot-verify.thawte.com
SSL-CERTIFICATE-CENTER.THAWTE.DE
www.verisign.com
ssl-certificate-center-enterprise.thawte.fr
pilot-pkiservices.verisign.com
ssl-certificate-center-apac-ilg.verisign.net
pilot-ssl-certificate-center.thawte.de
pilot-ssl-certificate-center-emea-ilg.verisign.net
pilot-ssl-certificate-center-enterprise-ncsa-ilg.verisign.net
ssl-certificate-center-enterprise-ncsa-ilg.verisign.net
test-products.verisign.com
pilot-ssl-certificate-center-enterprise-apac-ilg.verisign.net
ssl-certificate-center-enterprise-thawte-de-ilg.verisign.net
verify-ilg.verisign.net
pilot-ssl-certificate-center-enterprise.thawte.de
eol-redirect-thawte.verisign.net
maintenance.verisign.net
pilot-ssl-certificate-center-apac.verisign.net
ssl-certificate-center-emea.verisign.net
www.verisign.com
pilot-ssl-certificate-center-enterprise.thawte.de
trustseal.verisign.com
www.verisign.com
blogs.geotrust.com
pilot-verify.thawte.com
pilot-ssl-certificate-center-enterprise-ncsa-ilg.verisign.net
query-apac.verisign.net
SSL-CERTIFICATE-CENTER.THAWTE.DE
ssl-certificate-center-enterprise-emea.verisign.net
ssl-certificate-center-enterprise-thawte-ilg.verisign.net
pkiservices.verisign.com
query-emea-ilg.verisign.net
PILOT-SSL-CERTIFICATE-CENTER-ENTERPRISE.THAWTE.FR
pilot-adms.verisign.com
ssl-certificate-center.thawte.fr
knowledge-intl.verisign.net
pilot-verify-ilg.verisign.net
ssl-certificate-center-enterprise-emea-ilg.verisign.net
pilot-ssl-certificate-center-ncsa.verisign.net
pilot-ssl-certificate-center.thawte.com
pilot-ssl-certificate-center-enterprise.thawte.com
ssl-certificate-center-ncsa-ilg.verisign.net
www.verisign.com
ssl-certificate-center-enterprise-ncsa-ilg.verisign.net
pilot-ssl-certificate-center-enterprise-ncsa-ilg.verisign.net
query-ncsa.verisign.net
adms.verisign.com
authconnect-mtv.verisign.com
verify-ilg.verisign.net
pilot-ssl-certificate-center-enterprise-emea-ilg.verisign.net
pilot-ssl-certificate-center.thawte.fr
ssl-certificate-center-ncsa.verisign.net
www.verisign.com
ssl-certificate-center-emea.verisign.net
www.verisign.com
eol-redirect-thawte.verisign.net
pilot-ssl-certificate-center-ncsa-ilg.verisign.net

Certificate

The complete raw certificate details for pilot-ssl-certificate-center-ncsa-ilg.verisign.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyAvRm6YACrpXQdeJe9c
SKJi3S4cq9wNoenyN9sX8DOG9hhmII/kptgjnED/Q/CumCR6mgLb9Emv/p7kodI1
K7kv0aG4xzOWnRSWexqFCroOJZ9evshKUpARzN3alsxBqAFLjqqQp4adGTKu+J55
BV6vuFaalsH/6iPfiyoqpUtR1862/uVuLapZy7i471ewMfmeVEExADbXKPxQY0dq
wdh52BFfe0J/KU+DjJil0FzopZ4ICieT8Sf7Kf2Yw5A10/wYMAEidSOt2xi30+OF
mB8rxs3CI4xpGbmcmb/AwtScU5qQC66GrTPrJLg8tA9pYSLpt6gbQc34/09APAXB
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 133046916775881326018902127192516716808
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)06'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 Extended Validation SSL SGC CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2158113'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '94043'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Mountain View'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '350 Ellis Street'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Infrastructure  Operations'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'pilot-ssl-certificate-center-ncsa-ilg.verisign.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25137293539776616555123806004016539655146378297221740840867474209500371968891588222860653268720561029001643893031057383219389353680307922398127052433086269902172824792566980042315204563517805643336157109775667931872872078353366165443904977675218062315353668291325826283134201263121279364768971274015295979294820384546835764555087487478044482561890484726899586530804222137334225784045930476629483836656782362635434123946559482849300129675791528982569518323891907951474692375193529065905086318948081274696046175178398708612718411373354385853391026745990120141661161862290684348921135608988218490210402185626562517647757
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (175 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot-ssl-certificate-center.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot-trust-center.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot-trustcenter.websecurity.symantec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot-ssl-certificate-center-ncsa-ilg.verisign.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.4.1 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.23.6 (VeriSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [104 116 116 112 115 58 47 47 100 46 115 121 109 99 98 46 99 111 109 47 114 112 97]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4e43c81d76ef37537a4ff2586f94f338e2d5bddf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sb.symcb.com/sb.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sb.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sb.symcb.com/sb.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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