epass-uat-nc2.bankofamerica.com

- Bank of America Corporation -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 29:85:a4:87:6d:ff:9c:b3:81:32:55:86:40:06:a0:b8 was issued on by Symantec Corporation.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Bank of America Corporation

Organization: Bank of America Corporation
Organization unit: HLI LAS INFRASTRUCTURE TECHNOLOGY
State / Province: North Carolina
Locality: Charlotte
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 29:85:a4:87:6d:ff:9c:b3:81:32:55:86:40:06:a0:b8
Serial Number (int): 55192260354386503318262205164955279544
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): bf:3b:54:87:c5:c8:a0:30:36:22:84:1e:0d:76:0e:ac:81:e6:5e:30
Fingerprint (sha256): 41:8d:2f:5b:f7:4a:dd:8b:4d:45:94:41:b6:0c:c9:96:67:ce:bc:de:7a:1e:dc:41:f9:04:b1:42:c9:90:bd:cf

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate epass-uat-nc2.bankofamerica.com

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for epass-uat-nc2.bankofamerica.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nc2pz2wsews47e.bankofamerica.com
epass-uat.landsafedefault.com
epass-uat-nc.bankofamerica.com
ddoxlogin-uat.dynamicdox.com
epass-uat.landsafe.com
epass-uat.bankofamerica.com
epasscertauth-uat.bankofamerica.com
epass-uat.mortgageeservices.com
loanhelpstatus-uat.bankofamerica.com
epass-uat-nc2.bankofamerica.com
nc2pz2wsews48e.bankofamerica.com

Other certificates including the domain name bankofamerica.com

(limited to 100 certificates)
dcpr-apac.bankofamerica.com
b2bservice-dev4.ecnp.bankofamerica.com
elink-mbi-s.bankofamerica.com
atmhold-tt.bankofamerica.com
abwebpay-mbod.bankofamerica.com
webatm-test-dev1b-pipB.bankofamerica.com
webatm-test-cer1a-pipD.bankofamerica.com
fix-mtls-prod-out-ma-order.bankofamerica.com
CAPTIVESERVICE.BANKOFAMERICA.COM
mqt.qtjrchin.bankofamerica.com
secure.bankofamerica.com
travelcenter2.bankofamerica.com
69863-nonprod.bankofamerica.com
directsso.bankofamerica.com
gpx-discover-diners-pulse-lle-clientcert.ecnp.bankofamerica.com
testingNotifications-CertAdminPlzApprove.bankofamerica.com
origin-bac-assets-cert.ecnp.bankofamerica.com
sso-prd.bankofamerica.com
eib-vgs-sit1.bankofamerica.com
cpo-accelerate-websvcs-test2.bankofamerica.com
reporting-mymodelrisk.bankofamerica.com
usvarchvp2isa01.bankofamerica.com
ibsshopsafedev6.bankofamerica.com
rxserve-9H.bankofamerica.com
Standard_SSL_Digicert_CASpec.bankofamerica.com
globalcommissionpayments.bankofamerica.com
appb1.paymentsinvoicing.bankofamerica.com
secure-devps.ecnp.bankofamerica.com
mservice-qa5.ecnp.bankofamerica.com
mservice-qaps.ecnp.bankofamerica.com
bl-qip.emea.bankofamerica.com
cldirect.bankofamerica.com
fbrm-pssit.bankofamerica.com
sbbankers.ltngp2dev.bankofamerica.com
wmobile.bankofamerica.com
escrowonline-lt.bankofamerica.com
socialapp-pt1.ecnp.bankofamerica.com
MO8XCHRS002.bankofamerica.com
winsso-stg.sm.bankofamerica.com
oos0i.lbxatl.bankofamerica.com
CRDTCTR-70336-nCinoClientAuth-BFUAT.bankofamerica.com
outlookanywhere.bankofamerica.com
epass-uat.bankofamerica.com
eftx-pt1.ecnp.bankofamerica.com
NDM.9M33.bankofamerica.com
mqt.mub1chin.bankofamerica.com
ssologon-deveast.bankofamerica.com
finapp.allmyaccounts.test2.bankofamerica.com
boardvantage-uat.bankofamerica.com
portalb2b-rch.bankofamerica.com
ftp-vmsdf1.bankofamerica.com
uat-authorprimary-merch.bankofamerica.com
travelcenter.bankofamerica.com
cmbsi-uat1.bankofamerica.com
travelpaymentsystem.bankofamerica.com
winsso-prd.sm.bankofamerica.com
rvdealer-cit.bankofamerica.com
fbrm-sit1.bankofamerica.com
ftp-hbs.bankofamerica.com
safepass-cpo.bankofamerica.com
cictsc3a.9s.bankofamerica.com
secure-preview1.ecnp.bankofamerica.com
corp.bankofamerica.com
origin-bac-assets-dev.ecnp.bankofamerica.com
everest-qa.bankofamerica.com
racf-1R.bankofamerica.com
fbrm.bankofamerica.com
symphony-online-dr-vip.bankofamerica.com
rmbs.bankofamerica.com
WAS.prodeu01.bankofamerica.com
crm.fxqa.ml.com
corp.bankofamerica.com
ecsb.bankofamerica.com
elink-as2h8.bankofamerica.com
portal.bankofamerica.com
bofacapital-certs.bankofamerica.com
mqp.mqwxchin.bankofamerica.com
bofacapital-certs-pp.bankofamerica.com
viewinv-techtest.bankofamerica.com
cicpvx62.1s.bankofamerica.com
remotepc-us.bankofamerica.com
akamai-san10.exacttarget.com
tx8aiucm02403.bankofamerica.com
secure-review1.ecnp.bankofamerica.com
socialapp-devflex.ecnp.bankofamerica.com
mlqua400.bankofamerica.com
support-services.bankofamerica.com
ustxrdncu01aac0001.network.bankofamerica.com
soap-aci1.bankofamerica.com
mqp.qpc1chin.bankofamerica.com
ecds-uat.bankofamerica.com
mservice-dev2.ecnp.bankofamerica.com
ccpsbob.bankofamerica.com
cporms-test.bankofamerica.com
resfcmbs.bankofamerica.com
IMSPW3CA.1S.bankofamerica.com
globalroutingdirectory.bankofamerica.com
aeadmin.bankofamerica.com
fedsso.bankofamerica.com
rest-cert2.ecnp.bankofamerica.com

Certificate

The complete raw certificate details for epass-uat-nc2.bankofamerica.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iJUZzekzKLfZSCZi6z3
bHW4XD/qLdCc5IV+iuR37vNVk5V9oMptkp4Tmg75tYXnvquUR6R98x0mrGazl7Ra
AX1qA8jptq3rGEDmY+gFCHprAUmZL6RWlApNyAT4r8UHXofJuHRF8qfoPLvWgbGQ
1rJmp/wC9X5e4wLwfLB/Hr8faQZzFeqxOBh2F3cwdSYcej/op+54EmZ0kIxopiD5
bHE3vqw1sEIhnmbwLmbmdGybkimDvCqaEt9PvHtN1/dG6rmeYGdBiY0g2MLvcG4e
m9i8lvj1J3lVoaIDHALoiqui8PDnoyJxBsa/stwCsw0VGce3oVuY3ALbQdGLk+AI
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 55192260354386503318262205164955279544
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'North Carolina'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Charlotte'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bank of America Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'HLI LAS INFRASTRUCTURE TECHNOLOGY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'epass-uat-nc2.bankofamerica.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28546785528323177970685347648719675010856094261861317157767651020131555622668586188220479342712773285595087961033449089677302265924191867320157149601458439191381228665795061454069601133992708019878087398282443309036317639857774406775303727802033069386300093837378949897766824348732909663338790329566906644932609077907746623605536854446239162414823005094278026532461471846197501369886397164271133583640160500547108609412854600695702814698796082063057774251535110455394418221792142507411107046013802573610449760647051185240719861843136169226166375955439004121814955987187162676723185893445323015338176341508174834042949
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nc2pz2wsews47e.bankofamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epass-uat.landsafedefault.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epass-uat-nc.bankofamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ddoxlogin-uat.dynamicdox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epass-uat.landsafe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epass-uat.bankofamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epasscertauth-uat.bankofamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epass-uat.mortgageeservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loanhelpstatus-uat.bankofamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epass-uat-nc2.bankofamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nc2pz2wsews48e.bankofamerica.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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