uat.mediedge.com

- Liberty Mutual Group -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 71:ac:9e:1f:a5:96:5f:b9:fd:8c:4b:bc:f4:fd:ba:f2 was issued on by Symantec Corporation.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: International Consumer Markets
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 71:ac:9e:1f:a5:96:5f:b9:fd:8c:4b:bc:f4:fd:ba:f2
Serial Number (int): 151099045711400716445556610277499058930
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): ee:5b:38:15:83:3e:3c:d5:65:3c:c3:9f:79:3d:36:7f:e3:64:72:1e
Fingerprint (sha256): 42:7d:29:1a:66:45:17:a2:01:d6:5d:70:2b:75:73:51:03:1b:34:d1:ed:d7:6c:15:bc:90:30:2a:8b:79:4e:a0

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate uat.mediedge.com

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for uat.mediedge.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

printuat.lmginsurance.co.th
www-tsta.regal.cat
esb-tst.libertyseguros.es
www-desc.regal.cat
www-desa.regal.cat
claimpartners-desa.libertyseguros.es
esb-des.libertyseguros.es
qa-paymentcallbackcybs.payments.sg.lmig.com
qa-paymentclient.payments.sg.lmig.com
claimpartners-tsta.libertyseguros.es
www-desb.regal.cat
uat.mediedge.com
act-personallines.libertyseguros.com.br
test-apis.libertyseguros.com.br
ww02uat.libertyinsurance.com.hk
ww02uat.libertymutual.com.hk
act-wct.libertyseguros.com.br
act-imobiliario.libertyseguros.com.br

Other certificates including the domain name mediedge.com

(limited to 100 certificates)
uat.mediedge.com
libertymutual.com
www.libertyseguros.com.br
uat.mediedge.com
www.libertyseguros.com.br
uat.mediedge.com
www.libertyseguros.com.br
uat.mediedge.com
uat.mediedge.com
uat.mediedge.com
uat.mediedge.com
uat.mediedge.com
uat.mediedge.com
uat.mediedge.com
libertymutual.com
libertymutual.com
libertymutual.com
nonprod-easycare.libertymedicalinsurance.com
uat.mediedge.com
uat.mediedge.com
libertymutual.com
libertymutual.com
uat.mediedge.com
libertymutual.com
uat.mediedge.com
uat.mediedge.com
uat.mediedge.com
uat.mediedge.com
libertymutual.com
uat.mediedge.com
nonprod-easycare.libertymedicalinsurance.com
libertymutual.com
libertymutual.com
uat.mediedge.com
uat.mediedge.com
libertymutual.com
nonprod-easycare.libertymedicalinsurance.com
uat.mediedge.com
www.libertyseguros.com.br
nonprod-easycare.libertymedicalinsurance.com
libertymutual.com
uat.mediedge.com
uat.mediedge.com
libertymutual.com
uat.mediedge.com
libertymutual.com
uat.mediedge.com
nonprod-easycare.libertymedicalinsurance.com
www.mediedge.com
libertymutual.com
uat.mediedge.com
libertymutual.com
uat.mediedge.com
nonprod-easycare.libertymedicalinsurance.com
libertymutual.com
libertymutual.com
libertymutual.com
nonprod-easycare.libertymedicalinsurance.com
libertymutual.com
libertymutual.com
libertymutual.com
uat.mediedge.com
uat.mediedge.com
uat.mediedge.com
libertymutual.com
uat.mediedge.com
libertymutual.com
uat.mediedge.com
uat.mediedge.com
uat.mediedge.com
uat.mediedge.com
uat.mediedge.com
uat.mediedge.com
nonprod-easycare.libertymedicalinsurance.com
libertymutual.com
libertymutual.com
libertymutual.com
uat.mediedge.com
libertymutual.com
libertymutual.com
libertymutual.com
libertymutual.com
libertymutual.com
www.mediedge.com
uat.mediedge.com
uat.mediedge.com
libertymutual.com
uat.mediedge.com
libertymutual.com
uat.mediedge.com
uat.mediedge.com
uat.mediedge.com
libertymutual.com
libertymutual.com
libertymutual.com
www.libertyseguros.com.br
nonprod-easycare.libertymedicalinsurance.com
uat.mediedge.com
nonprod-easycare.libertymedicalinsurance.com
uat.mediedge.com

Certificate

The complete raw certificate details for uat.mediedge.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzf1YxvUORKfxKlWToofB
39G28PhCZN2xZ+Sb4i52LC+vB4lU1ZnlAXh5hT6OX8RXxh0SOSnECJAlQ6em25gg
y15MBPYNIEZAchcrSOaEY9zu/Ud8a4WmTO6MvYLH0lTdeWfIVhFTsmEX3+/NmhKv
jZ4pCTynCQ4OJgaKVM68O23eBnpvXB//tIe6K8E//pMwpcXIyFDh6LtKPJwc+JGZ
d7Mrv0vAhBXfuIS3uihXqpUDcaR/IQaKXp/a/6qdkSx0geu2go8j8bn+rn1fqHuj
yWzjxqN7GfQNqpAN/N9G2OwzA4RBzK9YH8SnXXc0Bo0hXaZezCGH7z3Jf64xSf/z
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 151099045711400716445556610277499058930
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'International Consumer Markets'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'uat.mediedge.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26003782474346258791617720451110237640603870298873381568473108900934667623426385208833851945987770869388819002530689743444137840904961087803492494123314072229724597063737006000171252372599170664960998381979253232008858414843802827517134239328641039378415201133320891549378144002938800041345932846605597183517639368398219423832421365386349857586591930431559102112687681076703650083924689748240160602240958637191418107064492339661720890446786376650356172865293603052638375477392617588049054619547967620504327569067637686565075640747626480055335228516211070170440789873422668539145457806954100899613340928150556077191981
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (552 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'printuat.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-tsta.regal.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esb-tst.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-desc.regal.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-desa.regal.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimpartners-desa.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esb-des.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-paymentcallbackcybs.payments.sg.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-paymentclient.payments.sg.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimpartners-tsta.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-desb.regal.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.mediedge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act-personallines.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-apis.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww02uat.libertyinsurance.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww02uat.libertymutual.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act-wct.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act-imobiliario.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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