uat.mediedge.com

- Liberty Mutual Group -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 6a:76:87:87:86:64:52:7f:25:c6:4d:3b:bd:38:0e:6e was issued on by Symantec Corporation.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: International Consumer Markets
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 6a:76:87:87:86:64:52:7f:25:c6:4d:3b:bd:38:0e:6e
Serial Number (int): 141513607445198898066694697706298281582
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 18:07:bd:24:af:ec:86:5f:49:5b:72:ad:5e:e6:ae:e6:9f:87:e1:76
Fingerprint (sha256): 44:af:3f:c4:de:82:8a:b4:94:be:7a:1b:43:e5:bd:44:88:cc:e3:52:70:5e:b6:d2:58:41:c0:66:83:d2:66:31

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate uat.mediedge.com

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for uat.mediedge.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

printuat.lmginsurance.co.th
connectapp.libertyqa.pt
www-tsta.regal.cat
esb-tst.libertyseguros.es
www-desc.regal.cat
www-desa.regal.cat
connect.libertyqa.pt
claimpartners-desa.libertyseguros.es
prodcqa.libertyinsuranceni.co.uk
esb-des.libertyseguros.es
qa-paymentcallbackcybs.payments.sg.lmig.com
qa-paymentclient.payments.sg.lmig.com
claimpartners-tsta.libertyseguros.es
www-desb.regal.cat
uat.mediedge.com
act-personallines.libertyseguros.com.br
devcqa.quinn-direct.co.uk
test-apis.libertyseguros.com.br
ww02uat.libertyinsurance.com.hk
ww02uat.libertymutual.com.hk
act-wct.libertyseguros.com.br
act-imobiliario.libertyseguros.com.br

Other certificates including the domain name mediedge.com

(limited to 100 certificates)
uat.mediedge.com
libertymutual.com
www.libertyseguros.com.br
uat.mediedge.com
www.libertyseguros.com.br
uat.mediedge.com
www.libertyseguros.com.br
uat.mediedge.com
uat.mediedge.com
uat.mediedge.com
uat.mediedge.com
uat.mediedge.com
uat.mediedge.com
uat.mediedge.com
libertymutual.com
libertymutual.com
libertymutual.com
nonprod-easycare.libertymedicalinsurance.com
uat.mediedge.com
uat.mediedge.com
libertymutual.com
libertymutual.com
uat.mediedge.com
libertymutual.com
uat.mediedge.com
uat.mediedge.com
uat.mediedge.com
uat.mediedge.com
libertymutual.com
uat.mediedge.com
nonprod-easycare.libertymedicalinsurance.com
libertymutual.com
libertymutual.com
uat.mediedge.com
uat.mediedge.com
libertymutual.com
nonprod-easycare.libertymedicalinsurance.com
uat.mediedge.com
www.libertyseguros.com.br
nonprod-easycare.libertymedicalinsurance.com
libertymutual.com
uat.mediedge.com
uat.mediedge.com
libertymutual.com
uat.mediedge.com
libertymutual.com
uat.mediedge.com
nonprod-easycare.libertymedicalinsurance.com
www.mediedge.com
libertymutual.com
uat.mediedge.com
libertymutual.com
uat.mediedge.com
nonprod-easycare.libertymedicalinsurance.com
libertymutual.com
libertymutual.com
libertymutual.com
nonprod-easycare.libertymedicalinsurance.com
libertymutual.com
libertymutual.com
libertymutual.com
uat.mediedge.com
uat.mediedge.com
uat.mediedge.com
libertymutual.com
uat.mediedge.com
libertymutual.com
uat.mediedge.com
uat.mediedge.com
uat.mediedge.com
uat.mediedge.com
uat.mediedge.com
uat.mediedge.com
nonprod-easycare.libertymedicalinsurance.com
libertymutual.com
libertymutual.com
libertymutual.com
uat.mediedge.com
libertymutual.com
libertymutual.com
libertymutual.com
libertymutual.com
libertymutual.com
www.mediedge.com
uat.mediedge.com
uat.mediedge.com
libertymutual.com
uat.mediedge.com
libertymutual.com
uat.mediedge.com
uat.mediedge.com
uat.mediedge.com
libertymutual.com
libertymutual.com
libertymutual.com
www.libertyseguros.com.br
nonprod-easycare.libertymedicalinsurance.com
uat.mediedge.com
nonprod-easycare.libertymedicalinsurance.com
uat.mediedge.com

Certificate

The complete raw certificate details for uat.mediedge.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHpjCCBo6gAwIBAgIQanaHh4ZkUn8lxk07vTgObjANBgkqhkiG9w0BAQsFADB+
MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAd
BgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxLzAtBgNVBAMTJlN5bWFudGVj
IENsYXNzIDMgU2VjdXJlIFNlcnZlciBDQSAtIEc0MB4XDTE3MDMwMTAwMDAwMFoX
DTE5MDMxNzIzNTk1OVowgZ0xCzAJBgNVBAYTAlVTMRYwFAYDVQQIDA1OZXcgSGFt
cHNoaXJlMRMwEQYDVQQHDApQb3J0c21vdXRoMR0wGwYDVQQKDBRMaWJlcnR5IE11
dHVhbCBHcm91cDEnMCUGA1UECwweSW50ZXJuYXRpb25hbCBDb25zdW1lciBNYXJr
ZXRzMRkwFwYDVQQDDBB1YXQubWVkaWVkZ2UuY29tMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAxctx4IS2w7EuxObw53EwYO8bC2VinDWNMJY20eb5bsMy
IfjBstz/WlCFLuh5oMUz2v+QlBmk6PX6BwALJYZY8S64j1Rr6oaz4IRL3KdkCjU/
td19H0XGd70pOC893eBDUjqgnSvR9zbfCTaXyfefHt3eCN13Kru9MNzIuFU6Avz/
GTKBYVcIGXDmuNWwtWmNj8WpGf/YmYX6b6X/jBSrGT5aWU6O7+NJdxGbJ5AfvN5r
5LSfVgKLF8Q/DgIEXzYxgkGV9SUb9asT6znhKaN1MCdJKvNidPZCuDR3g/dXQAOx
bAWLajBgZ4zOuOt23zKNTdCE+tbez0i2Y4vvBK6zUQIDAQABo4ID/jCCA/owggKd
BgNVHREEggKUMIICkIIbcHJpbnR1YXQubG1naW5zdXJhbmNlLmNvLnRoghdjb25u
ZWN0YXBwLmxpYmVydHlxYS5wdIISd3d3LXRzdGEucmVnYWwuY2F0ghllc2ItdHN0
LmxpYmVydHlzZWd1cm9zLmVzghJ3d3ctZGVzYy5yZWdhbC5jYXSCEnd3dy1kZXNh
LnJlZ2FsLmNhdIIUY29ubmVjdC5saWJlcnR5cWEucHSCJGNsYWltcGFydG5lcnMt
ZGVzYS5saWJlcnR5c2VndXJvcy5lc4IgcHJvZGNxYS5saWJlcnR5aW5zdXJhbmNl
bmkuY28udWuCGWVzYi1kZXMubGliZXJ0eXNlZ3Vyb3MuZXOCK3FhLXBheW1lbnRj
YWxsYmFja2N5YnMucGF5bWVudHMuc2cubG1pZy5jb22CJXFhLXBheW1lbnRjbGll
bnQucGF5bWVudHMuc2cubG1pZy5jb22CJGNsYWltcGFydG5lcnMtdHN0YS5saWJl
cnR5c2VndXJvcy5lc4ISd3d3LWRlc2IucmVnYWwuY2F0ghB1YXQubWVkaWVkZ2Uu
Y29tgidhY3QtcGVyc29uYWxsaW5lcy5saWJlcnR5c2VndXJvcy5jb20uYnKCGWRl
dmNxYS5xdWlubi1kaXJlY3QuY28udWuCH3Rlc3QtYXBpcy5saWJlcnR5c2VndXJv
cy5jb20uYnKCH3d3MDJ1YXQubGliZXJ0eWluc3VyYW5jZS5jb20uaGuCHHd3MDJ1
YXQubGliZXJ0eW11dHVhbC5jb20uaGuCHWFjdC13Y3QubGliZXJ0eXNlZ3Vyb3Mu
Y29tLmJygiVhY3QtaW1vYmlsaWFyaW8ubGliZXJ0eXNlZ3Vyb3MuY29tLmJyMAkG
A1UdEwQCMAAwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjBhBgNVHSAEWjBYMFYGBmeBDAECAjBMMCMGCCsGAQUFBwIBFhdodHRw
czovL2Quc3ltY2IuY29tL2NwczAlBggrBgEFBQcCAjAZDBdodHRwczovL2Quc3lt
Y2IuY29tL3JwYTAfBgNVHSMEGDAWgBRfYM9hkFXfhEMUimAqsvV69EMY7zArBgNV
HR8EJDAiMCCgHqAchhpodHRwOi8vc3Muc3ltY2IuY29tL3NzLmNybDBXBggrBgEF
BQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9zcy5zeW1jZC5jb20wJgYIKwYB
BQUHMAKGGmh0dHA6Ly9zcy5zeW1jYi5jb20vc3MuY3J0MBMGCisGAQQB1nkCBAMB
Af8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAPYl+kTbNLkkQieI+OQnvOCHExKhiO
t79t2aQMtLOF0WqrPcSmrkeaHtj4DheSte0kEGtah9Q1sNLSglz/vafMy5Uq0Mlm
dtIeRZSsM24ZtguYFjNfRnzS8hcLLmK/uvB2kf6+fmzzT18VwdHnuXcULaLXHY1n
PnI/ftmKBZTuD+P6m02yViVr6Y7rQ6TqW5VOtmJqVbMfX8kMoa+VKzOLhq3bV3Ef
f26ijIJ1PkHMGfTC8W7DoKhKhKSr2g6vD7euYbAbyKj8jQUPVK71Y+Dsejxtdg/s
+UXSJu9Vgbpn7v20Vptr7Yu1nQYb0ywKkMki1Ro3rTRxHbsuT2xwtdZD
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxctx4IS2w7EuxObw53Ew
YO8bC2VinDWNMJY20eb5bsMyIfjBstz/WlCFLuh5oMUz2v+QlBmk6PX6BwALJYZY
8S64j1Rr6oaz4IRL3KdkCjU/td19H0XGd70pOC893eBDUjqgnSvR9zbfCTaXyfef
Ht3eCN13Kru9MNzIuFU6Avz/GTKBYVcIGXDmuNWwtWmNj8WpGf/YmYX6b6X/jBSr
GT5aWU6O7+NJdxGbJ5AfvN5r5LSfVgKLF8Q/DgIEXzYxgkGV9SUb9asT6znhKaN1
MCdJKvNidPZCuDR3g/dXQAOxbAWLajBgZ4zOuOt23zKNTdCE+tbez0i2Y4vvBK6z
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 141513607445198898066694697706298281582
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'International Consumer Markets'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'uat.mediedge.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24969268464102939137586485421581854345662536000700918300483903795874090690993335510952634685924687367137672082780273377323893035731037553382269819163768269529544190994462409936268037730449122024255288833592696563172086100707369272924927188704959975089815829102733570390269412376280302142040921616119365518229192763934740148514274634508740487478604775207580157732898718781893907245369921333923874032848446455013159179039249666004682726813920145838667961645826239779100515734858814337347083395338663416710996290756618086028983388395321842569886399687356049842037213867268806591203248660051966166304384108496641948824401
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (660 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'printuat.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectapp.libertyqa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-tsta.regal.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esb-tst.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-desc.regal.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-desa.regal.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.libertyqa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimpartners-desa.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodcqa.libertyinsuranceni.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esb-des.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-paymentcallbackcybs.payments.sg.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-paymentclient.payments.sg.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimpartners-tsta.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-desb.regal.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.mediedge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act-personallines.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devcqa.quinn-direct.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-apis.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww02uat.libertyinsurance.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww02uat.libertymutual.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act-wct.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'act-imobiliario.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000f625fa44db34b924422788f8e427bce0871312a188eb7bf6dd9a40cb4b385d16aab3dc4a6ae479a1ed8f80e1792b5ed24106b5a87d435b0d2d2825cffbda7cccb952ad0c96676d21e4594ac336e19b60b9816335f467cd2f2170b2e62bfbaf07691febe7e6cf34f5f15c1d1e7b977142da2d71d8d673e723f7ed98a0594ee0fe3fa9b4db256256be98eeb43a4ea5b954eb6626a55b31f5fc90ca1af952b338b86addb57711f7f6ea28c82753e41cc19f4c2f16ec3a0a84a84a4abda0eaf0fb7ae61b01bc8a8fc8d050f54aef563e0ec7a3c6d760fecf945d226ef5581ba67eefdb4569b6bed8bb59d061bd32c0a90c922d51a37ad34711dbb2e4f6c70b5d643