icowebprod.harland.net

- Harland Clarke -

Issued by Symantec Class 3 Secure Server SHA256 SSL CA

About this certificate

This digital certificate with serial number 3e:9c:e6:70:09:16:42:2d:50:81:d8:05:82:6e:e7:04 was issued on by Symantec Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Harland Clarke

Organization: Harland Clarke
Organization unit: IT
State / Province: Texas
Locality: San Antonio
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3e:9c:e6:70:09:16:42:2d:50:81:d8:05:82:6e:e7:04
Serial Number (int): 83226807879171532680406248996543063812
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: db:62:20:fb:7d:02:89:7c:d2:3b:6f:c7:e4:32:6c:05:52:1d:ad:b1

Fingerprint (sha1): 57:41:29:e9:5f:58:1d:b7:b0:9f:a6:24:fa:28:42:8e:83:c1:54:43
Fingerprint (sha256): 44:b2:4d:b6:f4:68:94:cc:83:97:60:a8:99:b1:bc:09:6c:64:26:c0:9b:dd:3c:74:ba:9f:2d:f6:b9:ac:7e:ea

Issuing Certificate URL: http://sg.symcb.com/sg.crt

Revocation information

OCSP Server: http://sg.symcd.com
CRL Distribution Point: http://sg.symcb.com/sg.crl

Check the revocation status for certificate icowebprod.harland.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for icowebprod.harland.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

icowebprod.harland.net

Other certificates including the domain name harland.net

(limited to 100 certificates)
vanediuat.harland.net
branchapp3uat.harland.net
branchapp3.harland.net
reorder.harland.net
dmisinq.harland.net
branchprod.harland.net
vanweb.harland.net
branchapp3uat.harland.net
reorder.harland.net
hcefunds.harland.net
branchapp3.harland.net
vanedi.harland.net
branchbeta.harland.net
vanwebpp.harland.net
van.harland.net
vanedi.harland.net
branchpostprodapp3.harland.net
mysecurebatch.harland.net
myreports.harland.net
vanediuat.harland.net
branchpostprodapp3.harland.net
vanwebpp.harland.net
vanediuat.harland.net
branchpostprodapp3.harland.net
branchapp2uat.harland.net
icowebprod.harland.net
b2btestharness.harland.net
vanwebqa.harland.net
dmispxy.harland.net
vanweb.harland.net
vanssouat.harland.net
dmispxy.harland.net
branchuat.harland.net
branchbeta.harland.net
branchprod.harland.net
vanuat.harland.net
branchbeta.harland.net
deposilink.harland.net
vanuat.harland.net
vansso.harland.net
reorder.harland.net
branchuat.harland.net
branchprodb.harland.net
branchapp2.harland.net
vanuat.harland.net
branchprodt.harland.net
drtestbcp.harlandclarke.com
vanuat.harland.net
branchbeta.harland.net
branchuat.harland.net
van.harland.net
branchprodb.harland.net
vanssouat.harland.net
branchprodb.harland.net
vanwebpp.harland.net
branchapp2.harland.net
www.vanediuat.harland.net
vanwebuat.harland.net
branchapp2uat.harland.net
icowebprod.harland.net
vanedi.harland.net
branchbeta.harland.net
deposilink.harland.net
www.harland.net
branchprod.harland.net
branchapp1.harland.net
branchproda.harland.net
vansso.harland.net
vanwebpp.harland.net
drtestbcp.harlandclarke.com
branchapp2uat.harland.net
reorder.harland.net
icowebprod.harland.net
vanweb.harland.net
icowebprod.harland.net
branchapp3uat.harland.net
reorder.harland.net
van.harland.net
vanwebuat.harland.net
branchproda.harland.net
mysecurebatch.harland.net
vanweb.harland.net
vanuat.harland.net
branchapp2uat.harland.net
vanweb.harland.net
vansso.harland.net
vanweb.harland.net
branchprod.harland.net
vanwebpp.harland.net
branchapp2uat.harland.net
vanwebqa.harland.net
branchbeta.harland.net
branchpostprodapp2.harland.net
branchpostprodapp3.harland.net
vanweb.harland.net
van.harland.net
branchuat.harland.net
branchprodb.harland.net
branchprod.harland.net
branchproda.harland.net

Certificate

The complete raw certificate details for icowebprod.harland.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE9jCCA96gAwIBAgIQPpzmcAkWQi1QgdgFgm7nBDANBgkqhkiG9w0BAQsFADCB
hDELMAkGA1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFudGVjIENvcnBvcmF0aW9uMR8w
HQYDVQQLExZTeW1hbnRlYyBUcnVzdCBOZXR3b3JrMTUwMwYDVQQDEyxTeW1hbnRl
YyBDbGFzcyAzIFNlY3VyZSBTZXJ2ZXIgU0hBMjU2IFNTTCBDQTAeFw0xNTExMzAw
MDAwMDBaFw0xNzExMjkyMzU5NTlaMHoxCzAJBgNVBAYTAlVTMQ4wDAYDVQQIEwVU
ZXhhczEUMBIGA1UEBxQLU2FuIEFudG9uaW8xFzAVBgNVBAoUDkhhcmxhbmQgQ2xh
cmtlMQswCQYDVQQLFAJJVDEfMB0GA1UEAxQWaWNvd2VicHJvZC5oYXJsYW5kLm5l
dDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPQNLI8h0Hz81PLIaXZt
iUAhLCSv5HY+Rnf9mG95tAT27rBzQ9e1EL616/vB28VpZjzbCk4EJaoaQKE7BYVq
7/vSz87dwGYOF437mMyXG1g7SiyezWGolZyX49McpEGoFYXDstICyAwQANFR9H44
hC4f8Fr3ImSURO6PmOJl+H4td+A23W/SIHKoG+dd3opbi19Em/W+nvygfYaLGMYD
CEoVzeQm3gcqTxl1aiLslfKdh8JNK2N6W+yg6f30EhMWsvuJ49vr4ztriY/SaAcB
7J24ratt4WpWH+0Dyhz+cMx+gB4d6PHI69/u9ewKKf6LC443xyT+YOySGq+DNY4N
y2cCAwEAAaOCAWswggFnMCEGA1UdEQQaMBiCFmljb3dlYnByb2QuaGFybGFuZC5u
ZXQwCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwKwYDVR0fBCQwIjAgoB6gHIYa
aHR0cDovL3NnLnN5bWNiLmNvbS9zZy5jcmwwYQYDVR0gBFowWDBWBgZngQwBAgIw
TDAjBggrBgEFBQcCARYXaHR0cHM6Ly9kLnN5bWNiLmNvbS9jcHMwJQYIKwYBBQUH
AgIwGQwXaHR0cHM6Ly9kLnN5bWNiLmNvbS9ycGEwHQYDVR0lBBYwFAYIKwYBBQUH
AwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFNtiIPt9Aol80jtvx+QybAVSHa2xMFcG
CCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDovL3NnLnN5bWNkLmNvbTAm
BggrBgEFBQcwAoYaaHR0cDovL3NnLnN5bWNiLmNvbS9zZy5jcnQwDQYJKoZIhvcN
AQELBQADggEBAA17YGQGMUz7JI/enYEt4Nu1H7a6fs5qryIB5EsKcggFjdb+9qiU
RrLEG8L/JsKkmWb9oDCMkt6C9d0r2Fs0bzS3VazUnfgVsAMP2UY3GH+T3dNC4sws
fhldqLj78+PsaWhpKDs7DnKVEBV+5jstjk+W5gluVTOGhJmegcZgPG+CVjPS9/kH
VdPWJDbn38k6CQ9sGl69PH2A5srkZ2tHpn+K81i+0t8HQ5rq+Tr15USBAMfXPBF7
hHLfFVrtUaAZzBbYC/cgEsW4n73BT9x/t+iCxoH8TzCM404sDFyPR5s9DJh+TTjT
P4MljuziUP0e/j5iy1dUKHem3PO5EE7bzaY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9A0sjyHQfPzU8shpdm2J
QCEsJK/kdj5Gd/2Yb3m0BPbusHND17UQvrXr+8HbxWlmPNsKTgQlqhpAoTsFhWrv
+9LPzt3AZg4XjfuYzJcbWDtKLJ7NYaiVnJfj0xykQagVhcOy0gLIDBAA0VH0fjiE
Lh/wWvciZJRE7o+Y4mX4fi134Dbdb9Igcqgb513eiluLX0Sb9b6e/KB9hosYxgMI
ShXN5CbeBypPGXVqIuyV8p2Hwk0rY3pb7KDp/fQSExay+4nj2+vjO2uJj9JoBwHs
nbitq23halYf7QPKHP5wzH6AHh3o8cjr3+717Aop/osLjjfHJP5g7JIar4M1jg3L
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 83226807879171532680406248996543063812
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'San Antonio'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Harland Clarke'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'icowebprod.harland.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30808642782345264617740301699150924356673526141776537428163893122909997795305219743075510603259077940181662310793583663127163117023011736455570248519497852934501280995916015298798792300482181507898362593863971896054654584245468608747958102864556474287193015884866743948053856622629560552600357662076640382818254508982401187031820176246758647031770196498820638982877925100363469196394727116829536967613569562555686976251538246554591278100431652276185389183497370164756948500073544212117510821940445277250808764668716366421036171520575391093237924199152127612400742757704700462982926743759657809591104495300033752451943
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icowebprod.harland.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcb.com/sg.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName db6220fb7d02897cd23b6fc7e4326c05521dadb1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcb.com/sg.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000d7b606406314cfb248fde9d812de0dbb51fb6ba7ece6aaf2201e44b0a7208058dd6fef6a89446b2c41bc2ff26c2a49966fda0308c92de82f5dd2bd85b346f34b755acd49df815b0030fd94637187f93ddd342e2cc2c7e195da8b8fbf3e3ec696869283b3b0e729510157ee63b2d8e4f96e6096e55338684999e81c6603c6f825633d2f7f90755d3d62436e7dfc93a090f6c1a5ebd3c7d80e6cae4676b47a67f8af358bed2df07439aeaf93af5e5448100c7d73c117b8472df155aed51a019cc16d80bf72012c5b89fbdc14fdc7fb7e882c681fc4f308ce34e2c0c5c8f479b3d0c987e4d38d33f83258eece250fd1efe3e62cb57542877a6dcf3b9104edbcda6