san2.rogersmedia.com

- Rogers Media Inc. -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 1d:10:7a:c9:b8:47:e3:ac:1e:6b:ab:55:d4:de:66:9d was issued on by Symantec Corporation.

With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Rogers Media Inc.

Organization: Rogers Media Inc.
Organization unit: IT
State / Province: Ontario
Locality: Toronto
Country: CA

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1d:10:7a:c9:b8:47:e3:ac:1e:6b:ab:55:d4:de:66:9d
Serial Number (int): 38633179063363579119734227989436458653
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 5b:9e:9c:a0:d6:e6:26:89:75:a3:93:b2:17:ea:ce:5d:c7:9e:2b:11
Fingerprint (sha256): 45:48:f7:31:f7:64:22:cd:74:71:fb:a0:a3:e5:3a:ec:81:17:10:28:e7:9a:df:fe:5e:83:6e:c8:0e:2b:0e:bb

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate san2.rogersmedia.com

19

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for san2.rogersmedia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.fxnowcanada.ca
*.g4tv.ca
*.btcalgary.ca
*.cityline.ca
*.sportsnet.ca
*.btvancouver.ca
*.macleans.ca
*.omnitv.ca
*.breakfasttelevision.ca
*.oln.ca
*.todaysparent.com
san.rogersbroadcasting.com
*.btmontreal.ca
*.dinnertelevision.ca
*.rogersdigitalmedia.com
*.bttoronto.ca
*.citytv.com
*.rogersmedia.com
san2.rogersmedia.com

Other certificates including the domain name rogersmedia.com

(limited to 100 certificates)
san.rogersmedia.com
san2.rogersmedia.com
li.lisecurelink.com
uc18.janrainengage.com
san2.rogersmedia.com
san.rogers.com
li.lisecurelink.com
san2.rogersmedia.com
san.rogersmedia.com
san.rogersmedia.com
san.rogersmedia.com
li.lisecurelink.com
li.lisecurelink.com
li.lisecurelink.com
shared.rogersmedia.com
li.lisecurelink.com
analytics.rogersmedia.com
li.lisecurelink.com
li.lisecurelink.com
www.rogersmedia.com
li.lisecurelink.com
san2.rogersmedia.com
li.lisecurelink.com
san2.rogersmedia.com
li.lisecurelink.com
san2.rogersmedia.com
san.rogersmedia.com
san2.rogersmedia.com
san2.rogersmedia.com
oms.rogersmedia.com
*.rogersmedia.com
www.rogersmedia.com
san.rogersmedia.com
san2.rogersmedia.com
san.rogersmedia.com
san2.rogersmedia.com
oms.rogersmedia.com
san.rogersmedia.com
www.rogersmedia.com
uc18.janrainengage.com
li.lisecurelink.com
oms.rogersmedia.com
www.rogersmedia.com
li.lisecurelink.com
san2.rogersmedia.com
li.lisecurelink.com
oms.rogersmedia.com
*.rogersmedia.com
san.rogersmedia.com
li.lisecurelink.com
uc18.janrainengage.com
li.lisecurelink.com
san2.rogersmedia.com
san2.rogersmedia.com
li.lisecurelink.com
li.lisecurelink.com
san2.rogersmedia.com
oms.rogersmedia.com
san.rogersmedia.com
*.rogersmedia.com
san2.rogersmedia.com
li.lisecurelink.com
www.rogersmedia.com
san.rogersmedia.com
san2.rogersmedia.com
uc18.janrainengage.com
oms.rogersmedia.com
li.lisecurelink.com
san.rogersmedia.com
li.lisecurelink.com
li.lisecurelink.com
san2.rogersmedia.com
san2.rogersmedia.com
uc18.janrainengage.com
san2.rogersmedia.com
li.lisecurelink.com
li.lisecurelink.com
analytics.rogersmedia.com
li.lisecurelink.com
*.rogersmedia.com
sli.rogersmedia.com
san.rogersmedia.com
li.lisecurelink.com
san.rogersmedia.com
san2.rogersmedia.com
uc18.janrainengage.com
san2.rogersmedia.com
li.lisecurelink.com
san.rogers.com
uc18.janrainengage.com
li.lisecurelink.com
li.lisecurelink.com
san.rogersmedia.com
watch.rogersmedia.com
san.rogersmedia.com
oms.rogersmedia.com
san.rogersmedia.com
san.rogers.com
san2.rogersmedia.com
li.lisecurelink.com

Certificate

The complete raw certificate details for san2.rogersmedia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7OAMW0loZRkGdXAnut1Z
5Jw8ihXqsvfCQgbQexHY1HSGK+/59PFOruaHIQONNeeE6KjQu+NLeFk6AmoHwnOE
sBXtiGh+fKQprOZaVgUmqtLBZNys4w1VI/W9YvXLh7YCYCOcfEWtRBn70DFHkM8/
kEyOBq/TNii7CM6URxRGM67omsj7VRWkJWDuHORI5jznEjNFa0Z4rOdfh5nMIgHY
UFIFpE3N4XeDecgE1a8+JiUkoskI6BbRTj3KT0mSMcmdXancFdg7xZacOJv3tiUC
42iSgsAIavK/Yah1rghvu1Ks8KWR2B4ZTa7oViM/9gcJO2ApM2t/qRLExR2GT3yf
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 38633179063363579119734227989436458653
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Toronto'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rogers Media Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'san2.rogersmedia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29902722290636182243184643678787831785167866341742883428227597916501006651555326484983407006988306236623768184753164844097610373516293222334685746304378609431978936472403685874345384011031037638895828891445472869733066804549392067635320815338972583008934871837217462256738057076475230762954086271978258654002926418163838364209873975184947032047525499712634239689497276385664338743347054759971447187683114572267864835911271752968063597131193032008751237129176953990615891692096013558231740994121103102003882700382212825219802855608839199838773354949110821290723720916310845846144592686699109777538108447712685087039263
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (347 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fxnowcanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.g4tv.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btcalgary.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cityline.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sportsnet.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btvancouver.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.macleans.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.omnitv.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.breakfasttelevision.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oln.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.todaysparent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san.rogersbroadcasting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.btmontreal.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dinnertelevision.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rogersdigitalmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bttoronto.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.citytv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rogersmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san2.rogersmedia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015bd97b86840000040300473045022100e63b7edb75acf58c44f416c15d258432103ecc35b261f71732f42f02fadfdcb9022034b4e8802e53f553b7797611617a32052370fbdd8873e614cc2a6054d2ac7a85007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015bd97b86b30000040300473045022009d6b6aa4e3e72540265b9c1a6d31b0301457df06c7ff87a74c69b8fceb5ef54022100a118aa6b5d6567d87b00ff10563c17de76a70bcfa75e84067b7a1d0f88d5a2b5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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