sihh2016.vancleefarpels.com

- Richemont International SA -

Issued by Symantec Class 3 Secure Server SHA256 SSL CA

About this certificate

This digital certificate with serial number 26:3e:fe:1d:9f:7f:0e:dc:2f:98:54:fd:04:9c:10:2a was issued on by Symantec Corporation.

With 35 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Richemont International SA

Organization: Richemont International SA
Organization unit: Van Cleef and Arpels
State / Province: Genève
Locality: Bellevue
Country: CH

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 26:3e:fe:1d:9f:7f:0e:dc:2f:98:54:fd:04:9c:10:2a
Serial Number (int): 50837740324073723236795996663151595562
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: db:62:20:fb:7d:02:89:7c:d2:3b:6f:c7:e4:32:6c:05:52:1d:ad:b1

Fingerprint (sha1): 5d:90:1d:f9:bd:33:c5:c0:8c:e1:05:94:b1:69:cd:2d:89:ca:55:46
Fingerprint (sha256): 47:f8:cf:4a:83:39:75:1a:a3:b8:a0:86:22:5a:8f:4c:97:c2:51:74:7d:6b:48:82:a5:41:c7:03:e7:fd:42:0f

Issuing Certificate URL: http://sg.symcb.com/sg.crt

Revocation information

OCSP Server: http://sg.symcd.com
CRL Distribution Point: http://sg.symcb.com/sg.crl

Check the revocation status for certificate sihh2016.vancleefarpels.com

35

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sihh2016.vancleefarpels.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

7-seconds-of-luck.vancleefarpels.com
8-seconds-of-luck.vancleefarpels.com
admin.7-seconds-of-luck.vancleefarpels.com
admin.8-seconds-of-luck.vancleefarpels.com
admin.archedenoe-jp.vancleefarpels.com
admin.archedenoe.vancleefarpels.com
admin.artdelahautejoaillerie-vancleefarpels.com
admin.connectedmirror.vancleefarpels.com
admin.emeraudeenmajeste.vancleefarpels.com
admin.grandvendome.vancleefarpels.com
admin.hk.lecolevancleefarpels.com
admin.peaudane.vancleefarpels.com
admin.pierresdecaractere-variations.vancleefarpels.com
admin.press.artscienceofgems.vancleefarpels.com
admin.pressroom.lecolevancleefarpels.com
admin.pressroom.vancleefarpels.com
admin.sevenseas.vancleefarpels.com
admin.sihh2015.vancleefarpels.com
admin.sihh2016.vancleefarpels.com
admin.sparkles-of-luck.vancleefarpels.com
admin.us.lecolevancleefarpels.com
archedenoe-jp.vancleefarpels.com
archedenoe.vancleefarpels.com
collectionpeaudane.vancleefarpels.com
connectedmirror.vancleefarpels.com
epr.vancleefarpels.com
fb.vancleefarpels.com
peaudane.vancleefarpels.com
pressroom.lecolevancleefarpels.com
secure.hk.lecolevancleefarpels.com
secure.sparkles-of-luck.vancleefarpels.com
sevenseas.vancleefarpels.com
sihh2015.vancleefarpels.com
sihh2016.vancleefarpels.com
us.lecolevancleefarpels.com

Other certificates including the domain name vancleefarpels.com

(limited to 100 certificates)
secure.cn.vancleefarpels.com
intranet.richemont.com
intranet.richemont.com
weboutique.quality.vancleefarpels.com
intranet.richemont.com
weboutique.quality.vancleefarpels.com
dam.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
presslounge.vancleefarpels.com
linemedia.preprod.richemont.com
media.richemont.com
www.vancleefarpels.com
www.preprod2.vancleefarpels.cn
diamondcheck.vancleefarpels.com
intranet.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
dam.richemont.com
linemedia.preprod.richemont.com
intranet.richemont.com
www.vancleefarpels.com
www.quality.alange-soehne.com
vcaballet.vancleefarpels.com
weboutique.dev.vancleefarpels.com
linemedia.preprod.richemont.com
sihh2014.vancleefarpels.com
intranet.preprod.richemont.com
api.weboutique.quality.iwc.cn
linemedia.preprod.richemont.com
weboutique.preprod.vancleefarpels.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
vcaballet.vancleefarpels.com
www.quality.alange-soehne.com
media.richemont.com
vcaballet.vancleefarpels.com
weboutique.vancleefarpels.com
vcaballet.vancleefarpels.com
linemedia.preprod.richemont.com
weboutique.preprod.vancleefarpels.com
vcaballet.vancleefarpels.com
diamondcheck.vancleefarpels.com
www.quality.alange-soehne.com
intranet.staging.richemont.com
www.lecolevancleefarpels.com
intranet.quality.richemont.com
vcaballet.vancleefarpels.com
secure-www.vancleefarpels.com
weboutique.dev.vancleefarpels.com
intranet.dev.richemont.com
www.vancleefarpels.com
intranet.staging.richemont.com
8-seconds-of-luck.vancleefarpels.com
vcs.richemont.com
diamondcheck.vancleefarpels.com
intranet.richemont.com
linemedia.preprod.richemont.com
intranet.dev.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
dam.richemont.com
sihh2014.vancleefarpels.com
media.richemont.com
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
yps.vancleefarpels.com
vcaballet.vancleefarpels.com
sihh2016.vancleefarpels.com
sihh2014.vancleefarpels.com
secure.www.vancleefarpels.com
intranet.richemont.com
vcaballet.vancleefarpels.com
weboutique.quality.vancleefarpels.com
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
org-timenaturelove.vancleefarpels.com
intranet.staging.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
sihh2014.vancleefarpels.com
sihh2014.vancleefarpels.com
sihh2014.vancleefarpels.com
intranet.richemont.com
www.quality.alange-soehne.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
intranet.richemont.com
www.vancleefarpels.com
linemedia.preprod.richemont.com
whenelegancemeetsart.quality.vancleefarpels.com
sihh2016.vancleefarpels.com
intranet.richemont.com
presslounge.vancleefarpels.com
api.weboutique.quality.iwc.cn
sihh2014.vancleefarpels.com
intranet.richemont.com
wwsip.richemont.com
sihh2016.vancleefarpels.com

Certificate

The complete raw certificate details for sihh2016.vancleefarpels.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jsfiGSdFvywuIv9lIMV
7O3lkN7FTPSP7HvthaGcT3DTTPMa36x7/ahwVQTCvSyBZ9f7lbuRFIId72woHp3Y
04apv74ekhWCLzcKWA8q0yGU5qTRtc6GableC1FRdaZX9B45Am9nupje8K9gITv5
0q01hT/PynN+6JfkzDRlC+Djr9ZNdZnWwprv+caHjuwxMsAB5KVlPBRxVlz+8sy4
9USrjxOnjK/hVJLpV3PAMP6Y24HmVK0qRMcP1oden81S3U7+aK5XpCHAgDtnCbFj
uIre0uUNPWd6Q/8Wkd9XhGODg1RedFJzTkDkHMnxXetiWOZ8LldJjjG+jnjrGyyt
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 50837740324073723236795996663151595562
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Genève'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bellevue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Richemont International SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Van Cleef and Arpels'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'sihh2016.vancleefarpels.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28559011646504773259408746351031818377138554964294178252669061768298850822209140244036925459411453307012434913243073963768231284588445827716196060497383176678280670110809209782353481975811796848927463096894071253934003593802048662740331590802682110959001433106994653609888725042296497247376918974494057644788548812185992458390241661546958743081876345322959556605070848307324045948048067683610404199882786719690710315014723941468353223271445764087760335501166939877152317584348610498925890926982538632201400378148465661231400836637061617563746222019674045890006344311813952462960922081766766061015964412178586867117427
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1305 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '7-seconds-of-luck.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '8-seconds-of-luck.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.7-seconds-of-luck.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.8-seconds-of-luck.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.archedenoe-jp.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.archedenoe.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.artdelahautejoaillerie-vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.connectedmirror.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.emeraudeenmajeste.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.grandvendome.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hk.lecolevancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.peaudane.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pierresdecaractere-variations.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.press.artscienceofgems.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pressroom.lecolevancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pressroom.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sevenseas.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sihh2015.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sihh2016.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sparkles-of-luck.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.us.lecolevancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archedenoe-jp.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archedenoe.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collectionpeaudane.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectedmirror.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epr.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fb.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peaudane.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pressroom.lecolevancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.hk.lecolevancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.sparkles-of-luck.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sevenseas.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sihh2015.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sihh2016.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.lecolevancleefarpels.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName db6220fb7d02897cd23b6fc7e4326c05521dadb1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcb.com/sg.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcb.com/sg.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc000001596ea6067a0000040300473045022100fc0dc1bd2da45fb6c1f0122084ab97a136a93ba3493ce9c9f772e8afbfc7a862022060389212d914e4ee7b5d507834d22879df3b3b7cb274883e54ed29be9a98fec1007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb000001596ea606ba0000040300463044022031c2151c340b63043dabdbc63f6fd8323f0a4fb66402d789c3cc23185b36c75f0220715c23471f8a2a0c8cfca4cd00fd74667956a290e699bf70a4c6f0da9368f9b1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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