www.ubibanca.com

- Unione di Banche Italiane spa -

Issued by Symantec Class 3 EV SSL CA - G3

About this certificate

This digital certificate with serial number 67:86:fb:4f:98:4f:54:3f:92:6f:9a:c7:f9:70:00:bb was issued on by Symantec Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Unione di Banche Italiane spa

Company registration number: BG-345283
Organization: Unione di Banche Italiane spa
Organization unit: Sistemi Informativi - Operations
Address: Piazza V. Veneto, 8
Postal code: 24122
State / Province: Bergamo
Locality: Bergamo
Country: IT

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 67:86:fb:4f:98:4f:54:3f:92:6f:9a:c7:f9:70:00:bb
Serial Number (int): 137611348535862981491549560847530459323
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 01:59:ab:e7:dd:3a:0b:59:a6:64:63:d6:cf:20:07:57:d5:91:e7:6a

Fingerprint (sha1): f8:fe:a1:9a:f5:07:fe:76:56:5f:5b:54:3d:12:75:69:3d:bc:43:82
Fingerprint (sha256): 4f:c8:d8:80:1a:71:b1:19:e0:42:b8:8d:38:8b:ee:ef:46:50:20:92:fa:bd:48:f6:6e:87:36:30:b2:6e:ae:d4

Issuing Certificate URL: http://sr.symcb.com/sr.crt

Revocation information

OCSP Server: http://sr.symcd.com
CRL Distribution Point: http://sr.symcb.com/sr.crl

Check the revocation status for certificate www.ubibanca.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ubibanca.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ubibanca.com

Other certificates including the domain name ubibanca.com

(limited to 100 certificates)
servizi-bg.ubibanca.com
enjoyjuve.ubibanca.com
consulente-mutuo.ubibanca.com
calcolo_rata_mutuo.ubibanca.com
portale-esercenti.ubibanca.com
enjoynba.ubibanca.com
www.raccoltapunti.ubibanca.com
login.ubibanca.com
ubi1000.ubibanca.com
ip.ubibanca.com
surroga-mutuo.ubibanca.com
www.ubibanca.com
remotedesk.ubibanca.com
remotedesk.ubibanca.com
webextms01.ubibanca.com
www.pagamentionline.ubibanca.com
enjoyski.ubibanca.com
portal.ubibanca.com
mailms.ubibanca.com
login.ubibanca.com
webextms01.ubibanca.com
ognicosaatuotempo.ubibanca.com
mailms.ubibanca.com
portal.ubibanca.com
ubirent.ubibanca.com
www.ubibanca.com
www.ubiconfidiweb.ubibanca.com
portale-esercenti.ubibanca.com
www.ubiconfidiweb.ubibanca.com
mobile.ubibanca.com
board.ubibanca.com
ubiturnbg.ubibanca.com
remotedesk.ubibanca.com
www.ubiconfidiweb.ubibanca.com
surroga-mutuo.ubibanca.com
officewebapps.ubibanca.com
UBIRENT.UBIBANCA.COM
portale-esercenti.ubibanca.com
www.pagamentionline.ubibanca.com
ubiturnbg.ubibanca.com
mbl.ubibanca.com
arte.ubibanca.com
pubblicita.ubibanca.com
areariservata.clubino.ubibanca.com
mbl1.ubibanca.com
webextms01.ubibanca.com
ip.ubibanca.com
enjoynba.ubibanca.com
www.cartedicredito.ubibanca.com
ip-cert.ubibanca.com
portal.ubibanca.com
pianiubipramerica.ubibanca.com
www.ubibanca.com
stsms.ubibanca.com
www.pagamentionline.ubibanca.com
ubivideo.ubibanca.com
consulente_mutuo.ubibanca.com
enjoyski.ubibanca.com
servizi.ubibanca.com
www.cartedicredito.ubibanca.com
cnbd.quiubi.it
www.easycity.ubibanca.com
sf.ubibanca.com
cnbd.quiubi.it
ognicosaatuotempo.ubibanca.com
mbl2.ubibanca.com
www.pagamentionline.ubibanca.com
mdm.ubibanca.com
ubiturnbs.ubibanca.com
www.ubiconfidiweb.ubibanca.com
www.ubibanca.com
enjoyski.ubibanca.com
mbl2.ubibanca.com
www.welcome-privati.ubibanca.com
areariservata.clubino.ubibanca.com
redirect.intesasanpaolo.com
enjoyjuve.ubibanca.com
redirect.intesasanpaolo.com
enjoynba.ubibanca.com
login.ubibanca.com
mailms.ubibanca.com
openbanking.ubibanca.com
ip-cert.ubibanca.com
webextms01.ubibanca.com
remotedesk.ubibanca.com
enjoynba.ubibanca.com
mbl.ubibanca.com
www.raccoltapunti.ubibanca.com
ip-cert.ubibanca.com
consulente-mutuo.ubibanca.com
ubivideo.ubibanca.com
servizi.ubibanca.com
consulente-mutuo.ubibanca.com
enjoyjuve.ubibanca.com
www.cartedicredito.ubibanca.com
mbl2.ubibanca.com
mobile.ubibanca.com
3dscrypto.ubibanca.com
www.ubibanca.com
mobile.ubibanca.com

Certificate

The complete raw certificate details for www.ubibanca.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5oa2XxknrJStJ28oqp+X
RmTpcgwKbLrDcrSVY/XzQZ+nT2vU/nTQ2nf5v9/cvnd386SajIO4CR/A1B8dciom
KI+gqBgiKPRQiJ1UaU/VdH+3E188VerVBlvT3JHC7RCVMnG68tGnvcsXfEgJbRSX
wK6MiocUQFN25+neWa1w8WpySKVMAvCUAP4Q41dsZZaeknrUnoNEjHobjsWtV7GO
SY3KORUdHeIcLCwDaMirN4rj+H0T8copWEeW1RZ6pxTkJf37OAvGAmPVp6xCFoHL
aua+BL+Yq+bEQGTHbOh6NJahcrn5003AB7jXYMF5bwE21PnS0SqtFDSmg55z6I0I
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 137611348535862981491549560847530459323
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 EV SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BERGAMO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BG-345283'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '24122'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Piazza V. Veneto, 8'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Unione di Banche Italiane spa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sistemi Informativi - Operations'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.ubibanca.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29101239296852908422726441376368251006606390419154816699727732368979032980869022772277433031958099645599654488112524781621763620061630401664081284857063263366836572953804633282599904071795255391124842383708241385817623314239068516937368173579695524562213053432470674535823944625420679135840214826801737980225625659958177046512824342652824431149774317529473142512938791166595474416173479287679201969876021361680215619508024320018315514209028061931741941902896826735063917661627581060295045597780251818540498876693968882650734369442623442389902626207615915503426440495359706043476740186876356577845751150421894482430151
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ubibanca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.23.6 (VeriSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0159abe7dd3a0b59a66463d6cf200757d591e76a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr.symcb.com/sr.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr.symcb.com/sr.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc000001584dc84248000004030046304402206eec391e9be7239e1d9585bb1ed375d56d484fc5e5a550b68f454409957693ac02203b2e6c8e142e8e01db318ee8ec37ce43a95521b2562e46c80356b243fd95b5f500770068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc4000001584dc842670000040300483046022100f7ac7a425dd8c59e5ab994eb827d95bf274561cf378650b84b268ea5bdc5cba6022100d914667c9993066f68a546f8c3ba916fb7497b081f69594db71e246a32c9f57e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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