www.ncsbe.gov

- North Carolina State Government -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 2b:a1:93:76:8d:37:a3:c3:8d:03:f7:64:52:71:96:b8 was issued on by Symantec Corporation.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

North Carolina State Government

Organization: North Carolina State Government
Organization unit: Department of Information Technology
State / Province: North Carolina
Locality: Raleigh
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 2b:a1:93:76:8d:37:a3:c3:8d:03:f7:64:52:71:96:b8
Serial Number (int): 57995754519815053919702768400049739448
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): e3:88:3f:a5:38:c7:ce:15:7e:57:59:94:7e:12:2a:04:08:f8:51:f9
Fingerprint (sha256): 50:85:cf:b9:b6:91:3f:6d:66:2f:cd:9e:ad:ea:32:28:87:7f:62:1f:85:e8:19:bd:4a:03:09:aa:5b:ef:93:58

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate www.ncsbe.gov

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ncsbe.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ncdps.gov
ncdps.gov
ncparks.gov
www.ncparks.gov
qaronline.org
www.ncdhhs.gov
ncdhhs.gov
dma.ncdhhs.gov
www.ncdcr.gov
ncdcr.gov
www.ltgov.nc.gov
oshr.nc.gov
ltgov.nc.gov
www.nc.gov
milvets.nc.gov
deq.nc.gov
www.osbm.nc.gov
www.milvets.nc.gov
osbm.nc.gov
hiea.nc.gov
governor.nc.gov
it.nc.gov
nc.gov
ncadmin.nc.gov
osc.nc.gov
ncsbe.gov
vt.ncsbe.gov
er.ncsbe.gov
www.osc.nc.gov
www.ncsbe.gov

Other certificates including the domain name ncsbe.gov

(limited to 100 certificates)
sni.cloudflaressl.com
ssl819922.cloudflaressl.com
files.nc.gov
ssl.connect.clarityelections.com
*.ncsbe.gov
*.ncsbe.gov
ssl.connect.clarityelections.com
ssl819923.cloudflaressl.com
files.nc.gov
www.ncsbe.gov
files.nc.gov
sni253218.cloudflaressl.com
files.nc.gov
ssl819923.cloudflaressl.com
files.nc.gov
sslvpn.ncsbe.gov
files.nc.gov
*.ncsbe.gov
www.ncsbe.gov
votebymail.ncsbe.gov
files.nc.gov
ssl819923.cloudflaressl.com
www.ncsbe.gov
www.ncsbe.gov
ncsbe.gov
ssl819924.cloudflaressl.com
files.nc.gov
sni.cloudflaressl.com
ncsbe.gov
ncsbe.gov
ncsbe.gov
ncsbe.gov
ssl819922.cloudflaressl.com
files.nc.gov
*.ncsbe.gov
ssl.connect.clarityelections.com
ssl.connect.clarityelections.com
ncsbe.gov
www.ncsbe.gov
www.ncsbe.gov
ssl.connect.clarityelections.com
ncsbe.gov
www.ncsbe.gov
files.nc.gov
sslvpnedc.ncsbe.gov
ssl819924.cloudflaressl.com
ssl819924.cloudflaressl.com
www.ncsbe.gov
files.nc.gov
votebymail.ncsbe.gov
ncsbe.gov
files.nc.gov
files.nc.gov
ssl819923.cloudflaressl.com
files.nc.gov
ssl819924.cloudflaressl.com
*.ncsbe.gov
ncsbe.gov
www.ncsbe.gov
www.ncsbe.gov
files.nc.gov
ssl819922.cloudflaressl.com
files.nc.gov
files.nc.gov
ncsbe.gov
ssl.connect.clarityelections.com
ncsbe.gov
*.ncsbe.gov

Certificate

The complete raw certificate details for www.ncsbe.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9yFcFHdzQd4ULhnOmUq
FYgj0w43VkGNy7gE8juZIfuI5dgOcmE4b0II9voDf24g1B/slPngSQNm7N2rQrdG
5HLvKbkD3fQ0KzizzZXWu32VtETA9f83/HMjXLRnwgC7VgfrRgQBm4DMPqD5bqmO
Rd1zPYLom8caEqxvO1tdseD7moBgGGurYsFIyXx2U10LcTeb/ZL3ar0mMVPQco3J
+v7aTu51sGSAKbbuCZVv/5/74JP/u2awRDcMAmYzfSImk/NKjdtY9AhyNB5f5AzI
zqvBfO3e4zsIyBkJNTdXqelnfOOKFysP8gcmKAEC5fy4uLuhG05gGx2bhjNu5LSg
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 57995754519815053919702768400049739448
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'North Carolina'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Raleigh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'North Carolina State Government'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Department of Information Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.ncsbe.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23715306107528725049980315243774130747793638921799867176684528754923980045859249078120169103179821877561600607288948887339410423215284304284054391763576885336099470887505145040284734154352190671995535922482746105876197112512266912599216238198168318097951959819442009631312061013543057339082342900722313954947484949134296565265651454631246065615223716920163130039032749352340967237295576072312997802042517471200495589896993693763976642352585377826018099720145527491421584523139570649891749548827281895513873415180555652295818137499351400184835326080278737666716728686623394848604738202411139506225709694358208828973283
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (427 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncdps.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncdps.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncparks.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncparks.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qaronline.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncdhhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncdhhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dma.ncdhhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncdcr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncdcr.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ltgov.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oshr.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ltgov.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milvets.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deq.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osbm.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.milvets.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osbm.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiea.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'governor.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncadmin.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osc.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncsbe.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vt.ncsbe.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'er.ncsbe.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osc.nc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncsbe.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015acdec57e80000040300473045022100cd5d50cda42ea6bbd594f8100203bdd2c9c30479cd1ec5efce2c79761f17275d02205470220c3c036bf603c855735ee3c47894077f64f5ac18af2540a5d1e00d71af007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015acdec58210000040300473045022060c5255cfc044bfe36729646a369ac5e59c20ca4787a4c5a17c7aa60253e4a3d022100ac61c0b16d1e500c987772931ac242284a9e405b619cb81404cfcece47a481a4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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