www.fundsus.deutscheam.com

- Deutsche Bank AG -

Issued by Symantec Class 3 EV SSL CA - G3

About this certificate

This digital certificate with serial number 19:1a:09:a3:5c:ae:c5:39:2d:ea:56:00:ff:e9:84:d7 was issued on by Symantec Corporation.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Deutsche Bank AG

Company registration number: HRB 30000
Organization: Deutsche Bank AG
Organization unit: Deutsche Asset Management -A
Address: Taunusanlage 12
Postal code: 60325
State / Province: Hessen
Locality: Frankfurt am Main
Country: DE

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 19:1a:09:a3:5c:ae:c5:39:2d:ea:56:00:ff:e9:84:d7
Serial Number (int): 33365895097505630388204593443674621143
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 01:59:ab:e7:dd:3a:0b:59:a6:64:63:d6:cf:20:07:57:d5:91:e7:6a

Fingerprint (sha1): f0:d8:6f:02:96:5c:fc:24:3a:39:36:8a:02:20:8a:e2:01:1a:b6:b2
Fingerprint (sha256): 53:8b:03:46:67:2b:42:aa:7e:77:01:f3:c8:13:7a:62:23:a1:fc:6a:d0:23:02:09:f3:bb:62:b6:93:dc:45:ac

Issuing Certificate URL: http://sr.symcb.com/sr.crt

Revocation information

OCSP Server: http://sr.symcd.com
CRL Distribution Point: http://sr.symcb.com/sr.crl

Check the revocation status for certificate www.fundsus.deutscheam.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.fundsus.deutscheam.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

deutschefunds.com
www.fundsus.deutscheawm.com
www.deutschefunds.com
www.dws-investments.com
dws-investments.com
dwsweb.web-prd.gto.db.com
dwsweb.web-dr.gto.db.com
fundsus.deutscheawm.com
fundsus.deutscheam.com
www.fundsus.deutscheam.com

Other certificates including the domain name deutscheam.com

(limited to 100 certificates)
clientconnect.deutscheam.com
mediamanager.deutscheam.com
etfus.deutscheam.com
go.dws.com
go.deutscheam.com
clientconnect.deutscheam.com
clientconnect.deutscheam.com
institutional.deutscheawm.com
go.dws.com
institutional.deutscheawm.com
track.dws.com
institutional.dws.com
lighthouse.dws.de
clientconnect.deutscheam.com
dws.com
institutional.lighthouse.dws.de
fundsus.deutscheawm.com
ml.fundsus.deutscheawm.com
lighthouse.dws.de
dws.com
fundsapi.deutscheam.com
go.dws.com
go.dws.com
cioview.dws.com
go.deutscheam.com
ml.fundsus.deutscheawm.com
go.dws.com
institutional.deutscheawm.com
download.dws.com
ml.fundsus.deutscheawm.com
institutional.deutscheawm.com
institutional.deutscheawm.com
fundsapi.deutscheam.com
ml.fundsus.deutscheawm.com
etfus.deutscheam.com
institutional.lighthouse.dws.de
crocianalysis.deutscheam.com
dws.com
fundsus.deutscheawm.com
mediamanager.deutscheam.com
go.deutscheam.com
live.cioview.dws.com
institutional.deutscheawm.com
ml.fundsus.deutscheawm.com
clientconnect.deutscheam.com
dws.com
fundsus.deutscheawm.com
lighthouse.dws.de
crocianalysis.deutscheam.com
live.uat.cioview.deutscheam.com
clientconnect.deutscheam.com
etfus.deutscheam.com
lighthouse.dws.de
fundsus.deutscheawm.com
spotlight.deutscheam.com
crocianalysis.deutscheam.com
uat.lighthouse.dws.de
ml.fundsus.deutscheawm.com
mediamanager.deutscheam.com
go.deutscheam.com
liquidity.deutscheawm.com
lighthouse.dws.de
liquidity.deutscheawm.com
liquidity.deutscheawm.com
fundsus.deutscheawm.com
fundsapi.dws.com
etfus.deutscheam.com
fundsus.deutscheawm.com
cioview.dws.com
www.fundsus.deutscheam.com
croci.db.com
track.dws.com
ml.fundsus.deutscheawm.com
liquidity.deutscheawm.com
liquidity.deutscheawm.com
deutscheam.com
mediamanager.deutscheam.com
liquidity.deutscheawm.com
fundsapi.dws.com
etfus.deutscheam.com
download.dws.com
etfus.deutscheam.com
ml.fundsus.deutscheawm.com
ml.fundsus.deutscheawm.com
dws.com
ml.fundsus.deutscheawm.com
mediamanager.deutscheam.com
dws.com
institutional.deutscheawm.com
track.dws.com
lighthouse.dws.de
dws.com
cioview.dws.com
go.dws.com
ml.fundsus.deutscheawm.com
live.cioview.dws.com
track.dws.com
lighthouse.dws.de
liquidity.deutscheawm.com
dws.com

Certificate

The complete raw certificate details for www.fundsus.deutscheam.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/2dAGYPa0lebJK9reRu
j+vQe/6VROVJi5+qKylvu9M+mXXQ1L8QpMHsm+cJgXx6cK0onrPnkJMGldDiWl5e
lHt8ikTwJDtSvfmTB6M5LgxV4gbONUgWpbF7NXElALnbAo+j1Gz3zAsmlzT4RO1q
s0zXcgF7bifbYvU+9QrCUsSlaaiUsR0npRfs9kJptdVrbpcJbNv/K+S7hHMnhMrC
rrq8qcFp1LCvQiJBhUlkeHJVYruK5/zhPV34lvOt0IMe7UTwi4KEgMx5xlZCwCsr
GgLCm24GNHlojWdBIPW/cerNC7M929ozh3197SlGjgnm9qU6BNBp4LdwBwHa7qpd
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 33365895097505630388204593443674621143
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 EV SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Frankfurt am Main'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 30000'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '60325'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Frankfurt am Main'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Taunusanlage 12'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Deutsche Bank AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Deutsche Asset Management -A'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.fundsus.deutscheam.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18682092203095856568253828943364793292662293173639073427417378503159765803127560117733448507543945986452720668371839428044191566648825489131076904062070198715286571565387722656117013773014757621722230428787122444171632783133203535474235111970087287775431867983787379501309049278858029737761826060842673112340038382937785510522352713098243938738396535272886366449373449222609749160003792925474568805285443895491383849230198282591683886674110701566872986685560685490803975729873554910769116290685098097686620910445389194714347649211011671159014403640366172502042187448481745607058109056370865271780926471780885775146291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (250 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deutschefunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fundsus.deutscheawm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.deutschefunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dws-investments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dws-investments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dwsweb.web-prd.gto.db.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dwsweb.web-dr.gto.db.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundsus.deutscheawm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundsus.deutscheam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fundsus.deutscheam.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.23.6 (VeriSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [104 116 116 112 115 58 47 47 100 46 115 121 109 99 98 46 99 111 109 47 114 112 97]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0159abe7dd3a0b59a66463d6cf200757d591e76a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr.symcb.com/sr.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sr.symcb.com/sr.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc000001523b624282000004030047304502204af49fbd740f90f5c7800f6adc524da455a2f7b1a38244e03dd8b1cb2f0b36b4022100daedf1082bcbf85298ef09587c85ef9771e7f3a50380774763a6a40144919efa007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001523b6242be000004030046304402203628ee74930e23787574b79bc911b96e6f643e1cce73cafbfddd5c97b85728fe02206ccc6be4c2b04f4c56b2da47128de8a6a3c0ecd4af29da448f36316cf2f5021d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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