vsp.wellpoint.com

- WellPoint, Inc. -

Issued by VeriSign Class 3 Secure Server CA - G3

About this certificate

This digital certificate with serial number 40:d7:31:03:1f:b9:fe:e8:25:4a:ac:3e:b8:cf:66:af was issued on by VeriSign, Inc..

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

WellPoint, Inc.

Organization: WellPoint, Inc.
State / Province: Indiana
Locality: Indianapolis
Country: US

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 40:d7:31:03:1f:b9:fe:e8:25:4a:ac:3e:b8:cf:66:af
Serial Number (int): 86187929640393560625130321796026820271
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 0d:44:5c:16:53:44:c1:82:7e:1d:20:ab:25:f4:01:63:d8:be:79:a5

Fingerprint (sha1): 87:bf:e5:2e:9d:7c:27:3c:29:8a:d7:ed:f4:cd:0f:e8:b5:ff:03:36
Fingerprint (sha256): 56:fe:3b:ae:a2:37:00:ff:bb:f9:97:12:5c:53:8c:b2:3b:10:f8:9b:2d:66:d8:23:ef:da:9b:aa:f1:7a:c0:1d

Issuing Certificate URL: http://sd.symcb.com/sd.crt

Revocation information

OCSP Server: http://sd.symcd.com
CRL Distribution Point: http://sd.symcb.com/sd.crl

Check the revocation status for certificate vsp.wellpoint.com

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vsp.wellpoint.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vsp.wellpoint.com
mom9p50289.us.ad.wellpoint.com
mom9p50290.us.ad.wellpoint.com
va10p50685.us.ad.wellpoint.com
vsp.mo.wellpoint.com
vsp.va.wellpoint.com
enterpriseenrollment.wellpoint.com
enterpriseenrollment.anthem.com
enterpriseenrollment.empireblue.com
enterpriseenrollment.bcbsga.com
enterpriseenrollment.bcbs-ga.com
enterpriseenrollment.bcbswi.com
enterpriseenrollment.bcbsmo.com
enterpriseenrollment.healthlink.com

Other certificates including the domain name wellpoint.com

(limited to 100 certificates)
www.sbc.anthem.com
medisysa.wellpoint.com
availity.prod.va.wellpoint.com
Src_CXTCSBD_C3A_D.devad.wellpoint.com
www.anthem.com
wellpoint.com
sa01fw01.video.antheminc.com
join-vpn.wellpoint.com
pd2.secure.anthem.com
uatndf.vl.wellpoint.com
rhidsapps.perf.wellpoint.com
myconnection-east.antheminc.com
hrsolutions.antheminc.com
ky03pvid01.video.antheminc.com
WebAD.Wellpoint.com
perfndf.vl.wellpoint.com
member.sit.anthem.com
varicdcsacs14.mgmt.wellpoint.com
callcare.wellpoint.com
prod-mo.intact.wellpoint.com
040-uat.wellpoint.com
performancepoint.wellpoint.com
uat.inquiry.npi.wellpoint.com
wellpoint.com
inquiry.npi.wellpoint.com
gahintest.wellpoint.com
vaaxstepjda01.us.ad.wellpoint.com
live.video.antheminc.com
sydmed-dr-offline.anthem.com
efx.anthem.com
ica.uat2.va.wellpoint.com
aimsprodapp.us.ad.wellpoint.com
ica.uat.va.wellpoint.com
member.perf.anthem.com
inquiry.npi.wellpoint.com
prdndf2.vl.wellpoint.com
rp.us.wellpoint.com
mymobiledevices.anthem.com
vsp.wellpoint.com
wellpoint.com
myconnection-ca.antheminc.com
fnp8aeprod.elevancehealth.com
domaintest.wellpoint.com
clmin02u.devad.wellpoint.com
employer-origin.anthem.com
partnergw.elevancehealth.com
sbc.anthem.com
prods-int-hddp.wellpoint.com
zfeuat.wellpoint.com
oh04pvid01.video.antheminc.com
prods-soa-esb.in.anthem.com
sourcepointtrain.wellpoint.com
serviceituat.wellpoint.com
employer-origin.anthem.com
mytestconnection3.wellpoint.com
tpa.anthem.com
myconnection-vat1.wellpoint.com
wellpoint.com
agentsite-ak.anthem.com
mdm.anthem.com
pd.epmws.wellpoint.com
edirealtime.wellpoint.com
ryantest2021.wellpoint.com
va10n10058.wellpoint.com
fn8bpmprod.wellpoint.com
paypoint.wellpoint.com
varicdcsacs14.mgmt.wellpoint.com
for.venafi.wellpoint.com
sts.wellpoint.com
search.anthem.com
www.anthem.com
vm20.vl.wellpoint.com
myconnection-midwest.antheminc.com
pds.iweb.wellpoint.com
secure-gateway-ak.anthem.com
cii.anthem.com
epemdlr.perf.va.wellpoint.com
totalrewards2.wellpoint.com
mom9pwvhaz300.anthem.com
www.scmedpolicies.wellpoint.com
prod-mo.intact.wellpoint.com
secure-gateway-ak.anthem.com
varicdcsacs14.mgmt.wellpoint.com
040-uat.wellpoint.com
providerinquiryods.uat.va.wellpoint.com
employer-origin-dr.anthem.com
myconnection-va.wellpoint.com
join-vpn.wellpoint.com
simon.anthem.com
devs-hd-dp-in.wellpoint.com
sentry.anthem.com
employer.anthem.com
devs-dp-in.wellpoint.com
im.wellpoint.com
sydmed-services.sit.aws.anthem.com
myprofile.antheminc.com
sourcepoint.wellpoint.com
wellpoint.com
mymobile.wellpoint.com
mostlcheacs102.us.ad.wellpoint.com

Certificate

The complete raw certificate details for vsp.wellpoint.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGvjCCBaagAwIBAgIQQNcxAx+5/uglSqw+uM9mrzANBgkqhkiG9w0BAQUFADCB
tTELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQL
ExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1c2Ug
YXQgaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYSAoYykxMDEvMC0GA1UEAxMm
VmVyaVNpZ24gQ2xhc3MgMyBTZWN1cmUgU2VydmVyIENBIC0gRzMwHhcNMTQwNTMw
MDAwMDAwWhcNMTYwNTI5MjM1OTU5WjBsMQswCQYDVQQGEwJVUzEQMA4GA1UECBMH
SW5kaWFuYTEVMBMGA1UEBxQMSW5kaWFuYXBvbGlzMRgwFgYDVQQKFA9XZWxsUG9p
bnQsIEluYy4xGjAYBgNVBAMUEXZzcC53ZWxscG9pbnQuY29tMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTYGq0bEU+4b24fD7UXMEZWlcTO7ka3JuMZQ
MJKmWwRO7JIQeSisbLf1PVfBq8ynwZirIoVkYRFtri8GtvVHG45LrILWHmpl4uHj
7DRzaxeU7BjFjetnaH7Tj6cjRcN1qtyWmhCp8hR+JPkGqPELHFTkl8FXZutPTDPS
qBt90zVgFE4mxVzmzQ+VOZa9NHP9PG9ZNbOO4tS8aSDsoMW1ZWBjRPHAoX6gAZlx
kwhieZvV/Cqx7TIyPhwINRNwp0K6r1OLdW7DaHfZuCF8AvJQQR0eBXdV65G8sA3x
/6p2ei4/JzR60u1WMsNGP9tHzSuwKOeZGRjpxikAsFOxkYLrZwIDAQABo4IDEDCC
AwwwggHABgNVHREEggG3MIIBs4IRdnNwLndlbGxwb2ludC5jb22CHm1vbTlwNTAy
ODkudXMuYWQud2VsbHBvaW50LmNvbYIebW9tOXA1MDI5MC51cy5hZC53ZWxscG9p
bnQuY29tgh52YTEwcDUwNjg1LnVzLmFkLndlbGxwb2ludC5jb22CFHZzcC5tby53
ZWxscG9pbnQuY29tghR2c3AudmEud2VsbHBvaW50LmNvbYIiZW50ZXJwcmlzZWVu
cm9sbG1lbnQud2VsbHBvaW50LmNvbYIfZW50ZXJwcmlzZWVucm9sbG1lbnQuYW50
aGVtLmNvbYIjZW50ZXJwcmlzZWVucm9sbG1lbnQuZW1waXJlYmx1ZS5jb22CH2Vu
dGVycHJpc2VlbnJvbGxtZW50LmJjYnNnYS5jb22CIGVudGVycHJpc2VlbnJvbGxt
ZW50LmJjYnMtZ2EuY29tgh9lbnRlcnByaXNlZW5yb2xsbWVudC5iY2Jzd2kuY29t
gh9lbnRlcnByaXNlZW5yb2xsbWVudC5iY2JzbW8uY29tgiNlbnRlcnByaXNlZW5y
b2xsbWVudC5oZWFsdGhsaW5rLmNvbTAJBgNVHRMEAjAAMA4GA1UdDwEB/wQEAwIF
oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwZQYDVR0gBF4wXDBaBgpg
hkgBhvhFAQc2MEwwIwYIKwYBBQUHAgEWF2h0dHBzOi8vZC5zeW1jYi5jb20vY3Bz
MCUGCCsGAQUFBwICMBkaF2h0dHBzOi8vZC5zeW1jYi5jb20vcnBhMB8GA1UdIwQY
MBaAFA1EXBZTRMGCfh0gqyX0AWPYvnmlMCsGA1UdHwQkMCIwIKAeoByGGmh0dHA6
Ly9zZC5zeW1jYi5jb20vc2QuY3JsMFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcw
AYYTaHR0cDovL3NkLnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL3NkLnN5
bWNiLmNvbS9zZC5jcnQwDQYJKoZIhvcNAQEFBQADggEBADdC4gK1knThXWq5JwV2
kmixyJEx+sasytlCEmjzfTWpARWLCqGMyMRRZnv3Z+coWDPeyH32n55gGigHLwlV
wGfrf+jxlchVgyJaVk5A1h6MPYC1+Nwf6/Q1BfFII/KxWc7OAR4nlDCtG07RArut
l6e2mFV30rQDm7eEew24f1xcScGa9TgGhE06imhlxJsA9ScgtNHpQodSnby0RifH
4wEyaPp0uCNL5kltYmrcZdtlhuZg6kR+QXaF7sBSnb+ejzlQYb5Hr3MOlJb+lATN
B5TT/CSQ22G1AGTqY6Vw1bvuxKDCcNsj8nFTSJXynBJQtsJCitsayaI87T6qOoxk
pHU=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTYGq0bEU+4b24fD7UXM
EZWlcTO7ka3JuMZQMJKmWwRO7JIQeSisbLf1PVfBq8ynwZirIoVkYRFtri8GtvVH
G45LrILWHmpl4uHj7DRzaxeU7BjFjetnaH7Tj6cjRcN1qtyWmhCp8hR+JPkGqPEL
HFTkl8FXZutPTDPSqBt90zVgFE4mxVzmzQ+VOZa9NHP9PG9ZNbOO4tS8aSDsoMW1
ZWBjRPHAoX6gAZlxkwhieZvV/Cqx7TIyPhwINRNwp0K6r1OLdW7DaHfZuCF8AvJQ
QR0eBXdV65G8sA3x/6p2ei4/JzR60u1WMsNGP9tHzSuwKOeZGRjpxikAsFOxkYLr
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 86187929640393560625130321796026820271
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)10'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 Secure Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-05-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Indiana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Indianapolis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'WellPoint, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'vsp.wellpoint.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17321289019016377456409553098628329538019680196287880525098615229125628877488788695106274023407605952784792559436026914860427080302083595604941709599025400420845931799269385428456341320267787366970418257171131830570333115422510241058141810210144504405437299260332898726872871901344187536902160482427966595314078280666560226457265881327676659851534273541855883124740233140379125851303849411948055905695977448932471162559707995622936184546295373337888971562732616336786874055287129560421599303826688402109024130245432094255787774255752093730232378494809402521524845593993010561330390944551013161783114647836113647102823
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (439 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vsp.wellpoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mom9p50289.us.ad.wellpoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mom9p50290.us.ad.wellpoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'va10p50685.us.ad.wellpoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vsp.mo.wellpoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vsp.va.wellpoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseenrollment.wellpoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseenrollment.anthem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseenrollment.empireblue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseenrollment.bcbsga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseenrollment.bcbs-ga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseenrollment.bcbswi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseenrollment.bcbsmo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseenrollment.healthlink.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [104 116 116 112 115 58 47 47 100 46 115 121 109 99 98 46 99 111 109 47 114 112 97]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d445c165344c1827e1d20ab25f40163d8be79a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sd.symcb.com/sd.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sd.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sd.symcb.com/sd.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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