sihh2014.vancleefarpels.com

- Richemont International SA -

Issued by Symantec Class 3 Secure Server SHA256 SSL CA

About this certificate

This digital certificate with serial number 0e:3b:0a:0b:ea:b6:ac:30:b1:99:0b:af:93:78:aa:cc was issued on by Symantec Corporation.

With 38 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Richemont International SA

Organization: Richemont International SA
Organization unit: Van Cleef & Arpels
State / Province: Genève
Locality: Bellevue
Country: CH

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:3b:0a:0b:ea:b6:ac:30:b1:99:0b:af:93:78:aa:cc
Serial Number (int): 18915741223888531166989201502146964172
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: db:62:20:fb:7d:02:89:7c:d2:3b:6f:c7:e4:32:6c:05:52:1d:ad:b1

Fingerprint (sha1): fc:97:7c:93:f3:d8:da:24:d2:e7:68:9c:e8:e4:15:e1:19:5d:05:c8
Fingerprint (sha256): 61:b0:ac:7c:45:40:50:0d:3a:16:43:ab:2c:a2:4c:dd:a2:f8:0d:aa:b8:d7:0d:40:0f:dd:d4:0b:ec:c7:b4:5a

Issuing Certificate URL: http://sg.symcb.com/sg.crt

Revocation information

OCSP Server: http://sg.symcd.com
CRL Distribution Point: http://sg.symcb.com/sg.crl

Check the revocation status for certificate sihh2014.vancleefarpels.com

38

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sihh2014.vancleefarpels.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

7-seconds-of-luck.vancleefarpels.com
8-seconds-of-luck.vancleefarpels.com
admin.7-seconds-of-luck.vancleefarpels.com
admin.8-seconds-of-luck.vancleefarpels.com
admin.archedenoe.vancleefarpels.com
admin.artdelahautejoaillerie-vancleefarpels.com
admin.connectedmirror.vancleefarpels.com
admin.emeraudeenmajeste.vancleefarpels.com
admin.grandvendome.vancleefarpels.com
admin.hk.lecolevancleefarpels.com
admin.peaudane-jp.vancleefarpels.com
admin.peaudane.vancleefarpels.com
admin.pierresdecaractere-variations-jp.vancleefarpels.com
admin.pierresdecaractere-variations.vancleefarpels.com
admin.press.artscienceofgems.vancleefarpels.com
admin.pressroom.lecolevancleefarpels.com
admin.sevenseas.vancleefarpels.com
admin.sihh2015.vancleefarpels.com
admin.sihh2016.vancleefarpels.com
admin.sparkles-of-luck.vancleefarpels.com
admin.us.lecolevancleefarpels.com
admin.watchesandwonders2014.vancleefarpels.com
archedenoe.vancleefarpels.com
collectionpeaudane.vancleefarpels.com
connectedmirror.vancleefarpels.com
epr.vancleefarpels.com
fb.vancleefarpels.com
peaudane-jp.vancleefarpels.com
peaudane.vancleefarpels.com
pressroom.lecolevancleefarpels.com
secure.hk.lecolevancleefarpels.com
secure.sparkles-of-luck.vancleefarpels.com
sevenseas.vancleefarpels.com
sihh2014.vancleefarpels.com
sihh2015.vancleefarpels.com
sihh2016.vancleefarpels.com
us.lecolevancleefarpels.com
watchesandwonders2014.vancleefarpels.com

Other certificates including the domain name vancleefarpels.com

(limited to 100 certificates)
secure.cn.vancleefarpels.com
intranet.richemont.com
intranet.richemont.com
weboutique.quality.vancleefarpels.com
intranet.richemont.com
weboutique.quality.vancleefarpels.com
dam.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
presslounge.vancleefarpels.com
linemedia.preprod.richemont.com
media.richemont.com
www.vancleefarpels.com
www.preprod2.vancleefarpels.cn
diamondcheck.vancleefarpels.com
intranet.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
dam.richemont.com
linemedia.preprod.richemont.com
intranet.richemont.com
www.vancleefarpels.com
www.quality.alange-soehne.com
vcaballet.vancleefarpels.com
weboutique.dev.vancleefarpels.com
linemedia.preprod.richemont.com
sihh2014.vancleefarpels.com
intranet.preprod.richemont.com
api.weboutique.quality.iwc.cn
linemedia.preprod.richemont.com
weboutique.preprod.vancleefarpels.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
vcaballet.vancleefarpels.com
www.quality.alange-soehne.com
media.richemont.com
vcaballet.vancleefarpels.com
weboutique.vancleefarpels.com
vcaballet.vancleefarpels.com
linemedia.preprod.richemont.com
weboutique.preprod.vancleefarpels.com
vcaballet.vancleefarpels.com
diamondcheck.vancleefarpels.com
www.quality.alange-soehne.com
intranet.staging.richemont.com
www.lecolevancleefarpels.com
intranet.quality.richemont.com
vcaballet.vancleefarpels.com
secure-www.vancleefarpels.com
weboutique.dev.vancleefarpels.com
intranet.dev.richemont.com
www.vancleefarpels.com
intranet.staging.richemont.com
8-seconds-of-luck.vancleefarpels.com
vcs.richemont.com
diamondcheck.vancleefarpels.com
intranet.richemont.com
linemedia.preprod.richemont.com
intranet.dev.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
dam.richemont.com
sihh2014.vancleefarpels.com
media.richemont.com
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
yps.vancleefarpels.com
vcaballet.vancleefarpels.com
sihh2016.vancleefarpels.com
sihh2014.vancleefarpels.com
secure.www.vancleefarpels.com
intranet.richemont.com
vcaballet.vancleefarpels.com
weboutique.quality.vancleefarpels.com
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
org-timenaturelove.vancleefarpels.com
intranet.staging.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
sihh2014.vancleefarpels.com
sihh2014.vancleefarpels.com
sihh2014.vancleefarpels.com
intranet.richemont.com
www.quality.alange-soehne.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
intranet.richemont.com
www.vancleefarpels.com
linemedia.preprod.richemont.com
whenelegancemeetsart.quality.vancleefarpels.com
sihh2016.vancleefarpels.com
intranet.richemont.com
presslounge.vancleefarpels.com
api.weboutique.quality.iwc.cn
sihh2014.vancleefarpels.com
intranet.richemont.com
wwsip.richemont.com
sihh2016.vancleefarpels.com

Certificate

The complete raw certificate details for sihh2014.vancleefarpels.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJ0wjUcyiIfMB1groLHK
ej1cmkmhcgfjvu4Vh34m/ABS4mN4CKdCyVvuZ/ja/72vmdvYi72qWQTtTXzljhZ5
X9BqI5OQH2zX5snYQlhzxR9mFX3Q2eYFlqrNlhKiGXIR8c6Gffd5+G6KzCCeDqm5
Rp2FJFKpnq0mLvCyyUD+ocOEqmBFA1w2HPslyn1tDlqHEh8VQfEe+cfMG78lVyEO
lM166hknMIgFEsvQmMVbNlhmWtpTE6DeTf8R0U5660so1bscq2SqYyASpyJJdbJq
HaejLa01pi3psag/y7n6WybBztXBKq3w0oTVgU68uom6ERppmBz9M5ze+ii/c65F
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18915741223888531166989201502146964172
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Genève'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bellevue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Richemont International SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Van Cleef & Arpels'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'sihh2014.vancleefarpels.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24820220881542514665528265952503057354714340795417695875686991866236696225213341556308027457957759213338851712487746198149554516424046131314181297176178718759610872122571245526472149101195582410619608748294559341163947468375349845437980395774561308229679204030539943036551877497100146577833221555113022882421838787846300172324547224491640741688989348089857673328216547439275191863083718732315664934727309978678514216780280824103774107685002723742726696242609874145445873307435170232520329639597054900565705516552803863498305899814032759689460891214302896484896616100156408212880360208022361686999593327804028130575709
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1443 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '7-seconds-of-luck.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '8-seconds-of-luck.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.7-seconds-of-luck.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.8-seconds-of-luck.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.archedenoe.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.artdelahautejoaillerie-vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.connectedmirror.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.emeraudeenmajeste.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.grandvendome.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hk.lecolevancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.peaudane-jp.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.peaudane.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pierresdecaractere-variations-jp.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pierresdecaractere-variations.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.press.artscienceofgems.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pressroom.lecolevancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sevenseas.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sihh2015.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sihh2016.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sparkles-of-luck.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.us.lecolevancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.watchesandwonders2014.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archedenoe.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collectionpeaudane.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectedmirror.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epr.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fb.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peaudane-jp.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peaudane.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pressroom.lecolevancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.hk.lecolevancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.sparkles-of-luck.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sevenseas.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sihh2014.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sihh2015.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sihh2016.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.lecolevancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchesandwonders2014.vancleefarpels.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName db6220fb7d02897cd23b6fc7e4326c05521dadb1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcb.com/sg.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcb.com/sg.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000156faf92d8000000403004730450221009e74af5acc734a01ab520a5e1ba7a5b6343dd5d4e378286ea8dd595e0b7ff2770220231b3d92d06dc8437bf7ccd6128497b08d6aa92a743494e675eb087f91bd65f4007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000156faf92ec90000040300473045022100c18057fe8f22377746e2009ca0bc5246e3f7bf9c3e9ce9314cd55ea72cc0a5c2022013867591f2bbb9d6d9cc54964ede6ab4e41cbb7560e7bc5798615656cd6dce9b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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