secure.wechat-shop.preprod.iwc.cn

- Richemont International SA -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 0b:4f:10:97:a6:98:6f:07:6c:2f:cc:8c:e9:17:3a:50 was issued on by Symantec Corporation.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Richemont International SA

Organization: Richemont International SA
Organization unit: IWC
State / Province: Genève
Locality: Bellevue
Country: CH

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:4f:10:97:a6:98:6f:07:6c:2f:cc:8c:e9:17:3a:50
Serial Number (int): 15032035939023316739764733129283549776
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): f3:fb:16:94:95:c2:cf:28:c4:3c:b4:38:a1:b4:75:72:1b:cb:63:b3
Fingerprint (sha256): 68:89:fc:07:00:69:12:7d:19:c1:d9:a4:14:3d:9c:33:8e:19:cb:dc:12:77:98:db:cf:36:95:23:8f:eb:19:ba

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate secure.wechat-shop.preprod.iwc.cn

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure.wechat-shop.preprod.iwc.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure.wechat-shop.preprod.iwc.cn
secure.wechat-shop.dev.iwc.cn
secure.wechat-shop.quality.iwc.cn

Other certificates including the domain name iwc.cn

(limited to 100 certificates)
weboutique.quality.vancleefarpels.com
weboutique.quality.vancleefarpels.com
secure.wechat-shop.iwc.cn
linemedia.preprod.richemont.com
san-cn.cloudinary.com
linemedia.preprod.richemont.com
san-cn.cloudinary.com
san-cn.cloudinary.com
san-cn.cloudinary.com
san-cn.cloudinary.com
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
mobile.iwc.com
weboutique.dev.vancleefarpels.com
mobile.iwc.com
api.weboutique.quality.iwc.cn
linemedia.preprod.richemont.com
weboutique.preprod.vancleefarpels.com
san-cn.cloudinary.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
portugieser2020.iwc.cn
secure.wechat-shop.iwc.cn
weboutique.preprod.vancleefarpels.com
www.dev.iwc.cn
www.quality.alange-soehne.com
san-cn.cloudinary.com
secure.wechat-shop.iwc.cn
san-cn.cloudinary.com
san-cn.cloudinary.com
mobile.iwc.com
san-cn.cloudinary.com
san-cn.cloudinary.com
san-cn.cloudinary.com
weboutique.dev.vancleefarpels.com
secure.wechat-shop.iwc.cn
san-cn.cloudinary.com
mobile.iwc.com
san-cn.cloudinary.com
admin.giftoftime.quality.iwc.cn
linemedia.preprod.richemont.com
weboutique.montblanc.cn
www.quality.iwc.cn
san-cn.cloudinary.com
mobile.iwc.com
san-cn.cloudinary.com
san-cn.cloudinary.com
lepetitprince.iwc.cn
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
portugieser2020.iwc.cn
san-cn.cloudinary.com
weboutique.quality.vancleefarpels.com
lepetitprince.iwc.cn
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
san-cn.cloudinary.com
linemedia.preprod.richemont.com
san-cn.cloudinary.com
secure.wechat-shop.iwc.cn
linemedia.preprod.richemont.com
san-cn.cloudinary.com
lepetitprince.iwc.cn
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
api.weboutique.quality.iwc.cn
san-cn.cloudinary.com
san-cn.cloudinary.com
san-cn.cloudinary.com
cfrsa-stg.rogerdubuis.com
san-cn.cloudinary.com
weboutique.quality.vancleefarpels.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
san-cn.cloudinary.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
san-cn.cloudinary.com
san-cn.cloudinary.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
cfrsa-dev.rogerdubuis.com
san-cn.cloudinary.com
san-cn.cloudinary.com
www.quality.alange-soehne.com
cfrsa-dev.rogerdubuis.com
mobile.iwc.com
www.quality.alange-soehne.com
www.quality.alange-soehne.com
san-cn.cloudinary.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
secure.wechat-shop.preprod.iwc.cn
mobile.iwc.com
api.wechat-tracking.iwc.cn
san-cn.cloudinary.com
lepetitprince.iwc.cn
watchmakingclass.iwc.cn
san-cn.cloudinary.com

Certificate

The complete raw certificate details for secure.wechat-shop.preprod.iwc.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFaTCCBFGgAwIBAgIQC08Ql6aYbwdsL8yM6Rc6UDANBgkqhkiG9w0BAQsFADB+
MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAd
BgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxLzAtBgNVBAMTJlN5bWFudGVj
IENsYXNzIDMgU2VjdXJlIFNlcnZlciBDQSAtIEc0MB4XDTE1MTIyMTAwMDAwMFoX
DTE2MTIyMTIzNTk1OVowgZExCzAJBgNVBAYTAkNIMRAwDgYDVQQIDAdHZW7DqHZl
MREwDwYDVQQHDAhCZWxsZXZ1ZTEjMCEGA1UECgwaUmljaGVtb250IEludGVybmF0
aW9uYWwgU0ExDDAKBgNVBAsMA0lXQzEqMCgGA1UEAwwhc2VjdXJlLndlY2hhdC1z
aG9wLnByZXByb2QuaXdjLmNuMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx9vcuS7IASMkYnu5Dk1C0k6OJqf/G6MvQhVdm0ASZGkE9VkH5L2udrSUVxHa
k/+MoexXImhQy3Jkaf/ZfvtfpZ45l3T98zqOCm/uZNZUrz24Bp3+HOhs5MjDOQzi
h1WE97e69T8LHcIkbvGx8XmnTtIcX+PGKI987ToppImXa10BMdQhF3g1916Yrrh7
BwKNiR49L4bW3SLufk6N8U1Vi7982QkjXm91gLtFuxa9dQWdPXvLW2DjtBQmFcVQ
Rr4Cx0QyJOOD2+IJOvZjY5Uucat28tTPTl2LYw/Eak5em2LUCRwkjHUCfVMZf9s0
5ojauSda3sV5oDaPgXG7Cfs6RwIDAQABo4IBzTCCAckwbgYDVR0RBGcwZYIhc2Vj
dXJlLndlY2hhdC1zaG9wLnByZXByb2QuaXdjLmNugh1zZWN1cmUud2VjaGF0LXNo
b3AuZGV2Lml3Yy5jboIhc2VjdXJlLndlY2hhdC1zaG9wLnF1YWxpdHkuaXdjLmNu
MAkGA1UdEwQCMAAwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB
BggrBgEFBQcDAjBhBgNVHSAEWjBYMFYGBmeBDAECAjBMMCMGCCsGAQUFBwIBFhdo
dHRwczovL2Quc3ltY2IuY29tL2NwczAlBggrBgEFBQcCAjAZGhdodHRwczovL2Qu
c3ltY2IuY29tL3JwYTAfBgNVHSMEGDAWgBRfYM9hkFXfhEMUimAqsvV69EMY7zAr
BgNVHR8EJDAiMCCgHqAchhpodHRwOi8vc3Muc3ltY2IuY29tL3NzLmNybDBXBggr
BgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9zcy5zeW1jZC5jb20wJgYI
KwYBBQUHMAKGGmh0dHA6Ly9zcy5zeW1jYi5jb20vc3MuY3J0MBMGCisGAQQB1nkC
BAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCaNIQJ6TnflBsG2zaZZ6YnR7Uv
G5vqrUPptiHD0li+Y1kCYmX727Yc/NolXZP2Av5IVo8iryp70V16Y6iB2HrMWrrl
ZAk7BzTEKiFJ15Ae3PMgstT5TqrFvZyXp5S9A5dOIPe0w1Y6WN9UwW8c13Gemtk8
8OajQE9G4Qp/4vzkH5Kt8UQTtGqN/xu9+w3av+XhygJFc2MT7Jrxz6BBIFr7KvNP
0ZFlBMtZjb3pEsxlgduHuonP36oWqV2aR2me50QtGVJml0tqUOOKepu+qoP8y2mG
hzSJiEf7qU5ohBKf3/QEt5Za70+8qKBHw7UBZDM1PU4MH7Qxgh9oFZMQZoF2
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9vcuS7IASMkYnu5Dk1C
0k6OJqf/G6MvQhVdm0ASZGkE9VkH5L2udrSUVxHak/+MoexXImhQy3Jkaf/Zfvtf
pZ45l3T98zqOCm/uZNZUrz24Bp3+HOhs5MjDOQzih1WE97e69T8LHcIkbvGx8Xmn
TtIcX+PGKI987ToppImXa10BMdQhF3g1916Yrrh7BwKNiR49L4bW3SLufk6N8U1V
i7982QkjXm91gLtFuxa9dQWdPXvLW2DjtBQmFcVQRr4Cx0QyJOOD2+IJOvZjY5Uu
cat28tTPTl2LYw/Eak5em2LUCRwkjHUCfVMZf9s05ojauSda3sV5oDaPgXG7Cfs6
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15032035939023316739764733129283549776
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Genève'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bellevue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Richemont International SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IWC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'secure.wechat-shop.preprod.iwc.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25229840780190884285421752311941371065402583237876414411785080201186523448432105939430102885107376851878271709584174554164183623819117611838314106358038750142784600593162240992827104797378535015946145908791547902332169261999552081862502717665541593692994784549218032406304623065210635760288271733982851228114747145027066100162176674864431274449894488825390201264975040362375814314514299547860916733287117026862624638441899575103655581084524104271212969638027488645115505425140404082260853014368855462245958476605429556245583652413948869383659783275020945886471006987281181049092301060956681649867413808632956347693639
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.wechat-shop.preprod.iwc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.wechat-shop.dev.iwc.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.wechat-shop.quality.iwc.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [104 116 116 112 115 58 47 47 100 46 115 121 109 99 98 46 99 111 109 47 114 112 97]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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