www.northerntrust.com

- Northern Trust Company -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 14:5d:c0:1e:64:64:6f:7a:0e:75:95:81:d7:89:12:cd was issued on by Symantec Corporation.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Northern Trust Company

Organization: Northern Trust Company
Organization unit: Network Applications Engineering - WPC DMZ
State / Province: Illinois
Locality: Chicago
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 14:5d:c0:1e:64:64:6f:7a:0e:75:95:81:d7:89:12:cd
Serial Number (int): 27071340154100752974501251629628068557
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 20:ae:c7:8b:e8:4a:f0:4c:5f:32:ff:e1:84:16:8e:07:d2:e5:65:83
Fingerprint (sha256): 6b:46:23:2c:9a:f9:16:bf:1c:d0:e5:4a:78:b6:6c:25:ef:85:e8:15:f7:e0:e7:53:23:5e:2d:86:f3:7a:9b:bc

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate www.northerntrust.com

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.northerntrust.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.northerntrust.com
rfp.northerntrust.com
m.northerntrust.com
m.ntrs.com
web-xp2i-pws.ntrs.com
www-xp.ntrs.com
www-ac.northerntrust.com
www.flexshares.com
northernfunds.com
www.northernfunds.com
www.northerninstitutionalfunds.com
www.northerntrustinvestments.com
individual.northernfunds.com
institutional.northernfunds.com
advisors.northernfunds.com
www.northerntrustopen.com
125.northerntrust.com
50southcapital.com

Other certificates including the domain name northerntrust.com

(limited to 100 certificates)
ntam-uat-cus-agw.northerntrust.com
www.northernfunds.com
san-001.ceros.com
uat.northerntrust.com
san-001.ceros.com
san-001.ceros.com
locations.northerntrust.com
san-001.ceros.com
san-001.ceros.com
san-001.ceros.com
wwww119.ntrs.com
san-001.ceros.com
deviaa.northerntrust.com
san-001.ceros.com
locations.northerntrust.com
san-001.ceros.com
uat.northerntrust.com
locations.northerntrust.com
wealth.northerntrust.com
pes1.northerntrust.com
san-001.ceros.com
san-001.ceros.com
www.northernfunds.com
wwww119.ntrs.com
northerntrust.com
ciscouc-emea-XMPP.ntrs.com
careers.northerntrust.com
www02710.ntrs.com
www.northernfunds.com
ntam-prod-cus-agw.northerntrust.com
uat.northerntrust.com
www.northernfunds.com
www.northernfunds.com
survey.northerntrust.com
san-001.ceros.com
smetrics.northerntrust.com
san-001.ceros.com
smetrics.northerntrust.com
www-ac.northerntrust.com
www02710.ntrs.com
northerntrust.com
www-ac.northerntrust.com
san-001.ceros.com
uat.northerntrust.com
ciscouc-indi-XMPP.ntrs.com
www02710.ntrs.com
ukpcuat2imp01.ntrs.com
amer-c4-expe.ntrs.com
www02710.ntrs.com
san-001.ceros.com
www02710.ntrs.com
web-xp3p-cdn.ntrs.com
san-001.ceros.com
www02710.ntrs.com
pages.e.northerntrust.com
san-001.ceros.com
www02710.ntrs.com
san-001.ceros.com
assetmanagement.northerntrust.com
san-001.ceros.com
pages.e.northerntrust.com
ciscouc-emea-XMPP.ntrs.com
northerntrust.com
wealth.northerntrust.com
www.northernfunds.com
survey.northerntrust.com
pages.e.northerntrust.com
pointofview.northerntrust.com
pages.e.northerntrust.com
san-001.ceros.com
san-001.ceros.com
wwww119.ntrs.com
pes1.northerntrust.com
www.northerntrust.com
www02710.ntrs.com
assetmanagement.northerntrust.com
www-ac.northerntrust.com
devotto.northerntrust.com
pes2.northerntrust.com
assetmanagement.northerntrust.com
uat.northerntrust.com
wwww119.ntrs.com
ukpcuat2imp01.ntrs.com
uat.northerntrust.com
careers.northerntrust.com
san-001.ceros.com
click.news.northerntrust.com
www.northernfunds.com
*.api.tpv.northerntrust.com
san-001.ceros.com
cm.demo.northerntrust.com
pointofview.northerntrust.com
san-001.ceros.com
www.northerntrust.com
uat.northerntrust.com
stores.cictitlepawn.com
www02710.ntrs.com
www-ac.northerntrust.com
www.northernfunds.com
careers.northerntrust.com

Certificate

The complete raw certificate details for www.northerntrust.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA307jbXePbMRsm86eJP8c
spNbuBbbCnjQ67xKZK2iYCbUL1pYdObjKxnH4TaONtp81yO1vgRjiuD2XH5mw4Wm
z+7YxYiKDB+UyoimXxJDto1kyZtl9V4xG2lCctBbH0bPLSQ6TmGvgffVOn9OhGoZ
afBnSkFY+EXjBN7fGxgc7nwudXHsT92hfPYJVuhzxSbAwDNDH49csvlbp5yZ7SbW
Z7W2uwAQ/WXf0RtXP18eduU2/oNJZ2Ia+c7fEG1Uwz0cT6UyhFXNHqamPoqpOF8p
MnXk2/TJF+B0QUm/5Os43ZBq2EQ9tbUHWt6BRNyZtiCbVBrABHrrYGoNFPFV7/WZ
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 27071340154100752974501251629628068557
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-02-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Northern Trust Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Network Applications Engineering - WPC DMZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.northerntrust.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28190043321960415740201859604510583202311746335947806552924414108763609763095796194187717440688321531620367832377550802876802544670051354223654585844170424598697617953404018482519664549716305338498506776722032146300426086370316161636988203572177215420050895688561031565849803130614686351046398996992411530038324048576151873646890405869523344177486208471896435183480073648951723671438910017530605887270910431200193997944508737146858467553130896720223725477253401209750867387364420136918281078490130267721620844811322175653799290967093924622431595390246510722595473793385410619150794789959661974944402468949675621063103
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (442 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rfp.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2i-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-xp.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-ac.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flexshares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northernfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northernfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerninstitutionalfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrustinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'individual.northernfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'institutional.northernfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisors.northernfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrustopen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '125.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '50southcapital.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [104 116 116 112 115 58 47 47 100 46 115 121 109 99 98 46 99 111 109 47 114 112 97]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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