guest.mpsa.com

- PSA Peugeot Citroen -

Issued by Symantec Class 3 Secure Server SHA256 SSL CA

About this certificate

This digital certificate with serial number 6a:cc:1f:12:83:3c:90:75:46:02:1f:6e:7c:08:ed:1f was issued on by Symantec Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

PSA Peugeot Citroen

Organization: PSA Peugeot Citroen
Organization unit: DSIN/ASTI/ISSI
State / Province: PARIS
Locality: PARIS
Country: FR

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 6a:cc:1f:12:83:3c:90:75:46:02:1f:6e:7c:08:ed:1f
Serial Number (int): 141958026333762579842425289387811597599
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: db:62:20:fb:7d:02:89:7c:d2:3b:6f:c7:e4:32:6c:05:52:1d:ad:b1

Fingerprint (sha1): c1:b1:ee:39:2e:80:a5:26:1f:30:db:08:61:e2:a9:07:12:a9:78:37
Fingerprint (sha256): 6b:86:52:f0:6f:e0:88:5e:fd:61:34:c1:ad:34:1d:f4:a0:86:e2:63:d8:9a:c0:25:be:b2:e1:08:38:92:71:42

Issuing Certificate URL: http://sg.symcb.com/sg.crt

Revocation information

OCSP Server: http://sg.symcd.com
CRL Distribution Point: http://sg.symcb.com/sg.crl

Check the revocation status for certificate guest.mpsa.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for guest.mpsa.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

guest.mpsa.com

Other certificates including the domain name mpsa.com

(limited to 100 certificates)
ican.mpsa.com
*.servicesgp.mpsa.com
*.jerome.mpsa.com
internetpcr.mpsa.com
*.auth.mpsa.com
e-invoice-test.services.mpsa.com
wapdev.mpsa.com
hybridexchsmtp.mpsa.com
*.servicesgp.mpsa.com
sip-hr.mpsa.com
sip-be.mpsa.com
sip-hr.mpsa.com
sip-be.mpsa.com
guest.mpsa.com
*.servicesgp.mpsa.com
sip-hr.mpsa.com
*.servicesgp.mpsa.com
wapprod.mpsa.com
hybridexchsmtp.mpsa.com
e-invoice-prod.services.mpsa.com
*.servicesgp.mpsa.com
sip-hr.mpsa.com
*.auth.mpsa.com
sip-be.mpsa.com
*.servicesgp.mpsa.com
sip-be.mpsa.com
*.servicesgp.mpsa.com
sip-hr.mpsa.com
*.servicesgp.mpsa.com
aqt.mpsa.com
*.mpsa.com
vpn-fr-preprod.mpsa.com
internetpcr.mpsa.com
*.mpsa.com
*.mpsa.com
*.mpsa.com
eu-est2-vpn.mpsa.com
sip-be.mpsa.com
dev.ucw.mpsa.com
guest.mpsa.com
wapprod.mpsa.com
wappreprod.mpsa.com
*.mpsa.com
idfed-preprod.mpsa.com
*.servicesgp.mpsa.com
sip-be.mpsa.com
preprod.ucw.mpsa.com
idfed.mpsa.com
e-invoice-prod.services.mpsa.com
sip-be.mpsa.com
sip.mpsa.com
guest.mpsa.com
*.auth.mpsa.com
*.mpsa.com
internetpcr.mpsa.com
Wappreprod.mpsa.com
testjerome.mpsa.com
itdealersupport.pre.mpsa.com
internetpcr.mpsa.com
wapprod.mpsa.com
ican.mpsa.com
sip-hr.mpsa.com
*.github.mpsa.com
*.mpsa.com
testDavid.mpsa.com
sip.mpsa.com
*.mpsa.com
mail1.mpsa.com
*.servicesgp.mpsa.com
ucw.mpsa.com
*.mpsa.com
guest.mpsa.com
internetpcr.mpsa.com
sip.mpsa.com
*.mpsa.com
sip-be.mpsa.com
fcagroup.com.br
e-invoice-prod.services.mpsa.com
wapprod.mpsa.com
sip-hr.mpsa.com
*.mpsa.com
*.testDavid.mpsa.com
sip.mpsa.com
sip-be.mpsa.com
wapprod.mpsa.com
*.servicesgp.mpsa.com
*.mpsa.com
guest.mpsa.com
e-invoice-prod.services.mpsa.com
sip-be.mpsa.com
*.github.mpsa.com
*.mpsa.com
psabox.mpsa.com
*.auth.mpsa.com
sip-be.mpsa.com
sip.mpsa.com
sip-hr.mpsa.com
mzppan03.mpsa.com
*.github.mpsa.com
wapdev.mpsa.com

Certificate

The complete raw certificate details for guest.mpsa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGcjCCBVqgAwIBAgIQaswfEoM8kHVGAh9ufAjtHzANBgkqhkiG9w0BAQsFADCB
hDELMAkGA1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFudGVjIENvcnBvcmF0aW9uMR8w
HQYDVQQLExZTeW1hbnRlYyBUcnVzdCBOZXR3b3JrMTUwMwYDVQQDEyxTeW1hbnRl
YyBDbGFzcyAzIFNlY3VyZSBTZXJ2ZXIgU0hBMjU2IFNTTCBDQTAeFw0xNzA3MTEw
MDAwMDBaFw0xODA5MTIyMzU5NTlaMH0xCzAJBgNVBAYTAkZSMQ4wDAYDVQQIDAVQ
QVJJUzEOMAwGA1UEBwwFUEFSSVMxHDAaBgNVBAoME1BTQSBQZXVnZW90IENpdHJv
ZW4xFzAVBgNVBAsMDkRTSU4vQVNUSS9JU1NJMRcwFQYDVQQDDA5ndWVzdC5tcHNh
LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALqUL++g0XmqwYj6
QnqnIhCJ6wW1nDxBAi7EZo4MvOeNux9OtLSLP6LSclmJUCHsXIw/pkmhFInWVsuY
jBZ+pRTft7/mRizeWetf6/pU7D6tgf+4S8zBfxjUh9l1c61tmV4K6eY897C2MOyz
jtToJfsdLWbGrdP9sYcdZJxo8mS5xzT7EkMwprkUfe3VJyLjPgGv8CWehuqt5Riq
V8TK1e5Zcfv664XUuSsBZXYTEHyjv5rHPNk/LKHuid6gR1+mKIJ+9UTVJtqe/7qg
7/B/sC5Ye65FzKdy8wBU2/c3yBGfCSHV4wr2+dGNJRsdkmXEAzPTTHBmObOUkHqU
yJ3tYVcCAwEAAaOCAuQwggLgMBkGA1UdEQQSMBCCDmd1ZXN0Lm1wc2EuY29tMAkG
A1UdEwQCMAAwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjBhBgNVHSAEWjBYMFYGBmeBDAECAjBMMCMGCCsGAQUFBwIBFhdodHRw
czovL2Quc3ltY2IuY29tL2NwczAlBggrBgEFBQcCAjAZDBdodHRwczovL2Quc3lt
Y2IuY29tL3JwYTAfBgNVHSMEGDAWgBTbYiD7fQKJfNI7b8fkMmwFUh2tsTArBgNV
HR8EJDAiMCCgHqAchhpodHRwOi8vc2cuc3ltY2IuY29tL3NnLmNybDBXBggrBgEF
BQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9zZy5zeW1jZC5jb20wJgYIKwYB
BQUHMAKGGmh0dHA6Ly9zZy5zeW1jYi5jb20vc2cuY3J0MIIBfQYKKwYBBAHWeQIE
AgSCAW0EggFpAWcAdgDd6x0reg1PpiCLga2BaHB+Lo6dAdVciI09EcTNtuy+zAAA
AV0wqSCGAAAEAwBHMEUCIAUD6A7pHPfG/cHRqn+t0vKo81wfqSXWuPVIqqzspqfI
AiEAhpmAfAomP3NupxMWKLYPS6WJ42wiLET1ZtvpYaMRQ7oAdgCkuQmQtBhYFIe7
E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAV0wqSC9AAAEAwBHMEUCIQDvXY3lv6JS
8x4tyYMzLuNyWe4phbXMzRZxUO6LgRStdAIgbpKIY/qq5Lnsz/KmI1NGKFJTiKTG
e1Ef+pqhXCC6AekAdQDuS723dc5guuFCaR+r4Z5mow9+X7By2IMAxHuJeqj9ywAA
AV0wqSKEAAAEAwBGMEQCICBu/rbRNlmjog1OyjIZQGVh9K1keclpXqRxEgcH5zPG
AiATWsfhzDZL2umpgTiiYnLTXpQAlw9l6C2+Q3P+8Q0Q7TANBgkqhkiG9w0BAQsF
AAOCAQEAZsfH/W1bxoKJfVegu3rSIzUW7oeP1fVok3m41eFAYJkQkhzQ1Gk7oiuY
dwf4ZHKmYk1GqoZInl7YoM0BM2bMkwnERUmaW89LRaZ5h+PqJ1PTfPlYqvL5nOHn
53/cn0NBpQanZtL54hqn+/Qhn2FIMdVcl/Wr9Et9TkipXhNKM89OQFWJ0pRfy4JD
w9EWdgGUwPd9K2OFfFmcE7n32hbvQx+Yj48XmiJqTtvfUPNq9U5BHSMg5I09yDR9
xO3D8PmNuWxBSiW557Vv4MBTitXt6RQ1AB+c8cz5dxCiiJrddPN/hWbsrkQ0QoKX
YYnGAbdIfVlX8gj9QTgHitIgb4CxGQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupQv76DRearBiPpCeqci
EInrBbWcPEECLsRmjgy85427H060tIs/otJyWYlQIexcjD+mSaEUidZWy5iMFn6l
FN+3v+ZGLN5Z61/r+lTsPq2B/7hLzMF/GNSH2XVzrW2ZXgrp5jz3sLYw7LOO1Ogl
+x0tZsat0/2xhx1knGjyZLnHNPsSQzCmuRR97dUnIuM+Aa/wJZ6G6q3lGKpXxMrV
7llx+/rrhdS5KwFldhMQfKO/msc82T8soe6J3qBHX6Yogn71RNUm2p7/uqDv8H+w
Llh7rkXMp3LzAFTb9zfIEZ8JIdXjCvb50Y0lGx2SZcQDM9NMcGY5s5SQepTIne1h
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 141958026333762579842425289387811597599
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PSA Peugeot Citroen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DSIN/ASTI/ISSI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'guest.mpsa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23553398580253601753691375833097730566072672161324401727138163699800169984434983942787381511119455528830105525006360834471943020612381393293236204035324307232948484266910912916541677248274624659596628923483074670734511534252576344538214963555656408526355408607288630248301310975345070021240533734814016041699666604525681030937861812151049538680858655320889995250551276702728568273915677556629719024278041126086433029541160457339947635502739143478091851616677946818947354055123341659031490050403910769886804657546391452101490837389711393957927867233074637746535889744323064454561335358313146511214083457858891074593111
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guest.mpsa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName db6220fb7d02897cd23b6fc7e4326c05521dadb1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcb.com/sg.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcb.com/sg.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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