www.lecolevancleefarpels.com
- Richemont International SA -
Issued by Symantec Class 3 Secure Server CA - G4
About this certificate
This digital certificate with serial number 4f:fe:76:85:e7:bd:38:1d:c2:a7:5c:dc:89:91:11:ae was issued on by Symantec Corporation.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Richemont International SA
Organization:
Richemont International SA
Organization unit: VanCleef & Arpels
Organization unit: VanCleef & Arpels
State / Province:
Bellevue
Locality: Bellevue
Country: CH
Locality: Bellevue
Country: CH
Symantec Corporation
Organization:
Symantec Corporation
Organization unit: Symantec Trust Network
Organization unit: Symantec Trust Network
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 4f:fe:76:85:e7:bd:38:1d:c2:a7:5c:dc:89:91:11:aeSerial Number (int): 106330259002474834721457205840658370990
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef
Fingerprint (sha1): c8:74:df:a8:4d:52:10:97:56:55:d4:61:b9:db:4c:ad:b9:76:ea:e6
Fingerprint (sha256): 73:29:67:0c:17:07:96:5b:f2:74:ad:4f:39:49:79:24:18:4f:45:1c:89:b8:62:9e:9b:d9:e1:c8:9b:44:d0:d1
Issuing Certificate URL: http://ss.symcb.com/ss.crt
Revocation information
OCSP Server: http://ss.symcd.comCRL Distribution Point: http://ss.symcb.com/ss.crl
Check the revocation status for certificate www.lecolevancleefarpels.com
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.lecolevancleefarpels.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.lecolevancleefarpels.com
admin.us.lecolevancleefarpels.com
secure.us.lecolevancleefarpels.com
admin.www.lecolevancleefarpels.com
secure.www.lecolevancleefarpels.com
admin.us.lecolevancleefarpels.com
secure.us.lecolevancleefarpels.com
admin.www.lecolevancleefarpels.com
secure.www.lecolevancleefarpels.com
Other certificates including the domain name lecolevancleefarpels.com
(limited to 100 certificates)
www.lecolevancleefarpels.com
www.vancleefarpels.com
www.lecolevancleefarpels.com
diamondcheck.vancleefarpels.com
www.lecolevancleefarpels.com
linemedia.preprod.richemont.com
www.lecolevancleefarpels.com
www.vancleefarpels.com
www.quality.alange-soehne.com
vcaballet.vancleefarpels.com
linemedia.preprod.richemont.com
sihh2014.vancleefarpels.com
www.lecolevancleefarpels.com
m.montblanc.com
vcaballet.vancleefarpels.com
www.quality.alange-soehne.com
vcaballet.vancleefarpels.com
vcaballet.vancleefarpels.com
linemedia.preprod.richemont.com
vcaballet.vancleefarpels.com
diamondcheck.vancleefarpels.com
www.quality.alange-soehne.com
www.lecolevancleefarpels.com
vcaballet.vancleefarpels.com
m.montblanc.com
www.vancleefarpels.com
m.montblanc.com
diamondcheck.vancleefarpels.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
m.montblanc.com
www.lecolevancleefarpels.com
sihh2014.vancleefarpels.com
www.quality.alange-soehne.com
vcaballet.vancleefarpels.com
sihh2016.vancleefarpels.com
sihh2014.vancleefarpels.com
www.lecolevancleefarpels.com
vcaballet.vancleefarpels.com
press.lecolevancleefarpels.com
m.montblanc.com
www.quality.alange-soehne.com
org-timenaturelove.vancleefarpels.com
sihh2014.vancleefarpels.com
m.montblanc.com
sihh2014.vancleefarpels.com
sihh2014.vancleefarpels.com
www.vancleefarpels.com
sihh2016.vancleefarpels.com
press.lecolevancleefarpels.com
sihh2014.vancleefarpels.com
sihh2016.vancleefarpels.com
diamondcheck.vancleefarpels.com
diamondcheck.vancleefarpels.com
www.lecolevancleefarpels.com
www.lecolevancleefarpels.com
sihh2016.vancleefarpels.com
sihh2014.vancleefarpels.com
vcaballet.vancleefarpels.com
www.lecolevancleefarpels.com
diamondcheck.vancleefarpels.com
press.lecolevancleefarpels.com
org-timenaturelove.vancleefarpels.com
sihh2014.vancleefarpels.com
vcaballet.vancleefarpels.com
www.quality.alange-soehne.com
diamondcheck.vancleefarpels.com
m.montblanc.com
sihh2014.vancleefarpels.com
www.quality.alange-soehne.com
sihh2014.vancleefarpels.com
www.quality.alange-soehne.com
www.lecolevancleefarpels.com
sihh2014.vancleefarpels.com
press.lecolevancleefarpels.com
org-timenaturelove.vancleefarpels.com
sihh2014.vancleefarpels.com
www.lecolevancleefarpels.com
org-us.lecolevancleefarpels.com
www.vancleefarpels.com
www.lecolevancleefarpels.com
www.lecolevancleefarpels.com
m.montblanc.com
www.quality.alange-soehne.com
org-timenaturelove.vancleefarpels.com
diamondcheck.vancleefarpels.com
www.vancleefarpels.com
vcaballet.vancleefarpels.com
www.lecolevancleefarpels.com
diamondcheck.vancleefarpels.com
m.montblanc.com
vcaballet.vancleefarpels.com
vcaballet.vancleefarpels.com
www.quality.alange-soehne.com
sihh2014.vancleefarpels.com
org-timenaturelove.vancleefarpels.com
m.montblanc.com
vcaballet.vancleefarpels.com
vcaballet.vancleefarpels.com
sihh2016.vancleefarpels.com
www.vancleefarpels.com
www.lecolevancleefarpels.com
diamondcheck.vancleefarpels.com
www.lecolevancleefarpels.com
linemedia.preprod.richemont.com
www.lecolevancleefarpels.com
www.vancleefarpels.com
www.quality.alange-soehne.com
vcaballet.vancleefarpels.com
linemedia.preprod.richemont.com
sihh2014.vancleefarpels.com
www.lecolevancleefarpels.com
m.montblanc.com
vcaballet.vancleefarpels.com
www.quality.alange-soehne.com
vcaballet.vancleefarpels.com
vcaballet.vancleefarpels.com
linemedia.preprod.richemont.com
vcaballet.vancleefarpels.com
diamondcheck.vancleefarpels.com
www.quality.alange-soehne.com
www.lecolevancleefarpels.com
vcaballet.vancleefarpels.com
m.montblanc.com
www.vancleefarpels.com
m.montblanc.com
diamondcheck.vancleefarpels.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
m.montblanc.com
www.lecolevancleefarpels.com
sihh2014.vancleefarpels.com
www.quality.alange-soehne.com
vcaballet.vancleefarpels.com
sihh2016.vancleefarpels.com
sihh2014.vancleefarpels.com
www.lecolevancleefarpels.com
vcaballet.vancleefarpels.com
press.lecolevancleefarpels.com
m.montblanc.com
www.quality.alange-soehne.com
org-timenaturelove.vancleefarpels.com
sihh2014.vancleefarpels.com
m.montblanc.com
sihh2014.vancleefarpels.com
sihh2014.vancleefarpels.com
www.vancleefarpels.com
sihh2016.vancleefarpels.com
press.lecolevancleefarpels.com
sihh2014.vancleefarpels.com
sihh2016.vancleefarpels.com
diamondcheck.vancleefarpels.com
diamondcheck.vancleefarpels.com
www.lecolevancleefarpels.com
www.lecolevancleefarpels.com
sihh2016.vancleefarpels.com
sihh2014.vancleefarpels.com
vcaballet.vancleefarpels.com
www.lecolevancleefarpels.com
diamondcheck.vancleefarpels.com
press.lecolevancleefarpels.com
org-timenaturelove.vancleefarpels.com
sihh2014.vancleefarpels.com
vcaballet.vancleefarpels.com
www.quality.alange-soehne.com
diamondcheck.vancleefarpels.com
m.montblanc.com
sihh2014.vancleefarpels.com
www.quality.alange-soehne.com
sihh2014.vancleefarpels.com
www.quality.alange-soehne.com
www.lecolevancleefarpels.com
sihh2014.vancleefarpels.com
press.lecolevancleefarpels.com
org-timenaturelove.vancleefarpels.com
sihh2014.vancleefarpels.com
www.lecolevancleefarpels.com
org-us.lecolevancleefarpels.com
www.vancleefarpels.com
www.lecolevancleefarpels.com
www.lecolevancleefarpels.com
m.montblanc.com
www.quality.alange-soehne.com
org-timenaturelove.vancleefarpels.com
diamondcheck.vancleefarpels.com
www.vancleefarpels.com
vcaballet.vancleefarpels.com
www.lecolevancleefarpels.com
diamondcheck.vancleefarpels.com
m.montblanc.com
vcaballet.vancleefarpels.com
vcaballet.vancleefarpels.com
www.quality.alange-soehne.com
sihh2014.vancleefarpels.com
org-timenaturelove.vancleefarpels.com
m.montblanc.com
vcaballet.vancleefarpels.com
vcaballet.vancleefarpels.com
sihh2016.vancleefarpels.com
Certificate
The complete raw certificate details for www.lecolevancleefarpels.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFqjCCBJKgAwIBAgIQT/52hee9OB3Cp1zciZERrjANBgkqhkiG9w0BAQsFADB+ MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAd BgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxLzAtBgNVBAMTJlN5bWFudGVj IENsYXNzIDMgU2VjdXJlIFNlcnZlciBDQSAtIEc0MB4XDTE1MTEyNDAwMDAwMFoX DTE2MTEyNDIzNTk1OVowgZsxCzAJBgNVBAYTAkNIMREwDwYDVQQIDAhCZWxsZXZ1 ZTERMA8GA1UEBwwIQmVsbGV2dWUxIzAhBgNVBAoMGlJpY2hlbW9udCBJbnRlcm5h dGlvbmFsIFNBMRowGAYDVQQLDBFWYW5DbGVlZiAmIEFycGVsczElMCMGA1UEAwwc d3d3LmxlY29sZXZhbmNsZWVmYXJwZWxzLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAO8hgOo0vmw6zn3Yw/VbJYwb9hSiwpmkS+bUdo3Ffpk5Qa7Q vLsxd2CvCw0Hghae6EhtRr7t/3zVv9vQQR5oEdT9LURpbY5igCTY42dc2MTtrLKZ IswlEg9QyUa7U+It0hUjN6GyYL822G3w6AX7wKZN4gLSZIj53dMGDu6g7u5lJz0e WII+g28efBM1+usHm9lf9Wq5YRTZkV71nSOUazCd0sDOWAwEkQsj0PYiBjjnPBpJ 7WRbc5id141JUg4e0l05KuXcIO9q6tmXdIxZ4XMQAY1283ImI79HgMioqKPToJKo g70CdBNdxuja/FTqKUudCzCkqsgnE8pf4uATZvECAwEAAaOCAgQwggIAMIG5BgNV HREEgbEwga6CHHd3dy5sZWNvbGV2YW5jbGVlZmFycGVscy5jb22CIWFkbWluLnVz LmxlY29sZXZhbmNsZWVmYXJwZWxzLmNvbYIic2VjdXJlLnVzLmxlY29sZXZhbmNs ZWVmYXJwZWxzLmNvbYIiYWRtaW4ud3d3LmxlY29sZXZhbmNsZWVmYXJwZWxzLmNv bYIjc2VjdXJlLnd3dy5sZWNvbGV2YW5jbGVlZmFycGVscy5jb20wCQYDVR0TBAIw ADAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MGEGA1UdIARaMFgwVgYGZ4EMAQICMEwwIwYIKwYBBQUHAgEWF2h0dHBzOi8vZC5z eW1jYi5jb20vY3BzMCUGCCsGAQUFBwICMBkaF2h0dHBzOi8vZC5zeW1jYi5jb20v cnBhMB8GA1UdIwQYMBaAFF9gz2GQVd+EQxSKYCqy9Xr0QxjvMCsGA1UdHwQkMCIw IKAeoByGGmh0dHA6Ly9zcy5zeW1jYi5jb20vc3MuY3JsMFcGCCsGAQUFBwEBBEsw STAfBggrBgEFBQcwAYYTaHR0cDovL3NzLnN5bWNkLmNvbTAmBggrBgEFBQcwAoYa aHR0cDovL3NzLnN5bWNiLmNvbS9zcy5jcnQwDQYJKoZIhvcNAQELBQADggEBACEU XYPK1L8EXjHOAVHzNuR2okgXmKKw0nF1zKXCNCmf8Gj/s3lKqqw7SDHdhS81k0TG jS4RrJb0rQ8kBvEwQuwIlaaG+En7x4OKUm3rX2oLMPWV4g6fPaDVUV2wdTbFqho7 CBKBNnSHKdWXmu5fr8mKeJzJRyVA/xZ76RsGuGUalpZhFDHcXcyw9yhE5aXYEeUi zp9R9w+roxk1vDFBRWVX8dL+xiPL4xsbRHiBrxj7AwQsjxFIeVkEcfmK/EmqxyGr KU9Q50FbXTeh190iXnow9OFV6Z4kW5KF4nRY5gpxtqLT+ZAWn9duxXezTiV9sABu PDUawcN3dNbj6VMDB4Q= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7yGA6jS+bDrOfdjD9Vsl jBv2FKLCmaRL5tR2jcV+mTlBrtC8uzF3YK8LDQeCFp7oSG1Gvu3/fNW/29BBHmgR 1P0tRGltjmKAJNjjZ1zYxO2sspkizCUSD1DJRrtT4i3SFSM3obJgvzbYbfDoBfvA pk3iAtJkiPnd0wYO7qDu7mUnPR5Ygj6Dbx58EzX66web2V/1arlhFNmRXvWdI5Rr MJ3SwM5YDASRCyPQ9iIGOOc8GkntZFtzmJ3XjUlSDh7SXTkq5dwg72rq2Zd0jFnh cxABjXbzciYjv0eAyKioo9OgkqiDvQJ0E13G6Nr8VOopS50LMKSqyCcTyl/i4BNm 8QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 106330259002474834721457205840658370990 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-24 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-24 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bellevue' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bellevue' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Richemont International SA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'VanCleef & Arpels' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.lecolevancleefarpels.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30187476114834285098770922933888038288619700268227033526908880719679068435845265632828570774241104838808530877056878081953444546748260833301223558294520707735247758778901598415348548943356712569046945054829208530240869027013236072939382052997440279586285601415727016264000183001037552958992702276918267680819361507702329090926386854490579571070379375180491222472385721897285590068011532729223177844285210883823791336007193004201570885680755936704238574303738288036516782561956646129149847758115203434228906184018364364949638206685425945434769587091973321177919599334983163482002742383807607709148763227065349731215089 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (177 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lecolevancleefarpels.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.us.lecolevancleefarpels.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.us.lecolevancleefarpels.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.www.lecolevancleefarpels.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.www.lecolevancleefarpels.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [104 116 116 112 115 58 47 47 100 46 115 121 109 99 98 46 99 111 109 47 114 112 97] . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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