sihh2016.vancleefarpels.com

- Richemont International SA -

Issued by Symantec Class 3 Secure Server SHA256 SSL CA

About this certificate

This digital certificate with serial number 70:42:b2:26:03:ef:dd:18:0f:cc:71:64:c3:be:44:af was issued on by Symantec Corporation.

With 36 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Richemont International SA

Organization: Richemont International SA
Organization unit: VCA
State / Province: Genève
Locality: Bellevue
Country: CH

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 70:42:b2:26:03:ef:dd:18:0f:cc:71:64:c3:be:44:af
Serial Number (int): 149219840401371934315294607697489314991
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: db:62:20:fb:7d:02:89:7c:d2:3b:6f:c7:e4:32:6c:05:52:1d:ad:b1

Fingerprint (sha1): fe:01:40:10:e7:2a:2e:b2:3f:7c:24:bd:ed:ac:be:b2:22:8d:6a:62
Fingerprint (sha256): 89:65:d1:0f:c3:64:b4:e0:c7:f7:2a:b1:5f:dc:f5:e1:9e:18:f9:3e:d1:e2:55:6c:85:99:b1:83:80:af:e5:e7

Issuing Certificate URL: http://sg.symcb.com/sg.crt

Revocation information

OCSP Server: http://sg.symcd.com
CRL Distribution Point: http://sg.symcb.com/sg.crl

Check the revocation status for certificate sihh2016.vancleefarpels.com

36

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sihh2016.vancleefarpels.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

7-seconds-of-luck.vancleefarpels.com
8-seconds-of-luck.vancleefarpels.com
admin.7-seconds-of-luck.vancleefarpels.com
admin.8-seconds-of-luck.vancleefarpels.com
admin.archedenoe-jp.vancleefarpels.com
admin.archedenoe.vancleefarpels.com
admin.artdelahautejoaillerie-vancleefarpels.com
admin.connectedmirror.vancleefarpels.com
admin.emeraudeenmajeste.vancleefarpels.com
admin.grandvendome.vancleefarpels.com
admin.hk.lecolevancleefarpels.com
admin.peaudane.vancleefarpels.com
admin.pierresdecaractere-variations.vancleefarpels.com
admin.press.artscienceofgems.vancleefarpels.com
admin.pressroom.lecolevancleefarpels.com
admin.pressroom.vancleefarpels.com
admin.sevenseas.vancleefarpels.com
admin.sihh2015.vancleefarpels.com
admin.sihh2016.vancleefarpels.com
admin.sparkles-of-luck.vancleefarpels.com
admin.us.lecolevancleefarpels.com
archedenoe-jp.vancleefarpels.com
archedenoe.vancleefarpels.com
collectionpeaudane.vancleefarpels.com
connectedmirror.vancleefarpels.com
diamondcheck.vancleefarpels.com
epr.vancleefarpels.com
fb.vancleefarpels.com
peaudane.vancleefarpels.com
pressroom.lecolevancleefarpels.com
secure.hk.lecolevancleefarpels.com
secure.sparkles-of-luck.vancleefarpels.com
sevenseas.vancleefarpels.com
sihh2015.vancleefarpels.com
sihh2016.vancleefarpels.com
us.lecolevancleefarpels.com

Other certificates including the domain name vancleefarpels.com

(limited to 100 certificates)
secure.cn.vancleefarpels.com
intranet.richemont.com
intranet.richemont.com
weboutique.quality.vancleefarpels.com
intranet.richemont.com
weboutique.quality.vancleefarpels.com
dam.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
presslounge.vancleefarpels.com
linemedia.preprod.richemont.com
media.richemont.com
www.vancleefarpels.com
www.preprod2.vancleefarpels.cn
diamondcheck.vancleefarpels.com
intranet.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
dam.richemont.com
linemedia.preprod.richemont.com
intranet.richemont.com
www.vancleefarpels.com
www.quality.alange-soehne.com
vcaballet.vancleefarpels.com
weboutique.dev.vancleefarpels.com
linemedia.preprod.richemont.com
sihh2014.vancleefarpels.com
intranet.preprod.richemont.com
api.weboutique.quality.iwc.cn
linemedia.preprod.richemont.com
weboutique.preprod.vancleefarpels.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
vcaballet.vancleefarpels.com
www.quality.alange-soehne.com
media.richemont.com
vcaballet.vancleefarpels.com
weboutique.vancleefarpels.com
vcaballet.vancleefarpels.com
linemedia.preprod.richemont.com
weboutique.preprod.vancleefarpels.com
vcaballet.vancleefarpels.com
diamondcheck.vancleefarpels.com
www.quality.alange-soehne.com
intranet.staging.richemont.com
www.lecolevancleefarpels.com
intranet.quality.richemont.com
vcaballet.vancleefarpels.com
secure-www.vancleefarpels.com
weboutique.dev.vancleefarpels.com
intranet.dev.richemont.com
www.vancleefarpels.com
intranet.staging.richemont.com
8-seconds-of-luck.vancleefarpels.com
vcs.richemont.com
diamondcheck.vancleefarpels.com
intranet.richemont.com
linemedia.preprod.richemont.com
intranet.dev.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
dam.richemont.com
sihh2014.vancleefarpels.com
media.richemont.com
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
yps.vancleefarpels.com
vcaballet.vancleefarpels.com
sihh2016.vancleefarpels.com
sihh2014.vancleefarpels.com
secure.www.vancleefarpels.com
intranet.richemont.com
vcaballet.vancleefarpels.com
weboutique.quality.vancleefarpels.com
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
org-timenaturelove.vancleefarpels.com
intranet.staging.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
sihh2014.vancleefarpels.com
sihh2014.vancleefarpels.com
sihh2014.vancleefarpels.com
intranet.richemont.com
www.quality.alange-soehne.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
intranet.richemont.com
www.vancleefarpels.com
linemedia.preprod.richemont.com
whenelegancemeetsart.quality.vancleefarpels.com
sihh2016.vancleefarpels.com
intranet.richemont.com
presslounge.vancleefarpels.com
api.weboutique.quality.iwc.cn
sihh2014.vancleefarpels.com
intranet.richemont.com
wwsip.richemont.com
sihh2016.vancleefarpels.com

Certificate

The complete raw certificate details for sihh2016.vancleefarpels.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwldZ7CQr359rIDmRzbmt
ZckzzS/bx7zcx3nyHHmz/lUVnNsvNv6a0YiieWAAh3zn3RX7qCwqcVIoK1VyrobQ
zMahmqYcRCsC1fFFyc/VtHnQJOTs7QFFhwtjkyVEWKxUGPZYAKlyCQChbgXTUSHi
RbQrOvLx40ZAcBH4zaFMv6FHZGxsoG1NQ2djN4K+VaGhyjAe2a/2qNXVnjzlJm4/
tAtod8e1jxCwV09kLXR18VSTY2IHW1h55teFgQZ2YMT2Z4s+8c7qEIDynYDiYkUl
yXD3mXpqDFUgui8O5+wwYJyK9PELADoGRdtrA2tswyiYiKaCjINLrSAFmhKZSdcW
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 149219840401371934315294607697489314991
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Genève'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bellevue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Richemont International SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'VCA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'sihh2016.vancleefarpels.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24533305674874087334112221718801920179754444966846787284920764609541929984310805275203439219683739513137119166528332964389358533713501766449254162651444215414699933134841629417561338553085638399249630448953865415463016577135936978926820277506016600896868707755788635241641795666323594166696545917638697738911925660753064643112309356376556719793275520410017734256562333253547134316326340189919348701164584740800369861790993477333155716078357071170369594537413470215827154116905118254060780508353298332583891835143400378440795873941116485853032480386206229888444648033606799047531291833016792900053802526632096638113297
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1338 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '7-seconds-of-luck.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '8-seconds-of-luck.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.7-seconds-of-luck.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.8-seconds-of-luck.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.archedenoe-jp.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.archedenoe.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.artdelahautejoaillerie-vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.connectedmirror.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.emeraudeenmajeste.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.grandvendome.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hk.lecolevancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.peaudane.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pierresdecaractere-variations.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.press.artscienceofgems.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pressroom.lecolevancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pressroom.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sevenseas.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sihh2015.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sihh2016.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sparkles-of-luck.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.us.lecolevancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archedenoe-jp.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archedenoe.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collectionpeaudane.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectedmirror.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondcheck.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epr.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fb.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peaudane.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pressroom.lecolevancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.hk.lecolevancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.sparkles-of-luck.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sevenseas.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sihh2015.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sihh2016.vancleefarpels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.lecolevancleefarpels.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName db6220fb7d02897cd23b6fc7e4326c05521dadb1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcb.com/sg.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcb.com/sg.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015ad732292a000004030046304402203c9d43eb79a3871f9467f897e735fbb5a0b9e805aa73baaf54a2389a1081507e02202483b66df9f2a0410aa98e87f12413834fa88f3033510ab516fee823b1a46c6f007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015ad732294f00000403004730450220209537fc3f280f4906871cd49ed76d4162c1b2c5904d9c11e39fa910154b7f3502210092aec1e51e2ea506efed5a1bf7a1c78088a0a549dd54ccc30a2988c734b9fb0d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0011f58a4f53e16aa6c29bf0e99449fc54b30b42b8aec546f9d01be3c246e7273309543ec61f449afd1fa1374b3a32edae78279290a593ca8cda581fa5e33c820231b0d18715f55fde4a5e2d5b1d1c2c46014bf5cc2b13b5016151d8bb2919c0871cc9e31cf339a194087c5f1c267649d3cd37328b39d3b97eb7942203b7580a9a69ea0ace2b93df2f07bb483c425fc74e7bddb0e3504244f69f2835afb619594bdc43588f328e55801caf06578d976a34a7fe9c6a6535b69a0fb95941ac2f0f666f14cb145157e24579cb0f0041874b68dc71d7f92406e81a48b77e43331bb89772689f0dfaba170dc7eec6fa39e225934f9a2649fd4414de19e728a6919602f2