www.heavenhr.de

- HeavenHR GmbH -

Issued by Symantec Class 3 Extended Validation SHA256 SSL CA

About this certificate

This digital certificate with serial number 02:e5:ba:3f:64:6f:a8:69:15:44:f5:1a:4b:2f:ae:34 was issued on by Symantec Corporation.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

HeavenHR GmbH

Company registration number: HRB 167992
Organization: HeavenHR GmbH
State / Province: Berlin
Locality: Berlin
Country: DE

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:e5:ba:3f:64:6f:a8:69:15:44:f5:1a:4b:2f:ae:34
Serial Number (int): 3851269522818311926214820179221655092
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: b2:6d:e3:e4:14:0f:8c:3c:73:42:a6:5a:99:1a:d3:14:75:b6:86:db

Fingerprint (sha1): 74:eb:98:c3:56:cf:a1:2c:c7:dc:1d:3f:fe:bc:65:87:6f:63:c8:a8
Fingerprint (sha256): 8b:69:ab:d6:28:02:e9:ba:51:f2:7f:b8:2a:27:a8:29:fd:4c:1a:b7:d0:f7:06:cc:54:83:bf:2c:76:af:bc:3c

Issuing Certificate URL: http://sh.symcb.com/sh.crt

Revocation information

OCSP Server: http://sh.symcd.com
CRL Distribution Point: http://sh.symcb.com/sh.crl

Check the revocation status for certificate www.heavenhr.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.heavenhr.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.heavenhr.de
heavenhr.de

Other certificates including the domain name heavenhr.de

(limited to 100 certificates)
blog1.heavenhr.de
support.qualityspa.fr
*.staging.heavenhr.com
staff.ncchomelearning.co.uk
help.morewithproject.com
tls.automattic.com
incapsula.com
tls.automattic.com
*.preprod.heavenhr.com
incapsula.com
desk.heavenhr.de
tls.automattic.com
*.integration.heavenhr.com
tls.automattic.com
tls.automattic.com
*.heavenhr.de
support.xpence.uk
support.checkpointsolutions.co.uk
tls.automattic.com
tls.automattic.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
tls.automattic.com
incapsula.com
*.integration.heavenhr.com
incapsula.com
incapsula.com
tls.automattic.com
tls.automattic.com
*.staging.heavenhr.com
incapsula.com
tls.automattic.com
support.xpence.uk
*.heavenhr.de
heavenhr.de
tls.automattic.com
tls.automattic.com
tls.automattic.com
support.wowing.io
tls.automattic.com
tls.automattic.com
tls.automattic.com
incapsula.com
incapsula.com
www.heavenhr.de
incapsula.com
incapsula.com
tls.automattic.com
incapsula.com
*.heavenhr.de
tls.automattic.com
tls.automattic.com
incapsula.com
tls.automattic.com
www.heavenhr.de
*.preprod.heavenhr.com
incapsula.com
*.heavenhr.de
tls.automattic.com
support-test.flocash.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
incapsula.com
*.staging.heavenhr.com
tls.automattic.com
*.heavenhr.de
tls.automattic.com
incapsula.com
support.xpence.uk
incapsula.com
incapsula.com
tls.automattic.com
tls.automattic.com
incapsula.com
*.staging.heavenhr.com
incapsula.com
blog1.heavenhr.de
tls.automattic.com
porr.idealgrupa.pl
soporte.blancoseguros.es
tls.automattic.com
tls.automattic.com
incapsula.com

Certificate

The complete raw certificate details for www.heavenhr.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG5DCCBcygAwIBAgIQAuW6P2RvqGkVRPUaSy+uNDANBgkqhkiG9w0BAQsFADCB
ijELMAkGA1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFudGVjIENvcnBvcmF0aW9uMR8w
HQYDVQQLExZTeW1hbnRlYyBUcnVzdCBOZXR3b3JrMTswOQYDVQQDEzJTeW1hbnRl
YyBDbGFzcyAzIEV4dGVuZGVkIFZhbGlkYXRpb24gU0hBMjU2IFNTTCBDQTAeFw0x
NTA5MDIwMDAwMDBaFw0xNzA5MDEyMzU5NTlaMIHUMRMwEQYLKwYBBAGCNzwCAQMT
AkRFMSgwJgYLKwYBBAGCNzwCAQEUF0JlcmxpbiAoQ2hhcmxvdHRlbmJ1cmcpMR0w
GwYDVQQPExRQcml2YXRlIE9yZ2FuaXphdGlvbjETMBEGA1UEBRMKSFJCIDE2Nzk5
MjELMAkGA1UEBhMCREUxDzANBgNVBAgUBkJlcmxpbjEPMA0GA1UEBxQGQmVybGlu
MRYwFAYDVQQKFA1IZWF2ZW5IUiBHbWJIMRgwFgYDVQQDFA93d3cuaGVhdmVuaHIu
ZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGiYxzkJe4vQyNX/HL
odKIhRAqIOp5NBEUYUQM6evo8X7QeJjU2cnls8Yo/cnda/SUilUb9ddhq/XvxHkj
5WvQP9/y2Lkz6hFC6MuAKzz9LOYtnPrnk2zWJtVHZM5u7CUoOQfx3dDZ2pp+0dj9
fQw1PIjIAFiaorMm7FWLVNOZLQhvzbtojPh474UM+/N3EJ+zXGs4Cc1Qx+3zhJvW
wwh3OTAomhBs/MhyD+VpPw/bDFy0MO/eWNrWNlsV2S9qoVGn1cr0sHM1JzKk5sAS
TmqVBWLwJ92iqPGNuinYqoLEQyFVC6NpE3l5fsvKFrFd+IrtJeE1dW/bJSRD4ksM
JenxAgMBAAGjggL4MIIC9DAnBgNVHREEIDAegg93d3cuaGVhdmVuaHIuZGWCC2hl
YXZlbmhyLmRlMAkGA1UdEwQCMAAwDgYDVR0PAQH/BAQDAgWgMGYGA1UdIARfMF0w
WwYLYIZIAYb4RQEHFwYwTDAjBggrBgEFBQcCARYXaHR0cHM6Ly9kLnN5bWNiLmNv
bS9jcHMwJQYIKwYBBQUHAgIwGQwXaHR0cHM6Ly9kLnN5bWNiLmNvbS9ycGEwKwYD
VR0fBCQwIjAgoB6gHIYaaHR0cDovL3NoLnN5bWNiLmNvbS9zaC5jcmwwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFLJt4+QUD4w8c0Km
Wpka0xR1tobbMFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDovL3No
LnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL3NoLnN5bWNiLmNvbS9zaC5j
cnQwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB3AKS5CZC0GFgUh7sTosxncAo8
NZgE+RvfuON3zQ7IDdwQAAABT43/5KQAAAQDAEgwRgIhAMmbsamdGaWrtvix7JeL
XMwqWDd63cMm9n3vFegHVE9TAiEAs6AkS07//uXNsK0XT6wTtqIGZEyZdpm5XKuj
81tgxBAAdgBWFAaaL9fC7NP14b1Esj7HRna5vJkRXMDvlJhV1onQ3QAAAU+N/+Vs
AAAEAwBHMEUCIBOwcY8XnRX93oK8hn4AJNuQaMxOON3vsuQcCmMjRhYdAiEA2HcM
ZkzKDJyA7HOY810boSsfjGQJKAhRyYXu+pUa+b0AdQBo9pj4H2SCvjqM7rkoHUz8
cVFdZ5PURNEKZ6y7T0/7xAAAAU+N/+STAAAEAwBGMEQCIBoIXHE/IQdsHYl1NVfy
VKG/Pewogdy1i8NeJdfsDFw6AiBG7mRNH0Ne58yLQpiWcC7zhfg1OkLi3sZd4j9r
ljafiTANBgkqhkiG9w0BAQsFAAOCAQEAk9EgZ2HFv3ocDQQSzmvBhtzBGkZZlGCd
V6LQ+mZHdmD9lxolS8ZXOovF625STJIL0hLfKOFVQQgqvoe6zFnR9W2jQzsSv9zg
OfA15duAwg6w/d3rpeQ57OVKxOT25wRxIiLJ7NwaPxgMCBIi/NGE9jRfV7h8jIBQ
x1vQUo2VwwBT0OxIcc/YPQbkDF2vWMGMqh0SpNH/QxlVcN9ZjuoGmlX/6whQqDlj
EqCXL0MUOx7B8e5HlFXQ3eipRXtY0vaQalE7iZLPDLksPCOdMr/WOoQrmw5Xikrr
JEELuZRKY4TfhttcxBY1vn1RfL22Rtyb+HodmI8twu2v02B7uArDqg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxomMc5CXuL0MjV/xy6HS
iIUQKiDqeTQRFGFEDOnr6PF+0HiY1NnJ5bPGKP3J3Wv0lIpVG/XXYav178R5I+Vr
0D/f8ti5M+oRQujLgCs8/SzmLZz655Ns1ibVR2TObuwlKDkH8d3Q2dqaftHY/X0M
NTyIyABYmqKzJuxVi1TTmS0Ib827aIz4eO+FDPvzdxCfs1xrOAnNUMft84Sb1sMI
dzkwKJoQbPzIcg/laT8P2wxctDDv3lja1jZbFdkvaqFRp9XK9LBzNScypObAEk5q
lQVi8Cfdoqjxjbop2KqCxEMhVQujaRN5eX7LyhaxXfiK7SXhNXVv2yUkQ+JLDCXp
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3851269522818311926214820179221655092
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Extended Validation SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Berlin (Charlottenburg)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 167992'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'HeavenHR GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'www.heavenhr.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25063012144839652312407210725332855773839261784101188187447843924141297220016596725791892349389910504458171805999242052990117821824894818010985363810033868002901210633431498055033655697041135402743109491320468984761066145324199335566737676291972370903443199306711331035173057558727996630568174683335801266112693017974471796701350216754903194037675919003472484066348469959494958263826995447634829983243593111273010812492116465625520860544373014702627139054318661876511131763948234461218274787375258298346747856025939832288912215801977427847465582213358447670106503465297400006562549359981054632542707469420798960593393
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heavenhr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heavenhr.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.23.6 (VeriSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sh.symcb.com/sh.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b26de3e4140f8c3c7342a65a991ad31475b686db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sh.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sh.symcb.com/sh.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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