sip.evry.com

- EVRY AS -

Issued by VeriSign Class 3 International Server CA - G3

About this certificate

This digital certificate with serial number 45:d4:fc:06:4d:57:4f:27:44:e1:6d:ca:ab:8e:94:d8 was issued on by VeriSign, Inc..

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

EVRY AS

Organization: EVRY AS
Organization unit: EVRY AS
State / Province: Oslo
Locality: Oslo
Country: NO

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 45:d4:fc:06:4d:57:4f:27:44:e1:6d:ca:ab:8e:94:d8
Serial Number (int): 92822610309693570088032590237946254552
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d7:9b:7c:d8:22:a0:15:f7:dd:ad:5f:ce:29:9b:58:c3:bc:46:00:b5

Fingerprint (sha1): 6b:12:f7:fb:fe:a0:23:66:97:e8:9d:cb:9d:3b:d1:4d:8c:be:1d:5c
Fingerprint (sha256): 8c:7f:3a:bd:0d:39:8d:2a:7a:af:c4:cd:53:74:cb:fa:d0:e8:48:91:07:f7:b6:4e:e5:a5:a4:8a:a9:89:20:23

Issuing Certificate URL: http://se.symcb.com/se.crt

Revocation information

OCSP Server: http://se.symcd.com
CRL Distribution Point: http://se.symcb.com/se.crl

Check the revocation status for certificate sip.evry.com

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sip.evry.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication
Netscape Server-Gated Cryptography

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dialin.evry.com
Lyncdiscover.evry.com
meet.evry.com
webconf.evry.com
Lync-web-ext.evry.com
sip.eye-share.no
meet.eye-share.no
lync15-web-ext01.evry.com
lync15-web-ext02.evry.com
lync15-wac-ext01.evry.com
lync15-wac-ext02.evry.com
sip.evry.com

Other certificates including the domain name evry.com

(limited to 100 certificates)
qp05.swift.servicebureau.evry.com
kundeportal.evry.com
docportal.evry.com
leapfrog-ssl-6.gcs-web.com
earkivod.evry.com
fsjenkins-restricted.evry.com
arweb.evry.com
leapfrog-ssl-6.gcs-web.com
3d.cekab.net
north.card.evry.com
w15pool01.corp.corpcommon.com
zonoscp.evry.com
sip.evry.com
*.serviceportal.evry.com
nettbedriften.evry.com
psp.card.evry.com
wiki.svg.evry.com
oneportal.evry.com
da.card.evry.com
*.easi.evry.com
portal.card.evry.com
cgs.card.evry.com
vpn.evry.com
*.services.evry.com
*.eo.evry.com
mail.evry.com
cognitive.evry.com
leapfrog-ssl-6.gcs-web.com
cgs.card.evry.com
customerportal.fscustomertest.evry.com
epin.cardservices.evry.com
academy.evry.com
sni.cloudflaressl.com
leapfrog-ssl-6.gcs-web.com
*.mobility.evry.com
sni.cloudflaressl.com
cgs.cert.card.evry.com
view.evry.com
view.evry.com
openbanking.evry.com
leapfrog-ssl-6.gcs-web.com
qa.fms.evry.com
telmax.evry.com
mqsh.evry.com
secure.evry.com
*.ro-services.evry.com
view.evry.com
karantene.evry.com
sip.evry.com
samgw.evry.com
lekdommer.evry.com
lekdommer.evry.com
leapfrog-ssl-6.gcs-web.com
*.svg.evry.com
leapfrog-ssl-6.gcs-web.com
sip.evry.com
dnb.sfms.evry.com
evry.com
sso.fms.evry.com
epin.cardservices.evry.com
leapfrog-ssl-6.gcs-web.com
telenorvalue.west.evry.com
sip.corpcommon.com
archiveeika.evry.com
prtg.evry.com
telenorvalue.west.evry.com
webshop.boras.evry.com
kundeportal.evry.com
south.card.evry.com
portal.card.evry.com
terraearkivqa.evry.com
guru.evry.com
vpn.evry.com
sni.cloudflaressl.com
netstat.evry.com
sip.evry.com
mqemq02p.evry.com
telenorvalue.west.evry.com
cgs.card.evry.com
*.tietoevry.com
earkiv.evry.com
da.card.evry.com
elearning.evry.com
*.sa.evry.com
*.svg.evry.com
kundeportal.evry.com
was.evry.com
driftinfo.boras.evry.com
leapfrog-ssl-6.gcs-web.com
samb.evry.com
leapfrog-ssl-6.gcs-web.com
vpn.evry.com
wiki.svg.evry.com
*.evry.com
annualreport.evry.com
annualreport.evry.com
portal.card.evry.com
shop.evry.com
telenorvalue.west.evry.com
cgs.card.evry.com

Certificate

The complete raw certificate details for sip.evry.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxza1GG5pRDBtx7M3cKgZ
AJfYR6PcEWqJTudmvkWDHE9qZFVeMpTABtIB0nX6nCxZ1ff/JjZGiQ1bP1e7cFAw
aoE/9hg7vtQ74J9mY3qeE90cZY6OupcDeRSIIVMGhUrWR/mkOmTdniBsg2l0xBof
U2KiI1qJKi5ai5WBtNVuX3hY7GWno7+yfnsjXx+Dg4EXWLAIcFadJ1ooLZxBq++X
DlOR6gJlB0qsBRuXyDprGMTusgGRDSToLP1q3pdlm1jVFLYryJXKh3TS8RGZsRIe
stY7zmSg0zjeeTQo+a0bZ7Jaoue3Ax6lWKpSlbrrlDwuXSDiN1mEFiF5X3W4ESf1
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 92822610309693570088032590237946254552
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)10'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 International Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oslo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Oslo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'EVRY AS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'EVRY AS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'sip.evry.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25148399914633751922379272237378502662301933564825972634076597914963481461532650700282785917140892730742240666173542037070575914195422801796229120790420805753281231902035440059911950216479673653913280536780525601209855936293684872214805061418801128432008620039650019959058788453354556611647795860819209125215947932510606946279061306573717282016513615092443283404755084687359591049631852672210168347197895611037951291150001988927618432166649864122492475290588748674982870008364331109198458027399223251261278546514795935605073002931423756091826796807537319949614256907162336115824060581034547934757006219075197392647603
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (258 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.evry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.evry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.evry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webconf.evry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lync-web-ext.evry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.eye-share.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.eye-share.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lync15-web-ext01.evry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lync15-web-ext02.evry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lync15-wac-ext01.evry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lync15-wac-ext02.evry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.evry.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.4.1 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [104 116 116 112 115 58 47 47 100 46 115 121 109 99 98 46 99 111 109 47 114 112 97]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d79b7cd822a015f7ddad5fce299b58c3bc4600b5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://se.symcb.com/se.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://se.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://se.symcb.com/se.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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