test.online.dollar.bank

- Dollar Bank, Federal Savings Bank -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 4b:8e:20:3b:7c:ac:73:b1:93:1f:da:8c:15:e4:fa:91 was issued on by Symantec Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Dollar Bank, Federal Savings Bank

Organization: Dollar Bank, Federal Savings Bank
Organization unit: Information Security
State / Province: Pennsylvania
Locality: Pittsburgh
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4b:8e:20:3b:7c:ac:73:b1:93:1f:da:8c:15:e4:fa:91
Serial Number (int): 100430059587934163992727512469672884881
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 25:1a:2b:f5:3f:d8:f5:a3:20:91:ab:cd:e6:fe:90:c1:6a:64:3a:d7
Fingerprint (sha256): 8d:0f:d4:b4:e8:5c:82:ee:d8:4c:6f:34:52:f8:f4:c0:76:27:93:4c:30:58:c7:d5:74:86:65:f8:93:77:1c:fe

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate test.online.dollar.bank

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for test.online.dollar.bank

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

test.online.dollar.bank

Other certificates including the domain name dollar.bank

(limited to 100 certificates)
online.dollar.bank
www.dollar.bank
Transaction.online.dollar.bank
online.dollar.bank
test.www.dollar.bank
www.dollar.bank
dev.dollar.bank
www.dollar.bank
mobile.dollar.bank
www.dollar.bank
Retail.test.online.dollar.bank
www.dollar.bank
dollar.bank
test.online.dollar.bank
www.dollar.bank
online.dollar.bank
online.dollar.bank
www.dollar.bank
int.dollar.bank
www.dollar.bank
online.dollar.bank
locations.dollar.bank
businessonline.dollar.bank
www.dollar.bank
www.dollar.bank
kmadmin.dollar.bank
www.dollar.bank
businessonline.dollar.bank
test.dollar.bank
test.www.dollar.bank
testadmin.dollar.bank
Banking.online.dollar.bank
intadmin.dollar.bank
www.dollar.bank
www.dollar.bank
test.online.dollar.bank
www.dollar.bank
online.dollar.bank
test.online.dollar.bank
online.dollar.bank
online.dollar.bank
test.online.dollar.bank
Checking.online.dollar.bank
*.dollar.bank
test.www.dollar.bank
Retail.online.dollar.bank
pilot.online.dollar.bank
locations.dollar.bank
online.dollar.bank
test.dollar.bank
online.dollar.bank
int.dollar.bank
testonline.dollar.bank
www.dollar.bank
locations.dollar.bank
www.dollar.bank
devadmin.dollar.bank
businessonline.dollar.bank
kmadmin.dollar.bank
www.dollar.bank
dev.dollar.bank
www.dollar.bank
online.dollar.bank
www.dollar.bank
Accounts.online.dollar.bank
plcpdwol1.dollar.bank

Certificate

The complete raw certificate details for test.online.dollar.bank in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGMjCCBRqgAwIBAgIQS44gO3ysc7GTH9qMFeT6kTANBgkqhkiG9w0BAQsFADB+
MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAd
BgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxLzAtBgNVBAMTJlN5bWFudGVj
IENsYXNzIDMgU2VjdXJlIFNlcnZlciBDQSAtIEc0MB4XDTE2MTExMDAwMDAwMFoX
DTE3MTExMDIzNTk1OVowgaYxCzAJBgNVBAYTAlVTMRUwEwYDVQQIDAxQZW5uc3ls
dmFuaWExEzARBgNVBAcMClBpdHRzYnVyZ2gxKjAoBgNVBAoMIURvbGxhciBCYW5r
LCBGZWRlcmFsIFNhdmluZ3MgQmFuazEdMBsGA1UECwwUSW5mb3JtYXRpb24gU2Vj
dXJpdHkxIDAeBgNVBAMMF3Rlc3Qub25saW5lLmRvbGxhci5iYW5rMIICIjANBgkq
hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0Sh0K7HaOehAcIQU26KoWKaPQ3/oEn9A
OrcDpcOeRtmPl0p+hrvfuMAbJTfC3/6B514XU7KIbsbWoooFBAbR44fJAoq1Vggs
ANq2IV+V5LPxYwYt9FfCBj+YAto+1+rpm8IEE9Lt2CuWIhk77suuSZR3Hig9TKO5
ht/Iir/pLkniXdXL3uaKBWEiG7hBal+e/28VSkVDP9nfLPmTvxRxq78JLXGJZiEO
R0vrzV+U2xC5KBQ8/lA3EL/FHlna9vjCVCz7wZLmsSEE6Y0KRTnXjxwMenBsBWo0
u58ZxKNnCaG8uMaAGjtSJFz+TsjtrXwKacsru1IRO4j7jP0Tv/mCDUlXDhFlnlMb
OYzcxWik3FWOLz6mb1ECgXu5FJfKo2dek+Vwz/9tAwcJwn/0zx6qptBnzWx26I2I
dLR2ZRbiIRt/rZPnxSS3hQAmJgfKt41y7VQrKWQwIUPv1a+z5+iLEKp6NIbPpKTE
1b+qXls20MdQxWmKiaieWXqczaPrNip523WWKU3spvn+EWd2bWNe8WprdsdXHKR6
NREbQRMC3/GENVmggCkTCqgVpaPpNHTn5JOGLw2WlxUkb1mxbQjbt9I3WgQLcdJO
VqFhJRMxD0jdxWRo7M5EMw/AN7dXg2Cuceg2NvfWTU0xUtrzzlyGGyGdAJKIv+7X
T8DSCb18NiMCAwEAAaOCAYEwggF9MCIGA1UdEQQbMBmCF3Rlc3Qub25saW5lLmRv
bGxhci5iYW5rMAkGA1UdEwQCMAAwDgYDVR0PAQH/BAQDAgWgMCsGA1UdHwQkMCIw
IKAeoByGGmh0dHA6Ly9zcy5zeW1jYi5jb20vc3MuY3JsMGEGA1UdIARaMFgwVgYG
Z4EMAQICMEwwIwYIKwYBBQUHAgEWF2h0dHBzOi8vZC5zeW1jYi5jb20vY3BzMCUG
CCsGAQUFBwICMBkMF2h0dHBzOi8vZC5zeW1jYi5jb20vcnBhMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBRfYM9hkFXfhEMUimAqsvV6
9EMY7zBXBggrBgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9zcy5zeW1j
ZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly9zcy5zeW1jYi5jb20vc3MuY3J0MBMG
CisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAFN87BtHGnPWwv
zMolB9uxuBF7OCvb5akFuB3KJmAhpB6HRxv5jyckmXqiEftgVp3H88Hhzzi5JPW7
AX01qxz3H/DIBulm+/Y2q/V3xXsbK8iIvlJ3PewslQ+219Eh5XpfWHp39+Tdi/4v
Bt0AW7/BVu1GLpTconP0bWvWYau22smTnAuHl2dVqtkas0AXF8Ntit/KVGIbTN3i
1ePdronvdGldeMy+yMf3OExM0wV1662e3cDUkuyl0XzhOJFaagAbhSYAh99WG0Y+
DumBzYrbwI2A7/Kt8YjnMkYZ6RM/0F4sBHIvC5o8sP8kPJSlHs7s8RcI7QvwQk8W
C250yM7i
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 100430059587934163992727512469672884881
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Pittsburgh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Dollar Bank, Federal Savings Bank'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Information Security'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'test.online.dollar.bank'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 853290286276578272155957084384036345944919652729807907643386784793280493033927887334246882022266846203448464991120293794063501449685866058272406460627082319193331192375702027432590549772121757973162016937696434497190306377711055816701232211779181093483740554655328098007906416743609012678362549876930155109781718209907195494740750911185841874466920091613346558322282373636025225892963202615907195744061862458380368371992691770312296627412501546802005883730429029495201693174787420641778401145565203328689233373986192593643824751066522460625405586533232871486467450604453561523545862633210670460542154664442102117739392943276844699050467190517505052967817125772314918300832277541364038659541658648825901642120288403552801334170246944668240400317554790132208369772541025478688847370185737976665178790684304682069812802491842858314258129280904718607196339384358976523266839971043751991909864174002848691857362550113249026128015067651564739560117203309344528277448073722490918609420614390394532986094898617980516901800797607535259915561410565105449646216913039926137780116832405192695091180489841215163697646528477121162830858276733070453388748316951349643208303818813873048091888548152355046299082273835187756993312614455461256718202403
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.online.dollar.bank'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000537cec1b471a73d6c2fccca2507dbb1b8117b382bdbe5a905b81dca266021a41e87471bf98f2724997aa211fb60569dc7f3c1e1cf38b924f5bb017d35ab1cf71ff0c806e966fbf636abf577c57b1b2bc888be52773dec2c950fb6d7d121e57a5f587a77f7e4dd8bfe2f06dd005bbfc156ed462e94dca273f46d6bd661abb6dac9939c0b87976755aad91ab3401717c36d8adfca54621b4cdde2d5e3ddae89ef74695d78ccbec8c7f7384c4cd30575ebad9eddc0d492eca5d17ce138915a6a001b85260087df561b463e0ee981cd8adbc08d80eff2adf188e7324619e9133fd05e2c04722f0b9a3cb0ff243c94a51eceecf11708ed0bf0424f160b6e74c8cee2