www.cryopal.com

- L'AIR LIQUIDE SA ETUDE EXPLOITATION DES PROCEDES GEORGES CLAUDE -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 39:04:8a:51:f6:0b:5e:49:40:86:bc:2c:4a:a4:c4:29 was issued on by Symantec Corporation.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

L'AIR LIQUIDE SA ETUDE EXPLOITATION DES PROCEDES GEORGES CLAUDE

Organization: L'AIR LIQUIDE SA ETUDE EXPLOITATION DES PROCEDES GEORGES CLAUDE
Organization unit: IT
State / Province: Paris
Locality: Paris
Country: FR

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 39:04:8a:51:f6:0b:5e:49:40:86:bc:2c:4a:a4:c4:29
Serial Number (int): 75789570413327867505738939737422742569
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 67:16:fd:56:bd:7f:73:bb:96:90:f4:a8:f7:f0:51:5a:64:d8:ee:6b
Fingerprint (sha256): 8f:0f:6c:58:c1:c1:44:64:ef:3f:78:9e:01:44:4c:18:98:2a:20:a8:5e:d8:86:5d:8a:d3:8c:a0:43:fc:e8:28

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate www.cryopal.com

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cryopal.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

industry.airliquide.com.au
www.airliquidehealthcare.fr
industry.airliquide.tw
www.airliquidehealthcare.pt
industry.airliquide.co.uk
www.alpes-instruments.com
www.cemont.com
vitalaire.co.jp
advancedtech.airliquide.com
energies.airliquide.com
industry.airliquide.ca
industrie.airliquide.ca
industrie.airliquide-benelux.com
industri.airliquide.se
www.ecoheatox.com
www.airliquidehealthcare.it
cryopal.com
www.cryopal.com

Other certificates including the domain name cryopal.com

(limited to 100 certificates)
www.airliquide.com
www.cryopal.com
www.cryopal.com
www.cryolor.com
www.cryopal.com
www.cryopal.com
www.cryopal.com
www.airliquide.com
www.cryopal.com
cryopal.com
www.cryolor.com
www.cryolor.com
www.cryopal.com
www.cryopal.com
www.cryopal.com
www.cryopal.com
www.cryolor.com
www.cryopal.com
www.cryopal.com
www.cryopal.com
www.cryopal.com
www.cryopal.com
www.cryopal.com
www.cryopal.com
www.airliquide.com
www.cryopal.com
www.airliquide.com
www.cryopal.com
www.airliquide.com
www.cryopal.com
www.airliquide.com
www.airliquide.com
www.cryopal.com
www.cryopal.com
www.cryopal.com
www.airliquide.com
cryopal.com
www.cryopal.com
www.cryopal.com
www.cryopal.com
www.cryopal.com
www.cryopal.com
www.cryopal.com
www.airliquide.com
www.cryopal.com
www.airliquide.com
www.airliquide.com
cryopal.com
www.cryopal.com
www.cryopal.com
www.cryopal.com
www.cryopal.com
www.cryopal.com
www.airliquide.com
www.cryopal.com
www.cryopal.com
www.cryopal.com
www.airliquide.com
www.airliquide.com
www.cryolor.com
www.airliquide.com
www.cryopal.com
www.cryopal.com
www.airliquide.com
www.cryopal.com
www.cryolor.com
www.cryopal.com
www.cryopal.com
www.cryopal.com
www.airliquide.com
www.cryopal.com
www.airliquide.com
www.cryopal.com
www.cryopal.com
www.cryopal.com
www.airliquide.com
www.cryopal.com
www.cryopal.com
cryopal.com
www.cryopal.com
www.cryopal.com
www.airliquide.com
www.cryopal.com
www.airliquide.com
www.cryopal.com
www.cryopal.com
www.cryopal.com
www.cryopal.com
cryopal.com
www.cryopal.com
www.cryopal.com
www.cryopal.com
www.airliquide.com
www.cryopal.com
www.cryopal.com
www.cryopal.com
www.cryopal.com
www.airliquide.com
www.cryopal.com
www.cryopal.com

Certificate

The complete raw certificate details for www.cryopal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum0BuRSr+sYyw9cA81Zu
Q7nW4K/LKzz79c0jh5UVSuk+Rn3vjTmd46HqueVZMVQsXEJnlVso4lav1AbAzZtd
Y+9PR92pdHiyBMdmz7SNkPOEwhejON8sGb2OEOe08dpPCJcmhg+DoDqslhODr0zD
w9uMBHIig0rGCW9ZuFtekHYbsmJN+Y73DVmW8ovNpW+vtKaJKIB6Y4LJmvv3d6sQ
hkpSPjGMDFJMnOr8ykcWLEZRaglrVa9WeMC+OJQTS+V+V9t86Bbf9Pat3ZPIDjPB
kHtNB9WbW+AUOFn0kHkWUnn8WggKnYAfx0laP+r3pjaXPXxo+uDNIgFabUo9Uedt
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 75789570413327867505738939737422742569
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'L'AIR LIQUIDE SA ETUDE EXPLOITATION DES PROCEDES GEORGES CLAUDE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.cryopal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23534077945836513936186778018741119438902597574211341821640652314610574902244101080970770543905642075797182037995328011753061093215097203895495469612225439087155573235862671549252135088984437949912445917654748138234177023358726936759089290753816999496824269994791681816603046783464292189049922253702677053241406466160646373127031957032274508541732152844427468977129285993819768725162928757263921378516862859057299732982679533369170115627606142818378929785553596705622681271738673369144180232684381561503807862483773159120009641254709275999208509100823495837599908794169736453085840358090054488998520625715321609088353
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (440 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'industry.airliquide.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airliquidehealthcare.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'industry.airliquide.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airliquidehealthcare.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'industry.airliquide.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alpes-instruments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cemont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitalaire.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advancedtech.airliquide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energies.airliquide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'industry.airliquide.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'industrie.airliquide.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'industrie.airliquide-benelux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'industri.airliquide.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecoheatox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airliquidehealthcare.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryopal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cryopal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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