4810collection.montblanc.cn
- Richemont International SA -
Issued by Symantec Class 3 Secure Server SHA256 SSL CA
About this certificate
This digital certificate with serial number 45:2f:fe:07:00:c3:df:38:87:ee:74:15:b3:60:7f:e9 was issued on by Symantec Corporation.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Richemont International SA
Organization:
Richemont International SA
Organization unit: Montblanc ChinaCache
Organization unit: Montblanc ChinaCache
State / Province:
Genève
Locality: Bellevue
Country: CH
Locality: Bellevue
Country: CH
Symantec Corporation
Organization:
Symantec Corporation
Organization unit: Symantec Trust Network
Organization unit: Symantec Trust Network
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 45:2f:fe:07:00:c3:df:38:87:ee:74:15:b3:60:7f:e9Serial Number (int): 91965921948383591918404760867266658281
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: db:62:20:fb:7d:02:89:7c:d2:3b:6f:c7:e4:32:6c:05:52:1d:ad:b1
Fingerprint (sha1): f3:a6:e1:e8:19:3e:75:09:19:c9:f1:06:c2:3a:e4:db:27:f5:e2:e8
Fingerprint (sha256): 95:bf:8f:d9:0f:12:46:ba:e3:8e:fe:57:94:ea:2f:83:dd:b2:74:01:ba:5c:07:d5:56:5c:be:78:c4:56:70:13
Issuing Certificate URL: http://sg.symcb.com/sg.crt
Revocation information
OCSP Server: http://sg.symcd.comCRL Distribution Point: http://sg.symcb.com/sg.crl
Check the revocation status for certificate 4810collection.montblanc.cn
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for 4810collection.montblanc.cn
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
4810collection.montblanc.cn
Other certificates including the domain name montblanc.cn
(limited to 100 certificates)
weboutique.quality.vancleefarpels.com
weboutique.quality.vancleefarpels.com
secure.www.preprod.montblanc.cn
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
www.staging.montblanc.cn
secure.weshop.preprod.montblanc.cn
4810collection.montblanc.cn
admin.4810collection.montblanc.cn
4810collection.montblanc.cn
www.staging.montblanc.cn
linemedia.preprod.richemont.com
secure.weshop.montblanc.cn
www.montblanc.cn
4810collection.montblanc.cn
4810collection.montblanc.cn
4810collection.montblanc.cn
secure.www.preprod.montblanc.com
weboutique.dev.vancleefarpels.com
linemedia.preprod.richemont.com
4810collection.montblanc.cn
api.weboutique.quality.iwc.cn
linemedia.preprod.richemont.com
weboutique.preprod.vancleefarpels.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
weboutique.preprod.vancleefarpels.com
appboutique.montblanc.com
weboutique.dev.vancleefarpels.com
linemedia.preprod.richemont.com
petit-prince.montblanc.com
weboutique.montblanc.cn
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
secure.weshop.montblanc.cn
4810collection.montblanc.cn
4810collection.montblanc.cn
linemedia.preprod.richemont.com
weboutique.quality.vancleefarpels.com
petit-prince.montblanc.com
linemedia.preprod.richemont.com
www.montblanc.cn
linemedia.preprod.richemont.com
paper.qua.montblanc.cn
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
api.weboutique.quality.iwc.cn
weboutique.quality.vancleefarpels.com
admin.4810collection.montblanc.cn
linemedia.preprod.richemont.com
4810collection.montblanc.cn
secure.www.montblanc.com
linemedia.preprod.richemont.com
starcrm.montblanc.cn
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
appboutique.montblanc.com
secure.www.preprod.montblanc.com
secure.www.preprod.montblanc.cn
secure.www.montblanc.cn
www.montblanc.cn
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
www.staging.montblanc.cn
weboutique.quality.jaeger-lecoultre.com
admin.4810collection.quality.montblanc.cn
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
4810collection.montblanc.cn
4810collection.montblanc.cn
4810collection.montblanc.cn
4810collection.montblanc.cn
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
4810collection.montblanc.cn
weboutique.dev.vancleefarpels.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
weboutique.quality.vancleefarpels.com
www.montblanc.cn
4810collection.montblanc.cn
linemedia.preprod.richemont.com
weboutique.preprod.vancleefarpels.com
4810collection.montblanc.cn
linemedia.preprod.richemont.com
secure.www.montblanc.com
weboutique.dev.jaeger-lecoultre.com
weboutique.dev.jaeger-lecoultre.com
4810collection.montblanc.cn
4810collection.montblanc.cn
weboutique.quality.vancleefarpels.com
linemedia.preprod.richemont.com
weboutique.quality.vancleefarpels.com
secure.www.preprod.montblanc.cn
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
www.staging.montblanc.cn
secure.weshop.preprod.montblanc.cn
4810collection.montblanc.cn
admin.4810collection.montblanc.cn
4810collection.montblanc.cn
www.staging.montblanc.cn
linemedia.preprod.richemont.com
secure.weshop.montblanc.cn
www.montblanc.cn
4810collection.montblanc.cn
4810collection.montblanc.cn
4810collection.montblanc.cn
secure.www.preprod.montblanc.com
weboutique.dev.vancleefarpels.com
linemedia.preprod.richemont.com
4810collection.montblanc.cn
api.weboutique.quality.iwc.cn
linemedia.preprod.richemont.com
weboutique.preprod.vancleefarpels.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
weboutique.preprod.vancleefarpels.com
appboutique.montblanc.com
weboutique.dev.vancleefarpels.com
linemedia.preprod.richemont.com
petit-prince.montblanc.com
weboutique.montblanc.cn
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
secure.weshop.montblanc.cn
4810collection.montblanc.cn
4810collection.montblanc.cn
linemedia.preprod.richemont.com
weboutique.quality.vancleefarpels.com
petit-prince.montblanc.com
linemedia.preprod.richemont.com
www.montblanc.cn
linemedia.preprod.richemont.com
paper.qua.montblanc.cn
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
api.weboutique.quality.iwc.cn
weboutique.quality.vancleefarpels.com
admin.4810collection.montblanc.cn
linemedia.preprod.richemont.com
4810collection.montblanc.cn
secure.www.montblanc.com
linemedia.preprod.richemont.com
starcrm.montblanc.cn
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
appboutique.montblanc.com
secure.www.preprod.montblanc.com
secure.www.preprod.montblanc.cn
secure.www.montblanc.cn
www.montblanc.cn
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
www.staging.montblanc.cn
weboutique.quality.jaeger-lecoultre.com
admin.4810collection.quality.montblanc.cn
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
4810collection.montblanc.cn
4810collection.montblanc.cn
4810collection.montblanc.cn
4810collection.montblanc.cn
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
4810collection.montblanc.cn
weboutique.dev.vancleefarpels.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
weboutique.quality.vancleefarpels.com
www.montblanc.cn
4810collection.montblanc.cn
linemedia.preprod.richemont.com
weboutique.preprod.vancleefarpels.com
4810collection.montblanc.cn
linemedia.preprod.richemont.com
secure.www.montblanc.com
weboutique.dev.jaeger-lecoultre.com
weboutique.dev.jaeger-lecoultre.com
4810collection.montblanc.cn
4810collection.montblanc.cn
weboutique.quality.vancleefarpels.com
linemedia.preprod.richemont.com
Certificate
The complete raw certificate details for 4810collection.montblanc.cn in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGJzCCBQ+gAwIBAgIQRS/+BwDD3ziH7nQVs2B/6TANBgkqhkiG9w0BAQsFADCB hDELMAkGA1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFudGVjIENvcnBvcmF0aW9uMR8w HQYDVQQLExZTeW1hbnRlYyBUcnVzdCBOZXR3b3JrMTUwMwYDVQQDEyxTeW1hbnRl YyBDbGFzcyAzIFNlY3VyZSBTZXJ2ZXIgU0hBMjU2IFNTTCBDQTAeFw0xNjEwMTkw MDAwMDBaFw0xNzEwMjAyMzU5NTlaMIGcMQswCQYDVQQGEwJDSDEQMA4GA1UECAwH R2Vuw6h2ZTERMA8GA1UEBwwIQmVsbGV2dWUxIzAhBgNVBAoMGlJpY2hlbW9udCBJ bnRlcm5hdGlvbmFsIFNBMR0wGwYDVQQLDBRNb250YmxhbmMgQ2hpbmFDYWNoZTEk MCIGA1UEAwwbNDgxMGNvbGxlY3Rpb24ubW9udGJsYW5jLmNuMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Yj+OG4y9fFMTZmk0e24cn8bfqnwt7L+tEZ/ Kr0irwT64wxu0MCDrLl7XE0Z/bA5sKonsxfJw1BbwCUzUvgvIr0DtJ1LOXQuGxae tEoTwYGPlhhJalO3uhrzZVSH14nyiw7yntoObqenP07NfKVVpXyLbkzO6SxgS4Ep rmerSYgOna0a/+T12zKFnCaS+2sW+eG2VOV2x+bPGKLKsffiQ53NtWrutOzmU+1K 4CZKxgLikzvlP4fagyPwIUEnQx+E5BF8gKqhYeEvMhoDjAPZDrW9PRtdAB2/if/G Qm+qWrn6dlomvQagUrDz214PWdf3oG2oAUa2h42s9j/sQIAo1QIDAQABo4ICeTCC AnUwJgYDVR0RBB8wHYIbNDgxMGNvbGxlY3Rpb24ubW9udGJsYW5jLmNuMAkGA1Ud EwQCMAAwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjBhBgNVHSAEWjBYMFYGBmeBDAECAjBMMCMGCCsGAQUFBwIBFhdodHRwczov L2Quc3ltY2IuY29tL2NwczAlBggrBgEFBQcCAjAZDBdodHRwczovL2Quc3ltY2Iu Y29tL3JwYTAfBgNVHSMEGDAWgBTbYiD7fQKJfNI7b8fkMmwFUh2tsTArBgNVHR8E JDAiMCCgHqAchhpodHRwOi8vc2cuc3ltY2IuY29tL3NnLmNybDBXBggrBgEFBQcB AQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9zZy5zeW1jZC5jb20wJgYIKwYBBQUH MAKGGmh0dHA6Ly9zZy5zeW1jYi5jb20vc2cuY3J0MIIBBQYKKwYBBAHWeQIEAgSB 9gSB8wDxAHcA3esdK3oNT6Ygi4GtgWhwfi6OnQHVXIiNPRHEzbbsvswAAAFX268b cAAABAMASDBGAiEAvPX7T6v09/8cudqqFkIyzoXFUqSTdyuoYFTHXUhDmMMCIQD5 nDrBN4c7F0FFG2lwPvJqCXXwlqvap5zGT7moAMIKxgB2AGj2mPgfZIK+OozuuSgd TPxxUV1nk9RE0QpnrLtPT/vEAAABV9uvHPQAAAQDAEcwRQIgMTMj1pAcDYDC4CUo 1g0YmkdMUYQE/Y0RtLK4eT/dsFMCIQDIonk5knYdXTObJyzKQhFOkrdSp29RAXfx NGt0Ryt+9DANBgkqhkiG9w0BAQsFAAOCAQEAkwcyHmlWnMoh0a1u0thmjiqSeJfX OrSurAyxH9ak3h7QhxlxEPVrSehQ3lHWVwIx2uMq0g7NmPoA+kdu1TXFbJLv1T3x opRJDSP2V3uk9we1O/5ohsmm7pXWTDsFr7yNFEZjkJ9LZIeEIkcmU4/e2fGgHbvB 5fbLpKPHr5xPhNSKKzYROX0AOqH4Mjju6qef5iL4uejN/kWybE3IxcYkPKYKKqGO XlJaFwWIK90IFkTQMbD+2A2XijLqitNAv/5Xy3iU61hDkSOhglNIHT8zXUtIc76e k6hmVw3/AXVRH4TqFSGJRp5KkWDUMo5mtDIA7rywyZrzeZ4/t6ORQ3Bhpw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Yj+OG4y9fFMTZmk0e24 cn8bfqnwt7L+tEZ/Kr0irwT64wxu0MCDrLl7XE0Z/bA5sKonsxfJw1BbwCUzUvgv Ir0DtJ1LOXQuGxaetEoTwYGPlhhJalO3uhrzZVSH14nyiw7yntoObqenP07NfKVV pXyLbkzO6SxgS4EprmerSYgOna0a/+T12zKFnCaS+2sW+eG2VOV2x+bPGKLKsffi Q53NtWrutOzmU+1K4CZKxgLikzvlP4fagyPwIUEnQx+E5BF8gKqhYeEvMhoDjAPZ DrW9PRtdAB2/if/GQm+qWrn6dlomvQagUrDz214PWdf3oG2oAUa2h42s9j/sQIAo 1QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 91965921948383591918404760867266658281 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server SHA256 SSL CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-19 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-20 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Genève' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bellevue' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Richemont International SA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Montblanc ChinaCache' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '4810collection.montblanc.cn' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26451359527915699362963175483940451072825926658239570847670260280445844340195478977909787965844578402686815068378755399950435313016658555298515288114516959094468437364345010492861765304396177181710411161214684201006600510803588907033468219473254906989113111680373318109807156725473491207961212575842505593786104448841194689829178403364997922553819907588113977855330489348818537374564657281253733434492112315360130304014003515554092070448436577431312725457371185541953858685218764109436466035891182191111645582918376067135363975049401515582226149105651123522394054392977658776133723222071391923097754432934568767006933 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4810collection.montblanc.cn' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName db6220fb7d02897cd23b6fc7e4326c05521dadb1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcb.com/sg.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcb.com/sg.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000157dbaf1b700000040300483046022100bcf5fb4fabf4f7ff1cb9daaa164232ce85c552a493772ba86054c75d484398c3022100f99c3ac137873b1741451b69703ef26a0975f096abdaa79cc64fb9a800c20ac600760068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc400000157dbaf1cf400000403004730450220313323d6901c0d80c2e02528d60d189a474c518404fd8d11b4b2b8793fddb053022100c8a2793992761d5d339b272cca42114e92b752a76f510177f1346b74472b7ef4 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 009307321e69569cca21d1ad6ed2d8668e2a927897d73ab4aeac0cb11fd6a4de1ed087197110f56b49e850de51d6570231dae32ad20ecd98fa00fa476ed535c56c92efd53df1a294490d23f6577ba4f707b53bfe6886c9a6ee95d64c3b05afbc8d144663909f4b648784224726538fded9f1a01dbbc1e5f6cba4a3c7af9c4f84d48a2b3611397d003aa1f83238eeeaa79fe622f8b9e8cdfe45b26c4dc8c5c6243ca60a2aa18e5e525a1705882bdd081644d031b0fed80d978a32ea8ad340bffe57cb7894eb58439123a18253481d3f335d4b4873be9e93a866570dff0175511f84ea152189469e4a9160d4328e66b43200eebcb0c99af3799e3fb7a391437061a7