www.heavenhr.de
- HeavenHR GmbH -
Issued by Symantec Class 3 Extended Validation SHA256 SSL CA
About this certificate
This digital certificate with serial number 02:e5:ba:3f:64:6f:a8:69:15:44:f5:1a:4b:2f:ae:34 was issued on by Symantec Corporation.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
HeavenHR GmbH
Company registration number:
HRB 167992
Organization: HeavenHR GmbH
Organization: HeavenHR GmbH
State / Province:
Berlin
Locality: Berlin
Country: DE
Locality: Berlin
Country: DE
Symantec Corporation
Organization:
Symantec Corporation
Organization unit: Symantec Trust Network
Organization unit: Symantec Trust Network
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 02:e5:ba:3f:64:6f:a8:69:15:44:f5:1a:4b:2f:ae:34Serial Number (int): 3851269522818311926214820179221655092
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: b2:6d:e3:e4:14:0f:8c:3c:73:42:a6:5a:99:1a:d3:14:75:b6:86:db
Fingerprint (sha1): a9:63:2a:d1:7a:29:e9:02:84:d7:bf:3b:73:f3:06:47:3f:8c:ff:55
Fingerprint (sha256): a9:94:ed:08:1e:3e:67:7a:1c:2b:45:6f:f9:dc:83:63:77:6a:49:73:40:2a:dc:99:52:62:12:ff:c7:71:19:a6
Issuing Certificate URL: http://sh.symcb.com/sh.crt
Revocation information
OCSP Server: http://sh.symcd.comCRL Distribution Point: http://sh.symcb.com/sh.crl
Check the revocation status for certificate www.heavenhr.de
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.heavenhr.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.heavenhr.de
heavenhr.de
heavenhr.de
Other certificates including the domain name heavenhr.de
(limited to 100 certificates)
blog1.heavenhr.de
support.qualityspa.fr
*.staging.heavenhr.com
staff.ncchomelearning.co.uk
help.morewithproject.com
tls.automattic.com
incapsula.com
tls.automattic.com
*.preprod.heavenhr.com
incapsula.com
desk.heavenhr.de
tls.automattic.com
*.integration.heavenhr.com
tls.automattic.com
tls.automattic.com
*.heavenhr.de
support.xpence.uk
support.checkpointsolutions.co.uk
tls.automattic.com
tls.automattic.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
tls.automattic.com
incapsula.com
*.integration.heavenhr.com
incapsula.com
incapsula.com
tls.automattic.com
tls.automattic.com
*.staging.heavenhr.com
incapsula.com
tls.automattic.com
support.xpence.uk
*.heavenhr.de
heavenhr.de
tls.automattic.com
tls.automattic.com
tls.automattic.com
support.wowing.io
tls.automattic.com
tls.automattic.com
tls.automattic.com
incapsula.com
incapsula.com
www.heavenhr.de
incapsula.com
incapsula.com
tls.automattic.com
incapsula.com
*.heavenhr.de
tls.automattic.com
tls.automattic.com
incapsula.com
tls.automattic.com
www.heavenhr.de
*.preprod.heavenhr.com
incapsula.com
*.heavenhr.de
tls.automattic.com
support-test.flocash.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
incapsula.com
*.staging.heavenhr.com
tls.automattic.com
*.heavenhr.de
tls.automattic.com
incapsula.com
support.xpence.uk
incapsula.com
incapsula.com
tls.automattic.com
tls.automattic.com
incapsula.com
*.staging.heavenhr.com
incapsula.com
blog1.heavenhr.de
tls.automattic.com
porr.idealgrupa.pl
soporte.blancoseguros.es
tls.automattic.com
tls.automattic.com
incapsula.com
support.qualityspa.fr
*.staging.heavenhr.com
staff.ncchomelearning.co.uk
help.morewithproject.com
tls.automattic.com
incapsula.com
tls.automattic.com
*.preprod.heavenhr.com
incapsula.com
desk.heavenhr.de
tls.automattic.com
*.integration.heavenhr.com
tls.automattic.com
tls.automattic.com
*.heavenhr.de
support.xpence.uk
support.checkpointsolutions.co.uk
tls.automattic.com
tls.automattic.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
tls.automattic.com
incapsula.com
*.integration.heavenhr.com
incapsula.com
incapsula.com
tls.automattic.com
tls.automattic.com
*.staging.heavenhr.com
incapsula.com
tls.automattic.com
support.xpence.uk
*.heavenhr.de
heavenhr.de
tls.automattic.com
tls.automattic.com
tls.automattic.com
support.wowing.io
tls.automattic.com
tls.automattic.com
tls.automattic.com
incapsula.com
incapsula.com
www.heavenhr.de
incapsula.com
incapsula.com
tls.automattic.com
incapsula.com
*.heavenhr.de
tls.automattic.com
tls.automattic.com
incapsula.com
tls.automattic.com
www.heavenhr.de
*.preprod.heavenhr.com
incapsula.com
*.heavenhr.de
tls.automattic.com
support-test.flocash.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
incapsula.com
*.staging.heavenhr.com
tls.automattic.com
*.heavenhr.de
tls.automattic.com
incapsula.com
support.xpence.uk
incapsula.com
incapsula.com
tls.automattic.com
tls.automattic.com
incapsula.com
*.staging.heavenhr.com
incapsula.com
blog1.heavenhr.de
tls.automattic.com
porr.idealgrupa.pl
soporte.blancoseguros.es
tls.automattic.com
tls.automattic.com
incapsula.com
Certificate
The complete raw certificate details for www.heavenhr.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgIQAuW6P2RvqGkVRPUaSy+uNDANBgkqhkiG9w0BAQsFADCB ijELMAkGA1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFudGVjIENvcnBvcmF0aW9uMR8w HQYDVQQLExZTeW1hbnRlYyBUcnVzdCBOZXR3b3JrMTswOQYDVQQDEzJTeW1hbnRl YyBDbGFzcyAzIEV4dGVuZGVkIFZhbGlkYXRpb24gU0hBMjU2IFNTTCBDQTAeFw0x NTA5MDIwMDAwMDBaFw0xNzA5MDEyMzU5NTlaMIHUMRMwEQYLKwYBBAGCNzwCAQMT AkRFMSgwJgYLKwYBBAGCNzwCAQEUF0JlcmxpbiAoQ2hhcmxvdHRlbmJ1cmcpMR0w GwYDVQQPExRQcml2YXRlIE9yZ2FuaXphdGlvbjETMBEGA1UEBRMKSFJCIDE2Nzk5 MjELMAkGA1UEBhMCREUxDzANBgNVBAgUBkJlcmxpbjEPMA0GA1UEBxQGQmVybGlu MRYwFAYDVQQKFA1IZWF2ZW5IUiBHbWJIMRgwFgYDVQQDFA93d3cuaGVhdmVuaHIu ZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGiYxzkJe4vQyNX/HL odKIhRAqIOp5NBEUYUQM6evo8X7QeJjU2cnls8Yo/cnda/SUilUb9ddhq/XvxHkj 5WvQP9/y2Lkz6hFC6MuAKzz9LOYtnPrnk2zWJtVHZM5u7CUoOQfx3dDZ2pp+0dj9 fQw1PIjIAFiaorMm7FWLVNOZLQhvzbtojPh474UM+/N3EJ+zXGs4Cc1Qx+3zhJvW wwh3OTAomhBs/MhyD+VpPw/bDFy0MO/eWNrWNlsV2S9qoVGn1cr0sHM1JzKk5sAS TmqVBWLwJ92iqPGNuinYqoLEQyFVC6NpE3l5fsvKFrFd+IrtJeE1dW/bJSRD4ksM JenxAgMBAAGjggGLMIIBhzAnBgNVHREEIDAegg93d3cuaGVhdmVuaHIuZGWCC2hl YXZlbmhyLmRlMAkGA1UdEwQCMAAwDgYDVR0PAQH/BAQDAgWgMGYGA1UdIARfMF0w WwYLYIZIAYb4RQEHFwYwTDAjBggrBgEFBQcCARYXaHR0cHM6Ly9kLnN5bWNiLmNv bS9jcHMwJQYIKwYBBQUHAgIwGQwXaHR0cHM6Ly9kLnN5bWNiLmNvbS9ycGEwKwYD VR0fBCQwIjAgoB6gHIYaaHR0cDovL3NoLnN5bWNiLmNvbS9zaC5jcmwwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFLJt4+QUD4w8c0Km Wpka0xR1tobbMFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDovL3No LnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL3NoLnN5bWNiLmNvbS9zaC5j cnQwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAFlgNJ3j 8mkRsT6t4iHV6QQZ3vs9Tjqni9sJ2UVR9+AFHy7AweOREXW3tDbiLJkjEFJVk/TW knDeWb7VbL0wTjoqL2vMg9Ak4OjXnBr3/bJk6fE6fKqMYdPxIHU7RcQFWtHiT6Es pxmV7RSXKG8l4ws698jn41swRNoczNh61kTjHROjwAXVawjPtzeiRnVZLg1xWZsU 4CXRFgEPZuhcyKOcDQALD14Z60FlZo958OMEVxOMJsEc4tTY71UMGmHNJS/3zRYj 7knphT6abxa8272mr4Xo5UCeWhlYs+sN0s/6Y+v0912s+TkdCEVH0dPK545lRnOu cD+LrcwdCunebzA= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxomMc5CXuL0MjV/xy6HS iIUQKiDqeTQRFGFEDOnr6PF+0HiY1NnJ5bPGKP3J3Wv0lIpVG/XXYav178R5I+Vr 0D/f8ti5M+oRQujLgCs8/SzmLZz655Ns1ibVR2TObuwlKDkH8d3Q2dqaftHY/X0M NTyIyABYmqKzJuxVi1TTmS0Ib827aIz4eO+FDPvzdxCfs1xrOAnNUMft84Sb1sMI dzkwKJoQbPzIcg/laT8P2wxctDDv3lja1jZbFdkvaqFRp9XK9LBzNScypObAEk5q lQVi8Cfdoqjxjbop2KqCxEMhVQujaRN5eX7LyhaxXfiK7SXhNXVv2yUkQ+JLDCXp 8QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 3851269522818311926214820179221655092 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Extended Validation SHA256 SSL CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-02 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-01 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Berlin (Charlottenburg)' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 167992' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Berlin' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Berlin' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'HeavenHR GmbH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'www.heavenhr.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25063012144839652312407210725332855773839261784101188187447843924141297220016596725791892349389910504458171805999242052990117821824894818010985363810033868002901210633431498055033655697041135402743109491320468984761066145324199335566737676291972370903443199306711331035173057558727996630568174683335801266112693017974471796701350216754903194037675919003472484066348469959494958263826995447634829983243593111273010812492116465625520860544373014702627139054318661876511131763948234461218274787375258298346747856025939832288912215801977427847465582213358447670106503465297400006562549359981054632542707469420798960593393 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heavenhr.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heavenhr.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.23.6 (VeriSign EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sh.symcb.com/sh.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b26de3e4140f8c3c7342a65a991ad31475b686db . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sh.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sh.symcb.com/sh.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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