www.cryopal.com

- L'AIR LIQUIDE SA ETUDE EXPLOITATION DES PROCEDES GEORGES CLAUDE -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 25:34:4f:80:c4:06:fc:a1:6d:a6:4a:60:af:23:21:e8 was issued on by Symantec Corporation.

With 27 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

L'AIR LIQUIDE SA ETUDE EXPLOITATION DES PROCEDES GEORGES CLAUDE

Organization: L'AIR LIQUIDE SA ETUDE EXPLOITATION DES PROCEDES GEORGES CLAUDE
Organization unit: IT
State / Province: Paris
Locality: Paris
Country: FR

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 25:34:4f:80:c4:06:fc:a1:6d:a6:4a:60:af:23:21:e8
Serial Number (int): 49453047792916697136005035484290163176
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 84:e8:b4:ed:c6:2c:30:e8:f8:07:aa:c4:bb:4b:dc:f5:20:1d:91:13
Fingerprint (sha256): ac:69:cc:aa:4c:16:92:03:da:ee:4c:83:d3:fb:53:19:2b:d7:ea:b4:0e:9b:5d:fc:9a:c8:ba:05:a3:18:9a:9a

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate www.cryopal.com

27

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cryopal.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

industry.airliquide.com.au
industry.airliquide.tw
www.cryolor.com
www.ecoheatox.com
industrie.airliquide-benelux.com
www.airliquidehealthcare.fr
www.airliquidesante.pl
industry.airliquide.co.uk
www.ventamed.pl
www.helpwentylacja.pl
www.alpes-instruments.com
healthcare.carbagas.ch
industrie.carbagas.ch
priemysel.airliquide.sk
www.cemont.com
www.airliquidehealthcare.pt
industrie.airliquide.ca
industry.airliquide.ca
vitalaire.co.jp
www.vitalaire.co.jp
industri.airliquide.se
energies.airliquide.com
advancedtech.airliquide.com
www.airliquidehealthcare.it
www.gasoxmed.pt
cryopal.com
www.cryopal.com

Other certificates including the domain name cryopal.com

(limited to 100 certificates)
www.airliquide.com
www.cryopal.com
www.cryopal.com
www.cryolor.com
www.cryopal.com
www.cryopal.com
www.cryopal.com
www.airliquide.com
www.cryopal.com
cryopal.com
www.cryolor.com
www.cryolor.com
www.cryopal.com
www.cryopal.com
www.cryopal.com
www.cryopal.com
www.cryolor.com
www.cryopal.com
www.cryopal.com
www.cryopal.com
www.cryopal.com
www.cryopal.com
www.cryopal.com
www.cryopal.com
www.airliquide.com
www.cryopal.com
www.airliquide.com
www.cryopal.com
www.airliquide.com
www.cryopal.com
www.airliquide.com
www.airliquide.com
www.cryopal.com
www.cryopal.com
www.cryopal.com
www.airliquide.com
cryopal.com
www.cryopal.com
www.cryopal.com
www.cryopal.com
www.cryopal.com
www.cryopal.com
www.cryopal.com
www.airliquide.com
www.cryopal.com
www.airliquide.com
www.airliquide.com
cryopal.com
www.cryopal.com
www.cryopal.com
www.cryopal.com
www.cryopal.com
www.cryopal.com
www.airliquide.com
www.cryopal.com
www.cryopal.com
www.cryopal.com
www.airliquide.com
www.airliquide.com
www.cryolor.com
www.airliquide.com
www.cryopal.com
www.cryopal.com
www.airliquide.com
www.cryopal.com
www.cryolor.com
www.cryopal.com
www.cryopal.com
www.cryopal.com
www.airliquide.com
www.cryopal.com
www.airliquide.com
www.cryopal.com
www.cryopal.com
www.cryopal.com
www.airliquide.com
www.cryopal.com
www.cryopal.com
cryopal.com
www.cryopal.com
www.cryopal.com
www.airliquide.com
www.cryopal.com
www.airliquide.com
www.cryopal.com
www.cryopal.com
www.cryopal.com
www.cryopal.com
cryopal.com
www.cryopal.com
www.cryopal.com
www.cryopal.com
www.airliquide.com
www.cryopal.com
www.cryopal.com
www.cryopal.com
www.cryopal.com
www.airliquide.com
www.cryopal.com
www.cryopal.com

Certificate

The complete raw certificate details for www.cryopal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofUfx41cwIug1a9MHL8J
c5IOTnSIsETy8KHQv1LVW9zhbgW6p33Njjm9wZdKs+8IdkZlW228HqSZtr65Nlv+
/3Sz7LGQE8pvufUBBi4lKGMRA2arTmh+eRQ/VSm8aQ+5U9WHw/iPFNXCirEqfbsX
j29E+Z/WVxyXbpZtwy7ylATV6HWVrdYSB4SDqcbaEXmRIwkCGl5xl21l1cRVr+F5
C2lKhcOoWdNB/HJpU/DvsPtETOHynLLhIa9ObRRoOAz3NcKvugkCyzumqwcmwwUL
5Lk4mrgP4Wf+8Ng2NlrunoX+y3HogoV7T9HG64dKkCzmtS0bH99Ba4TV6iNL2eTx
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 49453047792916697136005035484290163176
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'L'AIR LIQUIDE SA ETUDE EXPLOITATION DES PROCEDES GEORGES CLAUDE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.cryopal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20445242317397083399533029434743738723655334693593396097822511750713611775560957275685123239216972178976640012896281679779392457808028896234011439603759665229575377534688149043727679099179738966516234112434913274614829699934725380652084451595872869937047025302334461331388920214784650543698271659916429592164422029206437224387447986171805902144472709517857681229695725851924530993057547446673311654683003954580232555491467346856288060464649639466078724179808736862252369560966503510426207784533194964081665769902318442017138720742401721730718976998567576721371082614790334737242021060381008206455021920706265377730977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (631 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'industry.airliquide.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'industry.airliquide.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cryolor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecoheatox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'industrie.airliquide-benelux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airliquidehealthcare.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airliquidesante.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'industry.airliquide.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ventamed.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helpwentylacja.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alpes-instruments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthcare.carbagas.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'industrie.carbagas.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'priemysel.airliquide.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cemont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airliquidehealthcare.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'industrie.airliquide.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'industry.airliquide.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vitalaire.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vitalaire.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'industri.airliquide.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'energies.airliquide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advancedtech.airliquide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airliquidehealthcare.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gasoxmed.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryopal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cryopal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0087a850016219ef1b0582327bb3b4a046a971ad1bc5680abde731746daf6cfdedee7a85be0db1b8867c5f39a2fb958b6e1a94bc996b0e9821163f72471405ea06a8618113f4e11315df14782776b7dfefe4079331b59217f14d055725b042628b11dc253883f8a7fdb6a63f54f11e62c615c33aa7708f9b49d505e12c4317abdb2bb60914501f86f2bf8a7db3f24516a37483678522226f813c9d899af51cda4cfc98206118a6a34e7ccc4a242780610c7f47099ec58c281e5ea6428d6b1c5b157097fd9a9f84e15b7231c00235e0fd35af2cb167024fc16bb4b2aea74e32825581a98a912fae8f6f99dfb4db036fac1437c3f0e8938cec177ac46312a04bb57c