www.govdelivery.com

- GovDelivery -

Issued by Symantec Class 3 Secure Server SHA256 SSL CA

About this certificate

This digital certificate with serial number 74:5c:3a:a1:00:6e:62:82:9a:50:a4:f1:b1:29:99:24 was issued on by Symantec Corporation.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

GovDelivery

Organization: GovDelivery
Organization unit: Technical Operations
State / Province: Minnesota
Locality: Saint Paul
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 74:5c:3a:a1:00:6e:62:82:9a:50:a4:f1:b1:29:99:24
Serial Number (int): 154669327957660069033378595010593265956
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: db:62:20:fb:7d:02:89:7c:d2:3b:6f:c7:e4:32:6c:05:52:1d:ad:b1

Fingerprint (sha1): e4:ea:2f:c5:bc:08:0c:5b:d8:ee:45:00:90:51:59:77:2a:3c:6a:54
Fingerprint (sha256): b9:59:26:a6:d1:dd:6c:5b:18:60:cf:cd:b5:e4:d2:0e:f2:58:35:ee:5c:dc:d6:4e:f7:a0:9a:48:0c:da:e3:4f

Issuing Certificate URL: http://sg.symcb.com/sg.crt

Revocation information

OCSP Server: http://sg.symcd.com
CRL Distribution Point: http://sg.symcb.com/sg.crl

Check the revocation status for certificate www.govdelivery.com

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.govdelivery.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev.govdelivery.co.uk
dev.govdelivery.com
dev.govdelivery.eu
govdelivery.co.uk
govdelivery.com
govdelivery.eu
granicus.com
test.govdelivery.co.uk
test.govdelivery.com
test.govdelivery.eu
uk.govdelivery.com
uk.granicus.com
www.govdelivery.co.uk
www.govdelivery.eu
www.granicus.com
www.govdelivery.com

Other certificates including the domain name govdelivery.com

(limited to 100 certificates)
carpepm.almonds.com
it.uahs.arizona.edu
statuspage.io
subscriberhelp.govdelivery.com
nartc.fcm.arizona.edu
calendar.sdzsafaripark.org
3fadmin.govdelivery.com
statuspage.io
streetfilms.org
5715161717407744-fe2.pantheonsite.io
banking-business-review.com
cdn-test.battlefields.org
5742636757417984-fe1.pantheonsite.io
5638203017003008-fe2.pantheonsite.io
eu1-status.mulesoft.com
chns120.courseresource.yale.edu
5715161717407744-fe2.pantheonsite.io
208.lsnc.net
banking-business-review.com
5649952705347584-fe1.pantheonsite.io
govde-cm01.govdelivery.com
hub.meed.com
208.lsnc.net
yakamafish-star.net
eu1-status.mulesoft.com
dev.wellness.yale.edu
info-dev.calperformances.org
5699714196439040-fe2.pantheonsite.io
streetfilms.org
good.gsm.cornell.edu
5645056174194688-fe3.pantheonsite.io
nistmep.blogs.govdelivery.com
5718016125829120-fe1.pantheonsite.io
dev.embody.yale.edu
govdelivery.co.uk
expeditions.sandiegozoo.org
eu1-status.mulesoft.com
club.kjzz.org
statuspage.io
5729201025974272-fe1.pantheonsite.io
dev.wellness.yale.edu
statuspage.io
statuspage.io
academi.ufc.com
5645056174194688-fe3.pantheonsite.io
host2.openminds.com
local3599.com
5715161717407744-fe2.pantheonsite.io
communityadvancementfirm.com
208.lsnc.net
api.govdelivery.com
5718016125829120-fe1.pantheonsite.io
5699714196439040-fe2.pantheonsite.io
5742636757417984-fe1.pantheonsite.io
5649952705347584-fe1.pantheonsite.io
208.lsnc.net
statuspage.io
*.govdelivery.com
5729201025974272-fe1.pantheonsite.io
vpn-prod.granicus.com
5742636757417984-fe1.pantheonsite.io
5718016125829120-fe1.pantheonsite.io
alumnimail.albion.edu
5645056174194688-fe3.pantheonsite.io
5638203017003008-fe2.pantheonsite.io
*.blogs.govdelivery.com
2fadmin.govdelivery.com
corporatestatus.tyro.com
5638203017003008-fe2.pantheonsite.io
status.govdelivery.com
5699714196439040-fe2.pantheonsite.io
5729201025974272-fe1.pantheonsite.io
about.govdelivery.com
5638203017003008-fe2.pantheonsite.io
banking-business-review.com
inside.gc.cuny.edu
5659118702428160-fe2.pantheonsite.io
5645056174194688-fe3.pantheonsite.io
5645056174194688-fe3.pantheonsite.io
5699714196439040-fe2.pantheonsite.io
nartc.fcm.arizona.edu
eu1-status.mulesoft.com
content.govdelivery.com
statuspage.io
connect.iadb.org
abong.ufcespanol.com
origin-content.govdelivery.com
5715161717407744-fe2.pantheonsite.io
5729201025974272-fe1.pantheonsite.io
statuspage.io
5746664899870720-fe3.pantheonsite.io
statuspage.io
5715161717407744-fe2.pantheonsite.io
eu1-status.mulesoft.com
statuspage.io
5649952705347584-fe1.pantheonsite.io
5729201025974272-fe1.pantheonsite.io
acadmintest.cuofco.org
5718016125829120-fe1.pantheonsite.io
5742636757417984-fe1.pantheonsite.io

Certificate

The complete raw certificate details for www.govdelivery.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHODCCBiCgAwIBAgIQdFw6oQBuYoKaUKTxsSmZJDANBgkqhkiG9w0BAQsFADCB
hDELMAkGA1UEBhMCVVMxHTAbBgNVBAoTFFN5bWFudGVjIENvcnBvcmF0aW9uMR8w
HQYDVQQLExZTeW1hbnRlYyBUcnVzdCBOZXR3b3JrMTUwMwYDVQQDEyxTeW1hbnRl
YyBDbGFzcyAzIFNlY3VyZSBTZXJ2ZXIgU0hBMjU2IFNTTCBDQTAeFw0xNzAzMTAw
MDAwMDBaFw0xODAyMDYyMzU5NTlaMIGJMQswCQYDVQQGEwJVUzESMBAGA1UECAwJ
TWlubmVzb3RhMRMwEQYDVQQHDApTYWludCBQYXVsMRQwEgYDVQQKDAtHb3ZEZWxp
dmVyeTEdMBsGA1UECwwUVGVjaG5pY2FsIE9wZXJhdGlvbnMxHDAaBgNVBAMME3d3
dy5nb3ZkZWxpdmVyeS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDF+wmQCwpcIR+bb682AMRLJYKOgU8xoYXG8xVNaxcDZFbdQeoQswO9Q+UD6okr
ssaA2ZPJclEarkcJsONSDCePCGUm4/1j93bjjHxfAFYga8TQECOwAefatlheeEwE
ya/IVPTs0r27e5+e9fq8hEdUb1ChC9dnUTDszJH1Gnvm+d+B86z2qlc5vnTZcTbj
W8IGIjsIv3942y5fl/FOAp1Lwn3JYD4+CA18NG7UYyCQlZQ90S06vy8m6f1sfna1
KlToYZr8Ht/D5zskGj/DnBK9ZHS3hGuePtO3tdZ6G0gOobcNBZxASWkj5cKpoPGD
xJpKuzIcdzKMbAUawUlVpzOdAgMBAAGjggOdMIIDmTCCAUkGA1UdEQSCAUAwggE8
ghVkZXYuZ292ZGVsaXZlcnkuY28udWuCE2Rldi5nb3ZkZWxpdmVyeS5jb22CEmRl
di5nb3ZkZWxpdmVyeS5ldYIRZ292ZGVsaXZlcnkuY28udWuCD2dvdmRlbGl2ZXJ5
LmNvbYIOZ292ZGVsaXZlcnkuZXWCDGdyYW5pY3VzLmNvbYIWdGVzdC5nb3ZkZWxp
dmVyeS5jby51a4IUdGVzdC5nb3ZkZWxpdmVyeS5jb22CE3Rlc3QuZ292ZGVsaXZl
cnkuZXWCEnVrLmdvdmRlbGl2ZXJ5LmNvbYIPdWsuZ3JhbmljdXMuY29tghV3d3cu
Z292ZGVsaXZlcnkuY28udWuCEnd3dy5nb3ZkZWxpdmVyeS5ldYIQd3d3LmdyYW5p
Y3VzLmNvbYITd3d3LmdvdmRlbGl2ZXJ5LmNvbTAJBgNVHRMEAjAAMA4GA1UdDwEB
/wQEAwIFoDArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8vc2cuc3ltY2IuY29tL3Nn
LmNybDBhBgNVHSAEWjBYMFYGBmeBDAECAjBMMCMGCCsGAQUFBwIBFhdodHRwczov
L2Quc3ltY2IuY29tL2NwczAlBggrBgEFBQcCAjAZDBdodHRwczovL2Quc3ltY2Iu
Y29tL3JwYTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHwYDVR0jBBgw
FoAU22Ig+30CiXzSO2/H5DJsBVIdrbEwVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUF
BzABhhNodHRwOi8vc2cuc3ltY2QuY29tMCYGCCsGAQUFBzAChhpodHRwOi8vc2cu
c3ltY2IuY29tL3NnLmNydDCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB3AN3rHSt6
DU+mIIuBrYFocH4ujp0B1VyIjT0RxM227L7MAAABWrp8c8UAAAQDAEgwRgIhAOn+
uTEFRSYht4A9LpNsoe7ThhUHOiw7/ezdDfaaKgPtAiEAjpPD+JYq5Tfg+y5OCDld
hRVwk0sEpxpRUsaWptj290gAdQCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80O
yA3cEAAAAVq6fHQCAAAEAwBGMEQCICxsSaFo7B9e3dBZk0W2dh7fNhraJkPuKL8O
s8QpUnP1AiB9Rb94v9SbIN7RIWI/4htMPsbC7XlnS22BK3GbfNdn8zANBgkqhkiG
9w0BAQsFAAOCAQEAjmQu81J+hOQ8ScjHwJGJAChOhNvmaDIRhe+/tvFd/Go1Vncm
SkKGCpglZTMScDIfGSCS9WwjInvSXAYf3gRm1q0UbweHQwtHuCLmyGy6Iu5+7vih
udXuG+w2ye2Tdhoh8b5TFP6ESAJeise6vpjuqFN19R9BIlDXA8Z378b6LiOY3hwG
5Hu4Yigy3h5xkeSDt/0rBeSKpy6+4WP+oCTUJutSbJR0XXTOs45J31BwKyfpX8/N
CDCC838SfhLzFKvL69Bed2wFwq2vrwRBrfKisBzQ97dEO+l5SHQ71qmoF8z7jyvo
BrHgDUV7a1urQgh/PFWqymX+CZGmKSfuLbd5Pg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfsJkAsKXCEfm2+vNgDE
SyWCjoFPMaGFxvMVTWsXA2RW3UHqELMDvUPlA+qJK7LGgNmTyXJRGq5HCbDjUgwn
jwhlJuP9Y/d244x8XwBWIGvE0BAjsAHn2rZYXnhMBMmvyFT07NK9u3ufnvX6vIRH
VG9QoQvXZ1Ew7MyR9Rp75vnfgfOs9qpXOb502XE241vCBiI7CL9/eNsuX5fxTgKd
S8J9yWA+PggNfDRu1GMgkJWUPdEtOr8vJun9bH52tSpU6GGa/B7fw+c7JBo/w5wS
vWR0t4Rrnj7Tt7XWehtIDqG3DQWcQElpI+XCqaDxg8SaSrsyHHcyjGwFGsFJVacz
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 154669327957660069033378595010593265956
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Saint Paul'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'GovDelivery'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Technical Operations'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.govdelivery.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24992737211415308426960819583144386488861058931345306022450030178761634223577610291431559439020939785203970748887220723223513940058321251740579677733564401365957363560447559799250374835437111924916206481350261237935536310559582217920420845141124830635349936332918375216662145362688985026001760936863594960104616762540320029960502801342673348017082309972756999522604957085676910433327273879354589990747157378113417923319228848459934308692875740895769746366079557960082025624598634479657493589337462674995956264334364026992352174395429396062587356379310910565533086970212968539185014328575294490920834803400826719515549
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (320 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.govdelivery.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.govdelivery.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'govdelivery.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'govdelivery.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'granicus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.govdelivery.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.govdelivery.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.granicus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.govdelivery.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.govdelivery.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.granicus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.govdelivery.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcb.com/sg.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName db6220fb7d02897cd23b6fc7e4326c05521dadb1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcb.com/sg.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015aba7c73c50000040300483046022100e9feb93105452621b7803d2e936ca1eed38615073a2c3bfdecdd0df69a2a03ed0221008e93c3f8962ae537e0fb2e4e08395d851570934b04a71a5152c696a6d8f6f748007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015aba7c7402000004030046304402202c6c49a168ec1f5eddd0599345b6761edf361ada2643ee28bf0eb3c4295273f502207d45bf78bfd49b20ded121623fe21b4c3ec6c2ed79674b6d812b719b7cd767f3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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