*.maersk.net
- A.P. Moller - Maersk A/S -
Issued by Symantec Class 3 Secure Server CA - G4
About this certificate
This digital certificate with serial number 6b:8c:50:e5:e2:4d:4c:0b:ab:a2:e0:2b:59:08:c8:2b was issued on by Symantec Corporation.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
A.P. Moller - Maersk A/S
Organization:
A.P. Moller - Maersk A/S
Organization unit: Corporate IT
Organization unit: Corporate IT
State / Province:
DENMARK
Locality: KøBENHAVN K
Country: DK
Locality: KøBENHAVN K
Country: DK
Symantec Corporation
Organization:
Symantec Corporation
Organization unit: Symantec Trust Network
Organization unit: Symantec Trust Network
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 6b:8c:50:e5:e2:4d:4c:0b:ab:a2:e0:2b:59:08:c8:2bSerial Number (int): 142955957915235440791737738523344160811
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef
Fingerprint (sha1): 10:a1:23:45:df:1b:15:51:2d:34:8b:aa:a9:23:0e:37:9e:96:df:15
Fingerprint (sha256): be:d8:48:da:36:55:cb:c8:d4:a2:d0:5d:6b:6b:83:22:cb:55:54:e1:c5:9f:ea:bf:fb:0e:fc:4c:8b:00:e5:dc
Issuing Certificate URL: http://ss.symcb.com/ss.crt
Revocation information
OCSP Server: http://ss.symcd.comCRL Distribution Point: http://ss.symcb.com/ss.crl
Check the revocation status for certificate *.maersk.net
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.maersk.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.maersk.net
maersk.net
maersk.net
Other certificates including the domain name maersk.net
(limited to 100 certificates)
webmail.maersk.net
webmail.maersk.net
webmail.maersk.net
stage.maersk.com
ccasp.maersk.net
stage.maersk.com
sts1.maersk.net
apm-mail.maersk.net
stage.maersk.com
ccasp.maersk.net
stage.maersk.com
pprod-ccasp.maersk.net
*.maersk.net
stage.maersk.com
*.maersk.net
pprod-ccasp.maersk.net
stage.maersk.com
webmail.maersk.net
webmail.maersk.net
stage.maersk.com
stage.maersk.com
test-ccasp.maersk.net
stage.maersk.com
stage.maersk.com
stage.maersk.com
webmail.maersk.net
webmail.maersk.net
api.ao.maersk.com
api.ao.maersk.com
webmail.maersk.net
webmail.maersk.net
webmail.maersk.net
stage.maersk.com
sts1.maersk.net
stage.maersk.com
apm-mail.maersk.net
*.maersk.net
stage.maersk.com
stage.maersk.com
stage.maersk.com
webmail.maersk.net
webmail.maersk.net
stage.maersk.com
webmail.maersk.net
webmail.maersk.net
sts1.maersk.net
stage.maersk.com
api.ao.maersk.com
api.ao.maersk.com
apm-mail.maersk.net
webmail.maersk.net
stage.maersk.com
stage.maersk.com
api.ao.maersk.com
webmail.maersk.net
webmail.maersk.net
stage.maersk.com
ccasp.maersk.net
stage.maersk.com
sts1.maersk.net
apm-mail.maersk.net
stage.maersk.com
ccasp.maersk.net
stage.maersk.com
pprod-ccasp.maersk.net
*.maersk.net
stage.maersk.com
*.maersk.net
pprod-ccasp.maersk.net
stage.maersk.com
webmail.maersk.net
webmail.maersk.net
stage.maersk.com
stage.maersk.com
test-ccasp.maersk.net
stage.maersk.com
stage.maersk.com
stage.maersk.com
webmail.maersk.net
webmail.maersk.net
api.ao.maersk.com
api.ao.maersk.com
webmail.maersk.net
webmail.maersk.net
webmail.maersk.net
stage.maersk.com
sts1.maersk.net
stage.maersk.com
apm-mail.maersk.net
*.maersk.net
stage.maersk.com
stage.maersk.com
stage.maersk.com
webmail.maersk.net
webmail.maersk.net
stage.maersk.com
webmail.maersk.net
webmail.maersk.net
sts1.maersk.net
stage.maersk.com
api.ao.maersk.com
api.ao.maersk.com
apm-mail.maersk.net
webmail.maersk.net
stage.maersk.com
stage.maersk.com
api.ao.maersk.com
Certificate
The complete raw certificate details for *.maersk.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIQa4xQ5eJNTAurouArWQjIKzANBgkqhkiG9w0BAQsFADB+ MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAd BgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxLzAtBgNVBAMTJlN5bWFudGVj IENsYXNzIDMgU2VjdXJlIFNlcnZlciBDQSAtIEc0MB4XDTE1MDQyMzAwMDAwMFoX DTE4MDQyMjIzNTk1OVowgYcxCzAJBgNVBAYTAkRLMRAwDgYDVQQIDAdERU5NQVJL MRUwEwYDVQQHDAxLw7hCRU5IQVZOIEsxITAfBgNVBAoUGEEuUC4gTW9sbGVyIC0g TWFlcnNrIEEvUzEVMBMGA1UECwwMQ29ycG9yYXRlIElUMRUwEwYDVQQDFAwqLm1h ZXJzay5uZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6ouDsD1j/ Kb/fNGegvYX2RBqqrxrYoIYVUGfj+KXZGrrSu0Rqlg4ecFtqD3uwfNXPC3RZ08/+ wW0VUzUnVm2J79PubihIUGsYVBPiB8OnHwGTTNz+7bzwJX9h1NW50amecL0GIdBu Cl4AYSXijS6mKWuHsZWj8BP94Qs16v4loBabNBcorO1hMVjkd2qW9jO+ZwUerJI9 H/HQiQPunymP6q3mMW8+ew1kEbrZDHoRHm8+kPFqWyK4HzCg934p5bgqQBlXzDAi WypUCqV6J88ffMJrnFLp6z7t6ZRdi++e/jfC6iecUTf3Vuw+zGM2Yb8LR6GSc9ff zAY92UBqE/39AgMBAAGjggFtMIIBaTAjBgNVHREEHDAaggwqLm1hZXJzay5uZXSC Cm1hZXJzay5uZXQwCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwKwYDVR0fBCQw IjAgoB6gHIYaaHR0cDovL3NzLnN5bWNiLmNvbS9zcy5jcmwwYQYDVR0gBFowWDBW BgZngQwBAgIwTDAjBggrBgEFBQcCARYXaHR0cHM6Ly9kLnN5bWNiLmNvbS9jcHMw JQYIKwYBBQUHAgIwGQwXaHR0cHM6Ly9kLnN5bWNiLmNvbS9ycGEwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFF9gz2GQVd+EQxSKYCqy 9Xr0QxjvMFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDovL3NzLnN5 bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL3NzLnN5bWNiLmNvbS9zcy5jcnQw DQYJKoZIhvcNAQELBQADggEBABoW1kCcSPI/6qEAhIikZp1PgV9dtSyUjFng1ri1 Ioi7/NjHkKBqLIq3OxMfuLG0CBym0GOyNQTQfTCxcRvQg+uxV10n9pNivxAoe2Bg gtOfTfMuwRZL8CHZfrF2jBiOgoIvo+QOszhUF3oTUjzSKEAdC9sZatlvMmsteQMC Dw76GKF2pm0tl3Fa7dt7MFeIaqgCr6orY37ZrGhMNDSTYOoRkT7EAm5NvFPZ5fAE rvWzsSO/LDJu9ZEKxq8kQnUHcn/pYgvipJdg0o8G1Gm2qPCAoxejek5I6fvfnkRL RS27DE/TOlSV90zOCcf6jST+lezWk2P/fUHgznPO+pcQXYE= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqLg7A9Y/ym/3zRnoL2F 9kQaqq8a2KCGFVBn4/il2Rq60rtEapYOHnBbag97sHzVzwt0WdPP/sFtFVM1J1Zt ie/T7m4oSFBrGFQT4gfDpx8Bk0zc/u288CV/YdTVudGpnnC9BiHQbgpeAGEl4o0u pilrh7GVo/AT/eELNer+JaAWmzQXKKztYTFY5HdqlvYzvmcFHqySPR/x0IkD7p8p j+qt5jFvPnsNZBG62Qx6ER5vPpDxalsiuB8woPd+KeW4KkAZV8wwIlsqVAqleifP H3zCa5xS6es+7emUXYvvnv43wuonnFE391bsPsxjNmG/C0ehknPX38wGPdlAahP9 /QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 142955957915235440791737738523344160811 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-23 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-22 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DK' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DENMARK' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KøBENHAVN K' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'A.P. Moller - Maersk A/S' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Corporate IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.maersk.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23560643155836645440485118418548636263225292746379914576329628494822831053611309986851713444560177651563751260497474992072486947106551570419725594451992172369454457059468941134417308056537878257349354364043832251204081981751917089897779075509897119637450030264521477403361685079777181759250496585914975229441809056716367116083862607570197456004205064911593526093785518142548555240818418509452745472229741479969425967464974669947578290993119342199884642975084153033633983674384441611948160665054581375985341937455242177551388803317594493306207221995948412273393336979005269898593568157048480152022333840062299707276797 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maersk.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maersk.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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