beachhead-status.symcpe.com

- Symantec Corporation -

Issued by Symantec Class 3 Extended Validation SHA256 SSL CA

About this certificate

This digital certificate with serial number 39:6a:52:de:52:39:ec:ea:8c:84:00:5a:89:97:72:ab was issued on by Symantec Corporation.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Symantec Corporation

Company registration number: 2158113
Organization: Symantec Corporation
Organization unit: Beachhead
Address: 350 Ellis Street
Postal code: 94043
State / Province: California
Locality: Mountain View
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 39:6a:52:de:52:39:ec:ea:8c:84:00:5a:89:97:72:ab
Serial Number (int): 76318059998432272470020562722026386091
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: b2:6d:e3:e4:14:0f:8c:3c:73:42:a6:5a:99:1a:d3:14:75:b6:86:db

Fingerprint (sha1): 62:71:72:8b:e5:e0:68:f7:aa:92:a2:38:eb:09:45:04:8d:67:23:b4
Fingerprint (sha256): c3:06:dd:8e:39:cc:50:54:2c:56:78:81:5d:3f:fe:9e:ff:5f:c2:90:10:6e:56:74:4c:38:27:a5:41:53:38:9f

Issuing Certificate URL: http://sh.symcb.com/sh.crt

Revocation information

OCSP Server: http://sh.symcd.com
CRL Distribution Point: http://sh.symcb.com/sh.crl

Check the revocation status for certificate beachhead-status.symcpe.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for beachhead-status.symcpe.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

beachhead-status.symcpe.com
status.beachhead.symcpe.com
status.bhcc-prod.beachhead.ash2.symcpe.com
status.bhcc-prod.beachhead.phx2.symcpe.com

Other certificates including the domain name symcpe.com

(limited to 100 certificates)
vault-cpe-dev.engineering.dev.aws.symcpe.com
livelogs.ase.prod.aws.symcpe.com
master01-agdl.ace.prod.aws.symcpe.com
usea1.r3.securitycloud.symantec.com
dnsadmin.symcpe.net
spamcheck.ase.prod.aws.symcpe.com
www-preprod.securitycloud.symcpe.com
staytus.cc.symcpe.com
dnsadmin.symcpe.net
symc-dev-oshift.engineering.dev.aws.symcpe.com
r3.pre-prod-us-east-1.cc.symcpe.com
livelogs.ase.prod.aws.symcpe.com
master01-agdl.ace.prod.aws.symcpe.com
barbican-dev.beachhead.symcpe.com
usea1.r3.securitycloud.symantec.com
ccwebapi.a.gist-cloud.prod.aws.symcpe.com
int-defsegwapi.a.gist-cloud.prod.aws.symcpe.com
ccwebapi.a.gist-cloud.prod.aws.symcpe.com
paste.beachhead.symcpe.com
jenkins.cc.dev.aws.symcpe.com
vault-cpe-dev.engineering.dev.aws.symcpe.com
lfapi.ase.prod.aws.symcpe.com
usea2.r3.securitycloud.symantec.com
master01-agdl.ace.dev.aws.symcpe.com
confluence.symcpe.com
api.integration.cynic.dev.aws.symcpe.com
pad.beachhead.symcpe.com
tls.dev.bh.symcpe.com
r3.cc-prod-1.ash2.symcpe.net
abuse-box.ase.prod.aws.symcpe.com
int-defsegwapi.a.gist-cloud.prod.aws.symcpe.com
master01-agdl.ace.dev.aws.symcpe.com
r3.stage-1-us-east-1.symcc.cloud
master01-agdl.ace.prod.aws.symcpe.com
*.vip.ams2.symcpe.com
dev.confluence.symcpe.com
r3.stage-1-us-east-1.symcc.cloud
vault-cpe-dev.engineering.dev.aws.symcpe.com
int-defsegwapi.a.gist-cloud.prod.aws.symcpe.com
cpe-acp-dev.engineering.dev.aws.symcpe.com
licensing.dev.cynic.dev.aws.symcpe.com
jenkins-dev.cc.symcpe.com
*.apps.cpe-acp-dev.engineering.dev.aws.symcpe.com
scruffy.ops-dev-us-east-1.cc.symcpe.com
usea1.r3.securitycloud.symantec.com
api.integration.cynic.dev.aws.symcpe.com
master01-agdl.ace.prod.aws.symcpe.com
usea1.r3.securitycloud.symantec.com
jenkins.cc.symcpe.com
www.symgauge.ash2.symcpe.com
secret.beachhead.symcpe.com
hue-atppi-devtest.vip.ash2.symcpe.com
licensing.integration.cynic.dev.aws.symcpe.com
staytus.symcc.cloud
sdap.symantec.com
usea1.r3.securitycloud.symantec.com
usea1.r3.securitycloud.symantec.com
stage.symgauge.ash2.symcpe.com
beachhead-status.symcpe.com
*.ash2-infra.paas.symcpe.com
sdap.symantec.com
int-defsegwapi.a.gist-cloud.prod.aws.symcpe.com
abuse-box.ase.prod.aws.symcpe.com
jenkins.cc.dev.aws.symcpe.com
master01-agdl.ace.dev.aws.symcpe.com
spamcheck.ase.prod.aws.symcpe.com
api.integration.cynic.dev.aws.symcpe.com
dnsadmin.symcpe.net
apps.acp.ash2.symcpe.com
api.integration.cynic.dev.aws.symcpe.com
scruffy-dev.cc.symcpe.com
int-defsegwapi.a.gist-cloud.prod.aws.symcpe.com
oasis-data-feed.aws.symsaas.net
staytus.cc.symcpe.com
usea1.r3.securitycloud.symantec.com
oasis-data-feed.aws.symsaas.net
usea1.r3.securitycloud.symantec.com

Certificate

The complete raw certificate details for beachhead-status.symcpe.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1o7EGCnx63qFy6UfhNZ
+8sbB0BGM/l3jjtKB119Npt8PtcLaxT0cU0rBbjql59cFHrXdBboQH1qoT1pXnAD
O/IHu6C+Ty7xIS9IfE90p7ASoRvNeB2v7FifD/I3f+vbOm9nJQw2X2+1Ll+Fk5Fd
1P6OtTVs87rCeQK+LhOCFylsLAIdG37Odf87oE/KX0XrIeP6dygorgpP+0k7tqdM
hfCQ7KoXz7gGhTq8L1jnGZOwAJ4Gm8ILE+2uNFdaOxG+ONCRp++brAiVqaEEJSi+
OU9f/GOXmHwh1ko35Fgsn4p+kUrHhtqf10FKq4GFYvyJqWve9yclqFzaOAQxLti7
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 76318059998432272470020562722026386091
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Extended Validation SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2158113'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '94043'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Mountain View'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '350 Ellis Street'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Beachhead'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'beachhead-status.symcpe.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25165917113942792335266836394116105115957468429564904944073605729418428742786919151657705296909692355128630793103373344663130563978344324199705541388713293492823848214757325388484153932539297786526899180500132272274949430800845548197747956553430939062991683821179364420718714842869177732085032236849804179485938317657011054049101459986234043078334164121954126764994558411852952594021333795181751432567119424785893349450356165153586287159587446517787590879914805182416651831002628986439507924527783176941961092236263239549998646156330520027020105313028421336499536101706845162359225571371726152977180805484139177884531
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beachhead-status.symcpe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.beachhead.symcpe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.bhcc-prod.beachhead.ash2.symcpe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.bhcc-prod.beachhead.phx2.symcpe.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.23.6 (VeriSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b26de3e4140f8c3c7342a65a991ad31475b686db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sh.symcb.com/sh.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sh.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sh.symcb.com/sh.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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