i10-lync-ds.namdev.nsrootdev.net
- Citigroup Inc. -
Issued by Symantec Class 3 EV SSL SGC CA - G2
About this certificate
This digital certificate with serial number 12:19:7d:01:6f:12:c2:83:74:37:e8:df:a7:5b:66:a4 was issued on by Symantec Corporation.
With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
- Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)
Citigroup Inc.
Organization: Citigroup Inc.
Organization unit: CATE
Postal code: 10043
State / Province: New York
Locality: New York
Country: US
Symantec Corporation
Organization unit: Symantec Trust Network
This certificate has expire since
Certificate Details
Serial Number (hex): 12:19:7d:01:6f:12:c2:83:74:37:e8:df:a7:5b:66:a4Serial Number (int): 24058446760395990694967054893351397028
Serial Number lenght: 125 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 46:4f:c1:e0:88:da:7d:d3:78:9b:c8:6e:59:2f:b0:e4:f7:1d:90:e2
Fingerprint (sha1): cb:d7:8e:17:e5:0d:cb:ba:11:dc:91:b6:ce:35:61:4c:4e:cc:a2:16
Fingerprint (sha256): c5:67:37:f9:51:22:78:d5:0f:f5:b7:c8:10:26:0b:80:c6:ad:d4:7e:8c:33:63:ea:38:fc:2f:d5:84:95:3a:5b
Issuing Certificate URL: http://su.symcb.com/su.crt
Revocation information
OCSP Server: http://su.symcd.comCRL Distribution Point: http://su.symcb.com/su.crl
Check the revocation status for certificate i10-lync-ds.namdev.nsrootdev.net
15
0
0
Advanced Certificate Properties
Tehnical certificate details for i10-lync-ds.namdev.nsrootdev.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Netscape Server-Gated Cryptography
Microsoft Server-Gated Cryptography
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
sip2.emea.mycititest.com
lyncdiscover2.emea.mycititest.com
sipinternal2.emea.mycititest.com
lyncdiscoverinternal2.emea.mycititest.com
dialin2.emea.mycititest.com
meet2.emea.mycititest.com
i10-lync-ds.namdev.nsrootdev.net
dialin.citi.com
dialin.mycititest.com
admin.namdev.nsrootdev.net
meet.citi.com
meet.mycititest.com
meet.emea.mycititest.com
conference.mycititest.com
Other certificates including the domain name nsrootdev.net
(limited to 100 certificates)
autodiscover.nsrootdev.net
lync13poolnamdev1.namdev.nsrootdev.net
ICL-LYNC13-LPC1.namdev.nsrootdev.net
icl-imexpt-vm01.namdev.nsrootdev.net
vm-unam1-cipp01.namdev.nsrootdev.net
i10-cic-vm03.namdev.nsrootdev.net
autodiscover.nsrootdev.net
lync13poolnamdev3.namdev.nsrootdev.net
Poolnamdev2.namdev.nsrootdev.net
Poolnamdev2.namdev.nsrootdev.net
ICL-LYNC13-LD2.namdev.nsrootdev.net
Poolnamdev1.namdev.nsrootdev.net
vm-unam1-cipp01.namdev.nsrootdev.net
I10-LYNC-VM06.namdev.nsrootdev.net
AutoDiscover.nsrootdev.net
lync13poolnamdev1.namdev.nsrootdev.net
cups864-1.nsrootdev.net
pocsbc.nsrootdev.net
cups864-1.nsrootdev.net
ICL-LYNC13-LD1.namdev.nsrootdev.net
Poolnamdev1.namdev.nsrootdev.net
lync13poolnamdev4.namdev.nsrootdev.net
pocsbc.nsrootdev.net
pocsbc.nsrootdev.net
lyncgwcluster02.namdev.nsrootdev.net
vm-ubplab14-cipp01.nsrootdev.net
icl-emmrfi-vm01.namdev.nsrootdev.net
edgepoolbudapest.namdev.nsrootdev.net
i10-lync-ds.namdev.nsrootdev.net
vm-ubplab14-cipp01.nsrootdev.net
war-aes-lync.namdev.nsrootdev.net
autodiscover.nsrootdev.net
webrtcsbc.namdev.nsrootdev.net
pocsbc.nsrootdev.net
autodiscover.nsrootdev.net
lync13poolnamdev1.namdev.nsrootdev.net
icl-imexp-vm01.namdev.nsrootdev.net
lync13poolnamdev2.namdev.nsrootdev.net
Poolnamdev2.namdev.nsrootdev.net
autodiscover.nsrootdev.net
AutoDiscover.nsrootdev.net
i10-lync-ds.namdev.nsrootdev.net
i10-lync-ds.namdev.nsrootdev.net
lync13poolnamdev1.namdev.nsrootdev.net
pocsbc.nsrootdev.net
Poolnamdev2.namdev.nsrootdev.net
pocsbc.nsrootdev.net
Certificate
The complete raw certificate details for i10-lync-ds.namdev.nsrootdev.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHPjCCBiagAwIBAgIQEhl9AW8SwoN0N+jfp1tmpDANBgkqhkiG9w0BAQUFADB7 MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAd BgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxLDAqBgNVBAMTI1N5bWFudGVj IENsYXNzIDMgRVYgU1NMIFNHQyBDQSAtIEcyMB4XDTE1MDgyMTAwMDAwMFoXDTE2 MDgyMTIzNTk1OVowggERMRMwEQYLKwYBBAGCNzwCAQMTAlVTMRkwFwYLKwYBBAGC NzwCAQITCERlbGF3YXJlMR0wGwYDVQQPExRQcml2YXRlIE9yZ2FuaXphdGlvbjEQ MA4GA1UEBRMHMjE1NDI1NDELMAkGA1UEBhMCVVMxDjAMBgNVBBEUBTEwMDQzMREw DwYDVQQIEwhOZXcgWW9yazERMA8GA1UEBxQITmV3IFlvcmsxGDAWBgNVBAkUDzM5 OSBQYXJrIEF2ZW51ZTEXMBUGA1UEChQOQ2l0aWdyb3VwIEluYy4xDTALBgNVBAsU BENBVEUxKTAnBgNVBAMUIGkxMC1seW5jLWRzLm5hbWRldi5uc3Jvb3RkZXYubmV0 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsTOHpvtv8cuR285mVFM Vi90a0r1c+UFuFbs9q5ywwSSr/SNgDRVwd00Pm3O/ORQ4cDyxGXmhspwa117+si/ CSLFRF2OqOnnryp43UUM8DpFxLgWXX8ilD8yFi1sxRUu9KNfTvjn1udHANCN6rYx i0E4MC/QBBVPuKZS92ViRQbr06t/49Y1248FB7ne13ICTR+pmEe5ZTJ3wzZ7xa2c CUjrCl4b1Gxg0iGILrMRCmKbvVksF59zRfYBTNu/8Wkwz9c10k/KJaPBWdtZkYr8 A7NJY+eK8hCQUm2B3kqDGYS/msBn1A03h7ngbvlPVsgPAFIde1Do4W3LVAEeJv1h NwIDAQABo4IDJDCCAyAwggGnBgNVHREEggGeMIIBmoIXc2lwLmVtZWEubXljaXRp dGVzdC5jb22CGHNpcDIuZW1lYS5teWNpdGl0ZXN0LmNvbYIhbHluY2Rpc2NvdmVy Mi5lbWVhLm15Y2l0aXRlc3QuY29tgiBzaXBpbnRlcm5hbDIuZW1lYS5teWNpdGl0 ZXN0LmNvbYIpbHluY2Rpc2NvdmVyaW50ZXJuYWwyLmVtZWEubXljaXRpdGVzdC5j b22CG2RpYWxpbjIuZW1lYS5teWNpdGl0ZXN0LmNvbYIZbWVldDIuZW1lYS5teWNp dGl0ZXN0LmNvbYIgaTEwLWx5bmMtZHMubmFtZGV2Lm5zcm9vdGRldi5uZXSCD2Rp YWxpbi5jaXRpLmNvbYIVZGlhbGluLm15Y2l0aXRlc3QuY29tghphZG1pbi5uYW1k ZXYubnNyb290ZGV2Lm5ldIINbWVldC5jaXRpLmNvbYITbWVldC5teWNpdGl0ZXN0 LmNvbYIYbWVldC5lbWVhLm15Y2l0aXRlc3QuY29tghljb25mZXJlbmNlLm15Y2l0 aXRlc3QuY29tMAkGA1UdEwQCMAAwDgYDVR0PAQH/BAQDAgWgMDQGA1UdJQQtMCsG CCsGAQUFBwMBBggrBgEFBQcDAgYJYIZIAYb4QgQBBgorBgEEAYI3CgMDMGYGA1Ud IARfMF0wWwYLYIZIAYb4RQEHFwYwTDAjBggrBgEFBQcCARYXaHR0cHM6Ly9kLnN5 bWNiLmNvbS9jcHMwJQYIKwYBBQUHAgIwGRoXaHR0cHM6Ly9kLnN5bWNiLmNvbS9y cGEwHwYDVR0jBBgwFoAURk/B4IjafdN4m8huWS+w5PcdkOIwKwYDVR0fBCQwIjAg oB6gHIYaaHR0cDovL3N1LnN5bWNiLmNvbS9zdS5jcmwwVwYIKwYBBQUHAQEESzBJ MB8GCCsGAQUFBzABhhNodHRwOi8vc3Uuc3ltY2QuY29tMCYGCCsGAQUFBzAChhpo dHRwOi8vc3Uuc3ltY2IuY29tL3N1LmNydDATBgorBgEEAdZ5AgQDAQH/BAIFADAN BgkqhkiG9w0BAQUFAAOCAQEAKtfa5piCHvH74cXceT0e2QBtwVfSP/wMUaG1AUym WxY4rGIY+A5LItmIpHgjWN+/Yuwp504GL2vYtBjyNcdH8a9Shvv9XChmk5nchAvo gYEVLX6cuOsT97HoViNTeDjJpJfW/rO7wwgTNpg328WaoehT/NJWOKsRjGVkkoJS 1o3LUTLxZ2FLtAOaCIvjdn05UZvp5GRGAI/AF58u5CLSHcgYTxdMOszpwxZza4kp s0zCozFF5eXo9/mrUDfKTrZ6XGMWCNdKOiGReLX3FrjmCB3mAUpW1rI77oj8vEkr o1MnTZjOsuve3oZSARVUneR6Ar1dGpRnEXb9LLjqY2T3+A== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsTOHpvtv8cuR285mVFM Vi90a0r1c+UFuFbs9q5ywwSSr/SNgDRVwd00Pm3O/ORQ4cDyxGXmhspwa117+si/ CSLFRF2OqOnnryp43UUM8DpFxLgWXX8ilD8yFi1sxRUu9KNfTvjn1udHANCN6rYx i0E4MC/QBBVPuKZS92ViRQbr06t/49Y1248FB7ne13ICTR+pmEe5ZTJ3wzZ7xa2c CUjrCl4b1Gxg0iGILrMRCmKbvVksF59zRfYBTNu/8Wkwz9c10k/KJaPBWdtZkYr8 A7NJY+eK8hCQUm2B3kqDGYS/msBn1A03h7ngbvlPVsgPAFIde1Do4W3LVAEeJv1h NwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 24058446760395990694967054893351397028 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 EV SSL SGC CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-08-21 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-21 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2154254' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '10043' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '399 Park Avenue' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Citigroup Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'CATE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'i10-lync-ds.namdev.nsrootdev.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22062513302844017385202122875234801656650448961637950299199974646942866250848877950308987565221696960579174488029929400846726302330606593682288013781334695111625109748619657602223895394914553533382576639216854273673635800329158290152228932195231879971297596782892355972548306525038797979633948484216069627981217584427964646083158592633946557546533880453651345789867776424351410944965999315756037342276110118207682193429387132306804705287651634727304320996742427597994742535536455554672594926042203284914487502121797122848332098252131399981541145430057085268938309846093081422883617366111999796881803297170682359406903 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (414 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.emea.mycititest.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip2.emea.mycititest.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover2.emea.mycititest.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipinternal2.emea.mycititest.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal2.emea.mycititest.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin2.emea.mycititest.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet2.emea.mycititest.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i10-lync-ds.namdev.nsrootdev.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.citi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.mycititest.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.namdev.nsrootdev.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.citi.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.mycititest.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.emea.mycititest.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conference.mycititest.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.4.1 (serverGatedCrypto) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.3 (serverGatedCrypto) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (95 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.23.6 (VeriSign EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [104 116 116 112 115 58 47 47 100 46 115 121 109 99 98 46 99 111 109 47 114 112 97] . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 464fc1e088da7dd3789bc86e592fb0e4f71d90e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://su.symcb.com/su.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://su.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://su.symcb.com/su.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 002ad7dae698821ef1fbe1c5dc793d1ed9006dc157d23ffc0c51a1b5014ca65b1638ac6218f80e4b22d988a4782358dfbf62ec29e74e062f6bd8b418f235c747f1af5286fbfd5c28669399dc840be88181152d7e9cb8eb13f7b1e85623537838c9a497d6feb3bbc30813369837dbc59aa1e853fcd25638ab118c6564928252d68dcb5132f167614bb4039a088be3767d39519be9e46446008fc0179f2ee422d21dc8184f174c3acce9c316736b8929b34cc2a33145e5e5e8f7f9ab5037ca4eb67a5c631608d74a3a219178b5f716b8e6081de6014a56d6b23bee88fcbc492ba353274d98ceb2ebdede86520115549de47a02bd5d1a94671176fd2cb8ea6364f7f8