  d= 0, l=1779: SEQUENCE
  d= 1, l=1499:  SEQUENCE
  d= 2, l=   3:   cons [0] context
  d= 3, l=   1:    INTEGER                                  2
  d= 2, l=  16:   INTEGER                                   0x03EB7E1D9B4C4C7B145FF6A902CE81F9
  d= 2, l=  13:   SEQUENCE
  d= 3, l=   9:    OBJECT                                   RSA/EMSA3(SHA-256) [1.2.840.113549.1.1.11]
  d= 3, l=   0:    NULL
  d= 2, l= 126:   SEQUENCE
  d= 3, l=  11:    SET
  d= 4, l=   9:     SEQUENCE
  d= 5, l=   3:      OBJECT                                 X520.Country [2.5.4.6]
  d= 5, l=   2:      PRINTABLE STRING                       US
  d= 3, l=  29:    SET
  d= 4, l=  27:     SEQUENCE
  d= 5, l=   3:      OBJECT                                 X520.Organization [2.5.4.10]
  d= 5, l=  20:      PRINTABLE STRING                       Symantec Corporation
  d= 3, l=  31:    SET
  d= 4, l=  29:     SEQUENCE
  d= 5, l=   3:      OBJECT                                 X520.OrganizationalUnit [2.5.4.11]
  d= 5, l=  22:      PRINTABLE STRING                       Symantec Trust Network
  d= 3, l=  47:    SET
  d= 4, l=  45:     SEQUENCE
  d= 5, l=   3:      OBJECT                                 X520.CommonName [2.5.4.3]
  d= 5, l=  38:      PRINTABLE STRING                       Symantec Class 3 Secure Server CA - G4
  d= 2, l=  30:   SEQUENCE
  d= 3, l=  13:    UTC TIME                                 2017/04/07 00:00:00 UTC
  d= 3, l=  13:    UTC TIME                                 2019/04/08 23:59:59 UTC
  d= 2, l= 128:   SEQUENCE
  d= 3, l=  11:    SET
  d= 4, l=   9:     SEQUENCE
  d= 5, l=   3:      OBJECT                                 X520.Country [2.5.4.6]
  d= 5, l=   2:      PRINTABLE STRING                       US
  d= 3, l=  19:    SET
  d= 4, l=  17:     SEQUENCE
  d= 5, l=   3:      OBJECT                                 X520.State [2.5.4.8]
  d= 5, l=  10:      UTF8 STRING                            Washington
  d= 3, l=  16:    SET
  d= 4, l=  14:     SEQUENCE
  d= 5, l=   3:      OBJECT                                 X520.Locality [2.5.4.7]
  d= 5, l=   7:      UTF8 STRING                            Redmond
  d= 3, l=  30:    SET
  d= 4, l=  28:     SEQUENCE
  d= 5, l=   3:      OBJECT                                 X520.Organization [2.5.4.10]
  d= 5, l=  21:      UTF8 STRING                            Microsoft Corporation
  d= 3, l=  14:    SET
  d= 4, l=  12:     SEQUENCE
  d= 5, l=   3:      OBJECT                                 X520.OrganizationalUnit [2.5.4.11]
  d= 5, l=   5:      UTF8 STRING                            MSCOM
  d= 3, l=  26:    SET
  d= 4, l=  24:     SEQUENCE
  d= 5, l=   3:      OBJECT                                 X520.CommonName [2.5.4.3]
  d= 5, l=  17:      UTF8 STRING                            www.microsoft.com
  d= 2, l= 290:   SEQUENCE
  d= 3, l=  13:    SEQUENCE
  d= 4, l=   9:     OBJECT                                  RSA [1.2.840.113549.1.1.1]
  d= 4, l=   0:     NULL
  d= 3, l= 271:    BIT STRING
  d= 4, l= 266:     SEQUENCE
  d= 5, l= 257:      INTEGER                                 
  d= 5, l=   3:      INTEGER                                0x010001
  d= 2, l= 872:   cons [3] context
  d= 3, l= 868:    SEQUENCE
  d= 4, l= 153:     SEQUENCE
  d= 5, l=   3:      OBJECT                                 X509v3.SubjectAlternativeName [2.5.29.17]
  d= 5, l= 145:      OCTET STRING
  d= 6, l= 142:       SEQUENCE
  d= 7, l=   7:        [2] context                          privacy.microsoft.com
  d= 7, l=   7:        [2] context                          c.s-microsoft.com
  d= 7, l=   7:        [2] context                          microsoft.com
  d= 7, l=   7:        [2] context                          i.s-microsoft.com
  d= 7, l=   7:        [2] context                          staticview.microsoft.com
  d= 7, l=   7:        [2] context                          www.microsoft.com
  d= 7, l=   7:        [2] context                          wwwqa.microsoft.com
  d= 4, l=   9:     SEQUENCE
  d= 5, l=   3:      OBJECT                                 X509v3.BasicConstraints [2.5.29.19]
  d= 5, l=   2:      OCTET STRING
  d= 6, l=   0:       SEQUENCE
  d= 4, l=  14:     SEQUENCE
  d= 5, l=   3:      OBJECT                                 X509v3.KeyUsage [2.5.29.15]
  d= 5, l=   1:      BOOLEAN                                true
  d= 5, l=   4:      OCTET STRING
  d= 6, l=   2:       BIT STRING                            A0
  d= 4, l=  29:     SEQUENCE
  d= 5, l=   3:      OBJECT                                 X509v3.ExtendedKeyUsage [2.5.29.37]
  d= 5, l=  22:      OCTET STRING
  d= 6, l=  20:       SEQUENCE
  d= 7, l=   8:        OBJECT                               PKIX.ServerAuth [1.3.6.1.5.5.7.3.1]
  d= 7, l=   8:        OBJECT                               PKIX.ClientAuth [1.3.6.1.5.5.7.3.2]
  d= 4, l=  97:     SEQUENCE
  d= 5, l=   3:      OBJECT                                 X509v3.CertificatePolicies [2.5.29.32]
  d= 5, l=  90:      OCTET STRING
  d= 6, l=  88:       SEQUENCE
  d= 7, l=  86:        SEQUENCE
  d= 8, l=   6:         OBJECT                              2.23.140.1.2.2
  d= 8, l=  76:         SEQUENCE
  d= 9, l=  35:          SEQUENCE
  d=10, l=   8:           OBJECT                            1.3.6.1.5.5.7.2.1
  d=10, l=  23:           IA5 STRING                        https://d.symcb.com/cps
  d= 9, l=  37:          SEQUENCE
  d=10, l=   8:           OBJECT                            1.3.6.1.5.5.7.2.2
  d=10, l=  25:           SEQUENCE
  d=11, l=  23:            UTF8 STRING                      https://d.symcb.com/rpa
  d= 4, l=  31:     SEQUENCE
  d= 5, l=   3:      OBJECT                                 X509v3.AuthorityKeyIdentifier [2.5.29.35]
  d= 5, l=  24:      OCTET STRING
  d= 6, l=  22:       SEQUENCE
  d= 7, l=  20:        [0] context                          80145F60CF619055DF8443148A602AB2F57AF44318EF
  d= 4, l=  43:     SEQUENCE
  d= 5, l=   3:      OBJECT                                 X509v3.CRLDistributionPoints [2.5.29.31]
  d= 5, l=  36:      OCTET STRING
  d= 6, l=  34:       SEQUENCE
  d= 7, l=  32:        SEQUENCE
  d= 8, l=  30:         cons [0] context
  d= 9, l=  28:          cons [0] context
  d=10, l=  10:           [6] context                       http://ss.symcb.com/ss.crl
  d= 4, l=  87:     SEQUENCE
  d= 5, l=   8:      OBJECT                                 PKIX.AuthorityInformationAccess [1.3.6.1.5.5.7.1.1]
  d= 5, l=  75:      OCTET STRING
  d= 6, l=  73:       SEQUENCE
  d= 7, l=  31:        SEQUENCE
  d= 8, l=   8:         OBJECT                              PKIX.OCSP [1.3.6.1.5.5.7.48.1]
  d= 8, l=   8:         [6] context                         http://ss.symcd.com
  d= 7, l=  38:        SEQUENCE
  d= 8, l=   8:         OBJECT                              PKIX.CertificateAuthorityIssuers [1.3.6.1.5.5.7.48.2]
  d= 8, l=   8:         [6] context                         http://ss.symcb.com/ss.crt
  d= 4, l= 384:     SEQUENCE
  d= 5, l=  10:      OBJECT                                 1.3.6.1.4.1.11129.2.4.2
  d= 5, l= 368:      OCTET STRING
  d= 6, l= 364:       OCTET STRING                           
  d= 1, l=  13:  SEQUENCE
  d= 2, l=   9:   OBJECT                                    RSA/EMSA3(SHA-256) [1.2.840.113549.1.1.11]
  d= 2, l=   0:   NULL
  d= 1, l= 257:  BIT STRING                                  
