betalingen.greetz.nl

- Greetz BV -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 73:4d:c6:31:f3:2f:1c:cb:0f:05:dd:a1:b8:36:20 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Greetz BV

Organization: Greetz BV
State / Province: Noord Holland
Locality: Amsterdam
Country: NL

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 73:4d:c6:31:f3:2f:1c:cb:0f:05:dd:a1:b8:36:20
Serial Number (int): 598691586905921118020206895881008672
Serial Number lenght: 119 bits, 15 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 2b:a5:a2:b0:6a:70:97:77:1d:d0:07:8a:7c:b4:e1:fe:bc:8f:31:be
Fingerprint (sha256): 38:07:1d:2b:b2:a8:16:74:1b:6f:20:fb:1a:3f:4f:a5:53:1f:77:0d:82:8c:bc:1d:5a:41:af:f4:a4:9f:14:2d

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate betalingen.greetz.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for betalingen.greetz.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

betalingen.greetz.nl

Other certificates including the domain name greetz.nl

(limited to 100 certificates)
klantenservice.greetz.nl
upgrade.greetz.nl
betalingen.greetz.nl
greetz.nl
e.greetz.nl
betalingen.greetz.nl
sni.cloudflaressl.com
e.greetz.nl
sorry.greetz.nl
e.greetz.nl
greetz.be
bpph.greetz.nl
moonpig.careers
moonpig.careers
upgrade.greetz.nl
api.prod.greetz-nl.net
upgrade.greetz.nl
klantenservice.greetz.nl
upgrade.greetz.nl
upgrade.greetz.nl
www.greetz.nl
upgrade.greetz.nl
upgrade.greetz.nl
klantenservice.greetz.nl
betalingen.greetz.nl
upgrade.greetz.nl
es.greetz.nl
klantenservice.greetz.nl
e.greetz.nl
upgrade.greetz.nl
klantenservice.greetz.nl
sni.cloudflaressl.com
es.greetz.nl
klantenservice.greetz.nl
es.greetz.nl
*.greetz.nl
sni.cloudflaressl.com
upgrade.greetz.nl
e.greetz.nl
klantenservice.greetz.nl
ghdlry.greetz.nl
betalingen.greetz.nl
e.greetz.nl
moonpig.careers
e.greetz.nl
*.greetz.nl
upgrade.greetz.nl
www.greetz.nl
*.greetz.nl
klantenservice.greetz.nl
venspro.com
www.greetz.nl
api.uat.greetz-nl.net
klantenservice.greetz.nl
klantenservice.greetz.nl
upgrade.greetz.nl
klantenservice.greetz.nl
klantenservice.greetz.nl
*.greetz.nl
moonpig.careers
upgrade.greetz.nl
upgrade.greetz.nl
moonpig.careers
klantenservice.greetz.nl
klantenservice.greetz.nl
www.greetz.nl
e.greetz.nl
api.dev.greetz-nl.net
e.greetz.nl
upgrade.greetz.nl
www.greetz.nl
betalingen.greetz.nl
greetz.nl
greetz.nl
sni.cloudflaressl.com
klantenservice.greetz.nl
betalingen.greetz.nl
upgrade.greetz.nl
klantenservice.greetz.nl
www.greetz.nl
e.greetz.nl
e.greetz.nl
upgrade.greetz.nl
api.prod.greetz-nl.net
klantenservice.greetz.nl
greetz.nl
ghdlry.greetz.nl
es.greetz.nl
e.greetz.nl
upgrade.greetz.nl
ghdlry.greetz.nl
api.prod.greetz-nl.net
klantenservice.greetz.nl
klantenservice.greetz.nl
upgrade.greetz.nl
klantenservice.greetz.nl
e.greetz.nl
betalingen.greetz.nl
klantenservice.greetz.nl
upgrade.greetz.nl

Certificate

The complete raw certificate details for betalingen.greetz.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGqTCCBZGgAwIBAgIPc03GMfMvHMsPBd2huDYgMA0GCSqGSIb3DQEBCwUAMEEx
CzAJBgNVBAYTAlVTMRUwEwYDVQQKEwx0aGF3dGUsIEluYy4xGzAZBgNVBAMTEnRo
YXd0ZSBTU0wgQ0EgLSBHMjAeFw0xNzEwMTEwMDAwMDBaFw0yMDEyMDkyMzU5NTla
MGwxCzAJBgNVBAYTAk5MMRYwFAYDVQQIDA1Ob29yZCBIb2xsYW5kMRIwEAYDVQQH
DAlBbXN0ZXJkYW0xEjAQBgNVBAoMCUdyZWV0eiBCVjEdMBsGA1UEAwwUYmV0YWxp
bmdlbi5ncmVldHoubmwwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE
1bM/ILkBFI88ZXrQJzEn1H0ZfZJnzI+vVa6vIKqf8kuKczRY/FchrJpTVn1MxAru
I8g/h+r/6/t/qdUClEMz7NScEZYh6+3Py2Y/Hek4Djf3HcYiFqEH6zXgX0wdjqE0
xUja8KaEPti1GZmfa3ca+HTQEXoQWYMBlHPsG41l7VsrYpsgUuktoOnF6Gxy9Pqw
nBxQZhc9RE/YoDbDVc/rsq9NkYgRr9yrYMg8e8iXK82a8K11KUnk9tE26Bt06Bkb
EkJxtwE0WQ7KJJmlBL5ZEEHAPOVHZbsTGkdKAOt2yWpC3hyFC9LVnJAhZG3b8IXO
pFjAlWB+h0ppvNvF65+lAgMBAAGjggNxMIIDbTAfBgNVHREEGDAWghRiZXRhbGlu
Z2VuLmdyZWV0ei5ubDAJBgNVHRMEAjAAMG4GA1UdIARnMGUwYwYGZ4EMAQICMFkw
JgYIKwYBBQUHAgEWGmh0dHBzOi8vd3d3LnRoYXd0ZS5jb20vY3BzMC8GCCsGAQUF
BwICMCMMIWh0dHBzOi8vd3d3LnRoYXd0ZS5jb20vcmVwb3NpdG9yeTAOBgNVHQ8B
Af8EBAMCBaAwHwYDVR0jBBgwFoAUwk9IV/zRT5rAXTh9DgXb2S61UmAwKwYDVR0f
BCQwIjAgoB6gHIYaaHR0cDovL3RqLnN5bWNiLmNvbS90ai5jcmwwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcw
AYYTaHR0cDovL3RqLnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL3RqLnN5
bWNiLmNvbS90ai5jcnQwggH3BgorBgEEAdZ5AgQCBIIB5wSCAeMB4QB1AN3rHSt6
DU+mIIuBrYFocH4ujp0B1VyIjT0RxM227L7MAAABXwqOHtwAAAQDAEYwRAIgHf9r
f6Oknyw43LmzzU36xX95swoVNEuVymlQgRlwz1ICIEK/8jxehGNq/yYVPWHmDo3u
bcKdZ5RJXdRm+IaoeLdQAHcApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN
3BAAAAFfCo4fFAAABAMASDBGAiEA/MmK1O2a9gJFkGsWFAhlVlDaBxFC2goOPANM
USvVPcMCIQDC2ndFR6HAC/PDnnugIRdwrFGhM6XY1OJlPG99S4PIUwB3AO5Lvbd1
zmC64UJpH6vhnmajD35fsHLYgwDEe4l6qP3LAAABXwqOINUAAAQDAEgwRgIhAK6R
7s9t6JojpBtSUtDnhkcRt0SEtzShmIH6iV2BA4rxAiEA7oyezWLS+CfG+IuCV2TQ
D0S1Fsow+F2ZvSB9EZiH08AAdgC8eOHfxfY8aEZJM02hD6FfCXlpIAnAgbTz9pF/
Ptm4pQAAAV8Kjh+cAAAEAwBHMEUCIQD/N67uwg582HrGiWTBjkEIMN0HvZdTrq34
NIz7oK5yygIgZwO/S9EZTyrQOJTrv7h/F1WN8Fi+/3a/PcJHKw27hc0wDQYJKoZI
hvcNAQELBQADggEBAJaKaEZiDeoUDCXNSEfDob4VQ87SmCJytCVtrJ6wj8NJ6Q4l
4jkePNpJzm3o6qwZUyrcYuuBdZ/UqZ0nORe1clsVVt3NTFvIhMRqTJgU/cU9XXny
wwHSio9YEChWlsneW7tJvpF5NDZAQhddPR6bXf8LNbmSpvaCD8yFH7ecOxsisMvj
TmABD31sEfRS7ZSph+AL2ALepbcmwOboa0h+luKYed/ub2J44nnmaqP97BZUbyol
gMVGkY+1wkV7Sosakg62FOd9E0itrUObpON+H6yy1fmDLBzT5AG1QwcdTExjr56T
lq7K6LAzKBj1TfiGR60GS32A5hgYR4cJLuHSkjk=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNWzPyC5ARSPPGV60Ccx
J9R9GX2SZ8yPr1WuryCqn/JLinM0WPxXIayaU1Z9TMQK7iPIP4fq/+v7f6nVApRD
M+zUnBGWIevtz8tmPx3pOA439x3GIhahB+s14F9MHY6hNMVI2vCmhD7YtRmZn2t3
Gvh00BF6EFmDAZRz7BuNZe1bK2KbIFLpLaDpxehscvT6sJwcUGYXPURP2KA2w1XP
67KvTZGIEa/cq2DIPHvIlyvNmvCtdSlJ5PbRNugbdOgZGxJCcbcBNFkOyiSZpQS+
WRBBwDzlR2W7ExpHSgDrdslqQt4chQvS1ZyQIWRt2/CFzqRYwJVgfodKabzbxeuf
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 598691586905921118020206895881008672
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Noord Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Greetz BV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'betalingen.greetz.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24848087260641006091834928068354504026921536289471746251822114315161782830756009876632739778532799237137679591727604220348753491703772998502055185972468746767328335625407522537607415111376683375303607310019414403430447046679121721783978567962189976444889982452665283793574777940524855568375489188384063454749353702362876505757391047568047894291319616629526899247234329812431271365066889720232585894314502355428539424977251898510844557527893025173517249389048620928941893037554011334846535208777040351541622188412771260593784045432736476764791347337091527181582784606233520857633320053129891766051389875745427689283493
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betalingen.greetz.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00968a6846620dea140c25cd4847c3a1be1543ced2982272b4256dac9eb08fc349e90e25e2391e3cda49ce6de8eaac19532adc62eb81759fd4a99d273917b5725b1556ddcd4c5bc884c46a4c9814fdc53d5d79f2c301d28a8f5810285696c9de5bbb49be917934364042175d3d1e9b5dff0b35b992a6f6820fcc851fb79c3b1b22b0cbe34e60010f7d6c11f452ed94a987e00bd802dea5b726c0e6e86b487e96e29879dfee6f6278e279e66aa3fdec16546f2a2580c546918fb5c2457b4a8b1a920eb614e77d1348adad439ba4e37e1facb2d5f9832c1cd3e401b543071d4c4c63af9e9396aecae8b0332818f54df88647ad064b7d80e618184787092ee1d29239