wrm3.vaillant-group.com
- Vaillant GmbH -
Issued by thawte SSL CA - G2
About this certificate
This digital certificate with serial number 70:fd:a2:8f:69:5d:45:7c:42:2f:a6:6a:50:4e:54:00 was issued on by thawte, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Vaillant GmbH
Organization:
Vaillant GmbH
Organization unit: Vaillant GmbH
Organization unit: Vaillant GmbH
State / Province:
Nordrhein-Westfalen
Locality: Remscheid
Country: DE
Locality: Remscheid
Country: DE
thawte, Inc.
Organization:
thawte, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 70:fd:a2:8f:69:5d:45:7c:42:2f:a6:6a:50:4e:54:00Serial Number (int): 150190483745711604533571751034991039488
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60
Fingerprint (sha1): 2a:f0:f2:20:a0:fd:9b:df:01:38:0f:1a:f7:b1:83:e9:3c:0b:9c:6f
Fingerprint (sha256): 00:ee:8c:2d:d2:dc:6c:25:4f:c6:3d:5e:fc:79:16:9c:40:21:db:d0:5c:7c:0b:bd:90:b0:aa:ff:e1:26:5f:b5
Issuing Certificate URL: http://tj.symcb.com/tj.crt
Revocation information
OCSP Server: http://tj.symcd.comCRL Distribution Point: http://tj.symcb.com/tj.crl
Check the revocation status for certificate wrm3.vaillant-group.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for wrm3.vaillant-group.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
wrm3.vaillant-group.com
Other certificates including the domain name vaillant-group.com
(limited to 100 certificates)
wrm3.vaillant-group.com
sip.eb-com.com
vstart.vaillant-group.com
*.gorecord.vaillant-group.com
pool04.eb-com.com
ga.vaillant-group.com
*.vaillant-group.com
cn-shanghai-800b.vaillant-group.com
ga.vaillant-group.com
access.vaillant-group.com
jobs.vaillant-group.com
supplierquality.vaillant-group.com
*.vaillant-group.com
gb-vaillant-cssp-stage.vaillant-group.com
*.dia.vaillant-group.com
sip.eb-com.com
sync.vaillant-group.com
pool04.eb-com.com
sip.eb-com.com
prometheus.apidev-dev.azure.vaillant-group.com
pool04.eb-com.com
www.vaillant.com
mdm.vaillant-group.com
mender.prod.azure.vaillant-group.com
akamai-san150.exacttarget.com
sync.vaillant-group.com
pool04.eb-com.com
jobs.vaillant-group.com
mailcrypt.vaillant-group.com
pool04.eb-com.com
pool04.eb-com.com
*.sslvpn.vaillant-group.com
sip.eb-com.com
san-18-s50.tlsprovisioning.exacttarget.com
sip.eb-com.com
www.vaillant.lt
www.vaillant.com
groupnet.vaillant-group.com
webshare.vaillant-group.com
sip.eb-com.com
ldaps.vaillant-group.com
groupspace.vaillant-group.com
www.vaillant-group.com
www.vaillant.com
dk-vaillant-cssp-stage.vaillant-group.com
mdm.vaillant-group.com
be-vaillant-cssp-stage.vaillant-group.com
pool04.eb-com.com
mdm.vaillant-group.com
vstart.vaillant-group.com
grafana.apidev-dev.azure.vaillant-group.com
pool04.eb-com.com
jira.vaillant-group.com
merchandising.vaillant-group.com
be-vaillant-cssp-stage.vaillant-group.com
www.vaillant.lt
vstart.vaillant-group.com
*.vaillant-group.com
akamai-san150.exacttarget.com
sip.eb-com.com
pool04.eb-com.com
sip.eb-com.com
sip.eb-com.com
www.vaillant.com
pool04.eb-com.com
at-vaillant-cssp-stage.vaillant-group.com
webshare.vaillant-group.com
mailcrypt.vaillant-group.com
futureclima.ziggu.app
jobs.vaillant-group.com
*.sslvpn.vaillant-group.com
pool04.eb-com.com
vaillant-demo.bee2bee.vaillant-group.com
sip.eb-com.com
jira.vaillant-group.com
jira-test.vaillant-group.com
vstart.vaillant-group.com
sds.vaillant-group.com
pool04.eb-com.com
vstart.vaillant-group.com
t04int01.vaillant-group.com
sip.eb-com.com
pool04.eb-com.com
*.gorecord.vaillant-group.com
*.vaillant-group.com
pool04.eb-com.com
sentry2.vaillant-group.com
sip.eb-com.com
*.gorecord.vaillant-group.com
teamshare.vaillant-group.com
pool04.eb-com.com
pool04.eb-com.com
sip.eb-com.com
sip.eb-com.com
sip.eb-com.com
sip.eb-com.com
be-bulex-cssp-stage.vaillant-group.com
groupnet.vaillant-group.com
*.bee2bee.vaillant-group.com
sip.eb-com.com
sip.eb-com.com
vstart.vaillant-group.com
*.gorecord.vaillant-group.com
pool04.eb-com.com
ga.vaillant-group.com
*.vaillant-group.com
cn-shanghai-800b.vaillant-group.com
ga.vaillant-group.com
access.vaillant-group.com
jobs.vaillant-group.com
supplierquality.vaillant-group.com
*.vaillant-group.com
gb-vaillant-cssp-stage.vaillant-group.com
*.dia.vaillant-group.com
sip.eb-com.com
sync.vaillant-group.com
pool04.eb-com.com
sip.eb-com.com
prometheus.apidev-dev.azure.vaillant-group.com
pool04.eb-com.com
www.vaillant.com
mdm.vaillant-group.com
mender.prod.azure.vaillant-group.com
akamai-san150.exacttarget.com
sync.vaillant-group.com
pool04.eb-com.com
jobs.vaillant-group.com
mailcrypt.vaillant-group.com
pool04.eb-com.com
pool04.eb-com.com
*.sslvpn.vaillant-group.com
sip.eb-com.com
san-18-s50.tlsprovisioning.exacttarget.com
sip.eb-com.com
www.vaillant.lt
www.vaillant.com
groupnet.vaillant-group.com
webshare.vaillant-group.com
sip.eb-com.com
ldaps.vaillant-group.com
groupspace.vaillant-group.com
www.vaillant-group.com
www.vaillant.com
dk-vaillant-cssp-stage.vaillant-group.com
mdm.vaillant-group.com
be-vaillant-cssp-stage.vaillant-group.com
pool04.eb-com.com
mdm.vaillant-group.com
vstart.vaillant-group.com
grafana.apidev-dev.azure.vaillant-group.com
pool04.eb-com.com
jira.vaillant-group.com
merchandising.vaillant-group.com
be-vaillant-cssp-stage.vaillant-group.com
www.vaillant.lt
vstart.vaillant-group.com
*.vaillant-group.com
akamai-san150.exacttarget.com
sip.eb-com.com
pool04.eb-com.com
sip.eb-com.com
sip.eb-com.com
www.vaillant.com
pool04.eb-com.com
at-vaillant-cssp-stage.vaillant-group.com
webshare.vaillant-group.com
mailcrypt.vaillant-group.com
futureclima.ziggu.app
jobs.vaillant-group.com
*.sslvpn.vaillant-group.com
pool04.eb-com.com
vaillant-demo.bee2bee.vaillant-group.com
sip.eb-com.com
jira.vaillant-group.com
jira-test.vaillant-group.com
vstart.vaillant-group.com
sds.vaillant-group.com
pool04.eb-com.com
vstart.vaillant-group.com
t04int01.vaillant-group.com
sip.eb-com.com
pool04.eb-com.com
*.gorecord.vaillant-group.com
*.vaillant-group.com
pool04.eb-com.com
sentry2.vaillant-group.com
sip.eb-com.com
*.gorecord.vaillant-group.com
teamshare.vaillant-group.com
pool04.eb-com.com
pool04.eb-com.com
sip.eb-com.com
sip.eb-com.com
sip.eb-com.com
sip.eb-com.com
be-bulex-cssp-stage.vaillant-group.com
groupnet.vaillant-group.com
*.bee2bee.vaillant-group.com
sip.eb-com.com
Certificate
The complete raw certificate details for wrm3.vaillant-group.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE7TCCA9WgAwIBAgIQcP2ij2ldRXxCL6ZqUE5UADANBgkqhkiG9w0BAQsFADBB MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMRswGQYDVQQDExJ0 aGF3dGUgU1NMIENBIC0gRzIwHhcNMTYwNDE5MDAwMDAwWhcNMTkwNDE5MjM1OTU5 WjCBkTELMAkGA1UEBhMCREUxHDAaBgNVBAgME05vcmRyaGVpbi1XZXN0ZmFsZW4x EjAQBgNVBAcMCVJlbXNjaGVpZDEWMBQGA1UECgwNVmFpbGxhbnQgR21iSDEWMBQG A1UECwwNVmFpbGxhbnQgR21iSDEgMB4GA1UEAwwXd3JtMy52YWlsbGFudC1ncm91 cC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Alq8PgmIR5ro Twa4duTOq+aIa+RcSdYFWDsOPS+tZiNrsy7NIsw9hQrOJbR01caLmyXXIKQnJOSm o6yblg3JOGv5C86khsuQN/gNQFim3ZUHJ8Pr5nDmuTh+UfHuSbmnAfXqN+Ds1rfJ vYXcnFm8OAPVMYHRpkHP+f2qYYMoiBUAO3wdgnewDg89ED4nQS4wgQTQqSE2tsVr oSh8BdrtSzkp1cNtFnzSWqGmSWflohq3/LBmSv8KBvgcwZOClIEL6MY4wHikK5u4 MWOknShatmrpC61RRsbpdXODDlsqnLFcIsUgR0LwFz1EnGnIUgFtSvz4UaDoduFS NxNq6/xtAgMBAAGjggGOMIIBijAiBgNVHREEGzAZghd3cm0zLnZhaWxsYW50LWdy b3VwLmNvbTAJBgNVHRMEAjAAMG4GA1UdIARnMGUwYwYGZ4EMAQICMFkwJgYIKwYB BQUHAgEWGmh0dHBzOi8vd3d3LnRoYXd0ZS5jb20vY3BzMC8GCCsGAQUFBwICMCMM IWh0dHBzOi8vd3d3LnRoYXd0ZS5jb20vcmVwb3NpdG9yeTAOBgNVHQ8BAf8EBAMC BaAwHwYDVR0jBBgwFoAUwk9IV/zRT5rAXTh9DgXb2S61UmAwKwYDVR0fBCQwIjAg oB6gHIYaaHR0cDovL3RqLnN5bWNiLmNvbS90ai5jcmwwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0 cDovL3RqLnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL3RqLnN5bWNiLmNv bS90ai5jcnQwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEB AEmLf5X06Um0P7FCyWLJI1EG+VCSZsmRc5iHbjmmU2CD+4X0QW8EtiCbzLO1NsBq H1lI+Ndy3FCRpE7/1jE5JBkgtJMqm1XdVW3Ke0FnduCsurd8TfBXncBBIe+w7jfD M3XV/ADNWgdfbUI4A1V59npCIgvOwLgHRUdzlhL2XRqy9UVBvuPb9i9I+33484bf HCz/wW08NRTtb2vaZeEcURb9ngr0aLIg0p3RbIZygzPFa8vznpZojcq65nqJW9ao xv5dRi9/yZhmc9akIO6f3djGeaEwSE40Zz5pET/dc8kDQ3EGU95UShG4A0gcQhdG OQc2oa5yO0wD624tq7CU8bs= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwJavD4JiEea6E8GuHbk zqvmiGvkXEnWBVg7Dj0vrWYja7MuzSLMPYUKziW0dNXGi5sl1yCkJyTkpqOsm5YN yThr+QvOpIbLkDf4DUBYpt2VByfD6+Zw5rk4flHx7km5pwH16jfg7Na3yb2F3JxZ vDgD1TGB0aZBz/n9qmGDKIgVADt8HYJ3sA4PPRA+J0EuMIEE0KkhNrbFa6EofAXa 7Us5KdXDbRZ80lqhpkln5aIat/ywZkr/Cgb4HMGTgpSBC+jGOMB4pCubuDFjpJ0o WrZq6QutUUbG6XVzgw5bKpyxXCLFIEdC8Bc9RJxpyFIBbUr8+FGg6HbhUjcTauv8 bQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 150190483745711604533571751034991039488 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-19 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-19 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein-Westfalen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Remscheid' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Vaillant GmbH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Vaillant GmbH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'wrm3.vaillant-group.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23607724043749147806639526589125999969087664059155362784978188695887568628201966105275336752508787875109440287883099044273585301641426093031707509047112191658665142328595466869309785790408242035555831921965836895653017125677083702173859069435831452425887411662811390000917456505411068371234414233102296003045174190174112909293193500212432510773990903097469826144311915003145753245340656269965189385702368452796496959801893027520768087825017735722537266007572270862812481874975847954428647422077120874059023535650548854153193105375069283854048480581999049249016044004988594442280244028322176506451852279637722379582573 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrm3.vaillant-group.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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