clr-bridge.dealertrack.com
- Cox Automotive Inc. -
Issued by Thawte TLS RSA CA G1
About this certificate
This digital certificate with serial number 01:65:f0:d6:46:bd:a3:0d:0f:4f:95:ab:d0:bd:08:ad was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Cox Automotive Inc.
Organization:
Cox Automotive Inc.
State / Province:
Georgia
Locality: Atlanta
Country: US
Locality: Atlanta
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 01:65:f0:d6:46:bd:a3:0d:0f:4f:95:ab:d0:bd:08:adSerial Number (int): 1858534733521795570904344982296791213
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: 13:fb:f9:76:45:d4:da:40:ef:90:3d:fc:9e:18:0a:1e:0b:db:f5:f3
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7
Fingerprint (sha1): 25:a1:12:9d:43:f4:7e:e1:db:19:60:55:08:51:e4:e1:48:6e:4d:27
Fingerprint (sha256): 01:0e:17:bf:43:24:ec:1a:4c:c2:5f:27:bd:43:2a:3e:e8:0c:12:7d:4d:26:49:16:8e:10:4b:35:b9:67:58:8f
Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt
Revocation information
OCSP Server: http://status.thawte.comCRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl
Check the revocation status for certificate clr-bridge.dealertrack.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for clr-bridge.dealertrack.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
clr-bridge.dealertrack.com
Other certificates including the domain name dealertrack.com
(limited to 100 certificates)
akamai-san38.exacttarget.com
qa.digitalservices.dealertrack.com
appsvc.qa.dealertrack.com
dmshealth.dealertrack.com
dms03a.dms.dealertrack.com
*.uat1.dealertrack.com
clr-bridge.dealertrack.com
dmshealth.dealertrack.com
encrypt.dealertrack.com
*.dtdrs.dealertrack.com
dealertrack.com
*.pa1.dealertrack.com
ibmwebspheremqgctwndc5.dds.dealertrack.com
amosstatus.ifsleasing.com
blog.dealertrack.com
*.dealertrack.com
integration.dealertrack.com
complianceguide.dealertrack.com
www.dealertrack.com
dt-client-auth.dealertrack.com
partners.qa.dealertrack.com
akamai-san38.exacttarget.com
amosstatus.ifsleasing.com
inventoryplus.dealertrack.com
services.qa.dealertrack.com
sso-saml-np.dealertrack.com
amr.dealertrack.com
cwpstorage.status.symantec.com
*.qat1.dealertrack.com
sign.uat1.dealertrack.com
beta.qa.dealertrack.com
nyvpn.dealertrack.com
*.dtdrs.dealertrack.com
dds.dealertrack.com
akamai-san38.exacttarget.com
amosstatus.ifsleasing.com
encrypt.uat1.dealertrack.com
dds.dealertrack.com
us-dr.dealertrack.com
*.dtdrs.dealertrack.com
appsvc.dealertrack.com
ibmwebspheremqgcpwndc4.dds.dealertrack.com
sign.dealertrack.com
ddstsg.dealertrack.com
dmshealth.dealertrack.com
cwpstorage.status.symantec.com
www.dealertrack.com
*.dvt1.aws.dealertrack.com
amosstatus.ifsleasing.com
*.uat.unifipp.dealertrack.com
blog.dealertrack.com
complianceguide.dealertrack.com
mobile.dealertrack.com
my.qa.dealertrack.com
dmshealth.dealertrack.com
customervoice.acumatica.com
clr-bridge.dealertrack.com
fni-static-np.dealertrack.com
*.dr.dealertrack.com
cwpstorage.status.symantec.com
amosstatus.ifsleasing.com
dms06.dms.dealertrack.com
ebusiness.cdn1.dealertrack.com
dealertrack.com
*.qa1.dealertrack.com
*.api.dealertrack.com
piforceqa.dealertrack.com
*.ua2.dealertrack.com
*.uat2.dealertrack.com
amosstatus.ifsleasing.com
*.uat1.dealertrack.com
amosstatus.ifsleasing.com
dmshealth.dealertrack.com
*.dtdrs.dealertrack.com
complianceguide.dealertrack.com
dtlpi.uat1.dealertrack.com
mobile.dealertrack.com
*.uat1.dealertrack.com
gmaccessories.dealertrack.com
*.dtdrs.dealertrack.com
dmshealth.dealertrack.com
dmshealth.dealertrack.com
dmshealth.dealertrack.com
login.dealertrack.com
dms360.dealertrack.com
*.dms.dealertrack.com
amosstatus.ifsleasing.com
www.uat1.dealertrack.com
ww2.qa1.dealertrack.com
san3166.cdntwrk.com
webservices.qa.dealertrack.com
*.my.dealertrack.com
drs.dealertrack.com
customervoice.acumatica.com
dmshealth.dealertrack.com
encrypt-np.dealertrack.com
2016complianceguide.dealertrack.com
amosstatus.ifsleasing.com
blog.dealertrack.com
dmshealth.dealertrack.com
qa.digitalservices.dealertrack.com
appsvc.qa.dealertrack.com
dmshealth.dealertrack.com
dms03a.dms.dealertrack.com
*.uat1.dealertrack.com
clr-bridge.dealertrack.com
dmshealth.dealertrack.com
encrypt.dealertrack.com
*.dtdrs.dealertrack.com
dealertrack.com
*.pa1.dealertrack.com
ibmwebspheremqgctwndc5.dds.dealertrack.com
amosstatus.ifsleasing.com
blog.dealertrack.com
*.dealertrack.com
integration.dealertrack.com
complianceguide.dealertrack.com
www.dealertrack.com
dt-client-auth.dealertrack.com
partners.qa.dealertrack.com
akamai-san38.exacttarget.com
amosstatus.ifsleasing.com
inventoryplus.dealertrack.com
services.qa.dealertrack.com
sso-saml-np.dealertrack.com
amr.dealertrack.com
cwpstorage.status.symantec.com
*.qat1.dealertrack.com
sign.uat1.dealertrack.com
beta.qa.dealertrack.com
nyvpn.dealertrack.com
*.dtdrs.dealertrack.com
dds.dealertrack.com
akamai-san38.exacttarget.com
amosstatus.ifsleasing.com
encrypt.uat1.dealertrack.com
dds.dealertrack.com
us-dr.dealertrack.com
*.dtdrs.dealertrack.com
appsvc.dealertrack.com
ibmwebspheremqgcpwndc4.dds.dealertrack.com
sign.dealertrack.com
ddstsg.dealertrack.com
dmshealth.dealertrack.com
cwpstorage.status.symantec.com
www.dealertrack.com
*.dvt1.aws.dealertrack.com
amosstatus.ifsleasing.com
*.uat.unifipp.dealertrack.com
blog.dealertrack.com
complianceguide.dealertrack.com
mobile.dealertrack.com
my.qa.dealertrack.com
dmshealth.dealertrack.com
customervoice.acumatica.com
clr-bridge.dealertrack.com
fni-static-np.dealertrack.com
*.dr.dealertrack.com
cwpstorage.status.symantec.com
amosstatus.ifsleasing.com
dms06.dms.dealertrack.com
ebusiness.cdn1.dealertrack.com
dealertrack.com
*.qa1.dealertrack.com
*.api.dealertrack.com
piforceqa.dealertrack.com
*.ua2.dealertrack.com
*.uat2.dealertrack.com
amosstatus.ifsleasing.com
*.uat1.dealertrack.com
amosstatus.ifsleasing.com
dmshealth.dealertrack.com
*.dtdrs.dealertrack.com
complianceguide.dealertrack.com
dtlpi.uat1.dealertrack.com
mobile.dealertrack.com
*.uat1.dealertrack.com
gmaccessories.dealertrack.com
*.dtdrs.dealertrack.com
dmshealth.dealertrack.com
dmshealth.dealertrack.com
dmshealth.dealertrack.com
login.dealertrack.com
dms360.dealertrack.com
*.dms.dealertrack.com
amosstatus.ifsleasing.com
www.uat1.dealertrack.com
ww2.qa1.dealertrack.com
san3166.cdntwrk.com
webservices.qa.dealertrack.com
*.my.dealertrack.com
drs.dealertrack.com
customervoice.acumatica.com
dmshealth.dealertrack.com
encrypt-np.dealertrack.com
2016complianceguide.dealertrack.com
amosstatus.ifsleasing.com
blog.dealertrack.com
dmshealth.dealertrack.com
Certificate
The complete raw certificate details for clr-bridge.dealertrack.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgIQAWXw1ka9ow0PT5Wr0L0IrTANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRUaGF3dGUgVExTIFJTQSBDQSBHMTAe Fw0xOTA4MjcwMDAwMDBaFw0yMTA4MjYxMjAwMDBaMHQxCzAJBgNVBAYTAlVTMRAw DgYDVQQIEwdHZW9yZ2lhMRAwDgYDVQQHEwdBdGxhbnRhMRwwGgYDVQQKExNDb3gg QXV0b21vdGl2ZSBJbmMuMSMwIQYDVQQDExpjbHItYnJpZGdlLmRlYWxlcnRyYWNr LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL/fgkoEFAQIZCeD rQo9MmaFOLHkJV/2PE9b/xV/NoWP0JJ4GG99rtvC+Z5BAa54NQVSPPlWbcqj65/o OGabIHc2l7JvwVRg0VgrRXkRSLQQcKGsFuEdJDDaOWzEuhzEcIh9maL5LneShzWV n1uFcqB2AqD7QZJHpgmjP/xYc5i9Rx9CAu0yO1VLQW884qaj+pezLvfwM+4UmpsA 5jxzM1YHJ3K06GvwrKeFD6thAeYyMoi7JJnBlU4SSILxcKVnzCehvspytbnK8sO4 O1+2eZ3kS2STq/+o9/zaphWVzCji46IwyhnKXmLnaTJtGamiq0CfHX/MgmgCyAA1 o0NsDscCAwEAAaOCAbcwggGzMB8GA1UdIwQYMBaAFKWM/jLM6w8s1BnGCLgAJIhd w8W3MB0GA1UdDgQWBBQT+/l2RdTaQO+QPfyeGAoeC9v18zAlBgNVHREEHjAcghpj bHItYnJpZGdlLmRlYWxlcnRyYWNrLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6 Ly9jZHAudGhhd3RlLmNvbS9UaGF3dGVUTFNSU0FDQUcxLmNybDBMBgNVHSAERTBD MDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2Vy dC5jb20vQ1BTMAgGBmeBDAECAjBwBggrBgEFBQcBAQRkMGIwJAYIKwYBBQUHMAGG GGh0dHA6Ly9zdGF0dXMudGhhd3RlLmNvbTA6BggrBgEFBQcwAoYuaHR0cDovL2Nh Y2VydHMudGhhd3RlLmNvbS9UaGF3dGVUTFNSU0FDQUcxLmNydDAJBgNVHRMEAjAA MBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBBOT93KoDY cWJX42JLauRvbsoqxOhDIRS5RXUHZwt5xABScW/n2bZqbJAdULMg8gR4TZerDKBx eJfpnTkGoBBPRKUCGSq0SIaEVwjurX7QgY21k55kUYEgjXY2mgVjjHLpQFJxPc4I kB2NwUHYLfKwkHLnn5fRcL/DgYezb/r+flniq/B+qztocxhqpczzUIH75iYA9Ull FL7vqxDKZFK8bciuWmyTPfME5nxpnhXzA/dJR9HN8KCaGSO+RjoW/15ez9Nr94M2 azhHkB2lQmpOBsGIfj4s80i+Z2gPNebtMWPO0/OXGVcHxkHfY2Bcoc96sFondO+7 UyEoSnHarGZ7 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9+CSgQUBAhkJ4OtCj0y ZoU4seQlX/Y8T1v/FX82hY/QkngYb32u28L5nkEBrng1BVI8+VZtyqPrn+g4Zpsg dzaXsm/BVGDRWCtFeRFItBBwoawW4R0kMNo5bMS6HMRwiH2Zovkud5KHNZWfW4Vy oHYCoPtBkkemCaM//FhzmL1HH0IC7TI7VUtBbzzipqP6l7Mu9/Az7hSamwDmPHMz VgcncrToa/Csp4UPq2EB5jIyiLskmcGVThJIgvFwpWfMJ6G+ynK1ucryw7g7X7Z5 neRLZJOr/6j3/NqmFZXMKOLjojDKGcpeYudpMm0ZqaKrQJ8df8yCaALIADWjQ2wO xwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1858534733521795570904344982296791213 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-27 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-26 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Georgia' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Atlanta' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cox Automotive Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'clr-bridge.dealertrack.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24221732615585122153669201369928233625529829638285287385873391773946073720753620703768419748344170568782291768872102013748566707642119091779439022748788510162197871325289539937586898796453164925069922681066414667290563970608832342764807322315369114175989447678655539722648564583290907280425887298640382063031831574255617095221314866226127726718996832165347298317123346976721548316293677214679555548610512074373586955584589136357346486147987504313952849144792736601822901128975691120639755627882879460300751843935696653836858346039748858707788067530716376451068944210653482605047335391677314761408319556699373527895751 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 13fbf97645d4da40ef903dfc9e180a1e0bdbf5f3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clr-bridge.dealertrack.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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