pks2-cas2.net.uky.edu
- University Of Kentucky -
Issued by Thawte Premium Server CA
About this certificate
This digital certificate with serial number 66:09:c0:d3:4b:0e:5b:b5:3c:7c:05:0e:fa:d9:35:be was issued on by Thawte Consulting cc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- CAs must include keyIdentifer field of AKI in all non-self-issued certificates (RFC 5280: 4.2.1.1)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
University Of Kentucky
Organization:
University Of Kentucky
Organization unit: NEMOC
Organization unit: NEMOC
State / Province:
Kentucky
Locality: Lexington
Country: US
Locality: Lexington
Country: US
Thawte Consulting cc
Organization:
Thawte Consulting cc
Organization unit: Certification Services Division
Organization unit: Certification Services Division
State / Province:
Western Cape
Locality: Cape Town
Country: ZA
Locality: Cape Town
Country: ZA
This certificate has expire since
Certificate Details
Serial Number (hex): 66:09:c0:d3:4b:0e:5b:b5:3c:7c:05:0e:fa:d9:35:beSerial Number (int): 135631897204803157891986192268810335678
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId:
Fingerprint (sha1): 70:5a:0a:78:1c:12:29:87:2d:43:39:8c:bd:17:2a:ca:2e:1e:71:a9
Fingerprint (sha256): 01:8b:e8:f3:ad:6b:b3:75:74:64:80:06:9e:a2:6e:30:3c:e8:2e:57:be:1d:af:7d:52:32:a6:42:da:30:a3:4c
Revocation information
OCSP Server: http://ocsp.thawte.comCRL Distribution Point: http://crl.thawte.com/ThawteServerPremiumCA.crl
Check the revocation status for certificate pks2-cas2.net.uky.edu
0
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for pks2-cas2.net.uky.edu
Public Key Algorithm
RSA
Key Size
1024
Signature Algorithm
SHA1 with RSA
Key Usage
Extended Key Usages
Server Authentication
Client Authentication
Extensions
4 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
This certificate doesn't contain any subject alternative names.
Other certificates including the domain name uky.edu
(limited to 100 certificates)
lsv.uky.edu
remote.ca.uky.edu
www.hosp.uky.edu
download.uky.edu
imaps.netlab.uky.edu
5636470266134528-fe2.pantheonsite.io
bbtools.ad.uky.edu
landing.socialworkonline.uky.edu
5700866052980736-fe2.pantheonsite.io
5636470266134528-fe2.pantheonsite.io
scdp.uky.edu
adfs.uky.edu
alumniweb.uky.edu
ukam.uky.edu
lyncpool.ad.uky.edu
cpr.as.uky.edu
kers.ca.uky.edu
uconnectlabs.com
plyits2016svr01.mc.uky.edu
rhelp.ad.uky.edu
5636470266134528-fe2.pantheonsite.io
www.bae.uky.edu
pks2-cas2.net.uky.edu
5649684605435904-fe1.pantheonsite.io
securedns.planmygift.org
timeoffcalendar.uky.edu
ukhcsftpt.mc.uky.edu
tableaupublic.uky.edu
ww-a12.as.uky.edu
uk-pa7080-edge1-pri-mgmt.net.uky.edu
www.etrax.uky.edu
drive.uky.edu
prdukheiixdsrp04.mc.uky.edu
ctrp-dev.uky.edu
spencer.ca.uky.edu
exploreuk.uky.edu
www.hcii.cs.cmu.edu
sfbextweb.uky.edu
ibi-test.uky.edu
ukam.uky.edu
grackle.ecc.engr.uky.edu
its.net.uky.edu
horm.as.uky.edu
*.coe.uky.edu
tstukheiixdsrp02.mc.uky.edu
icmac.rch.uky.edu
mfp.uky.edu
5636470266134528-fe2.pantheonsite.io
pa7080-primary-mgmt.net.uky.edu
5700866052980736-fe2.pantheonsite.io
boonecenter.uky.edu
ra.uky.edu
5700866052980736-fe2.pantheonsite.io
prdltchvc01.mc.uky.edu
www2.ca.uky.edu
plannedgiving.zaytuna.edu
support.ccs.uky.edu
clarity.mc.uky.edu
castle.uky.edu
warehouse.ca.uky.edu
labrea.ecc.engr.uky.edu
fayette.ca.uky.edu
securedns.planmygift.org
*.law.uky.edu
ibi.uky.edu
uconnectlabs.com
sims.uky.edu
ukhcvendorreg.mc.uky.edu
5636470266134528-fe2.pantheonsite.io
athena.uky.edu
ehrci.mc.uky.edu
uconnectlabs.com
prdsprspctu01.mc.uky.edu
plyits2016svr01.mc.uky.edu
boonecenter.uky.edu
comm.uky.edu
*.mc.uky.edu
beckdt.engr.uky.edu
remote.ca.uky.edu
5636470266134528-fe2.pantheonsite.io
libraries.uky.edu
landing.socialworkonline.uky.edu
myukmpx.uky.edu
5700866052980736-fe2.pantheonsite.io
devedwcognapp01.mc.uky.edu
sudepresearch.uky.edu
i2b2ccts.uky.edu
finearts.uky.edu
sweb.uky.edu
prdcteweb01.mc.uky.edu
www.lgcr.com
www.nai.arizona.edu
prdltchvcpsc01.mc.uky.edu
pimser.coe.uky.edu
5636470266134528-fe2.pantheonsite.io
ukitspks2cmx01.net.uky.edu
scriptprorefills.mc.uky.edu
ukhr.uky.edu
5722903798611968-fe3.pantheonsite.io
ehs.uky.edu
remote.ca.uky.edu
www.hosp.uky.edu
download.uky.edu
imaps.netlab.uky.edu
5636470266134528-fe2.pantheonsite.io
bbtools.ad.uky.edu
landing.socialworkonline.uky.edu
5700866052980736-fe2.pantheonsite.io
5636470266134528-fe2.pantheonsite.io
scdp.uky.edu
adfs.uky.edu
alumniweb.uky.edu
ukam.uky.edu
lyncpool.ad.uky.edu
cpr.as.uky.edu
kers.ca.uky.edu
uconnectlabs.com
plyits2016svr01.mc.uky.edu
rhelp.ad.uky.edu
5636470266134528-fe2.pantheonsite.io
www.bae.uky.edu
pks2-cas2.net.uky.edu
5649684605435904-fe1.pantheonsite.io
securedns.planmygift.org
timeoffcalendar.uky.edu
ukhcsftpt.mc.uky.edu
tableaupublic.uky.edu
ww-a12.as.uky.edu
uk-pa7080-edge1-pri-mgmt.net.uky.edu
www.etrax.uky.edu
drive.uky.edu
prdukheiixdsrp04.mc.uky.edu
ctrp-dev.uky.edu
spencer.ca.uky.edu
exploreuk.uky.edu
www.hcii.cs.cmu.edu
sfbextweb.uky.edu
ibi-test.uky.edu
ukam.uky.edu
grackle.ecc.engr.uky.edu
its.net.uky.edu
horm.as.uky.edu
*.coe.uky.edu
tstukheiixdsrp02.mc.uky.edu
icmac.rch.uky.edu
mfp.uky.edu
5636470266134528-fe2.pantheonsite.io
pa7080-primary-mgmt.net.uky.edu
5700866052980736-fe2.pantheonsite.io
boonecenter.uky.edu
ra.uky.edu
5700866052980736-fe2.pantheonsite.io
prdltchvc01.mc.uky.edu
www2.ca.uky.edu
plannedgiving.zaytuna.edu
support.ccs.uky.edu
clarity.mc.uky.edu
castle.uky.edu
warehouse.ca.uky.edu
labrea.ecc.engr.uky.edu
fayette.ca.uky.edu
securedns.planmygift.org
*.law.uky.edu
ibi.uky.edu
uconnectlabs.com
sims.uky.edu
ukhcvendorreg.mc.uky.edu
5636470266134528-fe2.pantheonsite.io
athena.uky.edu
ehrci.mc.uky.edu
uconnectlabs.com
prdsprspctu01.mc.uky.edu
plyits2016svr01.mc.uky.edu
boonecenter.uky.edu
comm.uky.edu
*.mc.uky.edu
beckdt.engr.uky.edu
remote.ca.uky.edu
5636470266134528-fe2.pantheonsite.io
libraries.uky.edu
landing.socialworkonline.uky.edu
myukmpx.uky.edu
5700866052980736-fe2.pantheonsite.io
devedwcognapp01.mc.uky.edu
sudepresearch.uky.edu
i2b2ccts.uky.edu
finearts.uky.edu
sweb.uky.edu
prdcteweb01.mc.uky.edu
www.lgcr.com
www.nai.arizona.edu
prdltchvcpsc01.mc.uky.edu
pimser.coe.uky.edu
5636470266134528-fe2.pantheonsite.io
ukitspks2cmx01.net.uky.edu
scriptprorefills.mc.uky.edu
ukhr.uky.edu
5722903798611968-fe3.pantheonsite.io
ehs.uky.edu
Certificate
The complete raw certificate details for pks2-cas2.net.uky.edu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIDgTCCAuqgAwIBAgIQZgnA00sOW7U8fAUO+tk1vjANBgkqhkiG9w0BAQUFADCB zjELMAkGA1UEBhMCWkExFTATBgNVBAgTDFdlc3Rlcm4gQ2FwZTESMBAGA1UEBxMJ Q2FwZSBUb3duMR0wGwYDVQQKExRUaGF3dGUgQ29uc3VsdGluZyBjYzEoMCYGA1UE CxMfQ2VydGlmaWNhdGlvbiBTZXJ2aWNlcyBEaXZpc2lvbjEhMB8GA1UEAxMYVGhh d3RlIFByZW1pdW0gU2VydmVyIENBMSgwJgYJKoZIhvcNAQkBFhlwcmVtaXVtLXNl cnZlckB0aGF3dGUuY29tMB4XDTEwMDEyODAwMDAwMFoXDTExMDEyOTIzNTk1OVow gYUxCzAJBgNVBAYTAlVTMREwDwYDVQQIEwhLZW50dWNreTESMBAGA1UEBxQJTGV4 aW5ndG9uMR8wHQYDVQQKFBZVbml2ZXJzaXR5IE9mIEtlbnR1Y2t5MQ4wDAYDVQQL FAVORU1PQzEeMBwGA1UEAxQVcGtzMi1jYXMyLm5ldC51a3kuZWR1MIGfMA0GCSqG SIb3DQEBAQUAA4GNADCBiQKBgQDSIY4OGtlqYY8XLGJX4fTelGH3MTiamek4FvUd Uzg/xAarqeyFW5wu2Q8PTyjgz1ob1P9RejwWWCtlwfc83H/IvXKIt9g3oq3PlVzI nnZ8eXCcPGbUHoMperTP8h0vVRB1Rtl7XBV1GWYh0LHOU/CvteOuY9Uxs6fXfF2s ZACLnwIDAQABo4GmMIGjMAwGA1UdEwEB/wQCMAAwQAYDVR0fBDkwNzA1oDOgMYYv aHR0cDovL2NybC50aGF3dGUuY29tL1RoYXd0ZVNlcnZlclByZW1pdW1DQS5jcmww HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDIGCCsGAQUFBwEBBCYwJDAi BggrBgEFBQcwAYYWaHR0cDovL29jc3AudGhhd3RlLmNvbTANBgkqhkiG9w0BAQUF AAOBgQCsNP2jOf5NagkXNkf6hDz0I0glz5fClPpYFI3hMfwR6YAe5E+i8nlL0SBQ 6+Jssav2Gz6WIZh3GRUkQI0IP3lCdDJ2vJxHGVxtzxAFWbAqAaWPLTgplMSbyN/l AfQjWC/epiL0hPcYIb+Wpij7bxmlDlz0/28rKzICyAo6n2Y/MQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDSIY4OGtlqYY8XLGJX4fTelGH3 MTiamek4FvUdUzg/xAarqeyFW5wu2Q8PTyjgz1ob1P9RejwWWCtlwfc83H/IvXKI t9g3oq3PlVzInnZ8eXCcPGbUHoMperTP8h0vVRB1Rtl7XBV1GWYh0LHOU/CvteOu Y9Uxs6fXfF2sZACLnwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 135631897204803157891986192268810335678 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Western Cape' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cape Town' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte Consulting cc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certification Services Division' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte Premium Server CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2010-01-28 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-01-29 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kentucky' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Lexington' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'University Of Kentucky' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'NEMOC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'pks2-cas2.net.uky.edu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1120 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 147559058148902758466540848527125673947298976799210208544383359362686373508315156248585756881489885298431916181089392504396614369293858647898536559456668802310999406169614016601190231055821612834444503570795585340623540085184559966656484097157504272589369176449118079525804003226686707937595966849771743775647 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.thawte.com/ThawteServerPremiumCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (1024 bits) 00ac34fda339fe4d6a09173647fa843cf4234825cf97c294fa58148de131fc11e9801ee44fa2f2794bd12050ebe26cb1abf61b3e96219877191524408d083f7942743276bc9c47195c6dcf100559b02a01a58f2d382994c49bc8dfe501f423582fdea622f484f71821bf96a628fb6f19a50e5cf4ff6f2b2b3202c80a3a9f663f31