loki.bms.com
- Bristol-Myers Squibb Co. -
Issued by Thawte RSA CA 2018
About this certificate
This digital certificate with serial number 0e:ba:f3:57:0e:72:7e:b5:b2:bb:4b:52:42:dc:51:47 was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Bristol-Myers Squibb Co.
Organization:
Bristol-Myers Squibb Co.
Organization unit: Software Services
Organization unit: Software Services
State / Province:
New Jersey
Locality: Pennington
Country: US
Locality: Pennington
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0e:ba:f3:57:0e:72:7e:b5:b2:bb:4b:52:42:dc:51:47Serial Number (int): 19579894679531332307321748962412351815
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: c9:7c:17:a6:08:29:9c:ec:bf:5c:37:b4:76:15:b1:c5:15:10:55:d0
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a
Fingerprint (sha1): e1:e0:cd:94:aa:ad:7b:d2:00:b7:33:b3:52:22:30:bb:5d:8d:71:87
Fingerprint (sha256): 01:a3:e7:05:f9:b6:41:aa:d0:fc:4b:90:6d:a5:69:3b:41:dc:0e:e6:22:5a:e4:fc:c6:69:df:2a:fa:fc:b3:d8
Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt
Revocation information
OCSP Server: http://status.thawte.comCRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl
Check the revocation status for certificate loki.bms.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for loki.bms.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
loki.bms.com
Other certificates including the domain name bms.com
(limited to 100 certificates)
*.web-uat.bms.com
cloudapi-dev.web-dev.bms.com
pmwebspec-dev.web-dev.bms.com
bms.com
online-annual-report-2019.bms.com
chatlanguage-api-uat.web-dev.bms.com
sclaunchapi.web.bms.com
sampleredirector-lab.web-lab.bms.com
phlieconusc.bms.com
*.web-uat.bms.com
purl-dev.web-dev.bms.com
s3restapi.web-dev.bms.com
compliance-uat.web-dev.bms.com
simphoni-uat.web-dev.bms.com
sitecentral-intg-uat.web-dev.bms.com
*.web-dev.bms.com
*.web.bms.com
akamaisecure3.qualtrics.com
pc-rc.web.bms.com
sampleredirector-lab.web-lab.bms.com
confluencetest.web-dev.bms.com
lt3-distreview-ws-dev1.web-dev.bms.com
*.web.bms.com
jira.web-dev.bms.com
frictionless.bms.com
*.web-dev.bms.com
gettoknowlungcancer-dev.web-dev.bms.com
*.web-uat.bms.com
testebstandjava.web-dev.bms.com
testebstandej.web-dev.bms.com
svclayer-api-rc.web.bms.com
compgps-dev.web-dev.bms.com
siteminder-dev.web-dev.bms.com
medsights-rc.web.bms.com
iddea-mauth-proxy-dev.web-dev.bms.com
eaaapi-uat.web-dev.bms.com
paxata-dev-cm.web-dev.bms.com
*.web-dev.bms.com
pdmpa-uat.web-dev.bms.com
connect2bms.com
lt3-distreview-dotnet-ws-test.web-dev.bms.com
active-journal-dev.web-dev.bms.com
sinequa-uat.web-dev.bms.com
*.web.bms.com
siteminder-dev.web-dev.bms.com
loadingdock-lab.web-lab.bms.com
who.bms.com
glt-rc-preview.web.bms.com
beio-dev.web-dev.bms.com
*.web-dev.bms.com
*.aws.bms.com
360-uatr.web-dev.bms.com
siteminder-dev.web-dev.bms.com
fun-rc.web.bms.com
*.web-dev.bms.com
eportal-uat.bms.com
gpve.bms.com
idm-idq-dev.web-dev.bms.com
loki.bms.com
sampleredirector-dev.web-dev.bms.com
tcws.web.bms.com
gps-data-mapping-dev.web-dev.bms.com
edcnodehdp02.web.bms.com
siteminder-dev.web-dev.bms.com
siteminder-dev.web-dev.bms.com
*.web.bms.com
commgps-preview.web.bms.com
*.web-uat.bms.com
fun-dev.web-dev.bms.com
bms.com
pubd-rc.web.bms.com
sinequa-uat.web-dev.bms.com
contractorvideo.web-dev.bms.com
beio-pushnotification-api-dev.web-dev.bms.com
*.spappsp.bms.com
testebstandej.web-dev.bms.com
bms.com
uspcomplianceandethics.bms.com
mytrials.bms.com
paxata-dev-cm.web-dev.bms.com
tcwsloginsvc-lab.web-lab.bms.com
testebstandej.web-dev.bms.com
sinequa-dev.web-dev.bms.com
eroster-api-uat.web-dev.bms.com
rwcbff09.pri.bms.com
ewhitebook.bms.com
*.web-uat.bms.com
clinicaltrialsnavigator-dev.web-dev.bms.com
fiori.bms.com
pubpodcasts.web.bms.com
testebstandej.web-dev.bms.com
autoptp-rc.web.bms.com
rex-tst.bms.com
sampleredirector-dev.web-dev.bms.com
sampleredirector-lab.web-lab.bms.com
svclayer-npa-api-dev.web-dev.bms.com
*.bms.com
t-rc.web.bms.com
testebstandnodejs.web-dev.bms.com
sampleredirector-dev.web-dev.bms.com
cloudapi-dev.web-dev.bms.com
pmwebspec-dev.web-dev.bms.com
bms.com
online-annual-report-2019.bms.com
chatlanguage-api-uat.web-dev.bms.com
sclaunchapi.web.bms.com
sampleredirector-lab.web-lab.bms.com
phlieconusc.bms.com
*.web-uat.bms.com
purl-dev.web-dev.bms.com
s3restapi.web-dev.bms.com
compliance-uat.web-dev.bms.com
simphoni-uat.web-dev.bms.com
sitecentral-intg-uat.web-dev.bms.com
*.web-dev.bms.com
*.web.bms.com
akamaisecure3.qualtrics.com
pc-rc.web.bms.com
sampleredirector-lab.web-lab.bms.com
confluencetest.web-dev.bms.com
lt3-distreview-ws-dev1.web-dev.bms.com
*.web.bms.com
jira.web-dev.bms.com
frictionless.bms.com
*.web-dev.bms.com
gettoknowlungcancer-dev.web-dev.bms.com
*.web-uat.bms.com
testebstandjava.web-dev.bms.com
testebstandej.web-dev.bms.com
svclayer-api-rc.web.bms.com
compgps-dev.web-dev.bms.com
siteminder-dev.web-dev.bms.com
medsights-rc.web.bms.com
iddea-mauth-proxy-dev.web-dev.bms.com
eaaapi-uat.web-dev.bms.com
paxata-dev-cm.web-dev.bms.com
*.web-dev.bms.com
pdmpa-uat.web-dev.bms.com
connect2bms.com
lt3-distreview-dotnet-ws-test.web-dev.bms.com
active-journal-dev.web-dev.bms.com
sinequa-uat.web-dev.bms.com
*.web.bms.com
siteminder-dev.web-dev.bms.com
loadingdock-lab.web-lab.bms.com
who.bms.com
glt-rc-preview.web.bms.com
beio-dev.web-dev.bms.com
*.web-dev.bms.com
*.aws.bms.com
360-uatr.web-dev.bms.com
siteminder-dev.web-dev.bms.com
fun-rc.web.bms.com
*.web-dev.bms.com
eportal-uat.bms.com
gpve.bms.com
idm-idq-dev.web-dev.bms.com
loki.bms.com
sampleredirector-dev.web-dev.bms.com
tcws.web.bms.com
gps-data-mapping-dev.web-dev.bms.com
edcnodehdp02.web.bms.com
siteminder-dev.web-dev.bms.com
siteminder-dev.web-dev.bms.com
*.web.bms.com
commgps-preview.web.bms.com
*.web-uat.bms.com
fun-dev.web-dev.bms.com
bms.com
pubd-rc.web.bms.com
sinequa-uat.web-dev.bms.com
contractorvideo.web-dev.bms.com
beio-pushnotification-api-dev.web-dev.bms.com
*.spappsp.bms.com
testebstandej.web-dev.bms.com
bms.com
uspcomplianceandethics.bms.com
mytrials.bms.com
paxata-dev-cm.web-dev.bms.com
tcwsloginsvc-lab.web-lab.bms.com
testebstandej.web-dev.bms.com
sinequa-dev.web-dev.bms.com
eroster-api-uat.web-dev.bms.com
rwcbff09.pri.bms.com
ewhitebook.bms.com
*.web-uat.bms.com
clinicaltrialsnavigator-dev.web-dev.bms.com
fiori.bms.com
pubpodcasts.web.bms.com
testebstandej.web-dev.bms.com
autoptp-rc.web.bms.com
rex-tst.bms.com
sampleredirector-dev.web-dev.bms.com
sampleredirector-lab.web-lab.bms.com
svclayer-npa-api-dev.web-dev.bms.com
*.bms.com
t-rc.web.bms.com
testebstandnodejs.web-dev.bms.com
sampleredirector-dev.web-dev.bms.com
Certificate
The complete raw certificate details for loki.bms.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgIQDrrzVw5yfrWyu0tSQtxRRzANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMRswGQYDVQQDExJUaGF3dGUgUlNBIENBIDIwMTgwHhcN MTkwOTE3MDAwMDAwWhcNMjEwOTE2MTIwMDAwWjCBjTELMAkGA1UEBhMCVVMxEzAR BgNVBAgTCk5ldyBKZXJzZXkxEzARBgNVBAcTClBlbm5pbmd0b24xITAfBgNVBAoT GEJyaXN0b2wtTXllcnMgU3F1aWJiIENvLjEaMBgGA1UECxMRU29mdHdhcmUgU2Vy dmljZXMxFTATBgNVBAMTDGxva2kuYm1zLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAMtln3cuz0vJ/TNX4HyrCD1Alg9vEQ12afGO018fbu8wBA9T VjYUmOWMQMLJSEBM1pQp700kJZ8n5v3nZuq87YW6V0gK+Pn9S03Yiacg5cwQtQR9 pAhSYkTclaEzrRwQlz1tJ1y4AMD6itnwa82Ru8bNwVgoazgjMREWLTb1laAa9raf EDDNvtpKevI8+sGhRmufl6WwuBvk7aLJYa1bULTn1/e2N5r73taQFRwbds50F01o nNjnHeRDti8B/4e5vck9jwHRz7dzcsYIlCvhylhCLO5A9YYUqmFlBSjlAzw83ry9 N9poM8ezK3IHw3wsnM5efhf+WBAyL4xu4sYOlgsCAwEAAaOCAacwggGjMB8GA1Ud IwQYMBaAFKPIXmVU5TB4wQXqBwpqWcy5/t5aMB0GA1UdDgQWBBTJfBemCCmc7L9c N7R2FbHFFRBV0DAXBgNVHREEEDAOggxsb2tpLmJtcy5jb20wDgYDVR0PAQH/BAQD AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA6BgNVHR8EMzAxMC+g LaArhilodHRwOi8vY2RwLnRoYXd0ZS5jb20vVGhhd3RlUlNBQ0EyMDE4LmNybDBM BgNVHSAERTBDMDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3 dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjBvBggrBgEFBQcBAQRjMGEwJAYI KwYBBQUHMAGGGGh0dHA6Ly9zdGF0dXMudGhhd3RlLmNvbTA5BggrBgEFBQcwAoYt aHR0cDovL2NhY2VydHMudGhhd3RlLmNvbS9UaGF3dGVSU0FDQTIwMTguY3J0MAkG A1UdEwQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEB AHUxpcflHsMb4fv7u/4O4Cc0Izzc1E8Nw5B83OznMYwZvB+2NDotNGMyeEUz9L2h fXbLPThIM3fPHby4/c5QofVqGwOp3e+ICOqdPTm2hg6V7ZZhgTs5A0kN3IFXgSoK BFDFLOucA91qstC04OXDNaJV10U+aM8Tr1nIi8YyKKATQSmMR9mXYv6d2FnWvFbi 0B9nZZCtExzroyuj6qmQwvo8Gz4++t+1CiIfyPy0OzemJ0wBZGwzsHHkATzo9vHv oTSKJVvpSFcMh6oFoLShdPgI2hYsK5TKcdJtqK1WKKQYhg6gn2dHOlQXtuup01AO oODnOxj/ks+mk896FrSeNug= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2Wfdy7PS8n9M1fgfKsI PUCWD28RDXZp8Y7TXx9u7zAED1NWNhSY5YxAwslIQEzWlCnvTSQlnyfm/edm6rzt hbpXSAr4+f1LTdiJpyDlzBC1BH2kCFJiRNyVoTOtHBCXPW0nXLgAwPqK2fBrzZG7 xs3BWChrOCMxERYtNvWVoBr2tp8QMM2+2kp68jz6waFGa5+XpbC4G+TtoslhrVtQ tOfX97Y3mvve1pAVHBt2znQXTWic2Ocd5EO2LwH/h7m9yT2PAdHPt3NyxgiUK+HK WEIs7kD1hhSqYWUFKOUDPDzevL032mgzx7MrcgfDfCyczl5+F/5YEDIvjG7ixg6W CwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 19579894679531332307321748962412351815 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-17 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-16 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennington' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bristol-Myers Squibb Co.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Software Services' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'loki.bms.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25676488033887275717257242680314442356379650565286774021873252454742662731269297837242958189027629509325965418411949323109902506952745893033386915773011845290586096322241157204954566373698742177346263580968340030962922029590506998291452036674475095543774539203419018933248802644516226709308803629870567337540418614808029030963787907376682112445009069055802567374255979964580179658587760371152774826101822099965757065570939700592059593193510437148277820938827221347738616494985764485653444391631533451258259208925267288703326910989459541925766943285517382580049987976780393172567055487066558795312115980817114545952267 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c97c17a608299cecbf5c37b47615b1c5151055d0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loki.bms.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 007531a5c7e51ec31be1fbfbbbfe0ee02734233cdcd44f0dc3907cdcece7318c19bc1fb6343a2d346332784533f4bda17d76cb3d38483377cf1dbcb8fdce50a1f56a1b03a9ddef8808ea9d3d39b6860e95ed9661813b3903490ddc8157812a0a0450c52ceb9c03dd6ab2d0b4e0e5c335a255d7453e68cf13af59c88bc63228a01341298c47d99762fe9dd859d6bc56e2d01f676590ad131ceba32ba3eaa990c2fa3c1b3e3efadfb50a221fc8fcb43b37a6274c01646c33b071e4013ce8f6f1efa1348a255be948570c87aa05a0b4a174f808da162c2b94ca71d26da8ad5628a418860ea09f67473a5417b6eba9d3500ea0e0e73b18ff92cfa693cf7a16b49e36e8