*.sea-cargo.no
- Sea Cargo AS -
Issued by Thawte RSA CA 2018
About this certificate
This digital certificate with serial number 07:62:31:e1:fd:fc:71:42:76:3d:40:70:7e:17:d9:5d was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Sea Cargo AS
Organization:
Sea Cargo AS
Organization unit: IT dep
Organization unit: IT dep
Locality:
Paradis
Country: NO
Country: NO
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 07:62:31:e1:fd:fc:71:42:76:3d:40:70:7e:17:d9:5dSerial Number (int): 9814452805642860504010269021013793117
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 3f:82:7d:f8:55:f3:e0:0e:c0:ed:53:09:69:3a:a9:5f:85:c9:5f:e9
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a
Fingerprint (sha1): 3d:1c:9a:16:fe:f8:16:58:e8:f4:9d:6b:9b:df:ba:f5:80:49:8b:17
Fingerprint (sha256): 01:e1:8d:52:66:60:b6:26:1a:56:38:f6:fb:b4:09:5a:57:4d:ff:91:3f:b5:b4:63:05:76:73:f5:bb:e0:f3:5c
Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt
Revocation information
OCSP Server: http://status.thawte.comCRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl
Check the revocation status for certificate *.sea-cargo.no
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.sea-cargo.no
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.sea-cargo.no
sea-cargo.no
sea-cargo.no
Other certificates including the domain name sea-cargo.no
(limited to 100 certificates)
*.sea-cargo.no
*.sea-cargo.no
*.sea-cargo.no
invoice.sea-cargo.no
*.sea-cargo.no
access.okonomibistand.no
sip.sticos.no
access.sirakvina.no
*.sea-cargo.no
sea-cargo.no
sea-cargo.no
access.sea-cargo.no
sea-cargo.no
portal.sea-cargo.no
ts.sea-cargo.no
*.sea-cargo.no
sea-cargo.no
sea-cargo.no
access.seatrans.no
sea-cargo.no
sea-cargo.no
*.sea-cargo.no
sea-cargo.no
uc.sea-cargo.no
access.okonomibistand.no
sea-cargo.no
sip.sticos.no
uc.sea-cargo.no
invoice.sea-cargo.no
access.certasretail.no
access.certasretail.no
access.sea-cargo.no
uc.sea-cargo.no
webmail.sea-cargo.no
*.sea-cargo.no
*.sea-cargo.no
invoice.sea-cargo.no
*.sea-cargo.no
access.okonomibistand.no
sip.sticos.no
access.sirakvina.no
*.sea-cargo.no
sea-cargo.no
sea-cargo.no
access.sea-cargo.no
sea-cargo.no
portal.sea-cargo.no
ts.sea-cargo.no
*.sea-cargo.no
sea-cargo.no
sea-cargo.no
access.seatrans.no
sea-cargo.no
sea-cargo.no
*.sea-cargo.no
sea-cargo.no
uc.sea-cargo.no
access.okonomibistand.no
sea-cargo.no
sip.sticos.no
uc.sea-cargo.no
invoice.sea-cargo.no
access.certasretail.no
access.certasretail.no
access.sea-cargo.no
uc.sea-cargo.no
webmail.sea-cargo.no
Certificate
The complete raw certificate details for *.sea-cargo.no in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGbTCCBVWgAwIBAgIQB2Ix4f38cUJ2PUBwfhfZXTANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMRswGQYDVQQDExJUaGF3dGUgUlNBIENBIDIwMTgwHhcN MTgwMzA4MDAwMDAwWhcNMjAwMzA3MTIwMDAwWjBgMQswCQYDVQQGEwJOTzEQMA4G A1UEBxMHUGFyYWRpczEVMBMGA1UEChMMU2VhIENhcmdvIEFTMQ8wDQYDVQQLEwZJ VCBkZXAxFzAVBgNVBAMMDiouc2VhLWNhcmdvLm5vMIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEA2wrb/V7r+aYgPpsGffouu5uX2e8HAjQkhjPifnmtFi5J xnzP54PO1aztyqHyy6b8+nY7gmQsjY69uN52LranjtIlmOmqNGqf5vmZkJa+Lwuz xfhuGiQLXiQPF6qQwIODEHi/7LWG2CZ+egZjA/RnIFgvjkZbclxwbEKftl5sSifw RwyEiJANaWKar+01xsgyp3H6YUe9LK+xbArIQZdECZ3S4qU4vJi/etGQFkOSTF9u 6h5zFdCMeJBgw+S8+8JLLFafbgTh9QbdeqqyTLNdkoY2+zlKdjMbfxGJFnHR3OTV 5rfYhYNnAYRLWtyT4KyGrmwptCuWKJutTWlCDLmlUwIDAQABo4IDJTCCAyEwHwYD VR0jBBgwFoAUo8heZVTlMHjBBeoHCmpZzLn+3lowHQYDVR0OBBYEFD+CffhV8+AO wO1TCWk6qV+FyV/pMCcGA1UdEQQgMB6CDiouc2VhLWNhcmdvLm5vggxzZWEtY2Fy Z28ubm8wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjA6BgNVHR8EMzAxMC+gLaArhilodHRwOi8vY2RwLnRoYXd0ZS5jb20vVGhh d3RlUlNBQ0EyMDE4LmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBATAqMCgGCCsG AQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjBv BggrBgEFBQcBAQRjMGEwJAYIKwYBBQUHMAGGGGh0dHA6Ly9zdGF0dXMudGhhd3Rl LmNvbTA5BggrBgEFBQcwAoYtaHR0cDovL2NhY2VydHMudGhhd3RlLmNvbS9UaGF3 dGVSU0FDQTIwMTguY3J0MAkGA1UdEwQCMAAwggF/BgorBgEEAdZ5AgQCBIIBbwSC AWsBaQB2AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABYgVduYYA AAQDAEcwRQIgGjsXEXisaEagV4UVmFquqGLCobBKHNiQlmigUevsS+UCIQD42Mty bD5gIH6QHKQX1DjEqNbkPRNXdT/zUhzLf4uscAB2AG9Tdqwx8DEZ2JkApFEV/3cV HBHZAsEAKQaNsgiaN9kTAAABYgVduuAAAAQDAEcwRQIga06Ynna3Eye21AmgTka3 f/pi+WAE8q5ILeNVyUvNNu8CIQDOu1XQrEdebIsqXbZQl/j+AnsYnMoaq8GV662K zqu7sQB3AO5Lvbd1zmC64UJpH6vhnmajD35fsHLYgwDEe4l6qP3LAAABYgVdubAA AAQDAEgwRgIhALze0Lz3JgzFVC3QKW7y4yReYrKFuUHrhMrn/Lq68UDEAiEA8Ucu vFj58AuCPru9uJU5LkM44ws5PAHkXttZFeY8iaQwDQYJKoZIhvcNAQELBQADggEB ABl1U+pxB1TJXWwtewxi+Gi1L5GHhBqkCR+/yBEk/ZXqgaEPY/tBzFM3sJUaBtbL Y5lMoQMoaU55PSbtxkoEsGzL1Ga9rJBUFZLB/V0knvOXsJ0E8FfTdAAfeBl6PHui LV0NjYO9eFsiZ4Z3HLEHqX9Vli4+F9p314DEH1mNLTVxGFH2PGWdq+Y854EhXnKI SQx0FRJQFZ59c4DKhZ6w182GbASnDSJ+1VeMzd1gkQMykpGyYn0AZ9wozAvSGMpj 7pMdoWWzm8D689bKZuEUF394dRR+WIQNQ2wJunmMktl3+8GdsVwu69DEIgT4+inX BQ553e7fJ0nomJfGzegDjKw= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wrb/V7r+aYgPpsGffou u5uX2e8HAjQkhjPifnmtFi5JxnzP54PO1aztyqHyy6b8+nY7gmQsjY69uN52Lran jtIlmOmqNGqf5vmZkJa+LwuzxfhuGiQLXiQPF6qQwIODEHi/7LWG2CZ+egZjA/Rn IFgvjkZbclxwbEKftl5sSifwRwyEiJANaWKar+01xsgyp3H6YUe9LK+xbArIQZdE CZ3S4qU4vJi/etGQFkOSTF9u6h5zFdCMeJBgw+S8+8JLLFafbgTh9QbdeqqyTLNd koY2+zlKdjMbfxGJFnHR3OTV5rfYhYNnAYRLWtyT4KyGrmwptCuWKJutTWlCDLml UwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 9814452805642860504010269021013793117 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-08 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-07 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paradis' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sea Cargo AS' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT dep' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.sea-cargo.no' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27651543725178120328844377777599945671813439223713134807258739998451704288385726770762499689839601779342103091854894429020725494238473018812376737645048624640427915551075277953939248934714579964440654829608186927725144791276223976985935871716600473513770382039616486166611351543942701496951334940460607638782074863176674251652403478843350638519707866271187133425486972486123143206508657218360686125636278028232490044722772066774144297939173165146111273100297204984304546199123422998612626140307339595387570090936456541917432247079064612930664982688810814262532874666051980928268055476474510324099139030301821550306643 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3f827df855f3e00ec0ed5309693aa95f85c95fe9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sea-cargo.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sea-cargo.no' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 0169007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000162055db986000004030047304502201a3b171178ac6846a0578515985aaea862c2a1b04a1cd8909668a051ebec4be5022100f8d8cb726c3e60207e901ca417d438c4a8d6e43d1357753ff3521ccb7f8bac700076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000162055dbae0000004030047304502206b4e989e76b71327b6d409a04e46b77ffa62f96004f2ae482de355c94bcd36ef022100cebb55d0ac475e6c8b2a5db65097f8fe027b189cca1aabc195ebad8aceabbbb1007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000162055db9b00000040300483046022100bcded0bcf7260cc5542dd0296ef2e3245e62b285b941eb84cae7fcbabaf140c4022100f1472ebc58f9f00b823ebbbdb895392e4338e30b393c01e45edb5915e63c89a4 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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