ts.plumsteadmanor.com

- Plumstead Manor Pre-School -

Issued by Thawte SSL CA

About this certificate

This digital certificate with serial number 04:1e:00:05:b9:b1:dd:22:29:a0:ca:98:7a:18:4a:74 was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Plumstead Manor Pre-School

Organization: Plumstead Manor Pre-School
Organization unit: Capita IT Services
State / Province: London
Locality: Greenwich
Country: GB

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1e:00:05:b9:b1:dd:22:29:a0:ca:98:7a:18:4a:74
Serial Number (int): 5472681342506271851995090982503205492
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: a7:a2:83:bb:34:45:40:3d:fc:d5:30:4f:12:b9:3e:a1:01:9f:f6:db

Fingerprint (sha1): e5:f7:a9:99:3c:49:5e:40:76:2b:ee:8c:ed:4f:27:16:4d:69:ad:5d
Fingerprint (sha256): 02:eb:13:be:e8:97:ac:71:12:5d:64:48:56:6c:de:dd:f8:e4:b2:4e:52:ea:0b:b3:13:28:a3:cb:d8:d5:24:84

Issuing Certificate URL: http://svr-ov-aia.thawte.com/ThawteOV.cer

Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-ov-crl.thawte.com/ThawteOV.crl

Check the revocation status for certificate ts.plumsteadmanor.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ts.plumsteadmanor.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ts.plumsteadmanor.com

Other certificates including the domain name plumsteadmanor.com

(limited to 100 certificates)
ithelpdesk.ttmgroup.ie
servicedesk.weareavidity.com
servicedesk.vretigas.it
ts.plumsteadmanor.com
insight.plumsteadmanor.com
helpdesk.sicom.mu
sdp.dilloneustace.ie
helpdesk.wentworthclub.com
helpdesk.saviaantjes.be
plumsteadmanor.com
sdpcloud.netwarx.com
ictportal.linkfinancial.eu
ithelp.mhphotels.com
ithelp.mhphotels.com
sdp.dilloneustace.ie
helpdesk.aerocompact.com
helpdesk.bedes.org
servicedesk.bat-agrar.de
plumsteadmanor.com
helpdeskittest.zetes.com
www.sixthform.plumsteadmanor.com
aiseait.fuchs.com
insight.plumsteadmanor.com
insight.plumsteadmanor.com
helpdesk.hambroperks.com
assist.pentest.partners
itservicedesk.eldoradogold.com
helpdesk.bedes.org
servicedesk.procentia.com
servicedesk.bellrockgroup.co.uk
helpdesk.vista.ch
servicedesk.jmlgroup.co.uk
assist.pentest.partners
ithelpdesk.ttmgroup.ie
assist.pentest.partners
plumsteadmanor.com
servicedesk.jmlgroup.co.uk
assist.pentest.partners
aiseait.fuchs.com
servicedesk.bwbconsulting.com
assist.pentest.partners
assist.pentest.partners
helpdesk.plumsteadmanor.com
helpdesk.actosoft.de
assist.pentest.partners
assist.pentest.partners
plumsteadmanor.com
helpdesk.actosoft.de
ithelpdesk.rev-log.com
sau.solarprofit.es
assist.pentest.partners
helpdeskittest.zetes.com
plumsteadmanor.com
servicedesk.bat-agrar.de
servicedesk.weareavidity.com
helpdesk.bedes.org
aiseait.fuchs.com
ithelp.mhphotels.com
aiseait.fuchs.com
helpdesk.coulisse.com
helpdesk.nationalcaregroup.com
servicedesk.procentia.com
helpdesk.wentworthclub.com
helpdesk.bedes.org
servicedesk.winfieldunited.co.za
helpdesk.saviaantjes.be
assist.pentest.partners
itservicedesk.eldoradogold.com
helpdesk.vista.ch
assist.pentest.partners
ts.plumsteadmanor.com
helpdesk.nationalcaregroup.com
sistemes.accio.gencat.cat
ictportal.linkfinancial.eu
helpdesk.minitab.com
insight.plumsteadmanor.com
ithelpdesk.rev-log.com
sistemes.accio.gencat.cat
sdp.vdp.com
ithelpdesk.rev-log.com
assist.pentest.partners
servicedesk.procentia.com
servicedesk.weareavidity.com
helpdesk.hambroperks.com
helpdesk.sicom.mu
helpdesk.nationalcaregroup.com
assist.pentest.partners
helpdesk.sicom.mu
ictportal.linkfinancial.eu
helpdeskittest.zetes.com
assist.pentest.partners
assist.pentest.partners
helpdesk.plumsteadmanor.com
assist.pentest.partners
servicedesk.jmlgroup.co.uk
ictportal.linkfinancial.eu
servicedesk.winfieldunited.co.za
ithelpdesk.archlynk.com
pomoc.wsuz.edu.pl
pomoc.wsuz.edu.pl

Certificate

The complete raw certificate details for ts.plumsteadmanor.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEyTCCA7GgAwIBAgIQBB4ABbmx3SIpoMqYehhKdDANBgkqhkiG9w0BAQUFADA8
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMVGhhd3RlLCBJbmMuMRYwFAYDVQQDEw1U
aGF3dGUgU1NMIENBMB4XDTEyMDkyNzAwMDAwMFoXDTE2MTIwNjIzNTk1OVowgZQx
CzAJBgNVBAYTAkdCMQ8wDQYDVQQIEwZMb25kb24xEjAQBgNVBAcUCUdyZWVud2lj
aDEjMCEGA1UEChQaUGx1bXN0ZWFkIE1hbm9yIFByZS1TY2hvb2wxGzAZBgNVBAsU
EkNhcGl0YSBJVCBTZXJ2aWNlczEeMBwGA1UEAxQVdHMucGx1bXN0ZWFkbWFub3Iu
Y29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA65KHGGU8s/c3D13B
51Oc2YBlhWGeVJaAq4/eX+Rt/J/xLW+uzSDpLW6fUvVxgW08M+hxfHR3lNzXM1YR
whc3LDasbooPX0jYGpaT/uVn6s1roqcWBYzgm8k6EvZMBGSaoqA5WQm5qevgf9mE
7Z4GNf23YJKZ8CIH7Jp/9LGS/yOeYHcTUgk752oLFtfkK8K8TqKaXKphs1hUiY9P
SAljqn3VjvrGco5okAsV3Fa1d3Dc5FJtX1Hg4oJURicCmMBCfoqzupLIUMePFNSm
HiGVk4QxHEvJn/YcilCcXsFbFhEN6oBigbTz2U39GJbrB68zwWsKGoHHd145CiaY
PsoCowIDAQABo4IBbDCCAWgwIAYDVR0RBBkwF4IVdHMucGx1bXN0ZWFkbWFub3Iu
Y29tMAkGA1UdEwQCMAAwQgYDVR0gBDswOTA3BgpghkgBhvhFAQc2MCkwJwYIKwYB
BQUHAgEWG2h0dHBzOi8vd3d3LnRoYXd0ZS5jb20vY3BzLzAOBgNVHQ8BAf8EBAMC
BaAwHwYDVR0jBBgwFoAUp6KDuzRFQD381TBPErk+oQGf9tswOgYDVR0fBDMwMTAv
oC2gK4YpaHR0cDovL3N2ci1vdi1jcmwudGhhd3RlLmNvbS9UaGF3dGVPVi5jcmww
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMGkGCCsGAQUFBwEBBF0wWzAi
BggrBgEFBQcwAYYWaHR0cDovL29jc3AudGhhd3RlLmNvbTA1BggrBgEFBQcwAoYp
aHR0cDovL3N2ci1vdi1haWEudGhhd3RlLmNvbS9UaGF3dGVPVi5jZXIwDQYJKoZI
hvcNAQEFBQADggEBABuCLJ33HvOYyZXGSSjAIEybX4L3yE5lXrZfXPiK/udwgzAJ
IIdvTh0nuTR5jPiicodwRGq+9//nQCgoCWlEL2vDoXagvgquSzITVwZmUFs8+Sd2
JaG8VrSv3hXVutBoBoqTZcWVgJVWQdK4HEaeRhX3+DSXitanTAXSr09v63QkEUZl
FWRHABfPeNv9aUeJ2q6KM5rBBerlxrzdDTjFzPwgDUOWE9ui05uQFrbhlKVlXYoS
gTw0dPI24wWaQC4j678UIPrJRjI2/PorGv03bEa4DskqYv98bOp7Me0CXe2yfvI2
XTKdsvc/9b6O4OEMaaj8fD/JWsni6cZqLYYoUTw=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA65KHGGU8s/c3D13B51Oc
2YBlhWGeVJaAq4/eX+Rt/J/xLW+uzSDpLW6fUvVxgW08M+hxfHR3lNzXM1YRwhc3
LDasbooPX0jYGpaT/uVn6s1roqcWBYzgm8k6EvZMBGSaoqA5WQm5qevgf9mE7Z4G
Nf23YJKZ8CIH7Jp/9LGS/yOeYHcTUgk752oLFtfkK8K8TqKaXKphs1hUiY9PSAlj
qn3VjvrGco5okAsV3Fa1d3Dc5FJtX1Hg4oJURicCmMBCfoqzupLIUMePFNSmHiGV
k4QxHEvJn/YcilCcXsFbFhEN6oBigbTz2U39GJbrB68zwWsKGoHHd145CiaYPsoC
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5472681342506271851995090982503205492
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-09-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Greenwich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Plumstead Manor Pre-School'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Capita IT Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'ts.plumsteadmanor.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29738257176780707978386756686518784693311123842619798842349394400112954007210080200777525721911113650377796109239621880237624543855529765067202913778094525239586623941339821593932219395604890680335117815473026856292081994735473351726322654084731950913201700193102864792598199536982012617489858489681210934057642327351605701189188691100303117662884320127435948268198879740161849460506968472261447697063913908411268519378437690998613589612929046990552532315177764710652189963041217693954752293055392896433406409290955029917634265508054026523894631071004467403897082857034424400471069216921780331303423297766139284292259
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts.plumsteadmanor.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a7a283bb3445403dfcd5304f12b93ea1019ff6db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-crl.thawte.com/ThawteOV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-aia.thawte.com/ThawteOV.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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