test.subway.nz.simplicitycrm.com
Issued by thawte DV SSL CA - G2
About this certificate
This digital certificate with serial number 06:b7:d9:b9:82:43:cc:56:64:5a:10:d3:51:b6:f3:b5 was issued on by thawte, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Certificate Subject
CN=test.subway.nz.simplicitycrm.com
thawte, Inc.
Organization:
thawte, Inc.
Organization unit: Domain Validated SSL
Organization unit: Domain Validated SSL
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 06:b7:d9:b9:82:43:cc:56:64:5a:10:d3:51:b6:f3:b5Serial Number (int): 8929974280230440507931020036152947637
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 9f:b8:c1:a9:6c:f2:f5:c0:22:2a:94:ed:5c:99:ac:d4:ec:d7:c6:07
Fingerprint (sha1): 2b:db:b2:6d:78:db:5d:8c:e4:bd:df:28:8b:20:47:db:a9:e2:98:e6
Fingerprint (sha256): 03:44:38:5c:3a:ed:95:2d:8f:90:41:d6:88:3e:99:bd:e9:bf:ee:2d:04:de:54:60:8d:4a:9c:80:6a:25:f8:1d
Issuing Certificate URL: http://tn.symcb.com/tn.crt
Revocation information
OCSP Server: http://tn.symcd.comCRL Distribution Point: http://tn.symcb.com/tn.crl
Check the revocation status for certificate test.subway.nz.simplicitycrm.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for test.subway.nz.simplicitycrm.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
test.subway.nz.simplicitycrm.com
Other certificates including the domain name simplicitycrm.com
(limited to 100 certificates)
mta.simplicitycrm.com
rightaddress-us1.simplicitycrm.com
test.friendgetfriend.simplicitycrm.com
test.subway.nz.simplicitycrm.com
sentinel.simplicitycrm.com
test.nestle.au.simplicitycrm.com
test.nestle.nz.simplicitycrm.com
test.nestle.nz.simplicitycrm.com
www.subway.nz.simplicitycrm.com
www.nestle.au.simplicitycrm.com
www.nestle.au.simplicitycrm.com
outlook.simplicitycrm.com
sareports12.simplicitycrm.com
test.subway.nz.simplicitycrm.com
www.nestle.au.simplicitycrm.com
services.simplicitycrm.com
*.simplicitycrm.com
www.subway.nz.simplicitycrm.com
legacy.simplicitycrm.com
www.nestle.professional.simplicitycrm.com
test.friendgetfriend.simplicitycrm.com
test.placemakersloyalty.simplicitycrm.com
rightaddress-us1.simplicitycrm.com
dev.cis.simplicitycrm.com
autodiscover.simplicitycrm.com
www.nectar.au.simplicitycrm.com
www.holden.au.simplicitycrm.com
test.subway.nz.simplicitycrm.com
staging.rightaddress.simplicitycrm.com
ipfx.simplicitycrm.com
outlook.simplicitycrm.com
autodiscover.simplicitycrm.com
www.subway.nz.simplicitycrm.com
www.nestle.au.simplicitycrm.com
www.subway.nz.simplicitycrm.com
test.nestle.nz.simplicitycrm.com
test.nestle.au.simplicitycrm.com
test.nestle.casemanagement.simplicitycrm.com
www.holden.au.simplicitycrm.com
test.nestle.nz.simplicitycrm.com
test.services.simplicitycrm.com
www.nectar.au.simplicitycrm.com
www.simplicitycrm.com
www.nestle.professional.simplicitycrm.com
sentinel.simplicitycrm.com
www.mcm.simplicitycrm.com
rightaddress.simplicitycrm.com
www.nestle.ninhcp.simplicitycrm.com
beacon.simplicitycrm.com
test.placemakersloyalty.simplicitycrm.com
test.placemakersloyalty.simplicitycrm.com
sentinel.simplicitycrm.com
*.simplicitycrm.com
rightaddress.simplicitycrm.com
dev.cis.simplicitycrm.com
test.subway.nz.simplicitycrm.com
sentinel.simplicitycrm.com
www.simplicitycrm.com
test.subway.nz.simplicitycrm.com
test.subway.nz.simplicitycrm.com
www.nestle.nz.simplicitycrm.com
rightaddress.simplicitycrm.com
www.jrdutyfree.simplicitycrm.com
outlook.simplicitycrm.com
test.friendgetfriend.simplicitycrm.com
www.nectar.au.simplicitycrm.com
test.nestle.au.simplicitycrm.com
test.jrdutyfree.simplicitycrm.com
www.subway.nz.simplicitycrm.com
test.placemakersloyalty.simplicitycrm.com
dev.cis.simplicitycrm.com
www.holden.au.simplicitycrm.com
www.nestle.au.simplicitycrm.com
www.nestle.nz.simplicitycrm.com
insights.simplicitycrm.com
www.holden.au.simplicitycrm.com
test.friendgetfriend.simplicitycrm.com
beacon.simplicitycrm.com
www.subway.nz.simplicitycrm.com
test.nestle.au.simplicitycrm.com
autodiscover.simplicitycrm.com
test.nestle.nz.simplicitycrm.com
www.nectar.au.simplicitycrm.com
www.nectar.au.simplicitycrm.com
www.nestle.professional.simplicitycrm.com
*.simplicitycrm.com
test.subway.nz.simplicitycrm.com
*.simplicitycrm.com
test.rightaddress.simplicitycrm.com
rightaddress.simplicitycrm.com
ipfx.simplicitycrm.com
demo.simplicitycrm.com
www.holden.au.simplicitycrm.com
rightaddress.simplicitycrm.com
test.placemakersloyalty.simplicitycrm.com
www.nestle.au.simplicitycrm.com
beacon.simplicitycrm.com
www.nectar.au.simplicitycrm.com
test.nestle.au.simplicitycrm.com
reports.simplicitycrm.com
rightaddress-us1.simplicitycrm.com
test.friendgetfriend.simplicitycrm.com
test.subway.nz.simplicitycrm.com
sentinel.simplicitycrm.com
test.nestle.au.simplicitycrm.com
test.nestle.nz.simplicitycrm.com
test.nestle.nz.simplicitycrm.com
www.subway.nz.simplicitycrm.com
www.nestle.au.simplicitycrm.com
www.nestle.au.simplicitycrm.com
outlook.simplicitycrm.com
sareports12.simplicitycrm.com
test.subway.nz.simplicitycrm.com
www.nestle.au.simplicitycrm.com
services.simplicitycrm.com
*.simplicitycrm.com
www.subway.nz.simplicitycrm.com
legacy.simplicitycrm.com
www.nestle.professional.simplicitycrm.com
test.friendgetfriend.simplicitycrm.com
test.placemakersloyalty.simplicitycrm.com
rightaddress-us1.simplicitycrm.com
dev.cis.simplicitycrm.com
autodiscover.simplicitycrm.com
www.nectar.au.simplicitycrm.com
www.holden.au.simplicitycrm.com
test.subway.nz.simplicitycrm.com
staging.rightaddress.simplicitycrm.com
ipfx.simplicitycrm.com
outlook.simplicitycrm.com
autodiscover.simplicitycrm.com
www.subway.nz.simplicitycrm.com
www.nestle.au.simplicitycrm.com
www.subway.nz.simplicitycrm.com
test.nestle.nz.simplicitycrm.com
test.nestle.au.simplicitycrm.com
test.nestle.casemanagement.simplicitycrm.com
www.holden.au.simplicitycrm.com
test.nestle.nz.simplicitycrm.com
test.services.simplicitycrm.com
www.nectar.au.simplicitycrm.com
www.simplicitycrm.com
www.nestle.professional.simplicitycrm.com
sentinel.simplicitycrm.com
www.mcm.simplicitycrm.com
rightaddress.simplicitycrm.com
www.nestle.ninhcp.simplicitycrm.com
beacon.simplicitycrm.com
test.placemakersloyalty.simplicitycrm.com
test.placemakersloyalty.simplicitycrm.com
sentinel.simplicitycrm.com
*.simplicitycrm.com
rightaddress.simplicitycrm.com
dev.cis.simplicitycrm.com
test.subway.nz.simplicitycrm.com
sentinel.simplicitycrm.com
www.simplicitycrm.com
test.subway.nz.simplicitycrm.com
test.subway.nz.simplicitycrm.com
www.nestle.nz.simplicitycrm.com
rightaddress.simplicitycrm.com
www.jrdutyfree.simplicitycrm.com
outlook.simplicitycrm.com
test.friendgetfriend.simplicitycrm.com
www.nectar.au.simplicitycrm.com
test.nestle.au.simplicitycrm.com
test.jrdutyfree.simplicitycrm.com
www.subway.nz.simplicitycrm.com
test.placemakersloyalty.simplicitycrm.com
dev.cis.simplicitycrm.com
www.holden.au.simplicitycrm.com
www.nestle.au.simplicitycrm.com
www.nestle.nz.simplicitycrm.com
insights.simplicitycrm.com
www.holden.au.simplicitycrm.com
test.friendgetfriend.simplicitycrm.com
beacon.simplicitycrm.com
www.subway.nz.simplicitycrm.com
test.nestle.au.simplicitycrm.com
autodiscover.simplicitycrm.com
test.nestle.nz.simplicitycrm.com
www.nectar.au.simplicitycrm.com
www.nectar.au.simplicitycrm.com
www.nestle.professional.simplicitycrm.com
*.simplicitycrm.com
test.subway.nz.simplicitycrm.com
*.simplicitycrm.com
test.rightaddress.simplicitycrm.com
rightaddress.simplicitycrm.com
ipfx.simplicitycrm.com
demo.simplicitycrm.com
www.holden.au.simplicitycrm.com
rightaddress.simplicitycrm.com
test.placemakersloyalty.simplicitycrm.com
www.nestle.au.simplicitycrm.com
beacon.simplicitycrm.com
www.nectar.au.simplicitycrm.com
test.nestle.au.simplicitycrm.com
reports.simplicitycrm.com
Certificate
The complete raw certificate details for test.subway.nz.simplicitycrm.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEsTCCA5mgAwIBAgIQBrfZuYJDzFZkWhDTUbbztTANBgkqhkiG9w0BAQsFADBj MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMR0wGwYDVQQLExRE b21haW4gVmFsaWRhdGVkIFNTTDEeMBwGA1UEAxMVdGhhd3RlIERWIFNTTCBDQSAt IEcyMB4XDTE3MDkxODAwMDAwMFoXDTE4MTAxODIzNTk1OVowKzEpMCcGA1UEAwwg dGVzdC5zdWJ3YXkubnouc2ltcGxpY2l0eWNybS5jb20wggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQDhjOHRB315EsHOKu8rfd2J/1d/LyQP/2mEih66Eqjw XlZwDT1nRNTAn/0AhXCjANbANOa4ggKgjwVS0k/hU8LdC8uAOv374wooSRiOP0MH 6maClWRPSejWJfh8LITHgN/ECMdxpziYJfZUzpEMJKKR/TNYdtRvomiSLsqCRhzr GGOuT3b+urcxMwq7xDoiClnyYujB7NOUWoRBCNUuK34+SEIT4u1SvWZRY6ZzQlqm rkk/OID/z2swd2YxJBCmJEJ1qoE3niToaUK+wDpukOm1no5GEL7BGxl8crwGQaku sZKJXleE3waBToerozk0ur84nBXdMidaMoS1+g/GQW5lAgMBAAGjggGXMIIBkzAr BgNVHREEJDAigiB0ZXN0LnN1YndheS5uei5zaW1wbGljaXR5Y3JtLmNvbTAJBgNV HRMEAjAAMCsGA1UdHwQkMCIwIKAeoByGGmh0dHA6Ly90bi5zeW1jYi5jb20vdG4u Y3JsMG4GA1UdIARnMGUwYwYGZ4EMAQIBMFkwJgYIKwYBBQUHAgEWGmh0dHBzOi8v d3d3LnRoYXd0ZS5jb20vY3BzMC8GCCsGAQUFBwICMCMMIWh0dHBzOi8vd3d3LnRo YXd0ZS5jb20vcmVwb3NpdG9yeTAfBgNVHSMEGDAWgBSfuMGpbPL1wCIqlO1cmazU 7NfGBzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDovL3RuLnN5bWNk LmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL3RuLnN5bWNiLmNvbS90bi5jcnQwEwYK KwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAOP/XbeU8j/YotgM V4lCXyv+riM1mO6cFZ4RbGxUxvsjMnfgNGOiw4GPIPuQ3kyPpRyQFoC1Z8V7+UOX IW0cv4grERqIcDzTuiQcidDomvOUm4Iwozq2tWbbtB0iB3j0JVVK87Z2vrnTDD9c 2Qy27FNxuccf4yA7x9WRnm6Rtx6zKzUZbtHa86oa71pv0Ca92drWSBOXbMe06Ns8 RLLaH8IrOhzvs4AtayESsVSNKIiQ36amwP9hzx8R87oNUME9Fporwq43Tb6jml6s Lod7s03srrGFZ/rO0CPxOPxzto1Yw1Ez30j9cCNRR3CxRDiBoZ0qtrSIJZI7DGm0 rvVJAN4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Yzh0Qd9eRLBzirvK33d if9Xfy8kD/9phIoeuhKo8F5WcA09Z0TUwJ/9AIVwowDWwDTmuIICoI8FUtJP4VPC 3QvLgDr9++MKKEkYjj9DB+pmgpVkT0no1iX4fCyEx4DfxAjHcac4mCX2VM6RDCSi kf0zWHbUb6Joki7KgkYc6xhjrk92/rq3MTMKu8Q6IgpZ8mLowezTlFqEQQjVLit+ PkhCE+LtUr1mUWOmc0Japq5JPziA/89rMHdmMSQQpiRCdaqBN54k6GlCvsA6bpDp tZ6ORhC+wRsZfHK8BkGpLrGSiV5XhN8GgU6Hq6M5NLq/OJwV3TInWjKEtfoPxkFu ZQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 8929974280230440507931020036152947637 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte DV SSL CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-18 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-18 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'test.subway.nz.simplicitycrm.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28473090168034117147337981924674851675780992025077315767742252235300073229064982830934275814194593293104684601063964725627880538162660401431225619690765678175319971749151981210295807267278301294361707985690530814622616677655139670836432725325133680038488115782726252083244390096956940826385394134590638791100848703770344936331291336388534026517374831052310899445988469584449116865980166419091738284900997474531410715354626050678522558651629411601077896014849809097282790615557764623779500528462668727585525090097586776772621142859483291328958006135810626635113348883541820161271572347485144171566382915111345094487653 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.subway.nz.simplicitycrm.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tn.symcb.com/tn.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9fb8c1a96cf2f5c0222a94ed5c99acd4ecd7c607 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tn.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tn.symcb.com/tn.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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