ics-cert.kaspersky.com
- AO Kaspersky Lab -
Issued by thawte EV SSL CA - G3
About this certificate
This digital certificate with serial number 7e:e1:d5:02:f4:b8:5b:65:04:39:5f:0d:f8:2a:1a:6a was issued on by thawte, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
AO Kaspersky Lab
Company registration number:
1027739867473
Organization: AO Kaspersky Lab
Organization unit: IT
Organization: AO Kaspersky Lab
Organization unit: IT
State / Province:
Moscow
Locality: Moscow
Country: RU
Locality: Moscow
Country: RU
thawte, Inc.
Organization:
thawte, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 7e:e1:d5:02:f4:b8:5b:65:04:39:5f:0d:f8:2a:1a:6aSerial Number (int): 168655314649508855382620787303808375402
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: f0:70:51:da:d3:2a:91:4f:52:77:d7:86:77:74:0f:ce:71:1a:6c:22
Fingerprint (sha1): 06:94:51:77:62:b2:05:63:d1:90:50:34:59:e1:a0:6b:da:19:c6:fd
Fingerprint (sha256): 04:0a:44:3f:4a:8b:93:72:a2:a5:f4:27:eb:5d:7d:93:84:85:01:32:8e:57:06:05:0a:a6:28:88:88:7b:a4:77
Issuing Certificate URL: http://ti.symcb.com/ti.crt
Revocation information
OCSP Server: http://ti.symcd.comCRL Distribution Point: http://ti.symcb.com/ti.crl
Check the revocation status for certificate ics-cert.kaspersky.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ics-cert.kaspersky.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ics-cert.kaspersky.com
Other certificates including the domain name kaspersky.com
(limited to 100 certificates)
meta.content.ipm.kaspersky.com
hqitsmrssom.kaspersky.com
redirect.kaspersky.com
scssm.kaspersky.com
business.kaspersky.com
go.kaspersky.com
us-business.kaspersky.com
store.tr.kaspersky.com
www.kaspersky.com
www.kaspersky.com
autocomplete.kaspersky.com
msp2021.kaspersky.com
6.kaspersky.com
kfp.kaspersky.com
KSS-INFO.KASPERSKY.COM
tr2.kaspersky.com
ipp.kaspersky.com
bug.kaspersky.com
scan.kaspersky.com
kss-info.kaspersky.com
newvirus.kaspersky.com
pdc4.kaspersky.com
account.kaspersky.com
noransom.kaspersky.com
saasnews.kaspersky.com
kids.kaspersky.com
webapi.kaspersky.com
saasnews.kaspersky.com
brandgame.kaspersky.com
innovathon.kaspersky.com
owa.kaspersky.com
itogi.kaspersky.com
calculator.kaspersky.com
activesync.kaspersky.com
*.activation-v2.kaspersky.com
kaspersky.com
premiumsupport.kaspersky.com
banya.kaspersky.com
careers.kaspersky.com
ics-cert.kaspersky.com
usa.kaspersky.com
apt.threatintel.kaspersky.com
survival.kaspersky.com
press.kaspersky.com
digitalsignature.cloud.kaspersky.com
registrations.kaspersky.com
activation.kaspersky.com
brand.kaspersky.com
support.kaspersky.com
mobile.kaspersky.com
ipmcloud.kaspersky.com
store.algerie.kaspersky.com
pdc1.kaspersky.com
wallet.kaspersky.com
store.me-en.kaspersky.com
event.kaspersky.com
encyclopedia.kaspersky.com
anti-theft.kaspersky.com
onevoice.kaspersky.com
academy.kaspersky.ru
wlinfo.kaspersky.com
us-business.kaspersky.com
finance.kaspersky.com
store.kaspersky.com
images.kaspersky.com
korm.pite.kaspersky.com
verification.content.ipmcloud.kaspersky.com
security-pulse-api.kaspersky.com
test.uis.kaspersky.com
store.kaspersky.com
links.securefutures.kaspersky.com
latam.kaspersky.com
links.welcome.kaspersky.com
statistic.content.ipm.kaspersky.com
jp.kaspersky.com
www.kaspersky.com
imf.kaspersky.com
im-demo.kaspersky.com
ipm-www.kaspersky.com
2013.cybersecurity.kaspersky.com
store.center.kaspersky.com
kids.kaspersky.com
tim.anti-theft.kaspersky.com
healthcare.kaspersky.com
usa.kaspersky.com
kss-info.kaspersky.com
activation.kaspersky.com
quotes.korm.kaspersky.com
uisnotifications.activation.kaspersky.com
free.kaspersky.com
calendar.kaspersky.com
vivo.anti-theft.kaspersky.com
registrations.kaspersky.com
blog.kaspersky.com
fof.kaspersky.com
cloud.kaspersky.com
kfp.kaspersky.com
box.kaspersky.com
new2015.kaspersky.com
forever.kaspersky.com
hqitsmrssom.kaspersky.com
redirect.kaspersky.com
scssm.kaspersky.com
business.kaspersky.com
go.kaspersky.com
us-business.kaspersky.com
store.tr.kaspersky.com
www.kaspersky.com
www.kaspersky.com
autocomplete.kaspersky.com
msp2021.kaspersky.com
6.kaspersky.com
kfp.kaspersky.com
KSS-INFO.KASPERSKY.COM
tr2.kaspersky.com
ipp.kaspersky.com
bug.kaspersky.com
scan.kaspersky.com
kss-info.kaspersky.com
newvirus.kaspersky.com
pdc4.kaspersky.com
account.kaspersky.com
noransom.kaspersky.com
saasnews.kaspersky.com
kids.kaspersky.com
webapi.kaspersky.com
saasnews.kaspersky.com
brandgame.kaspersky.com
innovathon.kaspersky.com
owa.kaspersky.com
itogi.kaspersky.com
calculator.kaspersky.com
activesync.kaspersky.com
*.activation-v2.kaspersky.com
kaspersky.com
premiumsupport.kaspersky.com
banya.kaspersky.com
careers.kaspersky.com
ics-cert.kaspersky.com
usa.kaspersky.com
apt.threatintel.kaspersky.com
survival.kaspersky.com
press.kaspersky.com
digitalsignature.cloud.kaspersky.com
registrations.kaspersky.com
activation.kaspersky.com
brand.kaspersky.com
support.kaspersky.com
mobile.kaspersky.com
ipmcloud.kaspersky.com
store.algerie.kaspersky.com
pdc1.kaspersky.com
wallet.kaspersky.com
store.me-en.kaspersky.com
event.kaspersky.com
encyclopedia.kaspersky.com
anti-theft.kaspersky.com
onevoice.kaspersky.com
academy.kaspersky.ru
wlinfo.kaspersky.com
us-business.kaspersky.com
finance.kaspersky.com
store.kaspersky.com
images.kaspersky.com
korm.pite.kaspersky.com
verification.content.ipmcloud.kaspersky.com
security-pulse-api.kaspersky.com
test.uis.kaspersky.com
store.kaspersky.com
links.securefutures.kaspersky.com
latam.kaspersky.com
links.welcome.kaspersky.com
statistic.content.ipm.kaspersky.com
jp.kaspersky.com
www.kaspersky.com
imf.kaspersky.com
im-demo.kaspersky.com
ipm-www.kaspersky.com
2013.cybersecurity.kaspersky.com
store.center.kaspersky.com
kids.kaspersky.com
tim.anti-theft.kaspersky.com
healthcare.kaspersky.com
usa.kaspersky.com
kss-info.kaspersky.com
activation.kaspersky.com
quotes.korm.kaspersky.com
uisnotifications.activation.kaspersky.com
free.kaspersky.com
calendar.kaspersky.com
vivo.anti-theft.kaspersky.com
registrations.kaspersky.com
blog.kaspersky.com
fof.kaspersky.com
cloud.kaspersky.com
kfp.kaspersky.com
box.kaspersky.com
new2015.kaspersky.com
forever.kaspersky.com
Certificate
The complete raw certificate details for ics-cert.kaspersky.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgIQfuHVAvS4W2UEOV8N+CoaajANBgkqhkiG9w0BAQsFADBE MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMR4wHAYDVQQDExV0 aGF3dGUgRVYgU1NMIENBIC0gRzMwHhcNMTcwOTA4MDAwMDAwWhcNMTgxMDA1MjM1 OTU5WjCBxDETMBEGCysGAQQBgjc8AgEDEwJSVTEZMBcGA1UECgwQQU8gS2FzcGVy c2t5IExhYjELMAkGA1UEBhMCUlUxDzANBgNVBAgMBk1vc2NvdzEPMA0GA1UEBwwG TW9zY293MR0wGwYDVQQPExRQcml2YXRlIE9yZ2FuaXphdGlvbjEWMBQGA1UEBRMN MTAyNzczOTg2NzQ3MzELMAkGA1UECwwCSVQxHzAdBgNVBAMMFmljcy1jZXJ0Lmth c3BlcnNreS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcICah dFAP7Yu8dC2pVyslZQzJ4rkqnIqA6Pg8OdyOpaeMsb4UcM1lYMGnrPurfBnC0ieT uvE7RzyL3uEeci7qvuUDh8k1jhE+3Ankan+3ck46MimzPtvwT8LhXqcP+s7Sp1DE FA5F/hJJ+iSUAEa4MxgVTqOrQeXDrs3ZhcCWzKJUwaZilv2l96OtF6N8nX1RuNcu FN+FT83FzTfTF4B94rlAZ79W+rwSmzW41jgePGNZGdN0ue9WZvmIlqt5/zW+9W2h Z7Z5GDR8r+S+cNcRJUBc/9vDb3f19mcxvh4lNG6y0krNcoMcH8C/g5/IjYiIGY+C tFiKvFuxhyZw7ERvAgMBAAGjggGbMIIBlzAhBgNVHREEGjAYghZpY3MtY2VydC5r YXNwZXJza3kuY29tMAkGA1UdEwQCMAAwDgYDVR0PAQH/BAQDAgWgMCsGA1UdHwQk MCIwIKAeoByGGmh0dHA6Ly90aS5zeW1jYi5jb20vdGkuY3JsMHwGA1UdIAR1MHMw aAYLYIZIAYb4RQEHMAEwWTAmBggrBgEFBQcCARYaaHR0cHM6Ly93d3cudGhhd3Rl LmNvbS9jcHMwLwYIKwYBBQUHAgIwIwwhaHR0cHM6Ly93d3cudGhhd3RlLmNvbS9y ZXBvc2l0b3J5MAcGBWeBDAEBMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjAfBgNVHSMEGDAWgBTwcFHa0yqRT1J314Z3dA/OcRpsIjBXBggrBgEFBQcBAQRL MEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly90aS5zeW1jZC5jb20wJgYIKwYBBQUHMAKG Gmh0dHA6Ly90aS5zeW1jYi5jb20vdGkuY3J0MBMGCisGAQQB1nkCBAMBAf8EAgUA MA0GCSqGSIb3DQEBCwUAA4IBAQCfWOpb80oIQFKjxb6aRJNYca3zms+NHhdUCSTz dr1jpb4NhMBh8iGMYoa2mg7R/J4E2NlL/VEGT4QDu8heYj+AzzplRJ2EaBAhXQSu vx82fftEOlcvn8IEriJITv9+L6vV/OcGomFVzQAwjuyJUHVcpK66kZ/YhjPp+ZwU /AoiItbRyvWTcxk7pKBa9D1PWjGfsMMUfa5y90CCZwpxjYdc2kPzVAhwqjn4g2mA RH8F3nHKPu5b/FtboJSnQ5oaOxuI+jUd6YUCQHKWgt2C0KeIF/UrAauH0Ntb0VtX vyw2Lu4oO0Quc+soTnJsLuaPKXOn806mbKsGLQ0P+kq8+z7C -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CAmoXRQD+2LvHQtqVcr JWUMyeK5KpyKgOj4PDncjqWnjLG+FHDNZWDBp6z7q3wZwtInk7rxO0c8i97hHnIu 6r7lA4fJNY4RPtwJ5Gp/t3JOOjIpsz7b8E/C4V6nD/rO0qdQxBQORf4SSfoklABG uDMYFU6jq0Hlw67N2YXAlsyiVMGmYpb9pfejrRejfJ19UbjXLhTfhU/Nxc030xeA feK5QGe/Vvq8Eps1uNY4HjxjWRnTdLnvVmb5iJaref81vvVtoWe2eRg0fK/kvnDX ESVAXP/bw2939fZnMb4eJTRustJKzXKDHB/Av4OfyI2IiBmPgrRYirxbsYcmcOxE bwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 168655314649508855382620787303808375402 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte EV SSL CA - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-08 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-05 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RU' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'AO Kaspersky Lab' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RU' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Moscow' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Moscow' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1027739867473' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ics-cert.kaspersky.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27788281292758365797137030733010737778853364764030813387230532811239021913570461314909371972113686435267357523692101242762522237014391607560853831406832208446754720502887364057747310859139390441905242338653212458377883737241394150295322404213116670038741137261443153682086562899499177034064260263870415044323497120680531986924168374057765808788984381513415521177531145268567802191471142829527771654376252646469597171367309722907544463338410776078580288543680273694823379308006363559030737630922420507285166214074060963556934554491748222505735136433154063331348963293958814407233834401155227431485430058515261419177071 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ics-cert.kaspersky.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ti.symcb.com/ti.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (117 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.48.1 (Thawte EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f07051dad32a914f5277d78677740fce711a6c22 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ti.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ti.symcb.com/ti.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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