activation.kaspersky.com
- AO Kaspersky Lab -
Issued by thawte SSL CA - G2
About this certificate
This digital certificate with serial number 6d:f9:a7:b8:f9:ba:0d:5c:21:0a:2b:c8:e1:6b:46:04 was issued on by thawte, Inc..
With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
AO Kaspersky Lab
Organization:
AO Kaspersky Lab
Organization unit: IT
Organization unit: IT
State / Province:
Moscow
Locality: Moscow
Country: RU
Locality: Moscow
Country: RU
thawte, Inc.
Organization:
thawte, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 6d:f9:a7:b8:f9:ba:0d:5c:21:0a:2b:c8:e1:6b:46:04Serial Number (int): 146182135276003405417826718280011433476
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60
Fingerprint (sha1): 16:85:21:fd:09:de:fa:03:2c:ba:39:97:b2:47:7d:51:46:43:9e:08
Fingerprint (sha256): 05:0a:e2:e7:75:1c:db:47:ae:54:5c:e5:39:1e:e0:ec:04:77:f7:92:6f:0e:aa:0f:65:b0:ed:a8:56:86:74:e2
Issuing Certificate URL: http://tj.symcb.com/tj.crt
Revocation information
OCSP Server: http://tj.symcd.comCRL Distribution Point: http://tj.symcb.com/tj.crl
Check the revocation status for certificate activation.kaspersky.com
8
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for activation.kaspersky.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
auto-activation0.kaspersky.com
auto-activation1.kaspersky.com
auto-activation2.kaspersky.com
auto-activation3.kaspersky.com
auto-activation4.kaspersky.com
auto-activation5.kaspersky.com
auto-activation6.kaspersky.com
activation.kaspersky.com
auto-activation1.kaspersky.com
auto-activation2.kaspersky.com
auto-activation3.kaspersky.com
auto-activation4.kaspersky.com
auto-activation5.kaspersky.com
auto-activation6.kaspersky.com
activation.kaspersky.com
Other certificates including the domain name kaspersky.com
(limited to 100 certificates)
meta.content.ipm.kaspersky.com
hqitsmrssom.kaspersky.com
redirect.kaspersky.com
scssm.kaspersky.com
business.kaspersky.com
go.kaspersky.com
us-business.kaspersky.com
store.tr.kaspersky.com
www.kaspersky.com
www.kaspersky.com
autocomplete.kaspersky.com
msp2021.kaspersky.com
6.kaspersky.com
kfp.kaspersky.com
KSS-INFO.KASPERSKY.COM
tr2.kaspersky.com
ipp.kaspersky.com
bug.kaspersky.com
scan.kaspersky.com
kss-info.kaspersky.com
newvirus.kaspersky.com
pdc4.kaspersky.com
account.kaspersky.com
noransom.kaspersky.com
saasnews.kaspersky.com
kids.kaspersky.com
webapi.kaspersky.com
saasnews.kaspersky.com
brandgame.kaspersky.com
innovathon.kaspersky.com
owa.kaspersky.com
itogi.kaspersky.com
calculator.kaspersky.com
activesync.kaspersky.com
*.activation-v2.kaspersky.com
kaspersky.com
premiumsupport.kaspersky.com
banya.kaspersky.com
careers.kaspersky.com
ics-cert.kaspersky.com
usa.kaspersky.com
apt.threatintel.kaspersky.com
survival.kaspersky.com
press.kaspersky.com
digitalsignature.cloud.kaspersky.com
registrations.kaspersky.com
activation.kaspersky.com
brand.kaspersky.com
support.kaspersky.com
mobile.kaspersky.com
ipmcloud.kaspersky.com
store.algerie.kaspersky.com
pdc1.kaspersky.com
wallet.kaspersky.com
store.me-en.kaspersky.com
event.kaspersky.com
encyclopedia.kaspersky.com
anti-theft.kaspersky.com
onevoice.kaspersky.com
academy.kaspersky.ru
wlinfo.kaspersky.com
us-business.kaspersky.com
finance.kaspersky.com
store.kaspersky.com
images.kaspersky.com
korm.pite.kaspersky.com
verification.content.ipmcloud.kaspersky.com
security-pulse-api.kaspersky.com
test.uis.kaspersky.com
store.kaspersky.com
links.securefutures.kaspersky.com
latam.kaspersky.com
links.welcome.kaspersky.com
statistic.content.ipm.kaspersky.com
jp.kaspersky.com
www.kaspersky.com
imf.kaspersky.com
im-demo.kaspersky.com
ipm-www.kaspersky.com
2013.cybersecurity.kaspersky.com
store.center.kaspersky.com
kids.kaspersky.com
tim.anti-theft.kaspersky.com
healthcare.kaspersky.com
usa.kaspersky.com
kss-info.kaspersky.com
activation.kaspersky.com
quotes.korm.kaspersky.com
uisnotifications.activation.kaspersky.com
free.kaspersky.com
calendar.kaspersky.com
vivo.anti-theft.kaspersky.com
registrations.kaspersky.com
blog.kaspersky.com
fof.kaspersky.com
cloud.kaspersky.com
kfp.kaspersky.com
box.kaspersky.com
new2015.kaspersky.com
forever.kaspersky.com
hqitsmrssom.kaspersky.com
redirect.kaspersky.com
scssm.kaspersky.com
business.kaspersky.com
go.kaspersky.com
us-business.kaspersky.com
store.tr.kaspersky.com
www.kaspersky.com
www.kaspersky.com
autocomplete.kaspersky.com
msp2021.kaspersky.com
6.kaspersky.com
kfp.kaspersky.com
KSS-INFO.KASPERSKY.COM
tr2.kaspersky.com
ipp.kaspersky.com
bug.kaspersky.com
scan.kaspersky.com
kss-info.kaspersky.com
newvirus.kaspersky.com
pdc4.kaspersky.com
account.kaspersky.com
noransom.kaspersky.com
saasnews.kaspersky.com
kids.kaspersky.com
webapi.kaspersky.com
saasnews.kaspersky.com
brandgame.kaspersky.com
innovathon.kaspersky.com
owa.kaspersky.com
itogi.kaspersky.com
calculator.kaspersky.com
activesync.kaspersky.com
*.activation-v2.kaspersky.com
kaspersky.com
premiumsupport.kaspersky.com
banya.kaspersky.com
careers.kaspersky.com
ics-cert.kaspersky.com
usa.kaspersky.com
apt.threatintel.kaspersky.com
survival.kaspersky.com
press.kaspersky.com
digitalsignature.cloud.kaspersky.com
registrations.kaspersky.com
activation.kaspersky.com
brand.kaspersky.com
support.kaspersky.com
mobile.kaspersky.com
ipmcloud.kaspersky.com
store.algerie.kaspersky.com
pdc1.kaspersky.com
wallet.kaspersky.com
store.me-en.kaspersky.com
event.kaspersky.com
encyclopedia.kaspersky.com
anti-theft.kaspersky.com
onevoice.kaspersky.com
academy.kaspersky.ru
wlinfo.kaspersky.com
us-business.kaspersky.com
finance.kaspersky.com
store.kaspersky.com
images.kaspersky.com
korm.pite.kaspersky.com
verification.content.ipmcloud.kaspersky.com
security-pulse-api.kaspersky.com
test.uis.kaspersky.com
store.kaspersky.com
links.securefutures.kaspersky.com
latam.kaspersky.com
links.welcome.kaspersky.com
statistic.content.ipm.kaspersky.com
jp.kaspersky.com
www.kaspersky.com
imf.kaspersky.com
im-demo.kaspersky.com
ipm-www.kaspersky.com
2013.cybersecurity.kaspersky.com
store.center.kaspersky.com
kids.kaspersky.com
tim.anti-theft.kaspersky.com
healthcare.kaspersky.com
usa.kaspersky.com
kss-info.kaspersky.com
activation.kaspersky.com
quotes.korm.kaspersky.com
uisnotifications.activation.kaspersky.com
free.kaspersky.com
calendar.kaspersky.com
vivo.anti-theft.kaspersky.com
registrations.kaspersky.com
blog.kaspersky.com
fof.kaspersky.com
cloud.kaspersky.com
kfp.kaspersky.com
box.kaspersky.com
new2015.kaspersky.com
forever.kaspersky.com
Certificate
The complete raw certificate details for activation.kaspersky.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGrzCCBZegAwIBAgIQbfmnuPm6DVwhCivI4WtGBDANBgkqhkiG9w0BAQsFADBB MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMRswGQYDVQQDExJ0 aGF3dGUgU1NMIENBIC0gRzIwHhcNMTYwMzIzMDAwMDAwWhcNMTcwMzIzMjM1OTU5 WjB6MQswCQYDVQQGEwJSVTEPMA0GA1UECAwGTW9zY293MQ8wDQYDVQQHDAZNb3Nj b3cxGTAXBgNVBAoMEEFPIEthc3BlcnNreSBMYWIxCzAJBgNVBAsMAklUMSEwHwYD VQQDDBhhY3RpdmF0aW9uLmthc3BlcnNreS5jb20wggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuCHj2KtYKxfinUz7rhStu31KakRJJq492pWrZHkspAuMW Zrge7MdtsYCz6l+hyHl7pUdF/wXIGh0N/SxWoariEBB+MYhG/6QLLgzUXAQFqWap y3CfeddnQRjv93kOC7XE579BoSCbRpJ6qa/29HlmvJckxOFcfi/KjaEpBU4Od0Mm XlhJwttjdDfembAsb3qjoAd738F37clqD8RyX9Cy2X6vaqxr/wIHw8uIA5xxmn+J atIgZBD5OcAoUBQW5N93gaTXTTMKEPZUdqXF6kf39cd1+MGrkfWxHjwA5+wzoRrc yQM3DGmtYgKlSrhNdg/9K9IDOfcu3+4uh0o/iwjjAgMBAAGjggNoMIIDZDCCAQUG A1UdEQSB/TCB+oIeYXV0by1hY3RpdmF0aW9uMC5rYXNwZXJza3kuY29tgh5hdXRv LWFjdGl2YXRpb24xLmthc3BlcnNreS5jb22CHmF1dG8tYWN0aXZhdGlvbjIua2Fz cGVyc2t5LmNvbYIeYXV0by1hY3RpdmF0aW9uMy5rYXNwZXJza3kuY29tgh5hdXRv LWFjdGl2YXRpb240Lmthc3BlcnNreS5jb22CHmF1dG8tYWN0aXZhdGlvbjUua2Fz cGVyc2t5LmNvbYIeYXV0by1hY3RpdmF0aW9uNi5rYXNwZXJza3kuY29tghhhY3Rp dmF0aW9uLmthc3BlcnNreS5jb20wCQYDVR0TBAIwADBuBgNVHSAEZzBlMGMGBmeB DAECAjBZMCYGCCsGAQUFBwIBFhpodHRwczovL3d3dy50aGF3dGUuY29tL2NwczAv BggrBgEFBQcCAjAjDCFodHRwczovL3d3dy50aGF3dGUuY29tL3JlcG9zaXRvcnkw DgYDVR0PAQH/BAQDAgWgMB8GA1UdIwQYMBaAFMJPSFf80U+awF04fQ4F29kutVJg MCsGA1UdHwQkMCIwIKAeoByGGmh0dHA6Ly90ai5zeW1jYi5jb20vdGouY3JsMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBXBggrBgEFBQcBAQRLMEkwHwYI KwYBBQUHMAGGE2h0dHA6Ly90ai5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6 Ly90ai5zeW1jYi5jb20vdGouY3J0MIIBBgYKKwYBBAHWeQIEAgSB9wSB9ADyAHcA 3esdK3oNT6Ygi4GtgWhwfi6OnQHVXIiNPRHEzbbsvswAAAFTonOxQwAABAMASDBG AiEA7KyE8820DgJbWAOLDzbWtltHVALPwzM7fYw8jvjJ7mYCIQDqB6Sskg+L78Gc J89HDzFntugpFnmsEu5Pp6/jvgCUuAB3AKS5CZC0GFgUh7sTosxncAo8NZgE+Rvf uON3zQ7IDdwQAAABU6JzsXsAAAQDAEgwRgIhAN48+X7PFC7PrAx8e2Mb6H6dttmP 7F1EcJGYkGcs2tBIAiEA6kUmOiO0GaLylwmqdAh9bJHXgQaxOoMP0C7mSwVLI3Mw DQYJKoZIhvcNAQELBQADggEBAJ5rR/IHdAKGtorNgDRZZE7el+hMkU5XPqx0vYcI JAnkSrwmAgDozKGQxZsOQP063AuQdNN7gUjllxOQasUD71Ev45srh3Kw8F7MSnRT diQv+sBiR93M54r9mFdOCqBzBl7IIqpe60q+SjaxGxaK2rx5/ka6T1dqnt4x4U2Z zLsg5Ij246WCaLN9mEFwQoDlj+puUeEXFihmMEtZBVISSulL3xHy7SSoEjf79njS ZX5FRTBlYbeh5mxyW3+XbmMJm//hCuts0f/cwUh7+EdAX/CCTSNkhLaZoFgonTMJ bDLBV21SELDRbpC6K4LfB8P3bnjUT03YxKM9UhE45q+7OQI= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgh49irWCsX4p1M+64Ur bt9SmpESSauPdqVq2R5LKQLjFma4HuzHbbGAs+pfoch5e6VHRf8FyBodDf0sVqGq 4hAQfjGIRv+kCy4M1FwEBalmqctwn3nXZ0EY7/d5Dgu1xOe/QaEgm0aSeqmv9vR5 ZryXJMThXH4vyo2hKQVODndDJl5YScLbY3Q33pmwLG96o6AHe9/Bd+3Jag/Ecl/Q stl+r2qsa/8CB8PLiAOccZp/iWrSIGQQ+TnAKFAUFuTfd4Gk100zChD2VHalxepH 9/XHdfjBq5H1sR48AOfsM6Ea3MkDNwxprWICpUq4TXYP/SvSAzn3Lt/uLodKP4sI 4wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 146182135276003405417826718280011433476 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-23 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-23 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RU' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Moscow' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Moscow' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'AO Kaspersky Lab' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'activation.kaspersky.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21969643012623258554111296690260710659974484615565761960861151579124462769196768365563445583119733585959326239216298598322446893271077498335454108763358816419131253181410370562749091989025097366904910518076165845047403386000804935970596780219757940510670619103725563227212062600270764603394513207511211082602756974324974508348803663067036116982805377893313554924961287780590200203548031158307700013742748034302570760365149113716432931140119222329746989831392721711531131595023483575268353939974665491090921314899244674780680947471451617201051940010768882517285362926444665104774394818162330566741710267231443876514019 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (253 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auto-activation0.kaspersky.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auto-activation1.kaspersky.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auto-activation2.kaspersky.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auto-activation3.kaspersky.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auto-activation4.kaspersky.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auto-activation5.kaspersky.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auto-activation6.kaspersky.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activation.kaspersky.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000153a273b1430000040300483046022100ecac84f3cdb40e025b58038b0f36d6b65b475402cfc3333b7d8c3c8ef8c9ee66022100ea07a4ac920f8befc19c27cf470f3167b6e8291679ac12ee4fa7afe3be0094b8007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000153a273b17b0000040300483046022100de3cf97ecf142ecfac0c7c7b631be87e9db6d98fec5d4470919890672cdad048022100ea45263a23b419a2f29709aa74087d6c91d78106b13a830fd02ee64b054b2373 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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