ga.vaillant-group.com

- Vaillant GmbH -

Issued by thawte EV SSL CA - G3

About this certificate

This digital certificate with serial number 51:67:36:e3:8f:3d:c2:a4:67:1f:67:58:54:08:dc:36 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Vaillant GmbH

Company registration number: HRB 11775
Organization: Vaillant GmbH
Organization unit: Vaillant GmbH
State / Province: Nordrhein-Westfalen
Locality: Remscheid
Country: DE

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 51:67:36:e3:8f:3d:c2:a4:67:1f:67:58:54:08:dc:36
Serial Number (int): 108203387514249780930397853436751698998
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: f0:70:51:da:d3:2a:91:4f:52:77:d7:86:77:74:0f:ce:71:1a:6c:22

Fingerprint (sha1): ea:86:cc:9b:69:a6:0c:b5:27:e5:36:5d:94:47:84:00:fa:13:45:e4
Fingerprint (sha256): 05:18:9c:f0:18:31:e5:27:f7:28:4a:77:f9:89:bf:1b:9d:f6:76:5c:93:fd:5c:2b:08:e7:2d:b6:ca:f3:c3:d5

Issuing Certificate URL: http://ti.symcb.com/ti.crt

Revocation information

OCSP Server: http://ti.symcd.com
CRL Distribution Point: http://ti.symcb.com/ti.crl

Check the revocation status for certificate ga.vaillant-group.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ga.vaillant-group.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ga.vaillant-group.com

Other certificates including the domain name vaillant-group.com

(limited to 100 certificates)
wrm3.vaillant-group.com
sip.eb-com.com
vstart.vaillant-group.com
*.gorecord.vaillant-group.com
pool04.eb-com.com
ga.vaillant-group.com
*.vaillant-group.com
cn-shanghai-800b.vaillant-group.com
ga.vaillant-group.com
access.vaillant-group.com
jobs.vaillant-group.com
supplierquality.vaillant-group.com
*.vaillant-group.com
gb-vaillant-cssp-stage.vaillant-group.com
*.dia.vaillant-group.com
sip.eb-com.com
sync.vaillant-group.com
pool04.eb-com.com
sip.eb-com.com
prometheus.apidev-dev.azure.vaillant-group.com
pool04.eb-com.com
www.vaillant.com
mdm.vaillant-group.com
mender.prod.azure.vaillant-group.com
akamai-san150.exacttarget.com
sync.vaillant-group.com
pool04.eb-com.com
jobs.vaillant-group.com
mailcrypt.vaillant-group.com
pool04.eb-com.com
pool04.eb-com.com
*.sslvpn.vaillant-group.com
sip.eb-com.com
san-18-s50.tlsprovisioning.exacttarget.com
sip.eb-com.com
www.vaillant.lt
www.vaillant.com
groupnet.vaillant-group.com
webshare.vaillant-group.com
sip.eb-com.com
ldaps.vaillant-group.com
groupspace.vaillant-group.com
www.vaillant-group.com
www.vaillant.com
dk-vaillant-cssp-stage.vaillant-group.com
mdm.vaillant-group.com
be-vaillant-cssp-stage.vaillant-group.com
pool04.eb-com.com
mdm.vaillant-group.com
vstart.vaillant-group.com
grafana.apidev-dev.azure.vaillant-group.com
pool04.eb-com.com
jira.vaillant-group.com
merchandising.vaillant-group.com
be-vaillant-cssp-stage.vaillant-group.com
www.vaillant.lt
vstart.vaillant-group.com
*.vaillant-group.com
akamai-san150.exacttarget.com
sip.eb-com.com
pool04.eb-com.com
sip.eb-com.com
sip.eb-com.com
www.vaillant.com
pool04.eb-com.com
at-vaillant-cssp-stage.vaillant-group.com
webshare.vaillant-group.com
mailcrypt.vaillant-group.com
futureclima.ziggu.app
jobs.vaillant-group.com
*.sslvpn.vaillant-group.com
pool04.eb-com.com
vaillant-demo.bee2bee.vaillant-group.com
sip.eb-com.com
jira.vaillant-group.com
jira-test.vaillant-group.com
vstart.vaillant-group.com
sds.vaillant-group.com
pool04.eb-com.com
vstart.vaillant-group.com
t04int01.vaillant-group.com
sip.eb-com.com
pool04.eb-com.com
*.gorecord.vaillant-group.com
*.vaillant-group.com
pool04.eb-com.com
sentry2.vaillant-group.com
sip.eb-com.com
*.gorecord.vaillant-group.com
teamshare.vaillant-group.com
pool04.eb-com.com
pool04.eb-com.com
sip.eb-com.com
sip.eb-com.com
sip.eb-com.com
sip.eb-com.com
be-bulex-cssp-stage.vaillant-group.com
groupnet.vaillant-group.com
*.bee2bee.vaillant-group.com
sip.eb-com.com

Certificate

The complete raw certificate details for ga.vaillant-group.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIH8TCCBtmgAwIBAgIQUWc24489wqRnH2dYVAjcNjANBgkqhkiG9w0BAQsFADBE
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMR4wHAYDVQQDExV0
aGF3dGUgRVYgU1NMIENBIC0gRzMwHhcNMTYwOTA3MDAwMDAwWhcNMTgxMTA2MjM1
OTU5WjCCARkxEzARBgsrBgEEAYI3PAIBAxMCREUxJDAiBgsrBgEEAYI3PAIBAhMT
Tm9yZHJoZWluLVdlc3RmYWxlbjEaMBgGCysGAQQBgjc8AgEBEwlXdXBwZXJ0YWwx
HTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMRIwEAYDVQQFEwlIUkIgMTE3
NzUxCzAJBgNVBAYTAkRFMRwwGgYDVQQIDBNOb3JkcmhlaW4tV2VzdGZhbGVuMRIw
EAYDVQQHDAlSZW1zY2hlaWQxFjAUBgNVBAoMDVZhaWxsYW50IEdtYkgxFjAUBgNV
BAsMDVZhaWxsYW50IEdtYkgxHjAcBgNVBAMMFWdhLnZhaWxsYW50LWdyb3VwLmNv
bTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANagX/sZhlteiRVjEMby
z6wwNP9PSfVcylXqPTpro4JXm3wop79NXIGDIXkUt4FUfldv1hZkhlFd9FQ8PcFB
/Ox0fdSSgdiphk3avHYrfaqATAb7WTZuJeeJWfpoFPxlRw8wQSM1ETbmhII3noNA
wZfQxDWSLUGkkfqNDRAwrG3AHhExq/ICrJE7dizRMKpcEDsodjkxu9S7Rptdly45
YvMdR8Cu0qd72VABarq5hBpCBVhtjgmdYl2wejtOqQQlYqNThrmxfCNnUNjHQI90
q4Mf32iUOB2JoqRc3Bw29Ugv2bTLYk+RXESvI/9ItkfJHLl6Va/B3ECpuUgUzH/p
rTZyLSZN8db0aX8L1Nz4HihKYpTjy6fVBXEqMZSrFUq7dyudXsGPcE14Kla8hiYa
m4HUd8KhmPjg8LXGoN5UZCsDmrJQYwpBdx2GfXu+v1h31pi1E5Ga/k3iATZSDUrQ
f5cJ9SPi6+0AxuDl1wvITI+fOyyjORt++4w/88ORhYAvfJzluhBMXfqHK8jG+LS/
E8cc3r7MF8rstyXch2/WcDiGT38MxY+lb0l+3CDZwfuf3r1/mb22dWdISzob+EfZ
rmDWurzQBhzVfGMyTamkSxhgESFbCSpduCUixl7hycV7Y4zZHY1628VFVchNVHcE
jWV1Q3KD/rKz7Z1QLNyf5/wNAgMBAAGjggMGMIIDAjAgBgNVHREEGTAXghVnYS52
YWlsbGFudC1ncm91cC5jb20wCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwKwYD
VR0fBCQwIjAgoB6gHIYaaHR0cDovL3RpLnN5bWNiLmNvbS90aS5jcmwwfAYDVR0g
BHUwczBoBgtghkgBhvhFAQcwATBZMCYGCCsGAQUFBwIBFhpodHRwczovL3d3dy50
aGF3dGUuY29tL2NwczAvBggrBgEFBQcCAjAjDCFodHRwczovL3d3dy50aGF3dGUu
Y29tL3JlcG9zaXRvcnkwBwYFZ4EMAQEwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
AQUFBwMCMB8GA1UdIwQYMBaAFPBwUdrTKpFPUnfXhnd0D85xGmwiMFcGCCsGAQUF
BwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDovL3RpLnN5bWNkLmNvbTAmBggrBgEF
BQcwAoYaaHR0cDovL3RpLnN5bWNiLmNvbS90aS5jcnQwggF9BgorBgEEAdZ5AgQC
BIIBbQSCAWkBZwB1AN3rHSt6DU+mIIuBrYFocH4ujp0B1VyIjT0RxM227L7MAAAB
VwPSYwwAAAQDAEYwRAIgFj7SlxRDjSbHhFwKV3a80Tpdgh+Tolv3qcc9e/NstSsC
IHORGzj2yXNNjx693WfajlN45Sh88vtZagacGctl0n26AHUApLkJkLQYWBSHuxOi
zGdwCjw1mAT5G9+443fNDsgN3BAAAAFXA9JkswAABAMARjBEAiAZwvRWfuN22N50
DP1Zhly5WeNfUWiY0tNSZGoWGY9axAIgWPEJX5NewYc69YN6g4/xOznIQWT6pfvt
Jq65EQrrfgUAdwBo9pj4H2SCvjqM7rkoHUz8cVFdZ5PURNEKZ6y7T0/7xAAAAVcD
0mS8AAAEAwBIMEYCIQCtzBeKoTsEkF6tqO7WfizlJH3wah6If8bcrAxYRe8A8gIh
AJ+y8ABTj6toAqcZ+J3jTTkeiUuv0WGKKuJsJV1inD8EMA0GCSqGSIb3DQEBCwUA
A4IBAQCJJe75kl3FBSl0Epug55kV807xuHnqF7KuAJqxDm0a6BMFp+H+jsmtHLwI
UlCV34a9y3ve/xJjCJ8NihSzgiWNR1FASTOXDcBntqZ2sn37rmEbSOLoxYAU5pcq
msfDp4QFD6uXIJswypWau5pfAyDK2My0q93iP2XMRictlyGb9w9hZsgTBpnRYFEh
1QdC34imSupg39NkM1ueAl+yUM2jmVRx+BxmaqLAXMmZxhglBwcX+swE6Sjv5A89
DnRax+zP3p4hSmObxXA9Z1MTY9sNr2oLakLtHToaDYnQT2H5kD8ikFukGpfWIwoG
74T+KB1VoTfMnYhma7xhnTx7cLWA
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 108203387514249780930397853436751698998
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte EV SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wuppertal'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 11775'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Remscheid'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Vaillant GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Vaillant GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ga.vaillant-group.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 875599582948351513070439303068376224029610959451004812496083397946219812530824640206808504115604051947858124271227455422262633863185626025225742952515784314622244286189109432134979716082909094846180833981464844002607968767514242206090601275261157361850909938336573682968798121025910325621930285336600587491683646354852837952351994530438450578747413965534390777453841159126683494727072137041377645167513205543807913080348445547943365306203691204035884764877363463824923109224651099359506676451491437996311310039044258472777784698062028717252751609417242569152973253336165072931589988773920359079902884776509507395655281323139177231534397350841772607015653744434571707791593714439719262425473498185136066796137783493105614819786456438426248451661667346741021946069687074205087642100959178910487227206075770063921987655324309731620542437620850309246303465270091617896929364124683184291445576932784573058591585792240834326882097481407430852984853769554364118633252664859524513741063898614801725748953264691894302387274191611717263998043057630540063870393208868176199506339135577015198233803038353200008910186266677236735091169781540339027010848877282700009278977352157234665017212096916924759540907836415853890584696738901331991442488333
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ga.vaillant-group.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ti.symcb.com/ti.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (117 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.48.1 (Thawte EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f07051dad32a914f5277d78677740fce711a6c22
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ti.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ti.symcb.com/ti.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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