assistance.ssq.ca
- SSQ Societe DAssurance-Vie Inc -
Issued by Thawte RSA CA 2018
About this certificate
This digital certificate with serial number 0c:e1:3a:d0:49:9a:1d:09:4f:09:5e:f4:9e:07:ea:16 was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
SSQ Societe DAssurance-Vie Inc
Organization:
SSQ Societe DAssurance-Vie Inc
Organization unit: Securite
Organization unit: Securite
State / Province:
Quebec
Locality: Quebec
Country: CA
Locality: Quebec
Country: CA
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0c:e1:3a:d0:49:9a:1d:09:4f:09:5e:f4:9e:07:ea:16Serial Number (int): 17120195624582858868654585196568898070
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: b2:cf:14:d7:0a:fd:13:39:50:2a:ff:82:91:3a:64:1a:35:5a:71:b2
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a
Fingerprint (sha1): d8:30:1e:53:fd:b4:88:30:d9:d3:d7:e4:5e:fb:c4:1b:b2:02:23:11
Fingerprint (sha256): 05:19:9a:53:df:7c:a7:aa:78:d7:4a:0a:de:6e:ea:03:76:d5:c4:89:48:11:59:d5:6e:af:d5:3c:4c:fe:2a:21
Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt
Revocation information
OCSP Server: http://status.thawte.comCRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl
Check the revocation status for certificate assistance.ssq.ca
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for assistance.ssq.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
assistance.ssq.ca
www.assistance.ssq.ca
www.assistance.ssq.ca
Other certificates including the domain name ssq.ca
(limited to 100 certificates)
doc.scs.ssq.ca
assistance.ssq.ca
saasacme.com
budgettest.ssq.ca
assistance.ssq.ca
fetes.ssq.ca
msan1.myabsorb.ca
msan1.myabsorb.ca
decimal.ssq.ca
investissement.ssq.ca
survey.ssq.ca
teletravail.ssq.ca
vac.ssq.ca
investissement.ssq.ca
msan1.myabsorb.ca
doc.scs.ssq.ca
experience.ssq.ca
direct.ssq.ca
decimaltest.ssq.ca
ssq.ca
*.interne.ssq.ca
msan1.myabsorb.ca
secure.ssq.ca
decimalbi.ssq.ca
intranetdev.ssq.ca
*.ssq.ca
msan1.myabsorb.ca
gouvernance.ssq.ca
www.ssq.ca
gouvernance.ssq.ca
sondageexperienceclient.ssq.ca
decimal.ssq.ca
www.parlor.io
msan1.myabsorb.ca
msan1.myabsorb.ca
www.ssq.ca
extranet.ssq.ca
sni.cloudflaressl.com
msan1.myabsorb.ca
direct.ssq.ca
extranet.ssq.ca
extranet-itg1.ssq.ca
ssq.ca
msan1.myabsorb.ca
*.complementary.ssq.ca
*.ssq.ca
emaxer.com
vac.ssq.ca
CD1-ISE-0101.ssq.ca
ssq.ca
extranet.ssq.ca
*.fedid.ssq.ca
adfs.ssq.ca
secure.ssq.ca
extranet.ssq.ca
direct.ssq.ca
dev.scs.ssq.ca
secure-assurance-vie.ssq.ca
teletravail.ssq.ca
extranet.ssq.ca
sondageexperienceclient.ssq.ca
msan1.myabsorb.ca
gouvernance.ssq.ca
msan1.myabsorb.ca
msan1.myabsorb.ca
msan1.myabsorb.ca
doc.scs.ssq.ca
msan1.myabsorb.ca
roro.doc.scs.ssq.ca
soumission-assurance-vie.ssq.ca
ikea.ssq.ca
decimaltest.ssq.ca
soumission-assurance-vie.ssq.ca
ssq.ca
msan1.myabsorb.ca
devilcreek.fish
services.ssq.ca
*.complementary.ssq.ca
apps.ssq.ca
investissement.ssq.ca
decimalbitest.ssq.ca
msan1.myabsorb.ca
sondageexperienceclient.ssq.ca
msan1.myabsorb.ca
ssq.ca
secure.ssq.ca
www.thailandinteriordesign.co
msan1.myabsorb.ca
extranet.ssq.ca
msan1.myabsorb.ca
*.ssq.ca
msan1.myabsorb.ca
*.ac.dev.scs.ssq.ca
msan1.myabsorb.ca
blog.ssq.ca
apps.ssq.ca
fedid.ssq.ca
expwedgeqc1.ssq.ca
sondageexperienceclient.ssq.ca
budgetprod.ssq.ca
assistance.ssq.ca
saasacme.com
budgettest.ssq.ca
assistance.ssq.ca
fetes.ssq.ca
msan1.myabsorb.ca
msan1.myabsorb.ca
decimal.ssq.ca
investissement.ssq.ca
survey.ssq.ca
teletravail.ssq.ca
vac.ssq.ca
investissement.ssq.ca
msan1.myabsorb.ca
doc.scs.ssq.ca
experience.ssq.ca
direct.ssq.ca
decimaltest.ssq.ca
ssq.ca
*.interne.ssq.ca
msan1.myabsorb.ca
secure.ssq.ca
decimalbi.ssq.ca
intranetdev.ssq.ca
*.ssq.ca
msan1.myabsorb.ca
gouvernance.ssq.ca
www.ssq.ca
gouvernance.ssq.ca
sondageexperienceclient.ssq.ca
decimal.ssq.ca
www.parlor.io
msan1.myabsorb.ca
msan1.myabsorb.ca
www.ssq.ca
extranet.ssq.ca
sni.cloudflaressl.com
msan1.myabsorb.ca
direct.ssq.ca
extranet.ssq.ca
extranet-itg1.ssq.ca
ssq.ca
msan1.myabsorb.ca
*.complementary.ssq.ca
*.ssq.ca
emaxer.com
vac.ssq.ca
CD1-ISE-0101.ssq.ca
ssq.ca
extranet.ssq.ca
*.fedid.ssq.ca
adfs.ssq.ca
secure.ssq.ca
extranet.ssq.ca
direct.ssq.ca
dev.scs.ssq.ca
secure-assurance-vie.ssq.ca
teletravail.ssq.ca
extranet.ssq.ca
sondageexperienceclient.ssq.ca
msan1.myabsorb.ca
gouvernance.ssq.ca
msan1.myabsorb.ca
msan1.myabsorb.ca
msan1.myabsorb.ca
doc.scs.ssq.ca
msan1.myabsorb.ca
roro.doc.scs.ssq.ca
soumission-assurance-vie.ssq.ca
ikea.ssq.ca
decimaltest.ssq.ca
soumission-assurance-vie.ssq.ca
ssq.ca
msan1.myabsorb.ca
devilcreek.fish
services.ssq.ca
*.complementary.ssq.ca
apps.ssq.ca
investissement.ssq.ca
decimalbitest.ssq.ca
msan1.myabsorb.ca
sondageexperienceclient.ssq.ca
msan1.myabsorb.ca
ssq.ca
secure.ssq.ca
www.thailandinteriordesign.co
msan1.myabsorb.ca
extranet.ssq.ca
msan1.myabsorb.ca
*.ssq.ca
msan1.myabsorb.ca
*.ac.dev.scs.ssq.ca
msan1.myabsorb.ca
blog.ssq.ca
apps.ssq.ca
fedid.ssq.ca
expwedgeqc1.ssq.ca
sondageexperienceclient.ssq.ca
budgetprod.ssq.ca
Certificate
The complete raw certificate details for assistance.ssq.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIQDOE60EmaHQlPCV70ngfqFjANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMRswGQYDVQQDExJUaGF3dGUgUlNBIENBIDIwMTgwHhcN MTgwMTMwMDAwMDAwWhcNMjAwNzI0MTIwMDAwWjCBhzELMAkGA1UEBhMCQ0ExDzAN BgNVBAgTBlF1ZWJlYzEPMA0GA1UEBxMGUXVlYmVjMScwJQYDVQQKEx5TU1EgU29j aWV0ZSBEQXNzdXJhbmNlLVZpZSBJbmMxETAPBgNVBAsTCFNlY3VyaXRlMRowGAYD VQQDExFhc3Npc3RhbmNlLnNzcS5jYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBAMCAWA92U7r+U4mNrraFQqKaBKy6Ck0QrvEFhJ7/Y0wmcjsRolB2Kwd4 aqUEd0KgM4jWI27FZKE+NynaMwCzQiffBZb/K1YECn6yEv3QmNpXAISRyL60GGvm Uulc9HaD94Qn3hK5qyOiIlGWKUqxjIbxdxBhcI7HLUQYYEqs8sWKZwxoeCruZSln UWoTSDFGISKhEQS7UJXl9/jTpsCIDEzOqtzdG+4uPZRl9ZufDeR5dgTWKA0L4PoV xmAX1la1RoA+1daMzD1xeZiDvGTUJUS2EOrZsw4Pg/ruPYPIigDdKjQGwiKdC50I 4AghFqGGNUB1V+AffTuT68SsGQO19+MCAwEAAaOCAa4wggGqMB8GA1UdIwQYMBaA FKPIXmVU5TB4wQXqBwpqWcy5/t5aMB0GA1UdDgQWBBSyzxTXCv0TOVAq/4KROmQa NVpxsjAzBgNVHREELDAqghFhc3Npc3RhbmNlLnNzcS5jYYIVd3d3LmFzc2lzdGFu Y2Uuc3NxLmNhMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwOgYDVR0fBDMwMTAvoC2gK4YpaHR0cDovL2NkcC50aGF3dGUuY29t L1RoYXd0ZVJTQUNBMjAxOC5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAo BggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwB AgIwbwYIKwYBBQUHAQEEYzBhMCQGCCsGAQUFBzABhhhodHRwOi8vc3RhdHVzLnRo YXd0ZS5jb20wOQYIKwYBBQUHMAKGLWh0dHA6Ly9jYWNlcnRzLnRoYXd0ZS5jb20v VGhhd3RlUlNBQ0EyMDE4LmNydDAJBgNVHRMEAjAAMA0GCSqGSIb3DQEBCwUAA4IB AQAfm0YacQaLIrDqt8vNXXIzuUNt+I02F/4N0tgJdNFCyiPSE2vVnPwuFr46Jj+r gxJcGiccqWtaYlFyyk/T26c05B2MeMN+l3KLGbMhE6kp3Uo4zwKFl+/n+qAV6Rey KxO8EGiVes/RWCkzwnNnLlLkVqXhNaPtWwI45Fj6lOSxmM22+05J9SaCSwlRuHGD nOssU1cZVCR+I9YrbTxpUari9CcJL9ttkp/J3+9RKpbPudGmBp3Z0k75T/RFQyTY mYxg5imAuZuREtWaFF6vHju2JH7SAVFXEHNwBSQDdKM8U1KRcX2I0pwLjidaWtyY Shk3RWsjhSknuipqi1vJc/Ib -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIBYD3ZTuv5TiY2utoVC opoErLoKTRCu8QWEnv9jTCZyOxGiUHYrB3hqpQR3QqAziNYjbsVkoT43KdozALNC J98Flv8rVgQKfrIS/dCY2lcAhJHIvrQYa+ZS6Vz0doP3hCfeErmrI6IiUZYpSrGM hvF3EGFwjsctRBhgSqzyxYpnDGh4Ku5lKWdRahNIMUYhIqERBLtQleX3+NOmwIgM TM6q3N0b7i49lGX1m58N5Hl2BNYoDQvg+hXGYBfWVrVGgD7V1ozMPXF5mIO8ZNQl RLYQ6tmzDg+D+u49g8iKAN0qNAbCIp0LnQjgCCEWoYY1QHVX4B99O5PrxKwZA7X3 4wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 17120195624582858868654585196568898070 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-30 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-24 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Quebec' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Quebec' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SSQ Societe DAssurance-Vie Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Securite' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'assistance.ssq.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24301043331752714656250220442581429836930800947595480980865421086518780851021059306563163180358000000242334418355001676929783286947247170333331057592068564510190052082782950774635708129264174230337563437034180928007182293567221162896022417961164800325211453973924352073893166871357087122814659670929698207119576318493396763304370214310786011819092212810259680696468180791425037642535097407670108456681710975385851390089655371892315218819290477271575020804020221655194492974513283492847852482644883937141025271665525301471560351798523123564967941949956062797330737365560861577953139380570462864079292471282130648168419 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b2cf14d70afd1339502aff82913a641a355a71b2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assistance.ssq.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assistance.ssq.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 001f9b461a71068b22b0eab7cbcd5d7233b9436df88d3617fe0dd2d80974d142ca23d2136bd59cfc2e16be3a263fab83125c1a271ca96b5a625172ca4fd3dba734e41d8c78c37e97728b19b32113a929dd4a38cf028597efe7faa015e917b22b13bc1068957acfd1582933c273672e52e456a5e135a3ed5b0238e458fa94e4b198cdb6fb4e49f526824b0951b871839ceb2c53571954247e23d62b6d3c6951aae2f427092fdb6d929fc9dfef512a96cfb9d1a6069dd9d24ef94ff4454324d8998c60e62980b99b9112d59a145eaf1e3bb6247ed201515710737005240374a33c535291717d88d29c0b8e275a5adc984a1937456b23852927ba2a6a8b5bc973f21b