test.level3.com
- Level 3 Communications, Inc -
Issued by thawte SHA256 SSL CA
About this certificate
This digital certificate with serial number 7e:30:e4:78:b8:84:81:18:c8:2d:0d:96:89:88:db:0a was issued on by thawte, Inc..
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Level 3 Communications, Inc
Organization:
Level 3 Communications, Inc
Organization unit: GTI
Organization unit: GTI
State / Province:
Colorado
Locality: Broomfield
Country: US
Locality: Broomfield
Country: US
thawte, Inc.
Organization:
thawte, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 7e:30:e4:78:b8:84:81:18:c8:2d:0d:96:89:88:db:0aSerial Number (int): 167736591671983635662365296389117238026
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 2b:9a:35:ae:01:18:38:30:e1:70:7a:05:e0:11:76:a3:ce:bd:90:14
Fingerprint (sha1): ee:9e:66:fb:2d:64:e0:d7:3a:3b:5e:a7:66:0b:d3:f7:d7:89:e6:f9
Fingerprint (sha256): 06:6d:78:95:f1:43:fc:bb:bb:e2:e3:48:14:bf:53:e0:b8:99:18:27:2c:d3:19:64:e7:f5:7c:6b:d8:7d:22:4a
Issuing Certificate URL: http://tg.symcb.com/tg.crt
Revocation information
OCSP Server: http://tg.symcd.comCRL Distribution Point: http://tg.symcb.com/tg.crl
Check the revocation status for certificate test.level3.com
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for test.level3.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.level3.com
www-origin-sec.level3.com
test.level3.com
www-origin-sec.level3.com
test.level3.com
Other certificates including the domain name level3.com
(limited to 100 certificates)
latampool10.level3.com
vbs.level3.com
argrpad.corp.global.level3.com
developer.level3.com
clearpass.level3.com
aslatam.level3.com
onestopenv1.level3.com
ecd.lumen.com
apienv3.level3.com
eisgsaportalidc01-prod.idc1.level3.com
idcjamf0001.corp.global.level3.com
voiceconfig.centurylink.com
lyncedge2.level3.com
scheduler.ensportal.level3.com
apps.level3.com
test.level3.com
Clapps.level3.com
b2bqa.level3.com
eisgsaportal.level3.com
fcam.level3.com
CATOAKUCM-PUB.level3.com
gbbgkwvinf26.corp.global.level3.com
amvjxlmbfejqtsy01.level3-gsa.com
hlr-director-01.centurylink.net
uptime.globalcrossing.com
gblonwvinf6.corp.global.level3.com
apm.level3.com
vctportal.voice.uk.level3.com
gblonwvinf6.corp.global.level3.com
apidev4.level3.com
gbbgkwvinf26.corp.global.level3.com
nalm1.level3.com
account.level3.com
account.level3.com
audio.level3.com
latampool2.level3.com
webxtsp-a1.level3.com
masterstream.level3.com
b2bapi-env1.level3.com
callmgr.level3.com
account-env1.level3.com
latam.my.level3.com
jj46-15b1-ilo.idc1.level3.com
rocvendorportal.level3.com
account.level3.com
emeapool3ext.level3.com
fcam.level3.com
b2benv4.level3.com
lyncedge2.level3.com
apm.level3.com
apidev4.level3.com
l3adc-goss-bastion.adc1.level3.com
ecd.cfer.com
ensportal.level3.com
account-env2.level3.com
aslatam.level3.com
callmgrtest.level3.com
account-env4.level3.com
swtest.level3.com
b2bua.level3.com
mobilesync.level3.com
secureapi.level3.com
desio.centurylink.com
ui.level3.com
cdn.level3.com
lyncedge2.level3.com
b2b.level3.com
onestop.level3.com
den1-apibeta.level3.com
voiceconfig.level3.com
stage-latam.my.level3.com
supplierportaldev.level3.com
partnerportal.level3.com
ensportal.level3.com
activesync.level3.com
storefrontlb-adc.level3.com
api.centurylink.com
desio.centurylink.com
secureapi-dev2.level3.com
adfsprd.level3.com
connect.level3.com
api-ext.centurylink.com
argcamea.corp.global.level3.com
vctboot.voice.uk.level3.com
myquote.level3.com
web.corp.global.level3.com
emeapool3ext.level3.com
pdns.level3.com
portout.level3.com
emealm1.level3.com
rocvendorportal.level3.com
ui.level3.com
CATOAKUCM-PUB.level3.com
secureweb.level3.com
enswebservices.level3.com
ext-ticketing.level3.com
emeapool2ext.level3.com
attachmentssf-web-testb.level3.com
api.level3.com
ensportal.level3.com
vbs.level3.com
argrpad.corp.global.level3.com
developer.level3.com
clearpass.level3.com
aslatam.level3.com
onestopenv1.level3.com
ecd.lumen.com
apienv3.level3.com
eisgsaportalidc01-prod.idc1.level3.com
idcjamf0001.corp.global.level3.com
voiceconfig.centurylink.com
lyncedge2.level3.com
scheduler.ensportal.level3.com
apps.level3.com
test.level3.com
Clapps.level3.com
b2bqa.level3.com
eisgsaportal.level3.com
fcam.level3.com
CATOAKUCM-PUB.level3.com
gbbgkwvinf26.corp.global.level3.com
amvjxlmbfejqtsy01.level3-gsa.com
hlr-director-01.centurylink.net
uptime.globalcrossing.com
gblonwvinf6.corp.global.level3.com
apm.level3.com
vctportal.voice.uk.level3.com
gblonwvinf6.corp.global.level3.com
apidev4.level3.com
gbbgkwvinf26.corp.global.level3.com
nalm1.level3.com
account.level3.com
account.level3.com
audio.level3.com
latampool2.level3.com
webxtsp-a1.level3.com
masterstream.level3.com
b2bapi-env1.level3.com
callmgr.level3.com
account-env1.level3.com
latam.my.level3.com
jj46-15b1-ilo.idc1.level3.com
rocvendorportal.level3.com
account.level3.com
emeapool3ext.level3.com
fcam.level3.com
b2benv4.level3.com
lyncedge2.level3.com
apm.level3.com
apidev4.level3.com
l3adc-goss-bastion.adc1.level3.com
ecd.cfer.com
ensportal.level3.com
account-env2.level3.com
aslatam.level3.com
callmgrtest.level3.com
account-env4.level3.com
swtest.level3.com
b2bua.level3.com
mobilesync.level3.com
secureapi.level3.com
desio.centurylink.com
ui.level3.com
cdn.level3.com
lyncedge2.level3.com
b2b.level3.com
onestop.level3.com
den1-apibeta.level3.com
voiceconfig.level3.com
stage-latam.my.level3.com
supplierportaldev.level3.com
partnerportal.level3.com
ensportal.level3.com
activesync.level3.com
storefrontlb-adc.level3.com
api.centurylink.com
desio.centurylink.com
secureapi-dev2.level3.com
adfsprd.level3.com
connect.level3.com
api-ext.centurylink.com
argcamea.corp.global.level3.com
vctboot.voice.uk.level3.com
myquote.level3.com
web.corp.global.level3.com
emeapool3ext.level3.com
pdns.level3.com
portout.level3.com
emealm1.level3.com
rocvendorportal.level3.com
ui.level3.com
CATOAKUCM-PUB.level3.com
secureweb.level3.com
enswebservices.level3.com
ext-ticketing.level3.com
emeapool2ext.level3.com
attachmentssf-web-testb.level3.com
api.level3.com
ensportal.level3.com
Certificate
The complete raw certificate details for test.level3.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIQfjDkeLiEgRjILQ2WiYjbCjANBgkqhkiG9w0BAQsFADBD MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMR0wGwYDVQQDExR0 aGF3dGUgU0hBMjU2IFNTTCBDQTAeFw0xNjA5MjcwMDAwMDBaFw0xOTA5MjcyMzU5 NTlaMIGDMQswCQYDVQQGEwJVUzERMA8GA1UECAwIQ29sb3JhZG8xEzARBgNVBAcM CkJyb29tZmllbGQxJDAiBgNVBAoMG0xldmVsIDMgQ29tbXVuaWNhdGlvbnMsIElu YzEMMAoGA1UECwwDR1RJMRgwFgYDVQQDDA90ZXN0LmxldmVsMy5jb20wggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6kYpKVf5Wg16eIJABbEEJj8rAbTtT mg0PyHcGghd0BxUDq9MemmFCzDtQDYw3e7U4e0i/LgV0R3oIQSaYyaVlbX0750AW 9xqxKNSWZXd5CQBj0RTluvieUJb13W9y60D6nVKY3jXFMaGk8GqlmKtaPOBLW/MZ mmsn5Ve3z3NEZcFX4ci/8GVHfF8JDAO/3T24p6wdhPq4SCkPmLa5daR1SKY0qOt4 hUVD+6ecoIbsMMLdjpd2VAf+VUWkL3zLFjk955GI8EWRMED2arHkvEL7EVsIs0Nq yKA9cu6xa7x/h8LQopEejAlcfew6rP6wgFPXMstV8JgzqJd5T/vhdLWTAgMBAAGj ggOVMIIDkTBFBgNVHREEPjA8gg53d3cubGV2ZWwzLmNvbYIZd3d3LW9yaWdpbi1z ZWMubGV2ZWwzLmNvbYIPdGVzdC5sZXZlbDMuY29tMAkGA1UdEwQCMAAwbgYDVR0g BGcwZTBjBgZngQwBAgIwWTAmBggrBgEFBQcCARYaaHR0cHM6Ly93d3cudGhhd3Rl LmNvbS9jcHMwLwYIKwYBBQUHAgIwIwwhaHR0cHM6Ly93d3cudGhhd3RlLmNvbS9y ZXBvc2l0b3J5MA4GA1UdDwEB/wQEAwIFoDAfBgNVHSMEGDAWgBQrmjWuARg4MOFw egXgEXajzr2QFDArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8vdGcuc3ltY2IuY29t L3RnLmNybDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwVwYIKwYBBQUH AQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8vdGcuc3ltY2QuY29tMCYGCCsGAQUF BzAChhpodHRwOi8vdGcuc3ltY2IuY29tL3RnLmNydDCCAfUGCisGAQQB1nkCBAIE ggHlBIIB4QHfAHYA3esdK3oNT6Ygi4GtgWhwfi6OnQHVXIiNPRHEzbbsvswAAAFX bH/ecwAABAMARzBFAiBcW6PwaiKmbh/8hLvHMmbpbpTs+Kkqt5jHoOyhGY04CQIh AKax5mGMQxdvgE3R5yZx3qWxR1gzc7fy/nIsmkKT6GFzAHYAaPaY+B9kgr46jO65 KB1M/HFRXWeT1ETRCmesu09P+8QAAAFXbH/ekAAABAMARzBFAiEAlgckQXoHVNzn qMCImKJFFWBIqp8r49tFIII6rJ6opRACIBhzUH8s86IfRwa2P9hg7zZ1moXYS5ir kSkzTFdU1cwaAHYA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo/csAAAFX bH/gbwAABAMARzBFAiEA7U2f+Bkkz7Xyjz2AcVFpI9vRuBcc37T8Q7K6rHrunAMC IBI8YhvgR9cF9nVDoDM9/XT9342Jyah1UFL2WcfU4meEAHUAvHjh38X2PGhGSTNN oQ+hXwl5aSAJwIG08/aRfz7ZuKUAAAFXbH/faQAABAMARjBEAiA5fY7Mj6w7maXc vfLxWXbHhmHiczqRsfIIYq+fksWvgwIgTOvXKtJv+zEOfzVDcv5LeFtK+D1Ew7wH OYA+vEDd/v4wDQYJKoZIhvcNAQELBQADggEBAINHXjWSUMCgPlemm9cqsPcKeyGB sNPRgfcWundx1upALmT11nldfrfXWb0RycBafv7jPhW1HnbfXppZMFapgMCybS0i YF8eUh+8F0mZFwKqhwbIp778yZn+DAEY48pQ6tjiLzbkUTvANUSCpLM3amN1Z5E5 yd8goyOnQFj4lRp2GXQwY2cEWcyhCP6+af81eIc/ZVVyJvoF7D9xV8ygt2f7BZgv VVSemf4HCJFgppBzvYca6+jM7enMjRJVEI+03Qsh+ZKESXtm3uIIGF+W/wLrn8LD b4uXLkUxeQj6Qy2A3SD/cK86gwqe7nISEvUwyv4Eg4RtEsWy78WSQxtV9oI= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupGKSlX+VoNeniCQAWxB CY/KwG07U5oND8h3BoIXdAcVA6vTHpphQsw7UA2MN3u1OHtIvy4FdEd6CEEmmMml ZW19O+dAFvcasSjUlmV3eQkAY9EU5br4nlCW9d1vcutA+p1SmN41xTGhpPBqpZir WjzgS1vzGZprJ+VXt89zRGXBV+HIv/BlR3xfCQwDv909uKesHYT6uEgpD5i2uXWk dUimNKjreIVFQ/unnKCG7DDC3Y6XdlQH/lVFpC98yxY5PeeRiPBFkTBA9mqx5LxC +xFbCLNDasigPXLusWu8f4fC0KKRHowJXH3sOqz+sIBT1zLLVfCYM6iXeU/74XS1 kwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 167736591671983635662365296389117238026 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SHA256 SSL CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-27 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-27 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Colorado' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Broomfield' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Level 3 Communications, Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'GTI' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'test.level3.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23552093269567486792430908625689578383018589663752693814014748426897699407953564789997150979582087176794213223184352512153919647163423973172432388713959665985916621781507937884262500137866578548938112690872033829835280514605980814675275267644952291429348944353766303978706013465847741060931301066113006895020259323679284973555945670078055632487241700485682808325727800327787761942189309422256262929382723312634155151268413926472101447885712892362619630894053652123411015476645141085302672500044979055661588847616383562057052423093021754406308313508679789460262676798764381969485153837489548701606091750176381012850067 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.level3.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-origin-sec.level3.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.level3.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2b9a35ae01183830e1707a05e01176a3cebd9014 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcb.com/tg.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcb.com/tg.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes) 01df007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc000001576c7fde73000004030047304502205c5ba3f06a22a66e1ffc84bbc73266e96e94ecf8a92ab798c7a0eca1198d3809022100a6b1e6618c43176f804dd1e72671dea5b147583373b7f2fe722c9a4293e8617300760068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc4000001576c7fde900000040300473045022100960724417a0754dce7a8c08898a245156048aa9f2be3db4520823aac9ea8a51002201873507f2cf3a21f4706b63fd860ef36759a85d84b98ab9129334c5754d5cc1a007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb000001576c7fe06f0000040300473045022100ed4d9ff81924cfb5f28f3d8071516923dbd1b8171cdfb4fc43b2baac7aee9c030220123c621be047d705f67543a0333dfd74fddf8d89c9a8755052f659c7d4e26784007500bc78e1dfc5f63c684649334da10fa15f0979692009c081b4f3f6917f3ed9b8a5000001576c7fdf6900000403004630440220397d8ecc8fac3b99a5dcbdf2f15976c78661e2733a91b1f20862af9f92c5af8302204cebd72ad26ffb310e7f354372fe4b785b4af83d44c3bc0739803ebc40ddfefe . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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