rec2akiodv.voyages-sncf.com

- VSC TECHNOLOGIES -

Issued by Thawte SGC CA - G2

About this certificate

This digital certificate with serial number 41:33:f1:03:ef:0a:a7:92:e6:fc:0c:25:38:13:86:d1 was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

VSC TECHNOLOGIES

Organization: VSC TECHNOLOGIES
State / Province: Hauts-de-Seine
Locality: PARIS LA DEFENSE
Country: FR

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 41:33:f1:03:ef:0a:a7:92:e6:fc:0c:25:38:13:86:d1
Serial Number (int): 86669515238183573493736781685367998161
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 24:c0:c0:a4:49:3c:52:0b:12:d8:92:0c:51:d1:87:a7:4d:54:75:2c

Fingerprint (sha1): d0:a0:0d:09:6f:75:e5:3a:a2:8d:5c:e0:c8:a9:70:bc:92:e9:ee:dc
Fingerprint (sha256): 08:fa:43:98:65:2a:7f:ac:95:83:d4:67:8c:4a:61:84:2d:6d:d3:3e:71:80:aa:c7:17:d9:07:3a:c4:fc:8c:46

Issuing Certificate URL: http://svr-sgc-aia.thawte.com/ThawteSGCG2.cer

Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-sgc-crl.thawte.com/ThawteSGCG2.crl

Check the revocation status for certificate rec2akiodv.voyages-sncf.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rec2akiodv.voyages-sncf.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication
Netscape Server-Gated Cryptography

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rec2akiodv.voyages-sncf.com

Other certificates including the domain name voyages-sncf.com

(limited to 100 certificates)
*.carmen.sncf.fr
secure.uk.voyages-sncf.com
www.voyages-sncf.com
akiovsc.voyages-sncf.com
offre-connect.voyages-sncf.com
cinemagraph.voyages-sncf.com
www.expedia.com
acquia-sites.com
jeu.voyages-sncf.com
acquia-sites.com
acquia-sites.com
ctrmgr.voyages-sncf.com
sstats.voyages-sncf.com
recette.bagages.voyages-sncf.com
owa.voyages-sncf.com
jeu.voyages-sncf.com
t.secure.be.voyages-sncf.com
voxpopsoralhistory.com
t.voyages-sncf.com
tgvpop.voyages-sncf.com
acquia-sites.com
admins.voyages-sncf.com
jeu.voyages-sncf.com
acquia-sites.com
rec2akiodv.voyages-sncf.com
*.voyages-sncf.com
acquia-sites.com
secure.analytics.voyages-sncf.com
formulaire.vsct.fr
offre-connect.voyages-sncf.com
www.programmefid.com
acquia-sites.com
adhesion.monforfaitannuel.voyages-sncf.com
spectacles.voyages-sncf.com
*.api.voyages-sncf.com
abonnement.voyages-sncf.com
acquia-sites.com
secure.ru.voyages-sncf.com
www.org.destinations.voyages-sncf.com
agence.voyages-sncf.com
autotrain.voyages-sncf.com
acquia-sites.com
secure.voyages-sncf.com
*.api.voyages-sncf.com
jeu.fr.voyages-sncf.com
www.expedia.com
client.es.voyages-sncf.com
abonnement.voyages-sncf.com
www.expedia.com
formulaire.vsct.fr
www.expedia.com
bagages.voyages-sncf.com
interrail.voyages-sncf.com
voyages-sncf.com
jeu.fr.voyages-sncf.com
jeu.eu.voyages-sncf.com
secure.analytics.voyages-sncf.com
jeu.fr.voyages-sncf.com
croisieres.voyages-sncf.com
t.voyages-sncf.com
ouiwork.open.voyages-sncf.com
kli.uk.voyages-sncf.com
recette.adhesion.monforfaitannuel.voyages-sncf.com
tls.automattic.com
admins.voyages-sncf.com
t.voyages-sncf.com
www.expedia.com
secure.analytics.voyages-sncf.com
cinemagraph.voyages-sncf.com
cinemagraph.voyages-sncf.com
billetprime.voyages-sncf.com
ouiwork.open.voyages-sncf.com
ouiwork.open.voyages-sncf.com
*.preprod.voyages-sncf.com
acquia-sites.com
integration.adhesion.monforfaitannuel.voyages-sncf.com
jeu.voyages-sncf.com
recette.adhesion.monforfaitannuel.voyages-sncf.com
cinemagraph.voyages-sncf.com
abonnement.voyages-sncf.com
juniorcie.voyages-sncf.com
juniorcie.voyages-sncf.com
adhesion.monforfaitannuel.voyages-sncf.com
acquia-sites.com
*.voyages-sncf.com
secure.en.voyages-sncf.com
kli.uk.voyages-sncf.com
sstats.voyages-sncf.com
facebook.voyages-sncf.com
ventes.juniorcie.voyages-sncf.com
acquia-sites.com
www.expedia.com
acces2.voyages-sncf.com
www.voyages-sncf.com
cinemagraph.voyages-sncf.com
offre-connect.voyages-sncf.com
agence.voyages-sncf.com
autotrain.voyages-sncf.com
secure.ru.voyages-sncf.com
t.voyages-sncf.com

Certificate

The complete raw certificate details for rec2akiodv.voyages-sncf.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgIQQTPxA+8Kp5Lm/AwlOBOG0TANBgkqhkiG9w0BAQUFADBB
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMVGhhd3RlLCBJbmMuMRswGQYDVQQDExJU
aGF3dGUgU0dDIENBIC0gRzIwHhcNMTMwMjEyMDAwMDAwWhcNMTQwMzE0MjM1OTU5
WjCBgjELMAkGA1UEBhMCRlIxFzAVBgNVBAgTDkhhdXRzLWRlLVNlaW5lMRkwFwYD
VQQHFBBQQVJJUyBMQSBERUZFTlNFMRkwFwYDVQQKFBBWU0MgVEVDSE5PTE9HSUVT
MSQwIgYDVQQDFBtyZWMyYWtpb2R2LnZveWFnZXMtc25jZi5jb20wggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDycKL3LJfcpupqPHzfx9xTCs8fA/DBUUlZ
2Y1oKRTS2caT0nCJ24U70Kcl4agO5WD1v8lmqe1IKhae+Zx4eCGsypsHidOQzvx7
x8mc8UPXfJEjDVxnDfMRj1uhvPVDEZsGB1M/gY0k992vGMdkecb3pRZW24IHHO1T
NfZqaLlcVPzcaNqQ5dRNBrHqHXxHeOEd4jCoVivJkCZ4MyWkFcls/+nnZ53bpFVA
9u0l+Hxesh426ZBcFsRBWKW3uayzG9T8w8vuJDpo5/kpUAMldGBpWnozlMOiwL9d
VHz8YsEEh6xhLWvWRRMetz0UWyjfvkr34tIDsk89yqqodcoNQcIvAgMBAAGjggGE
MIIBgDAmBgNVHREEHzAdghtyZWMyYWtpb2R2LnZveWFnZXMtc25jZi5jb20wCQYD
VR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwQQYDVR0gBDowODA2BgpghkgBhvhFAQc2
MCgwJgYIKwYBBQUHAgEWGmh0dHBzOi8vd3d3LnRoYXd0ZS5jb20vY3BzMB8GA1Ud
IwQYMBaAFCTAwKRJPFILEtiSDFHRh6dNVHUsMD4GA1UdHwQ3MDUwM6AxoC+GLWh0
dHA6Ly9zdnItc2djLWNybC50aGF3dGUuY29tL1RoYXd0ZVNHQ0cyLmNybDAoBgNV
HSUEITAfBggrBgEFBQcDAQYIKwYBBQUHAwIGCWCGSAGG+EIEATBtBggrBgEFBQcB
AQRhMF8wIgYIKwYBBQUHMAGGFmh0dHA6Ly9vY3NwLnRoYXd0ZS5jb20wOQYIKwYB
BQUHMAKGLWh0dHA6Ly9zdnItc2djLWFpYS50aGF3dGUuY29tL1RoYXd0ZVNHQ0cy
LmNlcjANBgkqhkiG9w0BAQUFAAOCAQEAfjViF/k9EPgEPB2xUXMojYfwVKsNvrj0
VNUvKVKypWt/TqAD09tfSHQ8kpvlGnSpGdr7M0mlxqvfUQXCFfFdYT3QuPgRPch5
8EX3t/i/fdyHkUBie7/oUnJzbtH83e7kYUiqHzbtwXp6J3VAV+ylpsnWRV15cF31
BRsfxVL7GC95vHOsMkliz8OXf27mU6MbXp6XT2yTfbnVjKImKByjexHBOjUjhlpj
RRPMVlgZJovSe94EKwLi4/WS2qkbXIF9qwawV1sfneB5ccewB5Wp1y8JId0mSDm/
bE4oowWYUyhtF4rgzjzBLt9Fu2YN8y5l0RTpQ5x602hJSmTGxa9k4g==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8nCi9yyX3Kbqajx838fc
UwrPHwPwwVFJWdmNaCkU0tnGk9JwiduFO9CnJeGoDuVg9b/JZqntSCoWnvmceHgh
rMqbB4nTkM78e8fJnPFD13yRIw1cZw3zEY9bobz1QxGbBgdTP4GNJPfdrxjHZHnG
96UWVtuCBxztUzX2ami5XFT83GjakOXUTQax6h18R3jhHeIwqFYryZAmeDMlpBXJ
bP/p52ed26RVQPbtJfh8XrIeNumQXBbEQVilt7mssxvU/MPL7iQ6aOf5KVADJXRg
aVp6M5TDosC/XVR8/GLBBIesYS1r1kUTHrc9FFso375K9+LSA7JPPcqqqHXKDUHC
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 86669515238183573493736781685367998161
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SGC CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-02-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-03-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hauts-de-Seine'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'PARIS LA DEFENSE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'VSC TECHNOLOGIES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'rec2akiodv.voyages-sncf.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30605212971517758259275940926070245801572159561737196497638062190934254738384566895405263813345606990880846458187983330845141530187678437168997216053585557682171925947624912707195752267114428400866296435451581560310044418785655509681518412276627420300346704665397982097276099862774471796112448964173046672858863739125927206828815908926381652287197277867859858368425186175971006898098399485643719509181531743755955934726739633320371956905437761942029415059292949101565290645871646099922276778444609971565789852382027024533051768958442542747575921198442381826021887755818119076049682906069656701480505616086016691651119
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rec2akiodv.voyages-sncf.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 24c0c0a4493c520b12d8920c51d187a74d54752c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-sgc-crl.thawte.com/ThawteSGCG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.4.1 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-sgc-aia.thawte.com/ThawteSGCG2.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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