apply.royalcanin.com

- Royal Canin U.S.A., Inc. -

Issued by thawte Extended Validation SHA256 SSL CA

About this certificate

This digital certificate with serial number 77:38:f3:22:18:20:75:04:2d:f8:d4:49:cd:47:13:81 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Royal Canin U.S.A., Inc.

Company registration number: 3690298
Organization: Royal Canin U.S.A., Inc.
Organization unit: IT
State / Province: Missouri
Locality: Saint Charles
Country: US

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 77:38:f3:22:18:20:75:04:2d:f8:d4:49:cd:47:13:81
Serial Number (int): 158473831449241030519569298096040383361
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 3b:24:c8:31:a0:b7:5a:d0:6a:b8:d2:ca:07:74:cc:1e:24:d4:c4:dc

Fingerprint (sha1): 55:fb:8b:b5:d7:15:3e:61:7c:03:28:6f:76:83:65:a9:ee:6e:33:6e
Fingerprint (sha256): 09:2e:59:0d:c8:b0:7e:09:89:50:10:a7:d9:9f:49:de:be:16:95:6b:57:ec:b4:0f:38:50:db:bd:cf:46:73:45

Issuing Certificate URL: http://tf.symcb.com/tf.crt

Revocation information

OCSP Server: http://tf.symcd.com
CRL Distribution Point: http://tf.symcb.com/tf.crl

Check the revocation status for certificate apply.royalcanin.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apply.royalcanin.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apply.royalcanin.com

Other certificates including the domain name royalcanin.com

(limited to 100 certificates)
developer.royalcanin.com
shop.royalcanin.com
*.mars.com
shop.royalcanin.com
identity.royalcanin.com
sni.cloudflaressl.com
payapi.royalcanin.com
sni.cloudflaressl.com
sni.cloudflaressl.com
web.royalcanin.com
developer.royalcanin.com
shop.royalcanin.com
*.royalcanin.com
sni.cloudflaressl.com
sni.cloudflaressl.com
redirect.royalcanin.com
gmvet-vs.royalcanin.com
scrmstg.royalcanin.com
admin-signin.royalcanin.com
sni.cloudflaressl.com
prescribers.royalcanin.com
sni.cloudflaressl.com
qr.royalcanin.com
adoption-platform.royalcanin.com
incapsula.com
support.royalcanin.com
www.breeder.royalcanin.com
apply.royalcanin.com
sn1034dl50se01.034d.dedicated.lync.com
my.royalcanin.com
web.royalcanin.com
admin-signin.royalcanin.com
support.royalcanin.com
sni.cloudflaressl.com
sni.cloudflaressl.com
openstg.royalcanin.com
parcel-cdn.anz.royalcanin.com
*.royalcanin.fr
apply.royalcanin.com
learning.royalcanin.com
sni.cloudflaressl.com
indsight.royalcanin.com
sni.cloudflaressl.com
*.royalcanin.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
registration.royalcanin.com
videosources.royalcanin.com
sni.cloudflaressl.com
sni.cloudflaressl.com
stgwedding.royalcanin.com
sni.cloudflaressl.com
*.mars.com
myuat.royalcanin.com
payapi.royalcanin.com
support.royalcanin.com
gha.royalcanin.com
home.academy.royalcanin.com
support.royalcanin.com
sni.cloudflaressl.com
stg-sportingdog-cd-01.royalcanin.com
sni.cloudflaressl.com
sni.cloudflaressl.com
storeap.royalcanin.com
*.royalcanin.com
registration.royalcanin.com
sni.cloudflaressl.com
web.royalcanin.com
vetfocus.royalcanin.com
vetfollowup.royalcanin.com.au
sni.cloudflaressl.com
sni.cloudflaressl.com
web.royalcanin.com
shop.royalcanin.com
apply.royalcanin.com
prd-vetfocus-cm-01.royalcanin.com
*.mars.com
redirect.royalcanin.com
aws-cf-rd24.mars-inc.com
web.royalcanin.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sfapi.royalcanin.com
support.royalcanin.com
sni.cloudflaressl.com
www.royalcanin.com
my.royalcanin.com
support.royalcanin.com
sni.cloudflaressl.com
uatwedding.royalcanin.com
sni.cloudflaressl.com
sni.cloudflaressl.com
incapsula.com
sni.cloudflaressl.com
rcdl.royalcanin.com
dev.api.royalcanin.com
incapsula.com
scrmstg.royalcanin.com
uat.royalcanin.com

Certificate

The complete raw certificate details for apply.royalcanin.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIQdzjzIhggdQQt+NRJzUcTgTANBgkqhkiG9w0BAQsFADBX
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMTEwLwYDVQQDEyh0
aGF3dGUgRXh0ZW5kZWQgVmFsaWRhdGlvbiBTSEEyNTYgU1NMIENBMB4XDTE1MDUw
NDAwMDAwMFoXDTE2MDUwMzIzNTk1OVowgegxEzARBgsrBgEEAYI3PAIBAxMCVVMx
GTAXBgsrBgEEAYI3PAIBAhQIRGVsYXdhcmUxHTAbBgNVBA8TFFByaXZhdGUgT3Jn
YW5pemF0aW9uMSEwHwYDVQQKDBhSb3lhbCBDYW5pbiBVLlMuQS4sIEluYy4xEDAO
BgNVBAUTBzM2OTAyOTgxCzAJBgNVBAYTAlVTMREwDwYDVQQIDAhNaXNzb3VyaTEW
MBQGA1UEBwwNU2FpbnQgQ2hhcmxlczELMAkGA1UECwwCSVQxHTAbBgNVBAMMFGFw
cGx5LnJveWFsY2FuaW4uY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAj+c458rB1VwLE5mSN6WRTtFagZWngKGgsyaj8JSFFdn3VJSyVqsljOAcuE0l
QKc92ecavcyYODm4Hjo0BCJwMUAoc2Y2NN9E+7HKY8dJBNiGmVdhnAJO+Riv3bJZ
mq/zSShPs5+Y9XQoaDo1wi4O+Y9Vame4m8zTVKuTfcqeHOReofuCXe+Ogqh4isAQ
AuKdp2pGcFJLCDUgiP5dDISni9AxhA5q15/eAPb3xfFiNXbKt/vqW0zhLtfRNlTk
USoRwenn1Ke4tvKWYnkM7ZJvmmuQKPNoeiXcKQpjWHYmk12e0FuEfBGWkd4mX9a1
apRRCy5Ppp9AhvV0oW2MFfdgkwIDAQABo4ICgzCCAn8wHwYDVR0RBBgwFoIUYXBw
bHkucm95YWxjYW5pbi5jb20wCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwKwYD
VR0fBCQwIjAgoB6gHIYaaHR0cDovL3RmLnN5bWNiLmNvbS90Zi5jcmwwcwYDVR0g
BGwwajBoBgtghkgBhvhFAQcwATBZMCYGCCsGAQUFBwIBFhpodHRwczovL3d3dy50
aGF3dGUuY29tL2NwczAvBggrBgEFBQcCAjAjDCFodHRwczovL3d3dy50aGF3dGUu
Y29tL3JlcG9zaXRvcnkwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB8G
A1UdIwQYMBaAFDskyDGgt1rQarjSygd0zB4k1MTcMFcGCCsGAQUFBwEBBEswSTAf
BggrBgEFBQcwAYYTaHR0cDovL3RmLnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0
cDovL3RmLnN5bWNiLmNvbS90Zi5jcnQwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAA
dQCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAU0gB/7EAAAEAwBG
MEQCIFp0YBZAzfDnHmopV1Jud3IA3/I5M7fqRhKkH+Li5nxfAiBgAHc576e5nIme
NwRap5r3Xvotq8W6BcCLSTC1sUj9RwB3AFYUBpov18Ls0/XhvUSyPsdGdrm8mRFc
wO+UmFXWidDdAAABTSAH/8EAAAQDAEgwRgIhAMjRZLd2kLmcrK37AEcbN1Q9DFeF
R/gLMuEI4RjNv3yjAiEA1dKaeoi5O6kp//OLIfqjMsk/43SGialag4SrWsbiYTMw
DQYJKoZIhvcNAQELBQADggEBAJgGPybCX+fT7YYtOcW0JTEbX7J6dOMSpGv5OfvQ
sAYrTmTdGwa+daSglTBKnOQzlADDYpwE2QBTlojoompr8F4PESvTBRb1WqH9+oM0
BrJfQ4JEzSaMgbrzRbGxytEHxXaEmhXtXpBQVLUCssLA4ORojl/C1EPKPR+zshC6
+hIu0AKybRcNFEkahR3VSrOajXVwidK0e8gTmKt58rmsH1cKmTm3xFT7/VsJlk6L
lGzqQ/tKF0gxzGhfR9qC0n6cyIDNRRL5hUG5tyUjVisEA5ETS0/ASsvQxHWkoLMh
9OUyfVmp0oGSWQ473QRX39D8YKthDFiiFcVjJS9k53xDR9s=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+c458rB1VwLE5mSN6WR
TtFagZWngKGgsyaj8JSFFdn3VJSyVqsljOAcuE0lQKc92ecavcyYODm4Hjo0BCJw
MUAoc2Y2NN9E+7HKY8dJBNiGmVdhnAJO+Riv3bJZmq/zSShPs5+Y9XQoaDo1wi4O
+Y9Vame4m8zTVKuTfcqeHOReofuCXe+Ogqh4isAQAuKdp2pGcFJLCDUgiP5dDISn
i9AxhA5q15/eAPb3xfFiNXbKt/vqW0zhLtfRNlTkUSoRwenn1Ke4tvKWYnkM7ZJv
mmuQKPNoeiXcKQpjWHYmk12e0FuEfBGWkd4mX9a1apRRCy5Ppp9AhvV0oW2MFfdg
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 158473831449241030519569298096040383361
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte Extended Validation SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Royal Canin U.S.A., Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '3690298'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Missouri'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Saint Charles'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'apply.royalcanin.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18166097569381858717901639606099860208105678781496986289579560598126882931954155170034717721939401808955941234179617065333639641978786080656848253213847805470855379307386985624506799824097481944643467462197894774175740701753185057330182231699104955242377803907312282870528385440017229973754526708074464067489856813416706614799992690977982393712560434780867277952871157083718385260739433415896731856373041297673029237882757824876815887512161294594678031658427076403272198677520911806316184429531285535032187712170442064458462612294207024500756478739194552548575237335212771597779444143088754340920586569293988277739667
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apply.royalcanin.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tf.symcb.com/tf.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.48.1 (Thawte EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3b24c831a0b75ad06ab8d2ca0774cc1e24d4c4dc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tf.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tf.symcb.com/tf.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000014d2007fec4000004030046304402205a74601640cdf0e71e6a2957526e777200dff23933b7ea4612a41fe2e2e67c5f022060007739efa7b99c899e37045aa79af75efa2dabc5ba05c08b4930b5b148fd470077005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000014d2007ffc10000040300483046022100c8d164b77690b99cacadfb00471b37543d0c578547f80b32e108e118cdbf7ca3022100d5d29a7a88b93ba929fff38b21faa332c93fe3748689a95a8384ab5ac6e26133
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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