UCA.glencore.co.za

- Glencore International AG -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 62:9a:c1:d3:d4:95:e6:8f:77:cb:3b:1f:fa:57:38:0b was issued on by thawte, Inc..

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Glencore International AG

Organization: Glencore International AG
Organization unit: Engineering
State / Province: Zug
Locality: Baar
Country: CH

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 62:9a:c1:d3:d4:95:e6:8f:77:cb:3b:1f:fa:57:38:0b
Serial Number (int): 131067888591123955101589097394310952971
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 51:0c:c7:5e:0b:a9:19:4c:cd:62:7e:14:06:d7:04:eb:fc:1c:93:08
Fingerprint (sha256): 09:cd:df:8e:04:a9:0f:e2:99:7e:59:26:22:53:f8:9e:dc:16:dc:7e:41:29:f7:51:4a:43:4a:b7:69:45:c5:ee

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate UCA.glencore.co.za

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for UCA.glencore.co.za

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

UCB.glencore.co.za
zajnbdmz7cewep2.anyaccess.net
glencore.com
glencore.co.za
conf.glencore.com
ciscolb1.glencore.com
ciscolb2.glencore.com
UCA.glencore.co.za

Other certificates including the domain name glencore.co.za

(limited to 100 certificates)
ithelpdesk.ttmgroup.ie
servicedesk.weareavidity.com
servicedesk.vretigas.it
ap.bar.ch.glencore.net
UCA-ZA.glencore.com
helpdesk.sicom.mu
UCA.glencore.co.za
ithelpdesk.oneplm.com
sdp.dilloneustace.ie
helpdesk.wentworthclub.com
helpdesk.saviaantjes.be
sdpcloud.netwarx.com
ictportal.linkfinancial.eu
ithelp.mhphotels.com
ithelp.mhphotels.com
sfbext.bar.ch.glencore.net
sdp.dilloneustace.ie
helpdesk.aerocompact.com
helpdesk.bedes.org
servicedesk.bat-agrar.de
helpdeskittest.zetes.com
UCA.glencore.co.za
aiseait.fuchs.com
UCA.glencore.co.za
helpdesk.hambroperks.com
assist.pentest.partners
itservicedesk.eldoradogold.com
sfbext.zrh.ch.glencore.net
helpdesk.bedes.org
servicedesk.procentia.com
servicedesk.bellrockgroup.co.uk
helpdesk.vista.ch
servicedesk.jmlgroup.co.uk
assist.pentest.partners
ithelpdesk.ttmgroup.ie
assist.pentest.partners
sfbext.bar.ch.glencore.net
servicedesk.jmlgroup.co.uk
ap.bar.ch.glencore.net
ucb-zaf.glencore.com
assist.pentest.partners
aiseait.fuchs.com
servicedesk.bwbconsulting.com
sfbext.zrh.ch.glencore.net
ap.bar.ch.glencore.net
ap.bar.ch.glencore.net
noc.servicedesk.as
servicedesk.akcentral.com
zahelpdesk.glencore.co.za
assist.pentest.partners
assist.pentest.partners
servicedesk.medica.ie
UCA.glencore.co.za
helpdesk.plumsteadmanor.com
helpdesk.actosoft.de
assist.pentest.partners
assist.pentest.partners
assist.pentest.partners
helpdesk.actosoft.de
ithelpdesk.rev-log.com
sau.solarprofit.es
zahelpdesk.glencore.co.za
sfbext.bar.ch.glencore.net
assist.pentest.partners
helpdeskittest.zetes.com
sfbext.zrh.ch.glencore.net
servicedesk.bat-agrar.de
servicedesk.weareavidity.com
helpdesk.bedes.org
aiseait.fuchs.com
ap.bar.ch.glencore.net
ithelp.mhphotels.com
aiseait.fuchs.com
helpdesk.coulisse.com
helpdesk.nationalcaregroup.com
ap.bar.ch.glencore.net
servicedesk.procentia.com
helpdesk.wentworthclub.com
helpdesk.bedes.org
servicedesk.winfieldunited.co.za
helpdesk.bellagroup.dk
helpdesk.saviaantjes.be
ap.bar.ch.glencore.net
assist.pentest.partners
itservicedesk.eldoradogold.com
helpdesk.vista.ch
assist.pentest.partners
sfbext.bar.ch.glencore.net
sfbext.bar.ch.glencore.net
helpdesk.nationalcaregroup.com
sistemes.accio.gencat.cat
ictportal.linkfinancial.eu
uca-zaf.glencore.com
helpdesk.minitab.com
ithelpdesk.rev-log.com
sistemes.accio.gencat.cat
sdp.vdp.com
ithelpdesk.rev-log.com
ap.bar.ch.glencore.net
assist.pentest.partners

Certificate

The complete raw certificate details for UCA.glencore.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAoGb4Vhwnlj8oJ+3M9Emy
zS4OjG0hYuFS0CT6iEnxVKjsm6QyCUc9WrcH85F9T6mFhJxEXnmKWOhpLSB1lIE+
Zbe34hjsByHkrbmgRbVpYTjmm/j1BeCXImqNIjgFvfE008TdARESaPE4vIkzBFtn
2lL0rXpQtY1H5PM16LLKnYEG0tWPhXZJmS6dJh0+FgWTukgFIvSkU2VEuFHAq0UN
+063F2cvynYOYk/IDShB4p0tBhpGZAihKoucdqp5UAg/PnSKMctZ36p8S/beXzTb
OP62BXLDTbuKhaE8oJYJHotd+9g5XpPFIJH6KY8bFCVI7BgSsJxQ9t2ux0GJAWSq
SJ4a4VSJKECBL/ArWAY2IlEE6l0d4RvirB/kg1AV5VLAp/uzHEE13F+5f4TrFIoG
YuPlAXBGP7iupDbCvBoBxGTwRPSUXKSz14bKH7lqLEYUfS8Xhsp/UhYFTT2gj351
i9qH1MfL7o/K+vZXHwZnAa+3GpUnC2Zye54tOIgCebzDY4UmYHEVMRNFG0kfq+CU
4y4l2xVLHdBxlq+JUG8Dz2tWAu4Api/fZc8ilRH3hyc49aP8fw+bdyWLEADNhcSM
QZWqQDegZiMIT0NkvA1osFVOX22Lc6B8g+qkBkObqFmIb+S/qoOP5G5kmt9zGOCy
eOEtfhLmNdiCNt96HpzwGdUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 131067888591123955101589097394310952971
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zug'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baar'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Glencore International AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Engineering'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'UCA.glencore.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 654383993111782905451601191371956908903955503827399545500629589590230486861981993367565766694077157619660390604070461239212167836612392216912442113435769677034431900120833590175307156175148893215556848342032171136102515513596667428957212897387428411314796715687930819578756603547584903260036261476638777938190495975368369021743206536565215833787887770286280945304595372704182666452461732039402745715159937262018610022741705443809309131003332847816598912696688869931805949438193212110110247566808731180138130637035349348449344338672487268144840205351021825520315608986969585404077130196813529535389898639948214125000635183395219654845142309831439807195826163776582509512929121422891686881640614605304659103520995366787022328359087864013354253909376519868694380848328391032390052026527451687000571200758271634454762670166649241635363479362196634747733590651997494547431472197736238865591908662011366125640380446166485308157262229899293966481300261274551794599778005166060670781043204568977363117627633601772475874625253512171148693580551113997923365743471985234325412847890803279757176211040324696302827087755803739668593281812300284949217023919928273100033300880983858490948934668776062782027694894644024492529130070003450740896438741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (169 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'UCB.glencore.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zajnbdmz7cewep2.anyaccess.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glencore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glencore.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conf.glencore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciscolb1.glencore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciscolb2.glencore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'UCA.glencore.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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