api.o365guestaccessreview.saint-gobain.com

- COMPAGNIE DE SAINT-GOBAIN SA -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 01:07:7d:23:b7:54:16:5c:c2:15:87:73:7a:c3:42:cd was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

COMPAGNIE DE SAINT-GOBAIN SA

Organization: COMPAGNIE DE SAINT-GOBAIN SA
State / Province: Île-de-France
Locality: Courbevoie
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:07:7d:23:b7:54:16:5c:c2:15:87:73:7a:c3:42:cd
Serial Number (int): 1368112204718216293660417203737150157
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 19:f0:34:19:17:01:ec:6f:18:76:e6:96:67:c4:d1:2c:60:00:85:78
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): eb:75:aa:91:ca:dc:23:ef:58:7b:c3:2f:f1:b7:4d:a8:65:11:d5:e6
Fingerprint (sha256): 0a:fc:f4:78:ee:27:d4:29:21:c5:81:6f:bd:c4:06:b7:56:b6:69:3a:40:98:e0:b9:32:42:de:11:7a:ba:0b:05

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate api.o365guestaccessreview.saint-gobain.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.o365guestaccessreview.saint-gobain.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.o365guestaccessreview.saint-gobain.com

Other certificates including the domain name saint-gobain.com

(limited to 100 certificates)
imperva.com
mobilemail2.saint-gobain.com
imperva.com
www.chartercampaign.saint-gobain.com
*.extranet.saint-gobain.com
www.saint-gobain.com
www.saint-gobain.com.tr
www.saint-gobain.com
www.saint-gobain.com.tr
pprugmobileservice.saint-gobain.com
bimlibrary.saint-gobain.com
www2.plastics.saint-gobain.com
imperva.com
design-challenge.saint-gobain.com
ppmobilemail.saint-gobain.com
boost.glass.saint-gobain.com
multimedia.newsletter-im.saint-gobain.com
incapsula.com
store.processsystems.saint-gobain.com
*.website4sg.saint-gobain.com
mail5.saint-gobain.com
gec.saint-gobain.com
bimauthorization.saint-gobain.com
surveys.saint-gobain.com
www.blackpool-powertools.co.uk
incapsula.com
customersmdm-ceramics-int.saint-gobain.com
employee.saint-gobain.com
prosource.app.saint-gobain.com
uat.valueplus.saint-gobain.com
imdf-userguide.im.saint-gobain.com
securelogin.saint-gobain.com
*.fts.saint-gobain.com
www.saint-gobain.fr
www.repairservices.sefpro.com
pprugmobileapps.saint-gobain.com
incapsula.com
boost.sekurit.saint-gobain.com
www.saint-gobain.com
fr-partners.ras.saint-gobain.com
www.bearings.saint-gobain.com
valmobilemailpki.saint-gobain.com
valrugmobileapps.saint-gobain.com
mobilemail2.saint-gobain.com
www.refractories.saint-gobain.com
partners.weber.saint-gobain.com
www.bearings.saint-gobain.com
imperva.com
exch.saint-gobain.com
business-challenge-2018.saint-gobain.com
imperva.com
valrugmobileapps.saint-gobain.com
api.o365guestaccessreview.saint-gobain.com
midco.saint-gobain.com
sip.saint-gobain.com
ftp.boost.sekurit.saint-gobain.com
ftp.boost.sekurit.saint-gobain.com
sga-userguide.im.saint-gobain.com
mail6.saint-gobain.com
catalog.biopharm.saint-gobain.com
store.saint-gobain.com
api.cockpit.saint-gobain.com
uat.cloudgateway.saint-gobain.com
videos.saint-gobain.com
customer-eu.lifesciences.saint-gobain.com
store.processsystems.saint-gobain.com
imperva.com
mail10.saint-gobain.com
benelux-register.saint-gobain.com
go.nordic.saint-gobain.com
mdm-uatsupplier.im.saint-gobain.com
*.fts.saint-gobain.com
catalog.biopharm.saint-gobain.com
*.im.saint-gobain.com
webmail.saint-gobain.com
giws.saint-gobain.com
www2.plastics.saint-gobain.com
*.notilus.saint-gobain.com
surveys.saint-gobain.com
www.saint-gobain.com
valmobilemail.saint-gobain.com
www.saint-gobain.com
www.saint-gobain.com.tr
www.bearings.saint-gobain.com
mdm.saint-gobain.com
www.saint-gobain.com
partners.weber.saint-gobain.com
colibri.saint-gobain.com
www.bearings.saint-gobain.com
peg.saint-gobain.com
bimlibrary.saint-gobain.com
easyload.isogypfr.saint-gobain.com
imperva.com
bimlibrary.saint-gobain.com
www.saint-gobain.com.tr
www.blackpool-powertools.co.uk
flyover2019.saint-gobain.com
guest.saint-gobain.com
*.saint-gobain.com
marketing-development.saint-gobain.com

Certificate

The complete raw certificate details for api.o365guestaccessreview.saint-gobain.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHpDCCBoygAwIBAgIQAQd9I7dUFlzCFYdzesNCzTANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMRswGQYDVQQDExJUaGF3dGUgUlNBIENBIDIwMTgwHhcN
MjIwNTE2MDAwMDAwWhcNMjMwNjEzMjM1OTU5WjCBlzELMAkGA1UEBhMCRlIxFzAV
BgNVBAgMDsOObGUtZGUtRnJhbmNlMRMwEQYDVQQHEwpDb3VyYmV2b2llMSUwIwYD
VQQKExxDT01QQUdOSUUgREUgU0FJTlQtR09CQUlOIFNBMTMwMQYDVQQDEyphcGku
bzM2NWd1ZXN0YWNjZXNzcmV2aWV3LnNhaW50LWdvYmFpbi5jb20wggIiMA0GCSqG
SIb3DQEBAQUAA4ICDwAwggIKAoICAQDFYsKidvl0r8tW2JIeJgS7UqZvW5ExVx/j
XIQJc/ZpW557v5kUtooUO8/N/mwwBxNEWrAFnBNfxoMVih2TpbUZJaCFpJPa/IE9
v8XmwuyKWHL76HDhasb+mUUOIhqP1v+2/seZCWpJK7xfzWt0+oGE3SXmrJihnRuI
Ci1NvTvak3/APjq8FF+5dXbMGWVvexLNEPl6rH0RN/2h+s77/N2NE5h3Zix3tEvB
AdkLVWrQLUn/qZEtOzGbledjMLNZE36w+pVKO+OGGXzJRVS+LHDpp1qGz0OdHGnO
mOwJZhHTBjMRcOkZBfj/0SsdQs9ccz15i4sWQILcy360SzhkzBL3KztD0kdFarfR
qhdCTUTGX8oM3ish1pY+qpZAHK2c3sJqxUEODz8TYx264R0OzdQtGNkuOQyj8wfL
GeTNpFdGtRB6KNP94RcJm6eK7Uq4YTVgVJcMjGPQ/U+TtpRF7J83Z+j1D7UqV2gp
iASzXPCHCJeCNmrNqG6PuvH0L9+L2GKQkMHgDTFgENqGq6n/eAZkM/ew4zNYAgXq
k07qIhnYhAs4ZDmukd3BTjw9SPzqenzPLlKa13pXZtI+0oEZNKVNLtCjjJHehOdU
sHiVOt03PHf6HJG9OufjeB2DEFiB5g7cinWZ5bnUba5IT9x+clLTqk5gVTuL8DCj
2Dm3nJL54wIDAQABo4IDJDCCAyAwHwYDVR0jBBgwFoAUo8heZVTlMHjBBeoHCmpZ
zLn+3lowHQYDVR0OBBYEFBnwNBkXAexvGHbmlmfE0SxgAIV4MDUGA1UdEQQuMCyC
KmFwaS5vMzY1Z3Vlc3RhY2Nlc3NyZXZpZXcuc2FpbnQtZ29iYWluLmNvbTAOBgNV
HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDoGA1Ud
HwQzMDEwL6AtoCuGKWh0dHA6Ly9jZHAudGhhd3RlLmNvbS9UaGF3dGVSU0FDQTIw
MTguY3JsMD4GA1UdIAQ3MDUwMwYGZ4EMAQICMCkwJwYIKwYBBQUHAgEWG2h0dHA6
Ly93d3cuZGlnaWNlcnQuY29tL0NQUzBvBggrBgEFBQcBAQRjMGEwJAYIKwYBBQUH
MAGGGGh0dHA6Ly9zdGF0dXMudGhhd3RlLmNvbTA5BggrBgEFBQcwAoYtaHR0cDov
L2NhY2VydHMudGhhd3RlLmNvbS9UaGF3dGVSU0FDQTIwMTguY3J0MAkGA1UdEwQC
MAAwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB2AOg+0No+9QY1MudXKLyJa8kD
08vREWvs62nhd31tBr1uAAABgMxRzfcAAAQDAEcwRQIgatZNhNeVACahkPG/n8aQ
hiXiPHjiLAZW0rCZm1vTkoICIQCnDRDCa+aVaFuUCo9k/3IjtmzFWmm6v1NAVldX
FX86sQB2ADXPGRu/sWxXvw+tTG1Cy7u2JyAmUeo/4SrvqAPDO9ZMAAABgMxRzgoA
AAQDAEcwRQIhAIplCNz2uwvUUTf11VGVlwwKcHdgzofyUWiSiAl2hij3AiATlckG
ji8cZxWir9V4YeFDBxpdY9oQXoZOk6WAxu4zPAB2ALc++yTfnE26dfI5xbpY9Gxd
/ELPep81xJ4dCYEl7bSZAAABgMxRzgEAAAQDAEcwRQIgLSLHvI5ZoxFv1H9KtLrX
v2kYlvR2SMVeV7gXNLVWkvwCIQD/iaj5NLTK9+4miJ9bWy1kE65VJSarMTzGKeMq
dl9IJTANBgkqhkiG9w0BAQsFAAOCAQEAJofjOVrQjPIVWepW0ebCmUh4Jg50rXOw
vlk5b0dwzKmJxmgk6kshHvyMoaF+Z/oAEY0DMTzWe3qD+cqUqJIjJZWSmf+z95kJ
InvFdeh+p/2dpCo+odFsWHtAG3DJKaAo7xzDNMveKfALoBBzIMrAaplfeMhn+uip
J0OrvQqkdg+q9OlFPaIkQWVWg0OxYprLc8zqumZ6eHwtypOWb/FAH2567Pwzuuua
3b1Jpbv4luDpoqm6lC4ILjHtM3uaCdOiwoF3TWLiKTJIoXRElhFKlnzr+z1bPqyr
4ffc2bFaxZONI/Z88J63JcWABjOKg45Mk0DmStgWFSveIiLysZtLdQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1368112204718216293660417203737150157
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Courbevoie'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMPAGNIE DE SAINT-GOBAIN SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.o365guestaccessreview.saint-gobain.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 805263736233700004640898081107399592585347767970566105603427240893163399574078618943610688799172888383017051890540617801172375997196638868214860609545616080776154983320807419890533982900522597994112598696715012120435366650392773829847871697252485381190799901782989861417195066170462513480648759989085761421198624689620657285100327870642938220627067417896055634301640626915677649619256084202106107780768506700246797370196635496424277048589256383560741951545371893839273298391992021291318141495548483877569297122228187235934923061446585869005153101981936098105145946786433027105800444479187661389749009239055475818790280577256210807660644651950069472774124098189056755697086162315760711363474714114994625654876043529256869248840420374395578634577340526156417153478222255457408320307126414278920157686780561553072577706127031430990584670819717154090667002104084383334408808105736031637135200681370650349095633239629120220488751358431259945987260134958587396920961238434432295998983011778462050028134298367179340864103218437060762766447151498897994486363951438495783905567125102548029971525545995633502235794981420334734191880017762205587358406012057976651177810711392293928311039358180819093813757441387915727459065655756901990106593763
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							19f034191701ec6f1876e69667c4d12c60008578
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.o365guestaccessreview.saint-gobain.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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