secure.cruzio.com
- Cruzio -
Issued by Thawte RSA CA 2018
About this certificate
This digital certificate with serial number 0c:7c:a1:b4:1d:9f:f1:d5:db:03:03:e4:ad:1c:c6:94 was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Cruzio
Organization:
Cruzio
State / Province:
California
Locality: Santa Cruz
Country: US
Locality: Santa Cruz
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0c:7c:a1:b4:1d:9f:f1:d5:db:03:03:e4:ad:1c:c6:94Serial Number (int): 16597860498061176112700542729911584404
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 9b:d0:e8:f7:52:b3:42:b6:02:fe:ca:a3:cc:4f:92:c1:d6:5a:71:6f
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a
Fingerprint (sha1): 6b:a3:c5:27:75:42:32:e1:83:44:67:f4:fd:74:81:0c:89:d7:6e:87
Fingerprint (sha256): 0b:4e:5c:ef:2a:8a:f9:3c:dc:fa:01:27:9c:a2:9a:e2:a0:f1:04:87:5e:c7:b3:45:19:05:89:46:85:1c:18:0f
Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt
Revocation information
OCSP Server: http://status.thawte.comCRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl
Check the revocation status for certificate secure.cruzio.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for secure.cruzio.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
secure.cruzio.com
Other certificates including the domain name cruzio.com
(limited to 100 certificates)
host4.cruzio.com
host9.cruzio.com
cruziomail.cruzio.com
members.cruzio.com
host8.cruzio.com
secure.cruzio.com
host3.cruzio.com
cruziomail.cruzio.com
cruziomail.cruzio.com
www.cruzio.com
www8.cruzio.com
host1.cruzio.com
host10.cruzio.com
cruziomail.cruzio.com
www6.cruzio.com
secure.cruzio.com
tools.cruzio.com
tools.cruzio.com
portal.cruzio.com
cruziomail.cruzio.com
host6.cruzio.com
host6.cruzio.com
secure.cruzio.com
cruziomail.cruzio.com
www.cruzio.com
host8.cruzio.com
cruziomail.cruzio.com
www10.cruzio.com
mail.cruzio.com
host9.cruzio.com
host1.cruzio.com
cruzio.com
host3.cruzio.com
members.cruzio.com
host10.cruzio.com
host1.cruzio.com
www4.cruzio.com
www.cruzio.com
cruziomail.cruzio.com
cruziomail.cruzio.com
host6.cruzio.com
www3.cruzio.com
host11.cruzio.com
host7.cruzio.com
host1.cruzio.com
nagios.cruzio.com
www5.cruzio.com
host8.cruzio.com
cruziomail.cruzio.com
host12.cruzio.com
host10.cruzio.com
host10.cruzio.com
tools.cruzio.com
cruziomail.cruzio.com
mail.cruzio.com
www7.cruzio.com
host1.cruzio.com
quartz.cruzio.com
cruziomail.cruzio.com
portal.cruzio.com
www7.cruzio.com
cruziomail.cruzio.com
host7.cruzio.com
www.cruzio.com
cruziomail.cruzio.com
mail.cruzio.com
host8.cruzio.com
www10.cruzio.com
www15.cruzio.com
www9.cruzio.com
cruziomail.cruzio.com
www12.cruzio.com
quartz.cruzio.com
www9.cruzio.com
cruziomail.cruzio.com
www5.cruzio.com
www.cruzio.com
host9.cruzio.com
quartz.cruzio.com
host9.cruzio.com
host11.cruzio.com
cruziomail.cruzio.com
www8.cruzio.com
secure.cruzio.com
mail.cruzio.com
www4.cruzio.com
cruziomail.cruzio.com
host6.cruzio.com
cruziomail.cruzio.com
secure.cruzio.com
amail.cruzio.com
mail.cruzio.com
quartz.cruzio.com
cruziomail.cruzio.com
host7.cruzio.com
quartz.cruzio.com
wwwsb1.cruzio.com
www7.cruzio.com
www8.cruzio.com
host10.cruzio.com
host9.cruzio.com
cruziomail.cruzio.com
members.cruzio.com
host8.cruzio.com
secure.cruzio.com
host3.cruzio.com
cruziomail.cruzio.com
cruziomail.cruzio.com
www.cruzio.com
www8.cruzio.com
host1.cruzio.com
host10.cruzio.com
cruziomail.cruzio.com
www6.cruzio.com
secure.cruzio.com
tools.cruzio.com
tools.cruzio.com
portal.cruzio.com
cruziomail.cruzio.com
host6.cruzio.com
host6.cruzio.com
secure.cruzio.com
cruziomail.cruzio.com
www.cruzio.com
host8.cruzio.com
cruziomail.cruzio.com
www10.cruzio.com
mail.cruzio.com
host9.cruzio.com
host1.cruzio.com
cruzio.com
host3.cruzio.com
members.cruzio.com
host10.cruzio.com
host1.cruzio.com
www4.cruzio.com
www.cruzio.com
cruziomail.cruzio.com
cruziomail.cruzio.com
host6.cruzio.com
www3.cruzio.com
host11.cruzio.com
host7.cruzio.com
host1.cruzio.com
nagios.cruzio.com
www5.cruzio.com
host8.cruzio.com
cruziomail.cruzio.com
host12.cruzio.com
host10.cruzio.com
host10.cruzio.com
tools.cruzio.com
cruziomail.cruzio.com
mail.cruzio.com
www7.cruzio.com
host1.cruzio.com
quartz.cruzio.com
cruziomail.cruzio.com
portal.cruzio.com
www7.cruzio.com
cruziomail.cruzio.com
host7.cruzio.com
www.cruzio.com
cruziomail.cruzio.com
mail.cruzio.com
host8.cruzio.com
www10.cruzio.com
www15.cruzio.com
www9.cruzio.com
cruziomail.cruzio.com
www12.cruzio.com
quartz.cruzio.com
www9.cruzio.com
cruziomail.cruzio.com
www5.cruzio.com
www.cruzio.com
host9.cruzio.com
quartz.cruzio.com
host9.cruzio.com
host11.cruzio.com
cruziomail.cruzio.com
www8.cruzio.com
secure.cruzio.com
mail.cruzio.com
www4.cruzio.com
cruziomail.cruzio.com
host6.cruzio.com
cruziomail.cruzio.com
secure.cruzio.com
amail.cruzio.com
mail.cruzio.com
quartz.cruzio.com
cruziomail.cruzio.com
host7.cruzio.com
quartz.cruzio.com
wwwsb1.cruzio.com
www7.cruzio.com
www8.cruzio.com
host10.cruzio.com
Certificate
The complete raw certificate details for secure.cruzio.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF6zCCBNOgAwIBAgIQDHyhtB2f8dXbAwPkrRzGlDANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMRswGQYDVQQDExJUaGF3dGUgUlNBIENBIDIwMTgwHhcN MTgwNTExMDAwMDAwWhcNMTgwOTI0MTIwMDAwWjBkMQswCQYDVQQGEwJVUzETMBEG A1UECBMKQ2FsaWZvcm5pYTETMBEGA1UEBxMKU2FudGEgQ3J1ejEPMA0GA1UEChMG Q3J1emlvMRowGAYDVQQDExFzZWN1cmUuY3J1emlvLmNvbTCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAMWS0zNoVgXlB7gEjaNOqztfU72FBkceIKVBq5DM CpkBjBuwPbOrs3aOeOYxqzhEjwKPdvYPNX6q/nAAwR37vX362KfreTvivKyYKu2S MLi/PDdQX9Wv9tPT68Y+6qXBkQhTHlBf7qlWzEoGlb7ypNkryJdBuo/5JOjRqiNf ECmaz9rix9a3BnQZCnYFJ0xps5Ag0F56WcXl8xAew6f/ozJCbW/B8W5EaS976RSK KNfYBKY5mk+yoakJVQ6NsmCl66q9em8X6ilWc1cx2OTjPFo9DOTy5T84FOxFfD9E lH5V+zJI92fSWDOBG2xrT3y8Hi9zV1VbyLUKplJ7lj+frAMCAwEAAaOCAp8wggKb MB8GA1UdIwQYMBaAFKPIXmVU5TB4wQXqBwpqWcy5/t5aMB0GA1UdDgQWBBSb0Oj3 UrNCtgL+yqPMT5LB1lpxbzAcBgNVHREEFTATghFzZWN1cmUuY3J1emlvLmNvbTAO BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDoG A1UdHwQzMDEwL6AtoCuGKWh0dHA6Ly9jZHAudGhhd3RlLmNvbS9UaGF3dGVSU0FD QTIwMTguY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEW HGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMG8GCCsGAQUF BwEBBGMwYTAkBggrBgEFBQcwAYYYaHR0cDovL3N0YXR1cy50aGF3dGUuY29tMDkG CCsGAQUFBzAChi1odHRwOi8vY2FjZXJ0cy50aGF3dGUuY29tL1RoYXd0ZVJTQUNB MjAxOC5jcnQwCQYDVR0TBAIwADCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB1AKS5 CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABY1A/t2QAAAQDAEYwRAIg XVrjMDIn4jHCwamFcMlK25OGp+l5DJ7YqQOxwH0waS8CIBKxDoYMV3b4aZyJt9Nh U/UTCA5860DNUxgzSEcqRuxcAHcAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2y CJo32RMAAAFjUD+5PAAABAMASDBGAiEAjymvRX/uY9PPNfVEtuej58n3SVQfrVtB h9n50chrIWMCIQClo2bx+8kZ06juSN9+jqYoBKtor1W0QsLXcDTDW66e8DANBgkq hkiG9w0BAQsFAAOCAQEAj+EIyiuuGYGbDUAmtcbM3k5TIMvWTaK3nSiqH9DkUqVR I3iBorQONW4Cy1hu2bOWVUkyZx71+WdWAgbGVOy9UsyOf+YqFlcDfx1XZHjOJ7oK KhVGJLpY1wcwcUMZCnNMPzR/bPRKcPU8vAcM1MD7SB9IMgUzjPH1FciTCsFS4rzY 1ROga/eoGJBD/0a+Cmi4s1e6eZvLBpoC5wO3sodC/or6kJLV7HUyRQ5lKlAjakdK 2ZaaUycqVbp1CnUPEldka70wFtI4gp/KN09j2T55EoyszQkhOGtYPlaN6L3lVzaA TjbWc+4ChutB08HD+Rlyq0oN9vZ4T5bXQfcvZRg+mw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZLTM2hWBeUHuASNo06r O19TvYUGRx4gpUGrkMwKmQGMG7A9s6uzdo545jGrOESPAo929g81fqr+cADBHfu9 ffrYp+t5O+K8rJgq7ZIwuL88N1Bf1a/209Prxj7qpcGRCFMeUF/uqVbMSgaVvvKk 2SvIl0G6j/kk6NGqI18QKZrP2uLH1rcGdBkKdgUnTGmzkCDQXnpZxeXzEB7Dp/+j MkJtb8HxbkRpL3vpFIoo19gEpjmaT7KhqQlVDo2yYKXrqr16bxfqKVZzVzHY5OM8 Wj0M5PLlPzgU7EV8P0SUflX7Mkj3Z9JYM4EbbGtPfLweL3NXVVvItQqmUnuWP5+s AwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16597860498061176112700542729911584404 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-11 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-24 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Santa Cruz' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cruzio' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure.cruzio.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24941348185838774035597897349663256759430089641702855260611874509797105531288309427535749327845285836149808589217487301987760614597228193939633267452351894272134173728962147745180347755522595520748443901606867665398168469528182932086756494349016465846651009189830193655747186838651426299518454883712529252567110551147510516096592003495533638153470996103145740151767478952928074401253927658954768596137682725027516315478248404381583858299965894048373353991405290743436773713154598070488772278665876213790217796675615725564435407708931806796865007152540634452266566109144194815596963907688185195955975178127510563957763 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9bd0e8f752b342b602fecaa3cc4f92c1d65a716f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.cruzio.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000163503fb764000004030046304402205d5ae3303227e231c2c1a98570c94adb9386a7e9790c9ed8a903b1c07d30692f022012b10e860c5776f8699c89b7d36153f513080e7ceb40cd53183348472a46ec5c0077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000163503fb93c00000403004830460221008f29af457fee63d3cf35f544b6e7a3e7c9f749541fad5b4187d9f9d1c86b2163022100a5a366f1fbc919d3a8ee48df7e8ea62804ab68af55b442c2d77034c35bae9ef0 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 008fe108ca2bae19819b0d4026b5c6ccde4e5320cbd64da2b79d28aa1fd0e452a551237881a2b40e356e02cb586ed9b396554932671ef5f967560206c654ecbd52cc8e7fe62a1657037f1d576478ce27ba0a2a154624ba58d707307143190a734c3f347f6cf44a70f53cbc070cd4c0fb481f483205338cf1f515c8930ac152e2bcd8d513a06bf7a8189043ff46be0a68b8b357ba799bcb069a02e703b7b28742fe8afa9092d5ec7532450e652a50236a474ad9969a53272a55ba750a750f1257646bbd3016d238829fca374f63d93e79128caccd0921386b583e568de8bde55736804e36d673ee0286eb41d3c1c3f91972ab4a0df6f6784f96d741f72f65183e9b