www.tekom.de
- tcworld GmbH -
Issued by thawte SHA256 SSL CA
About this certificate
This digital certificate with serial number 1c:b7:19:f1:d7:a3:40:ba:ee:c3:0c:c2:be:f9:d2:d4 was issued on by thawte, Inc..
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
tcworld GmbH
Organization:
tcworld GmbH
Organization unit: Organisation /Personal
Organization unit: Organisation /Personal
State / Province:
Baden-Württemberg
Locality: Stuttgart
Country: DE
Locality: Stuttgart
Country: DE
thawte, Inc.
Organization:
thawte, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 1c:b7:19:f1:d7:a3:40:ba:ee:c3:0c:c2:be:f9:d2:d4Serial Number (int): 38169100428053412826733921972099076820
Serial Number lenght: 125 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 2b:9a:35:ae:01:18:38:30:e1:70:7a:05:e0:11:76:a3:ce:bd:90:14
Fingerprint (sha1): 5e:8d:bf:c1:57:ba:49:00:d4:25:c1:0d:04:34:80:79:43:01:e2:73
Fingerprint (sha256): 0b:71:3d:db:41:80:5e:c8:d7:98:06:69:a0:96:9c:a0:ad:17:5c:5c:9c:98:70:c7:63:67:c0:59:e1:71:ce:d6
Issuing Certificate URL: http://tg.symcb.com/tg.crt
Revocation information
OCSP Server: http://tg.symcd.comCRL Distribution Point: http://tg.symcb.com/tg.crl
Check the revocation status for certificate www.tekom.de
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.tekom.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.technical-communication.org
www.tekom.de
tekom.de
www.tekom.de
tekom.de
Other certificates including the domain name tekom.de
(limited to 100 certificates)
www.tekom.de
app.reelertech.com
tagungen.tekom.de
statistik.tekom.de
www.tekom.de
www.tekom.de
cafe.tekom.de
mobil.tekom.de
mobil.tekom.de
mobil.tekom.de
www.tekom.de
conferences.tekom.de
bride.tekom.de
live.tekom.12bis3.de
martbhiadmin.estore.business
tagungen.tekom.de
develop.tekom.de
conferences.tekom.de
www.bambumeta.io
mobil.tekom.de
www.tekom.de
conferences.tekom.de
mobil.tekom.de
www.tekom.de
cloud.tekom.de
www.tekom.de
tagungen.tekom.de
www.tekom.de
umfrage.tekom.de
statistik.tekom.de
www.ngoan-streetfood.de
openx.tekom.de
conferences.tekom.de
webmail.tekom.de
umfrage.tekom.de
www.tekom.de
autodiscover.tekom.de
conferences.tekom.de
www.tekom.de
bride.tekom.de
mobil.tekom.de
webmail.tekom.de
jira.tekom.de
iirds.tekom.de
www.tekom.de
www.tekom.de
umfrage.tekom.de
iirds.tekom.de
autodiscover.tekom.de
statistik.tekom.de
www.tekom.de
develop.tekom.de
cloud.tekom.de
www.tekom.de
openx.tekom.de
conferences.tekom.de
mobil.tekom.de
develop.tekom.de
iirds.tekom.de
webmail.tekom.de
conferences.tekom.de
develop.tekom.de
conferences.tekom.de
www.tekom.de
tagungen.tekom.de
umfrage.tekom.de
link.how.fm
iirds.tekom.de
umfrage.tekom.de
develop.tekom.de
umfrage.tekom.de
tagungen.tekom.de
openx.tekom.de
tagungen.tekom.de
jira.tekom.de
conferences.tekom.de
cafe.tekom.de
visilaw.com
tagungen.tekom.de
openx.tekom.de
jira.tekom.de
www.tekom.de
statistik.tekom.de
tagungen.tekom.de
statistik.tekom.de
mobil.tekom.de
app.ventract.com
iirds.tekom.de
www.tekom.de
webforum.tekom.de
tagungen.tekom.de
www.tekom.de
www.tekom.de
tagungen.tekom.de
www.tekom.de
www.tekom.de
umfrage.tekom.de
tagungen.tekom.de
www.racetime.app
conferences.tekom.de
app.reelertech.com
tagungen.tekom.de
statistik.tekom.de
www.tekom.de
www.tekom.de
cafe.tekom.de
mobil.tekom.de
mobil.tekom.de
mobil.tekom.de
www.tekom.de
conferences.tekom.de
bride.tekom.de
live.tekom.12bis3.de
martbhiadmin.estore.business
tagungen.tekom.de
develop.tekom.de
conferences.tekom.de
www.bambumeta.io
mobil.tekom.de
www.tekom.de
conferences.tekom.de
mobil.tekom.de
www.tekom.de
cloud.tekom.de
www.tekom.de
tagungen.tekom.de
www.tekom.de
umfrage.tekom.de
statistik.tekom.de
www.ngoan-streetfood.de
openx.tekom.de
conferences.tekom.de
webmail.tekom.de
umfrage.tekom.de
www.tekom.de
autodiscover.tekom.de
conferences.tekom.de
www.tekom.de
bride.tekom.de
mobil.tekom.de
webmail.tekom.de
jira.tekom.de
iirds.tekom.de
www.tekom.de
www.tekom.de
umfrage.tekom.de
iirds.tekom.de
autodiscover.tekom.de
statistik.tekom.de
www.tekom.de
develop.tekom.de
cloud.tekom.de
www.tekom.de
openx.tekom.de
conferences.tekom.de
mobil.tekom.de
develop.tekom.de
iirds.tekom.de
webmail.tekom.de
conferences.tekom.de
develop.tekom.de
conferences.tekom.de
www.tekom.de
tagungen.tekom.de
umfrage.tekom.de
link.how.fm
iirds.tekom.de
umfrage.tekom.de
develop.tekom.de
umfrage.tekom.de
tagungen.tekom.de
openx.tekom.de
tagungen.tekom.de
jira.tekom.de
conferences.tekom.de
cafe.tekom.de
visilaw.com
tagungen.tekom.de
openx.tekom.de
jira.tekom.de
www.tekom.de
statistik.tekom.de
tagungen.tekom.de
statistik.tekom.de
mobil.tekom.de
app.ventract.com
iirds.tekom.de
www.tekom.de
webforum.tekom.de
tagungen.tekom.de
www.tekom.de
www.tekom.de
tagungen.tekom.de
www.tekom.de
www.tekom.de
umfrage.tekom.de
tagungen.tekom.de
www.racetime.app
conferences.tekom.de
Certificate
The complete raw certificate details for www.tekom.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG8DCCBdigAwIBAgIQHLcZ8dejQLruwwzCvvnS1DANBgkqhkiG9w0BAQsFADBD MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMR0wGwYDVQQDExR0 aGF3dGUgU0hBMjU2IFNTTCBDQTAeFw0xNjA2MjcwMDAwMDBaFw0xOTA5MjYyMzU5 NTlaMIGNMQswCQYDVQQGEwJERTEbMBkGA1UECAwSQmFkZW4tV8O8cnR0ZW1iZXJn MRIwEAYDVQQHDAlTdHV0dGdhcnQxFTATBgNVBAoMDHRjd29ybGQgR21iSDEfMB0G A1UECwwWT3JnYW5pc2F0aW9uIC9QZXJzb25hbDEVMBMGA1UEAwwMd3d3LnRla29t LmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaGLJx5XnjtpuLTg YQxCTX1SFMNyrPjlp0XImLqhpzMNuryxJUIuTfm6ktNxqow9QxZ455KN3ehkAA9j zCkircp6Puo4fw9U8VGLjyNI9zFajqpZdqnpaxZ7sOyzwGAKn73DzpCSWhaJN9sb u4NPQXwr51XNUZQozmmwKKbklund7nLPzL9b5A5wnRK15FWd1hJVSVYSqcVBtJX/ bZZ+hAKVFsfFaDNvjF8ASmcUMH/K6gwbTnhgIRrEaBtgOGYNBizja/jh3fsH4iOY 8HIegYSjzHDcGt8TLlBm88Cmlnjk4T0BMAqudgq6I6mDuHgY0WITazP59RdMYG7D 7SjxEwIDAQABo4IDkzCCA48wQgYDVR0RBDswOYIfd3d3LnRlY2huaWNhbC1jb21t dW5pY2F0aW9uLm9yZ4IMd3d3LnRla29tLmRlggh0ZWtvbS5kZTAJBgNVHRMEAjAA MG4GA1UdIARnMGUwYwYGZ4EMAQICMFkwJgYIKwYBBQUHAgEWGmh0dHBzOi8vd3d3 LnRoYXd0ZS5jb20vY3BzMC8GCCsGAQUFBwICMCMMIWh0dHBzOi8vd3d3LnRoYXd0 ZS5jb20vcmVwb3NpdG9yeTAOBgNVHQ8BAf8EBAMCBaAwHwYDVR0jBBgwFoAUK5o1 rgEYODDhcHoF4BF2o869kBQwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL3RnLnN5 bWNiLmNvbS90Zy5jcmwwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMFcG CCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDovL3RnLnN5bWNkLmNvbTAm BggrBgEFBQcwAoYaaHR0cDovL3RnLnN5bWNiLmNvbS90Zy5jcnQwggH2BgorBgEE AdZ5AgQCBIIB5gSCAeIB4AB2AN3rHSt6DU+mIIuBrYFocH4ujp0B1VyIjT0RxM22 7L7MAAABVZF2Z4cAAAQDAEcwRQIhAPvIBI1DQWt++0bo/vTI/KF89AXB1pLdUYnZ Kz6pY4giAiBJzinieK5VIXgaLOeGn4wNjhy4HKono9HnYnXugwBi7AB2AKS5CZC0 GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABVZF2Z8UAAAQDAEcwRQIgTDBp e1x2syScPgxPt4NzPW3sz7sqN32OIBerHi0vG8kCIQD4AXqyO21A6svZFV2UN3EZ LoIp3t37nDrypUr8M5wwSwB2AGj2mPgfZIK+OozuuSgdTPxxUV1nk9RE0QpnrLtP T/vEAAABVZF2Z6EAAAQDAEcwRQIhAIdC85WMrQu5WuaFpoS2R3K/3QxKuHZO/o1n BG6P/qbSAiBTAquCVXTbjmr85KgaLz44Svx+ILF2b0G1c9OQyEzuaAB2AO5Lvbd1 zmC64UJpH6vhnmajD35fsHLYgwDEe4l6qP3LAAABVZF2aYcAAAQDAEcwRQIgTf8S vozntkCtzYWSec+aHqL46FNikUQ0+3Xjr7k/i+ACIQDPQmwnCg4UoQlLUAOUolKa D7Lh3zp6ZNOnkMHctK5IHTANBgkqhkiG9w0BAQsFAAOCAQEAF3jNH0f9JDOVPMG3 ZyV3DDjD000Ba1cIrANvthmzH82i2sa+Hv2++VyB6laaI+xPPtr+BYCOijc7lpqk Mxn07JF0sHKuafZ1oTCBlgSSd7QXLO395//cfWD71abfD/+HqApAglpHzU8BkqgE MR7Rm/jXl+wZvuOyYX2M5td7MBTbwZMqyTT/XFRjzoU6edgVimZvcDZK3coMMElr yPj8g6oMNokhSYBCGEZ1r/We5/gPUpZT50LV3oTD7y8j+GMNU78VWgY6+8L5nEzK DDCuXN3Rv7BAHdHcmSvFVzr3ZOHpEfTvG96viBBSt+W81Ip05x3TSLCP/dL9pEN4 BLbKUg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaGLJx5XnjtpuLTgYQxC TX1SFMNyrPjlp0XImLqhpzMNuryxJUIuTfm6ktNxqow9QxZ455KN3ehkAA9jzCki rcp6Puo4fw9U8VGLjyNI9zFajqpZdqnpaxZ7sOyzwGAKn73DzpCSWhaJN9sbu4NP QXwr51XNUZQozmmwKKbklund7nLPzL9b5A5wnRK15FWd1hJVSVYSqcVBtJX/bZZ+ hAKVFsfFaDNvjF8ASmcUMH/K6gwbTnhgIRrEaBtgOGYNBizja/jh3fsH4iOY8HIe gYSjzHDcGt8TLlBm88Cmlnjk4T0BMAqudgq6I6mDuHgY0WITazP59RdMYG7D7Sjx EwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 38169100428053412826733921972099076820 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SHA256 SSL CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-27 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-26 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Stuttgart' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'tcworld GmbH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Organisation /Personal' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.tekom.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25958512619237310368387106940363553632809258604058440136788127528781148576330123077855469758952537202774782427385229184780071642646815103767926157531695074099546028519975884188992949863287868379453755835675491526552591839432597695522838347443463077673081432801475663297761093361694911096678139439005574290301723460602016398295363051754452008745271362393810525218809823516695763475232508804585274298345684930613912549424927848838689348010312924270258890697968789446650692886734358291092229026846387588393662842996369972700297164400253640397094593537710434914734222192600622773735112212180833305103516878768456008790291 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.technical-communication.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tekom.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tekom.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2b9a35ae01183830e1707a05e01176a3cebd9014 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcb.com/tg.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcb.com/tg.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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