res.levexis.com

- TagMan Ltd -

Issued by Thawte SSL CA

About this certificate

This digital certificate with serial number 54:f9:85:fe:5d:9f:a1:55:16:20:ac:f9:50:d5:b7:39 was issued on by Thawte, Inc..

With 50 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

TagMan Ltd

Organization: TagMan Ltd
Organization unit: Ops
State / Province: London
Locality: London
Country: GB

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 54:f9:85:fe:5d:9f:a1:55:16:20:ac:f9:50:d5:b7:39
Serial Number (int): 112950751277113756688007290557375559481
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: a7:a2:83:bb:34:45:40:3d:fc:d5:30:4f:12:b9:3e:a1:01:9f:f6:db

Fingerprint (sha1): 40:57:7b:68:52:b7:4a:5b:bf:b2:ae:5a:cd:d1:f4:30:26:cc:9c:d8
Fingerprint (sha256): 0d:70:c3:61:69:88:1f:48:a0:f3:95:89:1d:13:79:0b:77:53:33:02:8b:7d:80:7e:83:b8:5a:07:3b:fb:f5:31

Issuing Certificate URL: http://tb.symcb.com/tb.crt

Revocation information

OCSP Server: http://tb.symcd.com
CRL Distribution Point: http://tb.symcb.com/tb.crl

Check the revocation status for certificate res.levexis.com

50

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for res.levexis.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tags.aumago.com
tagman.waitrosecellar.com
tagman.waitrose.com
tagman.sovereign.com
attribution.sperry.com
attribution.merrell.com
attribution.keds.com
attribution.hushpuppies.com
attribution.grasshoppers.com
tagman.lauraashley.com
tagman.jurysinns.com
tagman.intercall.com
tagman.heathrowexpress.com
tagman.heathrowairport.com
tagman.heathrow.com
tagman.hayesandjarvis.co.uk
attribution.cushe.com
tagman.fotolia.com
tagman.crystalsummer.co.uk
tagman.crystalski.co.uk
tagman.citalia.com
tagman.christianmingle.com
tagman.britishairways.com
tagman.bestwestern.com
attribution.batesfootwear.com
service-ens.sueddeutsche.de
attribution.chacos.com
madata.newlook.com
ensighten.airnewzealand.co.uk
attribution.saucony.com
attribution.nasm.org
attribution.mylyve.com
attribution.lendopolis.com
attribution.lebara.com
attribution.kvd.com.au
attribution.striderite.com
tagman.virgin-atlantic.com
tagman.thebodyshop.co.uk
tagman.thistle.com
attribution.wolverine.com
tagman.stylebop.com
tagman.thomsonlakes.co.uk
tagman.transavia.com
tagman.thomsonski.co.uk
tagman.viator.com
tagman.surfstitch.com
pfa.levexis.com
pfna.levexis.com
sec.levexis.com
res.levexis.com

Other certificates including the domain name levexis.com

(limited to 100 certificates)
res.levexis.com
*.levexis.com
*.levexis.com
*.levexis.com
pfa.levexis.com
sec.levexis.com
res.levexis.com
pfa.levexis.com
s8.wac.edgecastcdn.net
res.levexis.com
res.levexis.com
res.levexis.com
pfa.levexis.com
res.levexis.com
s8.wac.edgecastcdn.net
res.levexis.com
res.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
sec.levexis.com
sec.levexis.com
res.levexis.com
s8.wac.edgecastcdn.net
res.levexis.com
pfa.levexis.com
res.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
sec.levexis.com
sec.levexis.com
s8.wac.edgecastcdn.net
res.levexis.com
res.levexis.com
pfa.levexis.com
*.levexis.com
*.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
pfa.levexis.com
res.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
res.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
pfa.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
pfa.levexis.com
res.levexis.com
s8.wac.edgecastcdn.net
pfa.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
res.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
pfna.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
*.levexis.com
res.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
res.levexis.com
s8.wac.edgecastcdn.net
res.levexis.com
pfa.levexis.com
sec.levexis.com
res.levexis.com
res.levexis.com
s8.wac.edgecastcdn.net
pfa.levexis.com
res.levexis.com
pfa.levexis.com
*.levexis.com
*.levexis.com
s8.wac.edgecastcdn.net
pfa.levexis.com
s8.wac.edgecastcdn.net
pfa.levexis.com
res.levexis.com
s8.wac.edgecastcdn.net
sec.levexis.com
s8.wac.edgecastcdn.net
sec.levexis.com
sec.levexis.com
*.levexis.com

Certificate

The complete raw certificate details for res.levexis.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5bpKwMzD3lk262z50Xr
4mxkwETT2QZc6Rqq6Fj469ATOCRp1xM2hPfcG9lpuZUmXOOqvWbDpRvWhKbjK/DF
mByL39RTywc279MviQHOm+OxAi8goB7eZxBrX/kk2jygU/WeTiSVfmzIOfURa6l5
5cXGMLIZ8365BYesDv/82hQ47E412fM3QiMMRzsmaEhezoPlXeopt/PhVyEiJEFg
HN1581El+sgChHjaW+xGsNa4RK/n4Zc6mR8HLiIYmze5unm9qjltNb67gBkQ37Ew
z0D/dNZHko9MuLY/taqknKskDUQGRmjPk4AJ1+YJQGkZsL92blOY7zxcQCraZdjb
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 112950751277113756688007290557375559481
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'TagMan Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Ops'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'res.levexis.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22166120264293519390417320082810968409403201406025263939036390608280591796482345395657231229059424476543681253415294789847565820148366227855082731806348847687526957473311439519872598462540090979774386632680456258815714347150705027745312283652300973091404351425827883752604948159559263061142976588092908892652215692763666643734675007510913378960376297320772940719809248269767882097853036735986739131606396994479801786708350249852847393455129211015833187416580419535453517443630144884279850165954313153596779973878732159808103611171587096196965126776965245461430663262019013026335462858317775056069030453909345034361787
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1207 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tags.aumago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.waitrosecellar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.waitrose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.sovereign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attribution.sperry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attribution.merrell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attribution.keds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attribution.hushpuppies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attribution.grasshoppers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.lauraashley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.jurysinns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.intercall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.heathrowexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.heathrowairport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.heathrow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.hayesandjarvis.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attribution.cushe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.fotolia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.crystalsummer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.crystalski.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.citalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.christianmingle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.britishairways.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.bestwestern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attribution.batesfootwear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service-ens.sueddeutsche.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attribution.chacos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madata.newlook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ensighten.airnewzealand.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attribution.saucony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attribution.nasm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attribution.mylyve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attribution.lendopolis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attribution.lebara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attribution.kvd.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attribution.striderite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.virgin-atlantic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.thebodyshop.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.thistle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attribution.wolverine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.stylebop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.thomsonlakes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.transavia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.thomsonski.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.viator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.surfstitch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfa.levexis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfna.levexis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.levexis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'res.levexis.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a7a283bb3445403dfcd5304f12b93ea1019ff6db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tb.symcb.com/tb.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tb.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tb.symcb.com/tb.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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