ezproxy.daemen.edu
- Daemen College -
Issued by thawte SSL CA - G2
About this certificate
This digital certificate with serial number 38:32:73:a9:50:d3:48:d4:d6:dd:42:e4:14:40:24:2b was issued on by thawte, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Daemen College
Organization:
Daemen College
Organization unit: IT
Organization unit: IT
State / Province:
New York
Locality: Amherst
Country: US
Locality: Amherst
Country: US
thawte, Inc.
Organization:
thawte, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 38:32:73:a9:50:d3:48:d4:d6:dd:42:e4:14:40:24:2bSerial Number (int): 74698728498560143187036934571040973867
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60
Fingerprint (sha1): 4f:e2:78:64:04:8b:b9:64:14:86:47:e6:74:12:f8:83:62:42:04:17
Fingerprint (sha256): 0f:62:6b:c8:9a:0d:09:88:49:5b:b3:f6:2f:1e:89:e5:64:00:2e:dc:63:99:06:ca:36:74:4b:a4:43:2f:82:fd
Issuing Certificate URL: http://tj.symcb.com/tj.crt
Revocation information
OCSP Server: http://tj.symcd.comCRL Distribution Point: http://tj.symcb.com/tj.crl
Check the revocation status for certificate ezproxy.daemen.edu
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ezproxy.daemen.edu
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.ezproxy.daemen.edu
ezproxy.daemen.edu
ezproxy.daemen.edu
Other certificates including the domain name daemen.edu
(limited to 100 certificates)
secure.mdl.io
wildcats.daemen.edu
*.explore.daemen.edu
wildcats.daemen.edu
learning.daemen.edu
secure.mdl.io
secure.mdl.io
learning.daemen.edu
secure.mdl.io
wildcats.daemen.edu
digitalcommons.daemen.edu
secure.mdl.io
apply.daemen.edu
secure.mdl.io
secure.mdl.io
us-east-1-san4.blackboard.com
ezproxy.daemen.edu
*.daemen.edu
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
*.daemen.edu
wildcats.daemen.edu
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
my.daemen.edu
secure.mdl.io
lp.daemen.edu
secure.mdl.io
digitalcommons.daemen.edu
secure.mdl.io
wildcats.daemen.edu
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
digitalcommons.daemen.edu
secure.mdl.io
*.daemen.edu
secure.mdl.io
wildcats.daemen.edu
digitalcommons.daemen.edu
us-east-1-san4.blackboard.com
secure.mdl.io
sso.daemen.edu
libguides.daemen.edu
digitalcommons.daemen.edu
wildcats.daemen.edu
us-east-1-san4.blackboard.com
us-east-1-san4.blackboard.com
digitalcommons.daemen.edu
ezproxy.daemen.edu
secure.mdl.io
apply.daemen.edu
secure.mdl.io
secure.mdl.io
secure.mdl.io
digitalcommons.daemen.edu
libguides.daemen.edu
secure.mdl.io
secure.mdl.io
secure.mdl.io
wildcats.daemen.edu
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
conference.daemen.edu
*.daemen.edu
secure.mdl.io
wildcats.daemen.edu
wildcats.daemen.edu
learning.daemen.edu
clearpass.daemen.edu
us-east-1-san4.blackboard.com
secure.mdl.io
wildcats.daemen.edu
ezproxy.daemen.edu
secure.mdl.io
secure.mdl.io
secure.mdl.io
wildcats.daemen.edu
us-east-1-san4.blackboard.com
secure.mdl.io
wildcats.daemen.edu
libguides.daemen.edu
ezproxy.daemen.edu
wildcats.daemen.edu
apply.daemen.edu
libguides.daemen.edu
digitalcommons.daemen.edu
digitalcommons.daemen.edu
pg.daemen.edu
wildcats.daemen.edu
*.explore.daemen.edu
wildcats.daemen.edu
learning.daemen.edu
secure.mdl.io
secure.mdl.io
learning.daemen.edu
secure.mdl.io
wildcats.daemen.edu
digitalcommons.daemen.edu
secure.mdl.io
apply.daemen.edu
secure.mdl.io
secure.mdl.io
us-east-1-san4.blackboard.com
ezproxy.daemen.edu
*.daemen.edu
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
*.daemen.edu
wildcats.daemen.edu
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
my.daemen.edu
secure.mdl.io
lp.daemen.edu
secure.mdl.io
digitalcommons.daemen.edu
secure.mdl.io
wildcats.daemen.edu
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
digitalcommons.daemen.edu
secure.mdl.io
*.daemen.edu
secure.mdl.io
wildcats.daemen.edu
digitalcommons.daemen.edu
us-east-1-san4.blackboard.com
secure.mdl.io
sso.daemen.edu
libguides.daemen.edu
digitalcommons.daemen.edu
wildcats.daemen.edu
us-east-1-san4.blackboard.com
us-east-1-san4.blackboard.com
digitalcommons.daemen.edu
ezproxy.daemen.edu
secure.mdl.io
apply.daemen.edu
secure.mdl.io
secure.mdl.io
secure.mdl.io
digitalcommons.daemen.edu
libguides.daemen.edu
secure.mdl.io
secure.mdl.io
secure.mdl.io
wildcats.daemen.edu
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
conference.daemen.edu
*.daemen.edu
secure.mdl.io
wildcats.daemen.edu
wildcats.daemen.edu
learning.daemen.edu
clearpass.daemen.edu
us-east-1-san4.blackboard.com
secure.mdl.io
wildcats.daemen.edu
ezproxy.daemen.edu
secure.mdl.io
secure.mdl.io
secure.mdl.io
wildcats.daemen.edu
us-east-1-san4.blackboard.com
secure.mdl.io
wildcats.daemen.edu
libguides.daemen.edu
ezproxy.daemen.edu
wildcats.daemen.edu
apply.daemen.edu
libguides.daemen.edu
digitalcommons.daemen.edu
digitalcommons.daemen.edu
pg.daemen.edu
Certificate
The complete raw certificate details for ezproxy.daemen.edu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGxTCCBa2gAwIBAgIQODJzqVDTSNTW3ULkFEAkKzANBgkqhkiG9w0BAQsFADBB MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMRswGQYDVQQDExJ0 aGF3dGUgU1NMIENBIC0gRzIwHhcNMTcwNjAyMDAwMDAwWhcNMjAwNTMxMjM1OTU5 WjB1MQswCQYDVQQGEwJVUzERMA8GA1UECAwITmV3IFlvcmsxEDAOBgNVBAcMB0Ft aGVyc3QxFzAVBgNVBAoMDkRhZW1lbiBDb2xsZWdlMQswCQYDVQQLDAJJVDEbMBkG A1UEAwwSZXpwcm94eS5kYWVtZW4uZWR1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAtu0GYOWSE7iOEfg7ttoCsGszqMDV/lU9ytH/+g6hi3Umx3WQrRv9 8VmYL/2G+biZU0Nu0crskL3oST73rcBs/ssJaC70E44XEW0yAaTD5NyakPmWMie2 CSidEehqda3L3zqVnBiLr2SXZAD1U843i7ASZDKd7sK0UBYSDGSyyTKHEYUkJfni jV7Xg1S5W6gMtIfD4jaRFGNo1Pg42nd/zf9zg8cCEpsuaAYvSZnfkP3c1va1e1TF sxx7KnZUNR+LK2Q7FOyZUEeEyJpcwk+zdArV7I4lCrvbjkMOLOcvF9zvi2C3kWE/ Jt+GGyNVZ6W/LKqM187ua9sBqV84htxRzwIDAQABo4IDgzCCA38wMwYDVR0RBCww KoIUKi5lenByb3h5LmRhZW1lbi5lZHWCEmV6cHJveHkuZGFlbWVuLmVkdTAJBgNV HRMEAjAAMG4GA1UdIARnMGUwYwYGZ4EMAQICMFkwJgYIKwYBBQUHAgEWGmh0dHBz Oi8vd3d3LnRoYXd0ZS5jb20vY3BzMC8GCCsGAQUFBwICMCMMIWh0dHBzOi8vd3d3 LnRoYXd0ZS5jb20vcmVwb3NpdG9yeTAOBgNVHQ8BAf8EBAMCBaAwHwYDVR0jBBgw FoAUwk9IV/zRT5rAXTh9DgXb2S61UmAwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDov L3RqLnN5bWNiLmNvbS90ai5jcmwwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDovL3RqLnN5bWNk LmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL3RqLnN5bWNiLmNvbS90ai5jcnQwggH1 BgorBgEEAdZ5AgQCBIIB5QSCAeEB3wB1AN3rHSt6DU+mIIuBrYFocH4ujp0B1VyI jT0RxM227L7MAAABXGpADXcAAAQDAEYwRAIgRBX7efmJQXrijlIEtp+jda48ilOH mLmwQ5r6mo/LQxgCIA/U4J47GHrfXbgvuv7H5fkE+cCa5E0XDLufNAdxFmqHAHcA pLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFcakANggAABAMASDBG AiEAjArCCFVylKPG/wgvLikfLl9hun9W1V2RLUproyCCpvACIQDWvyY9q6QV1mVm GzEn5diJlRTtF5592erGYVNWq7Rz1wB2AO5Lvbd1zmC64UJpH6vhnmajD35fsHLY gwDEe4l6qP3LAAABXGpAD2wAAAQDAEcwRQIhAOTXTmRNL4y5x2VIiRkHHZO0mg+g CIuoadCxNRHFB9xVAiBPGttHVD3TUO+9tZlU99RlHXD9A/y0l8DtOqi03Z4HQAB1 ALx44d/F9jxoRkkzTaEPoV8JeWkgCcCBtPP2kX8+2bilAAABXGpADmYAAAQDAEYw RAIgIyrez03+L87ElU6ssxmrBsfa2MXsqrrDmiOz/iJFCBcCIFQW8GhhLzbHKSCO skyVtky0+zSAJQBor9PHj1thoLxsMA0GCSqGSIb3DQEBCwUAA4IBAQAWNHHmxS4j P/hmV/yz8pFHXXQEvWiXVLPIpxJhDmBbICLPIUvzyCgb9EJVsQ2R6lPv0m59Kh+i 1iETP0L7zK6aAJ5CsGQ80Q3g9HUTnKDhW90xNC59QmDfIKweffbmqZPjkyd2JiYr TSP42gtkJMDXXeUmPqqa1H1eu2XG1VXjZxSQyMK288tE12BYFCNyTc4RaH4dL9Fv sTaXSb5pXm4/9jGM+WVajNQh1ikRTGQNPIF9qKNSK1zZAnrZb2YzrNw5IeCILnam K2GuTTWcRHLs5yMgdxeaftmmCjavI/W3CFB7/+f60azjjVJu/CjSBhxAvNzg4AyB tvy/t4RaK3dL -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu0GYOWSE7iOEfg7ttoC sGszqMDV/lU9ytH/+g6hi3Umx3WQrRv98VmYL/2G+biZU0Nu0crskL3oST73rcBs /ssJaC70E44XEW0yAaTD5NyakPmWMie2CSidEehqda3L3zqVnBiLr2SXZAD1U843 i7ASZDKd7sK0UBYSDGSyyTKHEYUkJfnijV7Xg1S5W6gMtIfD4jaRFGNo1Pg42nd/ zf9zg8cCEpsuaAYvSZnfkP3c1va1e1TFsxx7KnZUNR+LK2Q7FOyZUEeEyJpcwk+z dArV7I4lCrvbjkMOLOcvF9zvi2C3kWE/Jt+GGyNVZ6W/LKqM187ua9sBqV84htxR zwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 74698728498560143187036934571040973867 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-02 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-31 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Amherst' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Daemen College' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ezproxy.daemen.edu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23092252846142978817028065685884416279010999973149790839556124269161953563696195784572741014367510584310755981917280418743075889880620731670980737646410171481392598978533608775615555208822436986114745571465589952521318844176151050566590152625479653404605267311505489433444687466747829801624216165862459825874181200610714464622135220097997030862456486574885488401049485306134375810091536256762340376969448662514780258883327492318397717039492303991241739695014854741729476069944718071801159513005008779983128051681881159115236958822808908405462569470162811743170237986915763431138580254070696796452371366145957729948111 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ezproxy.daemen.edu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ezproxy.daemen.edu' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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