*.southbankcentre.co.uk

- Southbank Centre -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 0b:aa:2a:2a:6f:46:b1:d2:0b:89:23:9d:23:95:88:0c was issued on by thawte, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Southbank Centre

Organization: Southbank Centre
Organization unit: Southbank Centre IT Dept
State / Province: London
Locality: London
Country: GB

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:aa:2a:2a:6f:46:b1:d2:0b:89:23:9d:23:95:88:0c
Serial Number (int): 15505053642809474899109331593380333580
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 67:79:18:fb:a1:d0:25:c0:7d:a4:90:4d:45:00:e3:6d:98:03:df:02
Fingerprint (sha256): 0f:70:f8:83:49:5f:69:34:49:70:0b:a8:ce:ee:94:b5:d2:b0:0b:5f:5a:a0:87:dc:cd:3f:bd:f5:ed:de:f0:0f

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate *.southbankcentre.co.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.southbankcentre.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.southbankcentre.co.uk
southbankcentre.co.uk

Other certificates including the domain name southbankcentre.co.uk

(limited to 100 certificates)
platformsh.map.fastly.net
secure-euwe1-1.tessituranetwork.com
*.southbankcentre.co.uk
secure-euwe1-1.tessituranetwork.com
securessl-eu.tessituranetworkhost.com
ssl391556.cloudflaressl.com
securessl-eu.tessituranetworkhost.com
shop.southbankcentre.co.uk
tls.automattic.com
platformsh.map.fastly.net
platformsh.map.fastly.net
dns-vetting1-marita-ardnek.map.fastly.net
platformsh.map.fastly.net
ssl365218.cloudflaressl.com
platformsh.map.fastly.net
tls.automattic.com
mb.logicside.net
unlimited.southbankcentre.co.uk
platformsh.map.fastly.net
dns-vetting1-marita-ardnek.map.fastly.net
securessl-eu.tessituranetworkhost.com
x3.southbankcentre.co.uk
*.southbankcentre.co.uk
securessl-eu.tessituranetworkhost.com
platformsh.map.fastly.net
securessl-eu.tessituranetworkhost.com
dns-vetting1-marita-ardnek.map.fastly.net
platformsh.map.fastly.net
ssl365217.cloudflaressl.com
collections.southbankcentre.co.uk
securessl-eu.tessituranetworkhost.com
shop.southbankcentre.co.uk
*.southbankcentre.co.uk
ssl365218.cloudflaressl.com
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
securessl-eu.tessituranetworkhost.com
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
securessl-eu.tessituranetworkhost.com
*.southbankcentre.co.uk
platformsh.map.fastly.net
platformsh.map.fastly.net
dns-vetting1-marita-ardnek.map.fastly.net
*.southbankcentre.co.uk
resetpassword.gumb.app
dns-vetting1-marita-ardnek.map.fastly.net
unlimited.southbankcentre.co.uk
bynder.southbankcentre.co.uk
recruit.southbankcentre.co.uk
bynder.southbankcentre.co.uk
ammarweb.org
tls.automattic.com
bynder.southbankcentre.co.uk
platformsh.map.fastly.net
recruit.southbankcentre.co.uk
*.southbankcentre.co.uk
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
platformsh.map.fastly.net
securessl-eu.tessituranetworkhost.com
dns-vetting1-marita-ardnek.map.fastly.net
securessl-eu.tessituranetworkhost.com
secure-euwe1-1.tessituranetwork.com
securessl-eu.tessituranetworkhost.com
platformsh.map.fastly.net
ssl365216.cloudflaressl.com
securessl-eu.tessituranetworkhost.com
platformsh.map.fastly.net
platformsh.map.fastly.net
unlimited.southbankcentre.co.uk
secure-euwe1-1.tessituranetwork.com
platformsh.map.fastly.net
*.southbankcentre.co.uk
totalrecalldts.co.uk
tls.automattic.com
shop.southbankcentre.co.uk
southbank.afterdigital.io
platformsh.map.fastly.net
x3.southbankcentre.co.uk
platformsh.map.fastly.net
platformsh.map.fastly.net
ssl365217.cloudflaressl.com
dns-vetting1-marita-ardnek.map.fastly.net
46thpreston.org.uk
dns-vetting1-marita-ardnek.map.fastly.net
ssl391555.cloudflaressl.com
southbank.afterdigital.io
unlimited.southbankcentre.co.uk
*.southbankcentre.co.uk
applications.southbankcentre.co.uk
platformsh.map.fastly.net
recruit.southbankcentre.co.uk

Certificate

The complete raw certificate details for *.southbankcentre.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE7TCCA9WgAwIBAgIQC6oqKm9GsdILiSOdI5WIDDANBgkqhkiG9w0BAQsFADBB
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMRswGQYDVQQDExJ0
aGF3dGUgU1NMIENBIC0gRzIwHhcNMTUwNjIzMDAwMDAwWhcNMTUxMjA0MjM1OTU5
WjCBjzELMAkGA1UEBhMCR0IxDzANBgNVBAgMBkxvbmRvbjEPMA0GA1UEBwwGTG9u
ZG9uMRkwFwYDVQQKDBBTb3V0aGJhbmsgQ2VudHJlMSEwHwYDVQQLDBhTb3V0aGJh
bmsgQ2VudHJlIElUIERlcHQxIDAeBgNVBAMMFyouc291dGhiYW5rY2VudHJlLmNv
LnVrMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0j1dckNSYyMlK1eA
2k55XcQCFeVVVdq7BUg+8DW7lTfYHxR9R5s7jdgGvNp7XN+p9lo29Sr7FGCpzprQ
bA+JL9XN4bwqbKQiGRtlYZyo1aWMwRrsLDdi2CNfNh+LPSe+9d9VFybdAMEOyVEh
D65hQ04wmT9ibHLi38QmLKDRrxPvwEKgn8q8zzzpwQl8n1tCVFN9D4O8F+sQiK18
g8xie6dDI5pAPxLoBGRcbFKlg5yXPiSTf0BQYfe2YLQ2UcAaUzdCEv7pHngpHFAz
9sw2xRVh6uzGyhduyzFrNRJC7vr5IOdCzXiPeFSuuSsa7q6nEBZrx3ZrLKwPiCW+
HDRhGwIDAQABo4IBkDCCAYwwOQYDVR0RBDIwMIIXKi5zb3V0aGJhbmtjZW50cmUu
Y28udWuCFXNvdXRoYmFua2NlbnRyZS5jby51azAJBgNVHRMEAjAAMG4GA1UdIARn
MGUwYwYGZ4EMAQICMFkwJgYIKwYBBQUHAgEWGmh0dHBzOi8vd3d3LnRoYXd0ZS5j
b20vY3BzMC8GCCsGAQUFBwICMCMMIWh0dHBzOi8vd3d3LnRoYXd0ZS5jb20vcmVw
b3NpdG9yeTAOBgNVHQ8BAf8EBAMCBaAwHwYDVR0jBBgwFoAUwk9IV/zRT5rAXTh9
DgXb2S61UmAwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL3RqLnN5bWNiLmNvbS90
ai5jcmwwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMFcGCCsGAQUFBwEB
BEswSTAfBggrBgEFBQcwAYYTaHR0cDovL3RqLnN5bWNkLmNvbTAmBggrBgEFBQcw
AoYaaHR0cDovL3RqLnN5bWNiLmNvbS90ai5jcnQwDQYJKoZIhvcNAQELBQADggEB
AJnzkFoG0GCCrdbWK09gtMV++iDGp7OZzAuZTC7Rbes+V5q4HH3F1sgffVk3Jp8/
AxPL+ZK1LRZjJ74Cm1Cd7fP5oVpj23ITSf1l6bjgSAfMef6OId2GeNLrwc5cl+N6
f9v09RTkd438fxHpKZjcZ5Eq3d0L8FIAsziLq4yANNEbxtTrHw4bY3COZURqCIZv
VIbfRIWAX/HnFKoPgfbLdFgr/HfdRZeSFR+bKj1qruI+jwYXQPPnCCjxkJjkp9Fp
e3JFhNMyXeFsB7unf8pXqnRJJZVIZ1u+tTKZt0Q7e/hS1ZTwKLyx0MEE1aDoGeA7
VmGOeEtzqGtIb8FZRssB4nI=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0j1dckNSYyMlK1eA2k55
XcQCFeVVVdq7BUg+8DW7lTfYHxR9R5s7jdgGvNp7XN+p9lo29Sr7FGCpzprQbA+J
L9XN4bwqbKQiGRtlYZyo1aWMwRrsLDdi2CNfNh+LPSe+9d9VFybdAMEOyVEhD65h
Q04wmT9ibHLi38QmLKDRrxPvwEKgn8q8zzzpwQl8n1tCVFN9D4O8F+sQiK18g8xi
e6dDI5pAPxLoBGRcbFKlg5yXPiSTf0BQYfe2YLQ2UcAaUzdCEv7pHngpHFAz9sw2
xRVh6uzGyhduyzFrNRJC7vr5IOdCzXiPeFSuuSsa7q6nEBZrx3ZrLKwPiCW+HDRh
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15505053642809474899109331593380333580
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-06-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Southbank Centre'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Southbank Centre IT Dept'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.southbankcentre.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26540304264397659104285761847691271279476392936815699063282496277847651776681362149215073838931556293184137570209118645149907719054330804525643783978069440477214473438370674620330560893191041153640624359943909478509203304028598007551010134225827659550594833636807799136770481432013657803750310241944283167326336493780787790568757996795996730095215075604698662483847964868721888046776867531143195091821721728682230278118730225833533162644876223418757826890597108590952810591324830761816935889281742944630308302909832276719507646192312130268937234959270024924644556892086911522369374334334705829312969878908678880649499
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.southbankcentre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southbankcentre.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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