*.svcs.weightwatchers.com
- WeightWatchers.com, INC -
Issued by thawte SSL CA - G2
About this certificate
This digital certificate with serial number 62:0b:29:0f:1b:e4:ef:94:bb:3d:a9:8f:d8:35:9c:7c was issued on by thawte, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
WeightWatchers.com, INC
Organization:
WeightWatchers.com, INC
Organization unit: IT
Organization unit: IT
State / Province:
New York
Locality: New York
Country: US
Locality: New York
Country: US
thawte, Inc.
Organization:
thawte, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 62:0b:29:0f:1b:e4:ef:94:bb:3d:a9:8f:d8:35:9c:7cSerial Number (int): 130322291628214687822187480663123663996
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60
Fingerprint (sha1): 31:7f:17:0e:dc:cd:a7:0f:86:e9:0b:67:63:41:79:96:71:17:8c:84
Fingerprint (sha256): 0f:b7:55:c2:fa:0b:37:15:74:c5:b9:6d:e8:db:e2:cc:91:87:3f:2b:8a:a4:9b:3b:f0:85:82:28:21:32:a2:13
Issuing Certificate URL: http://tj.symcb.com/tj.crt
Revocation information
OCSP Server: http://tj.symcd.comCRL Distribution Point: http://tj.symcb.com/tj.crl
Check the revocation status for certificate *.svcs.weightwatchers.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.svcs.weightwatchers.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.svcs.weightwatchers.com
Other certificates including the domain name weightwatchers.com
(limited to 100 certificates)
api.retail.qat2.weightwatchers.com
*.weightwatchers.com
prospective.shared.global.fastly.net
new.weightwatchers.com
wwcruisesweeps.weightwatchers.com
*.weightwatchers.com
*.staging.ctech.weightwatchers.com
*.weightwatchers.com
answers-texaneyecare.pagescdn.com
www.devstage1.weightwatchers.com
*.staging.ctech.weightwatchers.com
www.weightwatchers.co.uk
new.weightwatchers.com
prospective.shared.global.fastly.net
rewards.weightwatchers.com
wwapp.tools.weightwatchers.com
*.corp.weightwatchers.com
e.ww.svcs.qat2.weightwatchers.com
signup.mobile.weightwatchers.com
*.devstage4.weightwatchers.com
shop.live.weightwatchers.com
es.soa.qat2.weightwatchers.com
*.weightwatchers.com
na.erp.weightwatchers.com
mag.corp.weightwatchers.com
clinic.weightwatchers.com
join.weightwatchers.com
wwaw.svcs.qa.weightwatchers.com
www.weightwatchers.co.uk
cfjump.weightwatchers.com
preview.store.weightwatchers.com
auth.eu.weightwatchers.com
*.staging.ctech.weightwatchers.com
*.qa.weightwatchers.com
www.gtm.weightwatchers.com
gtm.weightwatchers.com
*.tools.weightwatchers.com
prospective.shared.global.fastly.net
privacy.weightwatchers.com
prospective.shared.global.fastly.net
rundeck.qa.weightwatchers.com
prospective.shared.global.fastly.net
mobile.psqa.weightwatchers.co.uk
api.devstage1.weightwatchers.com
knapia.weightwatchers.com
mobile.qat4.weightwatchers.com
api.weightwatchers.com
admanager.corp.weightwatchers.com
*.qat2.weightwatchers.com
weightwatchers.com
prospective.shared.global.fastly.net
customer-test.ssl.fastly.net
www.devstage1.weightwatchers.com
mi.weightwatchers.com
wwapp.tools.weightwatchers.com
workshopcoaches.weightwatchers.com
prospective.shared.global.fastly.net
*.weightwatchers.com
www.qa.weightwatchers.com
clinic.weightwatchers.com
*.weightwatchers.com
prospective.shared.global.fastly.net
*.qat2.weightwatchers.com
cms.tools.weightwatchers.com
mobile.psqa.weightwatchers.co.uk
preview.store.weightwatchers.com
*.weightwatchers.com
mi.weightwatchers.com
*.weightwatchers.com
*.weightwatchers.com
www.qa.weightwatchers.com
*.weightwatchers.com
spice.weightwatchers.com
*.devstage4.weightwatchers.com
*.weightwatchers.com
*.weightwatchers.com
customercare.weightwatchers.com
prospective.shared.global.fastly.net
wwaw.svcs.qa.weightwatchers.com
sts.weightwatchers.com
weightwatchers.com
*.weightwatchers.com
blog-hitchhikers.yext.com
help.weightwatchers.com
*.staging.ctech.weightwatchers.com
getstarted.weightwatchers.com
rb87ymi4.weightwatchers.com
prospective.shared.global.fastly.net
dps-stage.pluralsight.com
sts.weightwatchers.com
*.svcs.weightwatchers.com
*.psqa.weightwatchers.com
new.weightwatchers.com
prospective.shared.global.fastly.net
*.qat2.weightwatchers.com
mobile.psqa.weightwatchers.co.uk
help.qa.weightwatchers.com
live.weightwatchers.com
mobile.qa.weightwatchers.com
mi.weightwatchers.com
*.weightwatchers.com
prospective.shared.global.fastly.net
new.weightwatchers.com
wwcruisesweeps.weightwatchers.com
*.weightwatchers.com
*.staging.ctech.weightwatchers.com
*.weightwatchers.com
answers-texaneyecare.pagescdn.com
www.devstage1.weightwatchers.com
*.staging.ctech.weightwatchers.com
www.weightwatchers.co.uk
new.weightwatchers.com
prospective.shared.global.fastly.net
rewards.weightwatchers.com
wwapp.tools.weightwatchers.com
*.corp.weightwatchers.com
e.ww.svcs.qat2.weightwatchers.com
signup.mobile.weightwatchers.com
*.devstage4.weightwatchers.com
shop.live.weightwatchers.com
es.soa.qat2.weightwatchers.com
*.weightwatchers.com
na.erp.weightwatchers.com
mag.corp.weightwatchers.com
clinic.weightwatchers.com
join.weightwatchers.com
wwaw.svcs.qa.weightwatchers.com
www.weightwatchers.co.uk
cfjump.weightwatchers.com
preview.store.weightwatchers.com
auth.eu.weightwatchers.com
*.staging.ctech.weightwatchers.com
*.qa.weightwatchers.com
www.gtm.weightwatchers.com
gtm.weightwatchers.com
*.tools.weightwatchers.com
prospective.shared.global.fastly.net
privacy.weightwatchers.com
prospective.shared.global.fastly.net
rundeck.qa.weightwatchers.com
prospective.shared.global.fastly.net
mobile.psqa.weightwatchers.co.uk
api.devstage1.weightwatchers.com
knapia.weightwatchers.com
mobile.qat4.weightwatchers.com
api.weightwatchers.com
admanager.corp.weightwatchers.com
*.qat2.weightwatchers.com
weightwatchers.com
prospective.shared.global.fastly.net
customer-test.ssl.fastly.net
www.devstage1.weightwatchers.com
mi.weightwatchers.com
wwapp.tools.weightwatchers.com
workshopcoaches.weightwatchers.com
prospective.shared.global.fastly.net
*.weightwatchers.com
www.qa.weightwatchers.com
clinic.weightwatchers.com
*.weightwatchers.com
prospective.shared.global.fastly.net
*.qat2.weightwatchers.com
cms.tools.weightwatchers.com
mobile.psqa.weightwatchers.co.uk
preview.store.weightwatchers.com
*.weightwatchers.com
mi.weightwatchers.com
*.weightwatchers.com
*.weightwatchers.com
www.qa.weightwatchers.com
*.weightwatchers.com
spice.weightwatchers.com
*.devstage4.weightwatchers.com
*.weightwatchers.com
*.weightwatchers.com
customercare.weightwatchers.com
prospective.shared.global.fastly.net
wwaw.svcs.qa.weightwatchers.com
sts.weightwatchers.com
weightwatchers.com
*.weightwatchers.com
blog-hitchhikers.yext.com
help.weightwatchers.com
*.staging.ctech.weightwatchers.com
getstarted.weightwatchers.com
rb87ymi4.weightwatchers.com
prospective.shared.global.fastly.net
dps-stage.pluralsight.com
sts.weightwatchers.com
*.svcs.weightwatchers.com
*.psqa.weightwatchers.com
new.weightwatchers.com
prospective.shared.global.fastly.net
*.qat2.weightwatchers.com
mobile.psqa.weightwatchers.co.uk
help.qa.weightwatchers.com
live.weightwatchers.com
mobile.qa.weightwatchers.com
mi.weightwatchers.com
Certificate
The complete raw certificate details for *.svcs.weightwatchers.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIQYgspDxvk75S7PamP2DWcfDANBgkqhkiG9w0BAQsFADBB MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMRswGQYDVQQDExJ0 aGF3dGUgU1NMIENBIC0gRzIwHhcNMTcxMDMwMDAwMDAwWhcNMTgxMTIyMjM1OTU5 WjCBhjELMAkGA1UEBhMCVVMxETAPBgNVBAgMCE5ldyBZb3JrMREwDwYDVQQHDAhO ZXcgWW9yazEgMB4GA1UECgwXV2VpZ2h0V2F0Y2hlcnMuY29tLCBJTkMxCzAJBgNV BAsMAklUMSIwIAYDVQQDDBkqLnN2Y3Mud2VpZ2h0d2F0Y2hlcnMuY29tMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQMjC7zZfh5nhkvv8S/ZXr8+mqef js2hrBrTKfKz4G/YnwBWDW74SYTsw//mlra3+dmhKxIvhlrsGY17gPQRT650Txw/ GYdW+mZilu0eOpQSQySxTPkcyOav7ur+AL74E4Eogdj4qS0IrPiS3fsPfovV9BVK UcPCtiE8ymd7qSNVCN2jHg+ZXY38UaHB5wxaVJgN8pisyVWfsvwKXnRL9dqPuPFN HD6D4HybfZ8Wmb16flJ4Rc/+s8friHiF0AUPuTe//i9GwbP3yG77OQKkBVPVdCFs Fx/GNUI+beG7eepFEwUlfRP4eRhSsIrcOZ/7rIGg6B9T0QOe6C4i5GPO8QIDAQAB o4ICgzCCAn8wJAYDVR0RBB0wG4IZKi5zdmNzLndlaWdodHdhdGNoZXJzLmNvbTAJ BgNVHRMEAjAAMG4GA1UdIARnMGUwYwYGZ4EMAQICMFkwJgYIKwYBBQUHAgEWGmh0 dHBzOi8vd3d3LnRoYXd0ZS5jb20vY3BzMC8GCCsGAQUFBwICMCMMIWh0dHBzOi8v d3d3LnRoYXd0ZS5jb20vcmVwb3NpdG9yeTAOBgNVHQ8BAf8EBAMCBaAwHwYDVR0j BBgwFoAUwk9IV/zRT5rAXTh9DgXb2S61UmAwKwYDVR0fBCQwIjAgoB6gHIYaaHR0 cDovL3RqLnN5bWNiLmNvbS90ai5jcmwwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG AQUFBwMCMFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDovL3RqLnN5 bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL3RqLnN5bWNiLmNvbS90ai5jcnQw ggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgDd6x0reg1PpiCLga2BaHB+Lo6dAdVc iI09EcTNtuy+zAAAAV9tfj+mAAAEAwBHMEUCIAtNj+EYR2jiwHpv3CUFTN3Zh15t ZhFRWg5kVHbNAxleAiEAsehNEgBZUk3uSD5TuogLBko32iugY9ofcOW0ZeHzz/gA dgCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAV9tfj/kAAAEAwBH MEUCIQDWBE1zB9AV1FPrVGPl2t7srB/keXA6iPcDuSl5pllZrgIgYUQ8RvHmEqR4 EL5mtx9rtw5kp91fH09E1ErtqXOPQPUwDQYJKoZIhvcNAQELBQADggEBAJ3ipJwS MLmkwJ+d2+NDTYR3BpqSvMM+ksG6b3DK1ehDW2QtYCvFUjGysLGMAbwD7vfTODWZ DFTh3bkg0rpskoHCFEhyG6Ldbllkec7fiRXa6Eh5MAga+9+7obKssS1QZjD44BQM LpCS1e7DnWOTpHCJu6UTwxqmvIFU5QjyX4VFmcLJPllrUpeYIwj8xwl1X6usGPFH C0k4PklNOOnZwOd0Ws65LpZKGKY5UrLCNy/afe+a0L+5icBvm0XnHgVTb9AaVx0o RqHxTw2999Y/C+623xi/VLWxJV//XqNtF5+nKKZwszznn+f5a87P7MsxSiyS+eqK ofi50yNuEpxd9bI= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQMjC7zZfh5nhkvv8S/Z Xr8+mqefjs2hrBrTKfKz4G/YnwBWDW74SYTsw//mlra3+dmhKxIvhlrsGY17gPQR T650Txw/GYdW+mZilu0eOpQSQySxTPkcyOav7ur+AL74E4Eogdj4qS0IrPiS3fsP fovV9BVKUcPCtiE8ymd7qSNVCN2jHg+ZXY38UaHB5wxaVJgN8pisyVWfsvwKXnRL 9dqPuPFNHD6D4HybfZ8Wmb16flJ4Rc/+s8friHiF0AUPuTe//i9GwbP3yG77OQKk BVPVdCFsFx/GNUI+beG7eepFEwUlfRP4eRhSsIrcOZ/7rIGg6B9T0QOe6C4i5GPO 8QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 130322291628214687822187480663123663996 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-30 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-22 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'WeightWatchers.com, INC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.svcs.weightwatchers.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21335820401247553104227787621748331859094712892303413183985900374558802382547393942605986776821626208161024470770680823815574646943865309632080842825657434584007696141316070770440350190108891191499126948561903426510299528413451400077418487537700463557702248588858340545975294991385935296174631486747394348592475070059770575999348766377705837050788121290089035717258936193514827500242526480041799423365054381052421592135766087513376075728757081555104758833180419444401687074756375266545099895456042262748364405332407698861594544808578366512381668108046702383946060775121200145895690360039311758803026972336899997552369 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.svcs.weightwatchers.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015f6d7e3fa6000004030047304502200b4d8fe1184768e2c07a6fdc25054cddd9875e6d6611515a0e645476cd03195e022100b1e84d120059524dee483e53ba880b064a37da2ba063da1f70e5b465e1f3cff8007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015f6d7e3fe40000040300473045022100d6044d7307d015d453eb5463e5dadeecac1fe479703a88f703b92979a65959ae022061443c46f1e612a47810be66b71f6bb70e64a7dd5f1f4f44d44aeda9738f40f5 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 009de2a49c1230b9a4c09f9ddbe3434d8477069a92bcc33e92c1ba6f70cad5e8435b642d602bc55231b2b0b18c01bc03eef7d33835990c54e1ddb920d2ba6c9281c21448721ba2dd6e596479cedf8915dae8487930081afbdfbba1b2acb12d506630f8e0140c2e9092d5eec39d6393a47089bba513c31aa6bc8154e508f25f854599c2c93e596b5297982308fcc709755fabac18f1470b49383e494d38e9d9c0e7745aceb92e964a18a63952b2c2372fda7def9ad0bfb989c06f9b45e71e05536fd01a571d2846a1f14f0dbdf7d63f0beeb6df18bf54b5b1255fff5ea36d179fa728a670b33ce79fe7f96bcecfeccb314a2c92f9ea8aa1f8b9d3236e129c5df5b2