lync.3stepit.com
- 3Step IT Group Oy -
Issued by thawte SSL CA - G2
About this certificate
This digital certificate with serial number 17:71:e5:32:04:42:a8:e4:19:15:89:15:99:9a:ad:f5 was issued on by thawte, Inc..
With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
3Step IT Group Oy
Organization:
3Step IT Group Oy
State / Province:
Uusimaa
Locality: Helsinki
Country: FI
Locality: Helsinki
Country: FI
thawte, Inc.
Organization:
thawte, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 17:71:e5:32:04:42:a8:e4:19:15:89:15:99:9a:ad:f5Serial Number (int): 31163622082593389253169690327318703605
Serial Number lenght: 125 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60
Fingerprint (sha1): a8:33:86:ef:04:15:d7:f0:85:ec:b5:32:c8:ae:e5:09:ae:ee:d6:c6
Fingerprint (sha256): 0f:c2:df:01:88:07:90:72:51:1b:30:45:40:42:f9:72:0a:23:44:62:d5:13:fa:2a:b9:31:44:98:05:d9:a0:81
Issuing Certificate URL: http://tj.symcb.com/tj.crt
Revocation information
OCSP Server: http://tj.symcd.comCRL Distribution Point: http://tj.symcb.com/tj.crl
Check the revocation status for certificate lync.3stepit.com
10
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for lync.3stepit.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dialin.3stepit.com
lyncadmin.3stepit.com
lyncav.3stepit.com
lyncdiscover.3stepit.com
lyncdiscoverinternal.3stepit.com
lyncext.3stepit.com
lyncwebconf.3stepit.com
sip.3stepit.com
meet.3stepit.com
lync.3stepit.com
lyncadmin.3stepit.com
lyncav.3stepit.com
lyncdiscover.3stepit.com
lyncdiscoverinternal.3stepit.com
lyncext.3stepit.com
lyncwebconf.3stepit.com
sip.3stepit.com
meet.3stepit.com
lync.3stepit.com
Other certificates including the domain name 3stepit.com
(limited to 100 certificates)
sslvs05.igloosoftware.com
statuspage.io
statuspage.io
statuspage.io
m.asset.3stepit.com
statuspage.io
statuspage.io
*.csrdev.3stepit.com
status.3stepit.com
statuspage.io
statuspage.io
sslvs05.igloosoftware.com
statuspage.io
statuspage.io
statuspage.io
*.csrdev.3stepit.com
*.csrdev.3stepit.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
learning.3stepit.com
status.3stepit.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
status.3stepit.com
statuspage.io
status.3stepit.com
statuspage.io
statuspage.io
status.3stepit.com
sslvs05.igloosoftware.com
statuspage.io
status.3stepit.com
statuspage.io
statuspage.io
status.3stepit.com
*.3stepit.com
*.kontio.3stepit.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
*.pf.kontio.3stepit.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
status.3stepit.com
statuspage.io
uat-assetlc.kontio.3stepit.com
prod.api-devportal.kontio.3stepit.com
statuspage.io
statuspage.io
sslvs05.igloosoftware.com
learning.3stepit.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
*.3stepit.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
prod.api-devportal.3api.3stepit.com
statuspage.io
statuspage.io
lync.3stepit.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
status.3stepit.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
sslvs05.igloosoftware.com
sslvs05.igloosoftware.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
m.asset.3stepit.com
statuspage.io
statuspage.io
*.csrdev.3stepit.com
status.3stepit.com
statuspage.io
statuspage.io
sslvs05.igloosoftware.com
statuspage.io
statuspage.io
statuspage.io
*.csrdev.3stepit.com
*.csrdev.3stepit.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
learning.3stepit.com
status.3stepit.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
status.3stepit.com
statuspage.io
status.3stepit.com
statuspage.io
statuspage.io
status.3stepit.com
sslvs05.igloosoftware.com
statuspage.io
status.3stepit.com
statuspage.io
statuspage.io
status.3stepit.com
*.3stepit.com
*.kontio.3stepit.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
*.pf.kontio.3stepit.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
status.3stepit.com
statuspage.io
uat-assetlc.kontio.3stepit.com
prod.api-devportal.kontio.3stepit.com
statuspage.io
statuspage.io
sslvs05.igloosoftware.com
learning.3stepit.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
*.3stepit.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
prod.api-devportal.3api.3stepit.com
statuspage.io
statuspage.io
lync.3stepit.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
status.3stepit.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
sslvs05.igloosoftware.com
sslvs05.igloosoftware.com
statuspage.io
statuspage.io
Certificate
The complete raw certificate details for lync.3stepit.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgIQF3HlMgRCqOQZFYkVmZqt9TANBgkqhkiG9w0BAQsFADBB MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMRswGQYDVQQDExJ0 aGF3dGUgU1NMIENBIC0gRzIwHhcNMTcwNzI1MDAwMDAwWhcNMTkwOTE3MjM1OTU5 WjBpMQswCQYDVQQGEwJGSTEQMA4GA1UECAwHVXVzaW1hYTERMA8GA1UEBwwISGVs c2lua2kxGjAYBgNVBAoMETNTdGVwIElUIEdyb3VwIE95MRkwFwYDVQQDDBBseW5j LjNzdGVwaXQuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzAq ey3DmuX9n60YBXUhPnd02PUiE4izGOJeruWJGRGq2/RwBQ2g9ViAIlxcqopnH3dX IHaB8Vh5AWOdCmX6DspqoJrkck3ZA2O1kFvhqfUA1+Kt/8l5vFgs+dVVJEqR9XGB 3RzhqOnpUA/RBHZQcL46lbYmvw+fd4mXrOny0w+1bEqBjLIK+vh57o7ZoJGNRxwD NKgRKD8DEzqJ9xcr03WTfPPMZ+PEuEs6qOjqfQRuOaCsiOyq4Af3sMMAt2hNSqv5 Hal7kn7eczYECU5FWY8Gom8NY5wOcSnInKVII6wmE0DXQhmRllqvQztImQIDHmh2 gQXWqeQx96q0347TAwIDAQABo4ICVjCCAlIwgekGA1UdEQSB4TCB3oISZGlhbGlu LjNzdGVwaXQuY29tghVseW5jYWRtaW4uM3N0ZXBpdC5jb22CEmx5bmNhdi4zc3Rl cGl0LmNvbYIYbHluY2Rpc2NvdmVyLjNzdGVwaXQuY29tgiBseW5jZGlzY292ZXJp bnRlcm5hbC4zc3RlcGl0LmNvbYITbHluY2V4dC4zc3RlcGl0LmNvbYIXbHluY3dl YmNvbmYuM3N0ZXBpdC5jb22CD3NpcC4zc3RlcGl0LmNvbYIQbWVldC4zc3RlcGl0 LmNvbYIQbHluYy4zc3RlcGl0LmNvbTAJBgNVHRMEAjAAMG4GA1UdIARnMGUwYwYG Z4EMAQICMFkwJgYIKwYBBQUHAgEWGmh0dHBzOi8vd3d3LnRoYXd0ZS5jb20vY3Bz MC8GCCsGAQUFBwICMCMMIWh0dHBzOi8vd3d3LnRoYXd0ZS5jb20vcmVwb3NpdG9y eTAOBgNVHQ8BAf8EBAMCBaAwHwYDVR0jBBgwFoAUwk9IV/zRT5rAXTh9DgXb2S61 UmAwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL3RqLnN5bWNiLmNvbS90ai5jcmww HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMFcGCCsGAQUFBwEBBEswSTAf BggrBgEFBQcwAYYTaHR0cDovL3RqLnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0 cDovL3RqLnN5bWNiLmNvbS90ai5jcnQwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJ KoZIhvcNAQELBQADggEBAJvwyNoUhauqyzzvURuM/3hH+yihWfaMFkTqYi42CLs5 Cg5+s1fU+mQpLS6KBwRL0HLvbM3Cc0d0uB60OaCZY37JLwsdNSqrgWNGwUGCOUbw SWdYHMsAae29hPafi3H5m9WBlZXrmrWjn1qAzbenuIX9kvOkO4ysuseVqxjTNJew 2t6RUI4UVMxMYkA+eByy9JGMeu5oly5nbvUO99x9+CherQdNuglOkAqGr8wKvjkt Ko+eJr5Pdu6LMzT7MNeHPfjaKI34NnLbASvd9bsM4epmbZXfSQQhhsShZf6pRch6 ULI7fcUZNqnE3NhRYstUYr+f5GILCmAcb8iVOBH/LT0= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzAqey3DmuX9n60YBXUh Pnd02PUiE4izGOJeruWJGRGq2/RwBQ2g9ViAIlxcqopnH3dXIHaB8Vh5AWOdCmX6 DspqoJrkck3ZA2O1kFvhqfUA1+Kt/8l5vFgs+dVVJEqR9XGB3RzhqOnpUA/RBHZQ cL46lbYmvw+fd4mXrOny0w+1bEqBjLIK+vh57o7ZoJGNRxwDNKgRKD8DEzqJ9xcr 03WTfPPMZ+PEuEs6qOjqfQRuOaCsiOyq4Af3sMMAt2hNSqv5Hal7kn7eczYECU5F WY8Gom8NY5wOcSnInKVII6wmE0DXQhmRllqvQztImQIDHmh2gQXWqeQx96q0347T AwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 31163622082593389253169690327318703605 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-25 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-17 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Uusimaa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Helsinki' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '3Step IT Group Oy' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'lync.3stepit.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18075829121406528029962272059653108151471424586336702133306882087475559513468732753830235784247066194187312766492778505060301715701948021934971491557174602231500193257132362474428881314161027174646807658986949492800346042315074617572155833932937732831433444740070440273744897286934484128538950988466909484446725663853468160909916941018389184757936519248069189412304250371184981487219348143023174234089252822779062180238053867569505195495473730945394492921468140366895570032661698827065970792973220463857833709472472349084823622816011871446610095088555070449800143812983579440771054786767971240237069202063732933317379 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (225 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.3stepit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncadmin.3stepit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncav.3stepit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.3stepit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.3stepit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncext.3stepit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncwebconf.3stepit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.3stepit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.3stepit.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lync.3stepit.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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