*.kelkoo.com
- Kelkoo SASU -
Issued by Thawte RSA CA 2018
About this certificate
This digital certificate with serial number 05:9a:32:a2:84:b5:a3:9a:b5:32:17:32:72:1d:00:64 was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Kelkoo SASU
Organization:
Kelkoo SASU
Locality:
Paris
Country: FR
Country: FR
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 05:9a:32:a2:84:b5:a3:9a:b5:32:17:32:72:1d:00:64Serial Number (int): 7446780691653062183016235083650367588
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 8d:4f:32:da:85:9b:14:c8:6d:1a:96:84:43:8e:2e:83:8c:99:44:45
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a
Fingerprint (sha1): 54:9d:6f:87:91:a2:8d:4f:85:bb:37:77:85:53:86:4b:af:50:c2:ee
Fingerprint (sha256): 10:2f:70:51:18:17:72:db:13:90:96:09:c6:e5:27:3b:82:d0:e7:02:03:a1:59:e5:c0:09:9c:32:11:35:b6:f8
Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt
Revocation information
OCSP Server: http://status.thawte.comCRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl
Check the revocation status for certificate *.kelkoo.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.kelkoo.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.kelkoo.com
kelkoo.com
kelkoo.com
Other certificates including the domain name kelkoo.com
(limited to 100 certificates)
ads.kelkoo.com
secure.ads.kelkoo.com
de.shoppingapis.kelkoo.com
s.kk-resources.com
*.kelkoo.com
*.kelkoo.com
*.kelkoo.com
*.kelkoo.com
s.kk-resources.com
*.kelkoo.com
c.kelkoo.com
adservice.kelkoo.fr
s.kk-resources.com
s.kelkoo.com
ad.kelkoo.com
all-hp.kelkoo.com
s.kk-resources.com
secure.ads.kelkoo.com
ads.kelkoo.com
secure.ads.kelkoo.com
*.kelkoo.com
adservice.kelkoo.fr
*.kelkoo.com
s.kk-resources.com
s.kk-resources.com
*.kelkoo.com
secure.ads.kelkoo.com
*.kelkoo.com
*.kelkoo.com
*.kelkoo.com
*.kelkoo.com
es.shoppingapis.kelkoo.com
*.kelkoo.com
ads.kelkoo.com
adservice.kelkoo.fr
adservice.kelkoo.fr
s.kk-resources.com
profile.kelkoo.com
hpcm.images.kelkoo.com
it.shoppingapis.kelkoo.com
*.kelkoo.com
secure.ads.kelkoo.com
secure.ads.kelkoo.com
*.kelkoo.com
*.kelkoo.co.uk
*.kelkoo.com
adservice.kelkoo.fr
*.kelkoo.com
secure.ads.kelkoo.com
partner.kelkoo.com
*.kelkoo.com
adservice.kelkoo.fr
s.kk-resources.com
login.kelkoo.com
dc1-og2-pub-tomcat-vip.kelkoo.com
*.kelkoo.com
*.kelkoo.com
*.kelkoo.com
secure.ads.kelkoo.com
*.kelkoo.com
aftpnqspcq.cloudimg.io
*.kelkoo.com
partner.kelkoo.com
adservice.kelkoo.fr
adservice.kelkoo.fr
ad.kelkoo.com
admin.kelkoo.fr
ads.kelkoo.com
secure.ads.kelkoo.com
adservice.kelkoo.fr
*.kelkoo.com
adservice.kelkoo.com
*.kelkoo.com
*.kelkoo.com
secure.ads.kelkoo.com
de.shoppingapis.kelkoo.com
s.kk-resources.com
*.kelkoo.com
*.kelkoo.com
*.kelkoo.com
*.kelkoo.com
s.kk-resources.com
*.kelkoo.com
c.kelkoo.com
adservice.kelkoo.fr
s.kk-resources.com
s.kelkoo.com
ad.kelkoo.com
all-hp.kelkoo.com
s.kk-resources.com
secure.ads.kelkoo.com
ads.kelkoo.com
secure.ads.kelkoo.com
*.kelkoo.com
adservice.kelkoo.fr
*.kelkoo.com
s.kk-resources.com
s.kk-resources.com
*.kelkoo.com
secure.ads.kelkoo.com
*.kelkoo.com
*.kelkoo.com
*.kelkoo.com
*.kelkoo.com
es.shoppingapis.kelkoo.com
*.kelkoo.com
ads.kelkoo.com
adservice.kelkoo.fr
adservice.kelkoo.fr
s.kk-resources.com
profile.kelkoo.com
hpcm.images.kelkoo.com
it.shoppingapis.kelkoo.com
*.kelkoo.com
secure.ads.kelkoo.com
secure.ads.kelkoo.com
*.kelkoo.com
*.kelkoo.co.uk
*.kelkoo.com
adservice.kelkoo.fr
*.kelkoo.com
secure.ads.kelkoo.com
partner.kelkoo.com
*.kelkoo.com
adservice.kelkoo.fr
s.kk-resources.com
login.kelkoo.com
dc1-og2-pub-tomcat-vip.kelkoo.com
*.kelkoo.com
*.kelkoo.com
*.kelkoo.com
secure.ads.kelkoo.com
*.kelkoo.com
aftpnqspcq.cloudimg.io
*.kelkoo.com
partner.kelkoo.com
adservice.kelkoo.fr
adservice.kelkoo.fr
ad.kelkoo.com
admin.kelkoo.fr
ads.kelkoo.com
secure.ads.kelkoo.com
adservice.kelkoo.fr
*.kelkoo.com
adservice.kelkoo.com
*.kelkoo.com
*.kelkoo.com
Certificate
The complete raw certificate details for *.kelkoo.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIQBZoyooS1o5q1Mhcych0AZDANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMRswGQYDVQQDExJUaGF3dGUgUlNBIENBIDIwMTgwHhcN MjMwMjI3MDAwMDAwWhcNMjQwMzI5MjM1OTU5WjBKMQswCQYDVQQGEwJGUjEOMAwG A1UEBxMFUGFyaXMxFDASBgNVBAoTC0tlbGtvbyBTQVNVMRUwEwYDVQQDDAwqLmtl bGtvby5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGkRBJBp4Q CMGXABuKEgxOIrCe3evA5bWK1VeEQbmCW+0k6lIkw6X67C4Hf6BcmdtpKKlUspcy 2SK7/NqIm9Z64Ggxn1zjLCfNaMQXP1NHdxG28o2at/LmYlmo+wI2bJ/WekjMCcPG 6J4ufBfZ4f25W7KvGAqoBEsWQXP7lJhZYOouun9u/HIITIenShZdEtLgKN3UhTpj Jfv0FTzAeFwZGc5w34kAkubkC77TCeJShRneBcs6waVSlx0n4mtb9RIlKyCga00m NNZHUW9krWo6LywFHazwSa4hoeStuapulWaNViHNvIEZDhR2dIhEpk1hraKmqEhe Y1ygLGGHnGfHAgMBAAGjggMUMIIDEDAfBgNVHSMEGDAWgBSjyF5lVOUweMEF6gcK alnMuf7eWjAdBgNVHQ4EFgQUjU8y2oWbFMhtGpaEQ44ug4yZREUwIwYDVR0RBBww GoIMKi5rZWxrb28uY29tggprZWxrb28uY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOgYDVR0fBDMwMTAvoC2gK4YpaHR0 cDovL2NkcC50aGF3dGUuY29tL1RoYXd0ZVJTQUNBMjAxOC5jcmwwPgYDVR0gBDcw NTAzBgZngQwBAgIwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5j b20vQ1BTMG8GCCsGAQUFBwEBBGMwYTAkBggrBgEFBQcwAYYYaHR0cDovL3N0YXR1 cy50aGF3dGUuY29tMDkGCCsGAQUFBzAChi1odHRwOi8vY2FjZXJ0cy50aGF3dGUu Y29tL1RoYXd0ZVJTQUNBMjAxOC5jcnQwCQYDVR0TBAIwADCCAYAGCisGAQQB1nkC BAIEggFwBIIBbAFqAHcAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQA AAGGke14CgAABAMASDBGAiEAjuQnsec+OcUKx6MbMCt+2I4j8wv1Fiq9yGDbQcWi aMgCIQC7PvR1XM7U7VQMOs8bO6ZOUsqAZTNqF/FWj79R2UXrxQB2AHPZnokbTJZ4 oCB9R53mssYc0FFecRkqjGuAEHrBd3K1AAABhpHteCsAAAQDAEcwRQIhAMrRxTeG 8R2RgP0xuqzmHI+hZNfLkHlE9uQbFpmmkAOwAiAIla5mHXIvxdXiqHzMkMGTZdrA QFPMRzuQOTkMvetjHAB3AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRz AAABhpHtd+4AAAQDAEgwRgIhAML2b0U50hSG6Cm6RiSycNqFQEg9vcqmxNc5ah+o u4iPAiEAy6x6VeSG7HOP9Z8kFCz6b6s5Vh227nPFqrCrey6PJFkwDQYJKoZIhvcN AQELBQADggEBAJW9MUUPWLuz58zfSUnkavwi6OBTi6DczjKizeK2JeQ+ahy08Lwp ZfpC5LHd3AvwUANs+odaeWnqYK8aNCrANBUEpOAdPdoZpXG16FTyCSjpmBviPm2u zdGb2VpNamf0rl7O2GKYhFdYuIvujc+IJF3r6bKh04u6FKu8X8BgpgYMv2dItbEK qX2GsdJlXyG5WEBkw+KrR5JQPatimDxInOVrTwtHbpM6kSWGoNbgevuaNZ404dnv H0Uj609coSyKcDfcLZwCR71gkJ9Nuh0RjBqV+bAFFfGK/m4wMnQ3/qyFeunqEgnP woEKxZ8RIfYXAjoFFlZ5IiurPo/Kf5fY4P4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpEQSQaeEAjBlwAbihIM TiKwnt3rwOW1itVXhEG5glvtJOpSJMOl+uwuB3+gXJnbaSipVLKXMtkiu/zaiJvW euBoMZ9c4ywnzWjEFz9TR3cRtvKNmrfy5mJZqPsCNmyf1npIzAnDxuieLnwX2eH9 uVuyrxgKqARLFkFz+5SYWWDqLrp/bvxyCEyHp0oWXRLS4Cjd1IU6YyX79BU8wHhc GRnOcN+JAJLm5Au+0wniUoUZ3gXLOsGlUpcdJ+JrW/USJSsgoGtNJjTWR1FvZK1q Oi8sBR2s8EmuIaHkrbmqbpVmjVYhzbyBGQ4UdnSIRKZNYa2ipqhIXmNcoCxhh5xn xwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 7446780691653062183016235083650367588 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-27 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-29 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kelkoo SASU' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.kelkoo.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25066717917575383427860968081973062688528108346774074145537350203163281118631858914576742202032941765769892389353634067723638110021044903094389307527386481143419070961331073385579762416926043773743319233776079983770464328032297527131129100861412656302928678810027882349304564498378028042385551179638783008454777043875797970364747864531687550714158446184878404027471931791440939955914169489413371709326086052711178382027059983531432124383118461444815288930379291649942720370549209956778807357381319664407446012464119932262709177093871075232877029972073809672808879404364247084751844213253391413689730124354849706108871 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8d4f32da859b14c86d1a9684438e2e838c994445 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kelkoo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kelkoo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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