stl2.lotto-bw.de
- Staatliche Toto-Lotto GmbH -
Issued by thawte SSL CA - G2
About this certificate
This digital certificate with serial number 7b:6e:88:94:fd:d4:e4:12:bc:9e:41:74:0c:bd:82:9a was issued on by thawte, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Staatliche Toto-Lotto GmbH
Organization:
Staatliche Toto-Lotto GmbH
State / Province:
Baden-Wuerttemberg
Locality: Stuttgart
Country: DE
Locality: Stuttgart
Country: DE
thawte, Inc.
Organization:
thawte, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 7b:6e:88:94:fd:d4:e4:12:bc:9e:41:74:0c:bd:82:9aSerial Number (int): 164068966348014708948355707751800603290
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60
Fingerprint (sha1): 2f:1d:95:3c:73:9d:70:57:77:0f:78:d7:03:9d:91:16:1a:cf:f7:25
Fingerprint (sha256): 11:7e:85:2d:f9:41:71:11:a9:23:0c:0b:4d:22:b8:0b:26:fc:56:5b:40:b1:1a:5b:8d:cb:64:a0:23:26:e5:3c
Issuing Certificate URL: http://tj.symcb.com/tj.crt
Revocation information
OCSP Server: http://tj.symcd.comCRL Distribution Point: http://tj.symcb.com/tj.crl
Check the revocation status for certificate stl2.lotto-bw.de
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for stl2.lotto-bw.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
stl2.lotto-bw.de
Other certificates including the domain name lotto-bw.de
(limited to 100 certificates)
www.lotto-bw.de
www.veranstaltung.lotto-bw.de
image.client.generali.ro
san-3-s50.tlsprovisioning.exacttarget.com
wunschgewinn.lotto-bw.de
extfs.lotto-bw.de
stl2.lotto-bw.de
image.client.generali.ro
www.lotto-bw.de
san-3-s50.tlsprovisioning.exacttarget.com
GGL-Comm-T1.lotto-bw.de
stl2.lotto-bw.de
www.lotto-bw.de
stl1.lotto-bw.de
www.veranstaltung.lotto-bw.de
stl2.lotto-bw.de
image.client.generali.ro
www.lotto-bw.de
www.lotto-bw.de
image.client.generali.ro
www.lotto-bw.de
schulung.lotto-bw.de
schulung.lotto-bw.de
www.lotto-bw.de
www.lotto-bw.de
san-3-s50.tlsprovisioning.exacttarget.com
www.veranstaltung.lotto-bw.de
san-3-s50.tlsprovisioning.exacttarget.com
image.client.generali.ro
wunschgewinn.lotto-bw.de
wunschgewinn.lotto-bw.de
image.client.generali.ro
image.client.generali.ro
schulung.lotto-bw.de
www.veranstaltung.lotto-bw.de
www.lotto-bw.de
wunschgewinn.lotto-bw.de
www.lotto-bw.de
stl1.lotto-bw.de
wunschgewinn.lotto-bw.de
dev.marketing.lotto-bw.de
stl2.lotto-bw.de
kmsf2.lotto-bw.de
san-3-s50.tlsprovisioning.exacttarget.com
wunschgewinn.lotto-bw.de
marketing.lotto-bw.de
www.lotto-bw.de
wunschgewinn.lotto-bw.de
www.veranstaltung.lotto-bw.de
www.veranstaltung.lotto-bw.de
LUGAS-SIG-T1.lotto-bw.de
www.lotto-bw.de
schulung.lotto-bw.de
www.lotto-bw.de
san-3-s50.tlsprovisioning.exacttarget.com
test.marketing.lotto-bw.de
wunschgewinn.lotto-bw.de
image.client.generali.ro
www.veranstaltung.lotto-bw.de
www.lotto-bw.de
wunschgewinn.lotto-bw.de
stl1.lotto-bw.de
GGL-Comm-PROD.lotto-bw.de
www.lotto-bw.de
wunschgewinn.lotto-bw.de
www.lotto-bw.de
wunschgewinn.lotto-bw.de
image.client.generali.ro
www.veranstaltung.lotto-bw.de
stl2.lotto-bw.de
extfs.lotto-bw.de
LUGAS-SIG-PROD.lotto-bw.de
www.veranstaltung.lotto-bw.de
image.client.generali.ro
san-3-s50.tlsprovisioning.exacttarget.com
wunschgewinn.lotto-bw.de
extfs.lotto-bw.de
stl2.lotto-bw.de
image.client.generali.ro
www.lotto-bw.de
san-3-s50.tlsprovisioning.exacttarget.com
GGL-Comm-T1.lotto-bw.de
stl2.lotto-bw.de
www.lotto-bw.de
stl1.lotto-bw.de
www.veranstaltung.lotto-bw.de
stl2.lotto-bw.de
image.client.generali.ro
www.lotto-bw.de
www.lotto-bw.de
image.client.generali.ro
www.lotto-bw.de
schulung.lotto-bw.de
schulung.lotto-bw.de
www.lotto-bw.de
www.lotto-bw.de
san-3-s50.tlsprovisioning.exacttarget.com
www.veranstaltung.lotto-bw.de
san-3-s50.tlsprovisioning.exacttarget.com
image.client.generali.ro
wunschgewinn.lotto-bw.de
wunschgewinn.lotto-bw.de
image.client.generali.ro
image.client.generali.ro
schulung.lotto-bw.de
www.veranstaltung.lotto-bw.de
www.lotto-bw.de
wunschgewinn.lotto-bw.de
www.lotto-bw.de
stl1.lotto-bw.de
wunschgewinn.lotto-bw.de
dev.marketing.lotto-bw.de
stl2.lotto-bw.de
kmsf2.lotto-bw.de
san-3-s50.tlsprovisioning.exacttarget.com
wunschgewinn.lotto-bw.de
marketing.lotto-bw.de
www.lotto-bw.de
wunschgewinn.lotto-bw.de
www.veranstaltung.lotto-bw.de
www.veranstaltung.lotto-bw.de
LUGAS-SIG-T1.lotto-bw.de
www.lotto-bw.de
schulung.lotto-bw.de
www.lotto-bw.de
san-3-s50.tlsprovisioning.exacttarget.com
test.marketing.lotto-bw.de
wunschgewinn.lotto-bw.de
image.client.generali.ro
www.veranstaltung.lotto-bw.de
www.lotto-bw.de
wunschgewinn.lotto-bw.de
stl1.lotto-bw.de
GGL-Comm-PROD.lotto-bw.de
www.lotto-bw.de
wunschgewinn.lotto-bw.de
www.lotto-bw.de
wunschgewinn.lotto-bw.de
image.client.generali.ro
www.veranstaltung.lotto-bw.de
stl2.lotto-bw.de
extfs.lotto-bw.de
LUGAS-SIG-PROD.lotto-bw.de
Certificate
The complete raw certificate details for stl2.lotto-bw.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIQe26IlP3U5BK8nkF0DL2CmjANBgkqhkiG9w0BAQsFADBB MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMRswGQYDVQQDExJ0 aGF3dGUgU1NMIENBIC0gRzIwHhcNMTYwNDI5MDAwMDAwWhcNMTgwNDI5MjM1OTU5 WjB+MQswCQYDVQQGEwJERTEbMBkGA1UECAwSQmFkZW4tV3VlcnR0ZW1iZXJnMRIw EAYDVQQHDAlTdHV0dGdhcnQxIzAhBgNVBAoMGlN0YWF0bGljaGUgVG90by1Mb3R0 byBHbWJIMRkwFwYDVQQDDBBzdGwyLmxvdHRvLWJ3LmRlMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAkKdiHC43aIPNIzruuQB0LMBaaAAtBxs+i3a/BSn8 kTrd1Z920ofccfwRAL7rdZDjcKoXTrqQkVjy4D9SLhk7xWoSBsYjkBQk7wH+DHaF ox8tiz7yDa+W82DdWvQ4Z6i+K+lzAuuMx/bt1FT3jxkBKkdztIdNTPRuMS1GLBA8 OQxxp4mfWxvoxrikRQZuNo0S0zqwlEjXaBSOsJydNDQ5uSw58SqGk1GORbPgRD+1 Bo7pC8QwKxqTrRDIPcUDKgw94FThQztOAawv5apybJtvSydFuPWxuskgcxGT0oGL gCtgyZGfXZqQdD4zx6S+H5Oqb9F4Fu+2P2DpB2o01k2mFQIDAQABo4IBhzCCAYMw GwYDVR0RBBQwEoIQc3RsMi5sb3R0by1idy5kZTAJBgNVHRMEAjAAMG4GA1UdIARn MGUwYwYGZ4EMAQICMFkwJgYIKwYBBQUHAgEWGmh0dHBzOi8vd3d3LnRoYXd0ZS5j b20vY3BzMC8GCCsGAQUFBwICMCMMIWh0dHBzOi8vd3d3LnRoYXd0ZS5jb20vcmVw b3NpdG9yeTAOBgNVHQ8BAf8EBAMCBaAwHwYDVR0jBBgwFoAUwk9IV/zRT5rAXTh9 DgXb2S61UmAwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL3RqLnN5bWNiLmNvbS90 ai5jcmwwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMFcGCCsGAQUFBwEB BEswSTAfBggrBgEFBQcwAYYTaHR0cDovL3RqLnN5bWNkLmNvbTAmBggrBgEFBQcw AoYaaHR0cDovL3RqLnN5bWNiLmNvbS90ai5jcnQwEwYKKwYBBAHWeQIEAwEB/wQC BQAwDQYJKoZIhvcNAQELBQADggEBAKtO/A0diJ0idcvIta073Mx70LVs6G1kCmF3 JflLAhAJbe+YQ4HGW0H9Tr+IC/5Xx55tnXRyYZAeNlqCH2fr6wUc2ng56Uvxywjy Afs3oo1RJcCLc2KQmh/NUyrva/wBrmIgSWg8ZWEoWtRudSEOh1gDNXePqofvxpBz tlKabecfbnnJ8TjgM/fNOTWIrLpLwcxP4bE2VWVyCPYBmuU/vUgX4PyKBySP722+ ABdjG321R9eb0R4K4ele3L/uQqoNu4dVy4rjb8rXw1kYP6X5+q7MpptEkgeJHD+8 UwyC6ZhUk7tWHnA9q055I/TF6owqwFvqhxvH3MguD0cqs4tc8/Q= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKdiHC43aIPNIzruuQB0 LMBaaAAtBxs+i3a/BSn8kTrd1Z920ofccfwRAL7rdZDjcKoXTrqQkVjy4D9SLhk7 xWoSBsYjkBQk7wH+DHaFox8tiz7yDa+W82DdWvQ4Z6i+K+lzAuuMx/bt1FT3jxkB KkdztIdNTPRuMS1GLBA8OQxxp4mfWxvoxrikRQZuNo0S0zqwlEjXaBSOsJydNDQ5 uSw58SqGk1GORbPgRD+1Bo7pC8QwKxqTrRDIPcUDKgw94FThQztOAawv5apybJtv SydFuPWxuskgcxGT0oGLgCtgyZGfXZqQdD4zx6S+H5Oqb9F4Fu+2P2DpB2o01k2m FQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 164068966348014708948355707751800603290 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-29 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-29 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Wuerttemberg' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Stuttgart' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Staatliche Toto-Lotto GmbH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'stl2.lotto-bw.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18260855668288319591901202489795425647679312102830072254751908335765815868022282029467446497412978954047636843025502605865460055325709818797700804848876974896919669943505134686123782782490471602363946509691149083678583478362180471907714916110594677264574087555315438808339789841160266098137858816323103973009981734374424017794758263884877957121307166727806568480821470262736646680397209865911233727507673293166029111140219472047837375043770988383008743331000652830889108007007096496665695307940977525235023127670327100136013578830765458188852393678056280011142667233088162150131893797139055388760387895544873260787221 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stl2.lotto-bw.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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