www.bluffton.edu

- Bluffton University -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 09:8f:32:33:45:60:51:28:1e:9d:7e:62:b6:bd:3c:9a was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bluffton University

Organization: Bluffton University
Organization unit: Bluffton University
State / Province: Ohio
Locality: Bluffton
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:8f:32:33:45:60:51:28:1e:9d:7e:62:b6:bd:3c:9a
Serial Number (int): 12706568595422099826133287038252563610
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a1:3f:16:de:3a:c2:38:6e:6b:a0:93:54:88:d6:a8:43:59:47:78:53
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 42:98:de:9b:9a:25:c7:88:31:7e:e9:2c:7b:d9:76:2e:e7:3a:f1:08
Fingerprint (sha256): 11:c3:40:41:eb:c0:b3:5f:7b:74:b3:b0:b7:92:ad:0b:33:9c:f3:dc:25:e7:f5:b3:71:ac:d2:4e:7a:53:3e:95

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate www.bluffton.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bluffton.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.bluffton.edu
bluffton.edu

Other certificates including the domain name bluffton.edu

(limited to 100 certificates)
netpartner.bluffton.edu
my.bluffton.edu
net2.bluffton.edu
www.bluffton.edu
webmail.bluffton.edu
www.bluffton.edu
netpartner.bluffton.edu
collegesearchtips.bluffton.edu
homepages.bluffton.edu
libguides.bluffton.edu
my.bluffton.edu
webmail.bluffton.edu
exi.bluffton.edu
collegesearchtips.bluffton.edu
cardid.bluffton.edu
exi.bluffton.edu
www.bluffton.edu
learn.bluffton.edu
collegesearchtips.bluffton.edu
my.bluffton.edu
my.bluffton.edu
www.bluffton.edu
cmds.bluffton.edu
libguides.bluffton.edu
autodiscover.bluffton.edu
my.bluffton.edu
cmds.bluffton.edu
webmail.bluffton.edu
libguides.bluffton.edu
webmail.bluffton.edu
collegesearchtips.bluffton.edu
cmds.bluffton.edu
exi.bluffton.edu
homepages.bluffton.edu
netpartner.bluffton.edu
www.bluffton.edu
netpartner.bluffton.edu
webmail.bluffton.edu
libguides.bluffton.edu
autodiscover.bluffton.edu
netpartner.bluffton.edu
www.bluffton.edu
www.bluffton.edu
libguides.bluffton.edu
libguides.bluffton.edu
jenzabar.bluffton.edu
autodiscover.bluffton.edu
jenzabar.bluffton.edu
buvpn.bluffton.edu
www.bluffton.edu
webmail.bluffton.edu
collegesearchtips.bluffton.edu
moodle.bluffton.edu
netpartner.bluffton.edu
homepages.bluffton.edu
libguides.bluffton.edu
connect.bluffton.edu
netpartner.bluffton.edu
www.bluffton.edu
netpartner.bluffton.edu
www.bluffton.edu
www.bluffton.edu
libguides.bluffton.edu
my.bluffton.edu
www.bluffton.edu
homepages.bluffton.edu
learn.bluffton.edu
connect.bluffton.edu
libguides.bluffton.edu
netpartner.bluffton.edu
learn.bluffton.edu
connect.bluffton.edu
webmail.bluffton.edu
buvpn.bluffton.edu
my.bluffton.edu
www.bluffton.edu
libguides.bluffton.edu
learn.bluffton.edu
connect.bluffton.edu
moodle.bluffton.edu
netpartner.bluffton.edu
homepages.bluffton.edu
netpartner.bluffton.edu
libguides.bluffton.edu
netpartner.bluffton.edu
staging.bluffton.edu
www.bluffton.edu
learn.bluffton.edu
libguides.bluffton.edu
learn.bluffton.edu
learn.bluffton.edu
learn.bluffton.edu
webmail.bluffton.edu
collegesearchtips.bluffton.edu
webmail.bluffton.edu
moodle.bluffton.edu
staging.bluffton.edu
collegesearchtips.bluffton.edu
my.bluffton.edu
exi.bluffton.edu

Certificate

The complete raw certificate details for www.bluffton.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGGzCCBQOgAwIBAgIQCY8yM0VgUSgenX5itr08mjANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMRswGQYDVQQDExJUaGF3dGUgUlNBIENBIDIwMTgwHhcN
MTgwNTEwMDAwMDAwWhcNMTkwNTI2MTIwMDAwWjCBhjELMAkGA1UEBhMCVVMxDTAL
BgNVBAgTBE9oaW8xETAPBgNVBAcTCEJsdWZmdG9uMRwwGgYDVQQKExNCbHVmZnRv
biBVbml2ZXJzaXR5MRwwGgYDVQQLExNCbHVmZnRvbiBVbml2ZXJzaXR5MRkwFwYD
VQQDExB3d3cuYmx1ZmZ0b24uZWR1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvcgJ9OmYjG771VIg3s6iD3q1rkpeoSKKEKk6EZCZ3arC2VEop4Sl7NCD
1fS6QngPMLxU1Cwtm7JIaWpdYd2Uy1azVXRwiI2F42OwBIZVG6zg/I5HKdwLDZ7u
xsZYdtL7IXe0iCtOtKC91zUg8Zo3bO7S254cwSYvZHPO/a3Ps5Q8DTfLeSoNUMTN
Dge06zkRmKsXznm8N1sOXadiiWfn26fiEe5qF96qy1Qcd11m22+VchVgOpkR5Yl+
tWSCXVP7XO7ndEDMaZXOiDxkptSn0pt4p/z/9wx3iwTyiCwr7C7nt8UZCTc4PAXZ
3u3B2eqxiu1mQGOa/50Hwa8f56ltNwIDAQABo4ICrDCCAqgwHwYDVR0jBBgwFoAU
o8heZVTlMHjBBeoHCmpZzLn+3lowHQYDVR0OBBYEFKE/Ft46wjhua6CTVIjWqENZ
R3hTMCkGA1UdEQQiMCCCEHd3dy5ibHVmZnRvbi5lZHWCDGJsdWZmdG9uLmVkdTAO
BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDoG
A1UdHwQzMDEwL6AtoCuGKWh0dHA6Ly9jZHAudGhhd3RlLmNvbS9UaGF3dGVSU0FD
QTIwMTguY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEW
HGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMG8GCCsGAQUF
BwEBBGMwYTAkBggrBgEFBQcwAYYYaHR0cDovL3N0YXR1cy50aGF3dGUuY29tMDkG
CCsGAQUFBzAChi1odHRwOi8vY2FjZXJ0cy50aGF3dGUuY29tL1RoYXd0ZVJTQUNB
MjAxOC5jcnQwCQYDVR0TBAIwADCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AKS5
CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABY0tO7CAAAAQDAEcwRQIh
ALC4O4qBljRPiIz03XLk9s/ebR6urrPZ1ga67S5xpLy4AiBBUTQv4o9IwIGb5TZg
Rc2X9jnbQuEMp4C2423jAvw46wB2AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaN
sgiaN9kTAAABY0tO7eAAAAQDAEcwRQIhAJUdTk5wIXITMhsqgfZ2+O1fTFd2RzE1
irSA0fGYy9R8AiAZ0Wi6IN088iVJL+00TbFRUgC94nwaQBhOU7ussclm9DANBgkq
hkiG9w0BAQsFAAOCAQEAYR3VHtP5zfA3606dNLmahWi9Ak/fdq13sCeEHih2/lzH
tuG4IO91etIRb8+ti5pxOKo3A/z1CJqADkE54771yTX4qlu1/Aqu3wB++hPoLIOt
9Ji7xYe+QptIlypNDKRqE3GR+iLyOG0ns1r53vrWwMYEv77Ly+1QIvDUYvo6/9Pd
pwGJrO0CmXzaaesqUraWiolesHPFmRV0+1JZteiTiYQvlAuHxyE4Umss4Kz/JY5D
saD6JaPwrlGiWadGH+0Q3yZrR1lHId2e4YBPybzgQsgXhuuYdXvd+6tjbDu5sWQW
eDFOiNLtBg154Aj3/d3U6vkve1hHObwTaOMFSAJr4g==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcgJ9OmYjG771VIg3s6i
D3q1rkpeoSKKEKk6EZCZ3arC2VEop4Sl7NCD1fS6QngPMLxU1Cwtm7JIaWpdYd2U
y1azVXRwiI2F42OwBIZVG6zg/I5HKdwLDZ7uxsZYdtL7IXe0iCtOtKC91zUg8Zo3
bO7S254cwSYvZHPO/a3Ps5Q8DTfLeSoNUMTNDge06zkRmKsXznm8N1sOXadiiWfn
26fiEe5qF96qy1Qcd11m22+VchVgOpkR5Yl+tWSCXVP7XO7ndEDMaZXOiDxkptSn
0pt4p/z/9wx3iwTyiCwr7C7nt8UZCTc4PAXZ3u3B2eqxiu1mQGOa/50Hwa8f56lt
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12706568595422099826133287038252563610
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-26 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ohio'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bluffton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bluffton University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bluffton University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bluffton.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23957682493349696399704003703799339633419541848833678581512556930238102036741488932139113537356343100455726929672538537389784563459890295932367173864155280110547279890723348913324738677634348786340194647875106247152386767389769004693094140179131913966137593297954786049220823532313971433907345275753584665209773963253764218610646049014543026163248155719884041443289177303185130797344538134217535184947703833425100416566614438894784595975437111447712532227141651295199448654721050447468058218648675868464503553791209459465844359732951039687752235969863910720612723078499623524260975611232963381041768175569586136640823
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a13f16de3ac2386e6ba0935488d6a84359477853
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bluffton.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluffton.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001634b4eec200000040300473045022100b0b83b8a8196344f888cf4dd72e4f6cfde6d1eaeaeb3d9d606baed2e71a4bcb802204151342fe28f48c0819be5366045cd97f639db42e10ca780b6e36de302fc38eb0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001634b4eede00000040300473045022100951d4e4e70217213321b2a81f676f8ed5f4c57764731358ab480d1f198cbd47c022019d168ba20dd3cf225492fed344db1515200bde27c1a40184e53bbacb1c966f4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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