*.sbunified.org

- Santa Barbara Unified School District -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 02:60:c0:d6:ab:5c:4b:0c:4a:85:52:fb:62:bb:48:7f was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Santa Barbara Unified School District

Organization: Santa Barbara Unified School District
Organization unit: ETS
State / Province: California
Locality: Santa Barbara
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:60:c0:d6:ab:5c:4b:0c:4a:85:52:fb:62:bb:48:7f
Serial Number (int): 3160827720493366630507670773090175103
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: db:ba:8a:cc:36:fe:b3:a9:6f:b9:29:0b:12:f6:2d:41:c3:bd:7f:3a
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 81:68:39:cb:09:70:b8:fb:08:8a:73:15:f1:e1:fe:62:dc:44:fd:c7
Fingerprint (sha256): 13:0a:5b:63:12:e3:b3:4a:fc:0f:b9:74:62:8c:79:f7:4f:1d:43:b5:ae:4d:3e:82:c4:f6:c2:84:23:fd:53:38

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate *.sbunified.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.sbunified.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.sbunified.org
sbunified.org

Other certificates including the domain name sbunified.org

(limited to 100 certificates)
ssl378718.cloudflaressl.com
ssl6521.cloudflare.com
ssl378719.cloudflaressl.com
ssl378719.cloudflaressl.com
ssl276689.cloudflaressl.com
ssl378718.cloudflaressl.com
lacuesta.sbunified.org
admin.castlerockknights.org
my.sbunified.org
ssl378718.cloudflaressl.com
ssl6521.cloudflare.com
ssl378719.cloudflaressl.com
*.sbunified.org
*.sbunified.org
ssl378718.cloudflaressl.com
ssl378718.cloudflaressl.com
ssl378718.cloudflaressl.com
ssl276687.cloudflaressl.com
ssl378718.cloudflaressl.com
ssl378719.cloudflaressl.com
admin.bayhaven.org
ssl276689.cloudflaressl.com
www.tvcscougars.com
ssl378717.cloudflaressl.com
ssl276689.cloudflaressl.com
ssl276689.cloudflaressl.com
ssl378719.cloudflaressl.com
admin.castlerockknights.org
ssl6521.cloudflare.com
ssl378718.cloudflaressl.com
ssl378719.cloudflaressl.com
ssl378718.cloudflaressl.com
*.sbunified.org
*.sbunified.org
ssl378719.cloudflaressl.com
admin.bayhaven.org
my.sbunified.org
shepherdstown.mbgsd.org
*.sbunified.org
ssl378718.cloudflaressl.com
server.sbunified.org
*.sbunified.org
ssl378719.cloudflaressl.com
ssl378718.cloudflaressl.com
ssl378719.cloudflaressl.com
adams.k12k.com
ssl276689.cloudflaressl.com
ssl378717.cloudflaressl.com
tsa.tomballisd.net
ssl378718.cloudflaressl.com
www.sbunified.org
ssl378718.cloudflaressl.com
ssl276688.cloudflaressl.com
ssl378719.cloudflaressl.com
ssl378718.cloudflaressl.com
adams.k12k.com
ssl378719.cloudflaressl.com
ssl378717.cloudflaressl.com
ssl378719.cloudflaressl.com
ssl276689.cloudflaressl.com
ssl378719.cloudflaressl.com
adams.k12k.com
admin.castlerockknights.org
ssl378717.cloudflaressl.com
ssl378718.cloudflaressl.com
adams.k12k.com
admin.bayhaven.org
ssl378717.cloudflaressl.com
ssl378719.cloudflaressl.com
ssl378718.cloudflaressl.com
sbca.sbunified.org
ssl276687.cloudflaressl.com
ssl378717.cloudflaressl.com
ssl276687.cloudflaressl.com
ssl378718.cloudflaressl.com
ssl378718.cloudflaressl.com
ssl378718.cloudflaressl.com
ssl378719.cloudflaressl.com
ssl378718.cloudflaressl.com
*.sbunified.org
ssl378718.cloudflaressl.com
ssl378719.cloudflaressl.com
ssl378718.cloudflaressl.com
sbhs.sbunified.org
ssl378718.cloudflaressl.com
selfservice.sbunified.org
ssl378717.cloudflaressl.com
sni.cloudflaressl.com
adams.sbunified.org
www.gocats.org
ssl378719.cloudflaressl.com
ssl378719.cloudflaressl.com
ssl6521.cloudflare.com
ssl378718.cloudflaressl.com
ssl378719.cloudflaressl.com
admin.bayhaven.org
ssl378718.cloudflaressl.com
ssl378718.cloudflaressl.com
sbjh.sbunified.org
ssl378717.cloudflaressl.com

Certificate

The complete raw certificate details for *.sbunified.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFNDCCBBygAwIBAgIQAmDA1qtcSwxKhVL7YrtIfzANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMRswGQYDVQQDExJUaGF3dGUgUlNBIENBIDIwMTgwHhcN
MTkwNDA0MDAwMDAwWhcNMjAwNTExMTIwMDAwWjCBkjELMAkGA1UEBhMCVVMxEzAR
BgNVBAgTCkNhbGlmb3JuaWExFjAUBgNVBAcTDVNhbnRhIEJhcmJhcmExLjAsBgNV
BAoTJVNhbnRhIEJhcmJhcmEgVW5pZmllZCBTY2hvb2wgRGlzdHJpY3QxDDAKBgNV
BAsTA0VUUzEYMBYGA1UEAwwPKi5zYnVuaWZpZWQub3JnMIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEAvcSSNebaCEeoMl1xSJrZBzz5O8J09w3b6mcmnfnP
ecnIurHCk//+Pisrd6+jucrjSU2nIKQTxhdlhYJ3vjS9UekbeyrevSPJGY+Ll8Cx
eysmDV4kIg+IcXwnGRwMl5n8HGz/xj/cYGax10y3klS19mKr724kw0wzvj0Gwmxi
WcaNIkVPT9GkznVzG6rMzwcH1yfV2zqvUz0mRvjROlCPC4uVlVPjTkjuc3dWWndr
4/XUF9aLru0eNRp02qr7tmffc531Is8cFwY1FPBGN3y+iGvaxcb+bM5y3Fr5pj0Q
v2eNlzQ8m2tjubI9+yNX9zM12sTPG51+Av1nvB1E88DD7QIDAQABo4IBuTCCAbUw
HwYDVR0jBBgwFoAUo8heZVTlMHjBBeoHCmpZzLn+3lowHQYDVR0OBBYEFNu6isw2
/rOpb7kpCxL2LUHDvX86MCkGA1UdEQQiMCCCDyouc2J1bmlmaWVkLm9yZ4INc2J1
bmlmaWVkLm9yZzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMDoGA1UdHwQzMDEwL6AtoCuGKWh0dHA6Ly9jZHAudGhhd3RlLmNv
bS9UaGF3dGVSU0FDQTIwMTguY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCow
KAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EM
AQICMG8GCCsGAQUFBwEBBGMwYTAkBggrBgEFBQcwAYYYaHR0cDovL3N0YXR1cy50
aGF3dGUuY29tMDkGCCsGAQUFBzAChi1odHRwOi8vY2FjZXJ0cy50aGF3dGUuY29t
L1RoYXd0ZVJTQUNBMjAxOC5jcnQwCQYDVR0TBAIwADATBgorBgEEAdZ5AgQDAQH/
BAIFADANBgkqhkiG9w0BAQsFAAOCAQEANiuSbAR8OknV2oII6NXcw8bdfQVgfYit
GR7Wy2TyfGTybhgZCnSBrNokVTJH7eQ6k3Zpf7h9fHcpGFN3tgBckQzSMHceusxQ
Yt7D4L4BI4zyuUM9ndFBHnDWEaLliVfsMR14NJpcmaJx4iLiysJzn5Ogfw5JGrPI
JKxMEEpLQ9DL/x57+wuJEAFoO1dg0f5Fszgrz0aZOeQD/F5kL0jrfo5on11VeRon
n9jxs+SgV82ciDUIVGtmmXpeVhYWTw1tL5e5iBsqdMmooF91ph/xrHm/Z+k5UYOl
yNmQmvBC2tsCWmiuLZ3tvXZ2mabIGzNfENsbYypitq7TBcrDFqGEAw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcSSNebaCEeoMl1xSJrZ
Bzz5O8J09w3b6mcmnfnPecnIurHCk//+Pisrd6+jucrjSU2nIKQTxhdlhYJ3vjS9
UekbeyrevSPJGY+Ll8CxeysmDV4kIg+IcXwnGRwMl5n8HGz/xj/cYGax10y3klS1
9mKr724kw0wzvj0GwmxiWcaNIkVPT9GkznVzG6rMzwcH1yfV2zqvUz0mRvjROlCP
C4uVlVPjTkjuc3dWWndr4/XUF9aLru0eNRp02qr7tmffc531Is8cFwY1FPBGN3y+
iGvaxcb+bM5y3Fr5pj0Qv2eNlzQ8m2tjubI9+yNX9zM12sTPG51+Av1nvB1E88DD
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3160827720493366630507670773090175103
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-11 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Santa Barbara'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Santa Barbara Unified School District'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ETS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.sbunified.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23955972477977973295569617151794285964726743082850525124248090365639009110302088032333565737038211242151204186939240538006529356421216510456649654926968471473565689949644078468739563020361225384464412386705734370534344378343208185047804261128062809481633350429796555637451164291750802611461228926945979217913352761032870059042871968240529684480079858776880204537241605756769454731303360081505844972636331393613698356703240234806799956440972889914566789689205893080948642846234425627650865672707970916282098327528503291495848501757780199824778382145904442364350503885648398588025327637614130573199661671111244466144237
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dbba8acc36feb3a96fb9290b12f62d41c3bd7f3a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sbunified.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbunified.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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