kiosk.sportbild.de
- BILD GmbH & Co. KG -
Issued by Thawte SSL CA
About this certificate
This digital certificate with serial number 70:ae:3d:5f:6d:c2:7d:ee:d8:88:3c:8e:7c:90:b0:49 was issued on by Thawte, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Compliant certificates must not encode explicitTest as an IA5String (RFC 6818: 3)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
BILD GmbH & Co. KG
Organization:
BILD GmbH & Co. KG
Organization unit: Betrieb 0513
Organization unit: Betrieb 0513
State / Province:
Berlin
Locality: Berlin
Country: DE
Locality: Berlin
Country: DE
Thawte, Inc.
Organization:
Thawte, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 70:ae:3d:5f:6d:c2:7d:ee:d8:88:3c:8e:7c:90:b0:49Serial Number (int): 149778239968925891760868715572803711049
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: a7:a2:83:bb:34:45:40:3d:fc:d5:30:4f:12:b9:3e:a1:01:9f:f6:db
Fingerprint (sha1): 38:00:a9:ae:74:ab:29:30:68:aa:77:a3:37:bb:45:aa:e7:dc:1f:39
Fingerprint (sha256): 13:c0:12:95:c7:5f:d6:21:01:3b:1a:cb:5c:da:22:0f:3c:72:80:74:de:dc:97:7d:e8:20:3b:d0:aa:43:9d:8f
Issuing Certificate URL: http://tb.symcb.com/tb.crt
Revocation information
OCSP Server: http://tb.symcd.comCRL Distribution Point: http://tb.symcb.com/tb.crl
Check the revocation status for certificate kiosk.sportbild.de
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for kiosk.sportbild.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
kiosk.sportbild.de
Other certificates including the domain name sportbild.de
(limited to 100 certificates)
*.axelspringer.de
*.prod.ps.axelspringer.de
el-shop.welt.de
*.prod.ps.axelspringer.de
*.prod.ps.axelspringer.de
*.prod.ps.axelspringer.de
bild.de
event.sportbild.de
el-shop.welt.de
bild.de
marketing.sportbild.de
kiosk.sportbild.de
bild.de
*.services.ps.axelspringer.de
*.axelspringer.de
marketing.sportbild.de
privacy.fanmeile.sportbild.de
*.auth.axelspringer.de
privacy.club.bild.de
fanmeile.sportbild.de
bild.de
bild.de
*.axelspringer.de
marketing.sportbild.de
aboservice.audiovideofotobild.de
*.axelspringer.de
images.bild.de
aboservice.audiovideofotobild.de
*.prod.ps.axelspringer.de
images.bild.de
el-shop.welt.de
*.prod.ps.axelspringer.de
privacy.fanmeile.sportbild.de
privacy.club.bild.de
ads.marketing.sportbild.de
privacy.club.bild.de
images.bild.de
*.prod.ps.axelspringer.de
www.marketing.sportbild.de
*.axelspringer.de
*.prod.ps.axelspringer.de
*.prod.ps.axelspringer.de
*.prod.ps.axelspringer.de
*.prod.ps.axelspringer.de
aboshop.axelspringer.de
bild.de
privacy.club.bild.de
*.prod.ps.axelspringer.de
images.bild.de
*.prod.ps.axelspringer.de
*.auth.bz-berlin.de
*.prod.ps.axelspringer.de
*.prod.ps.axelspringer.de
privacy.club.bild.de
privacy.club.bild.de
privacy.fanmeile.sportbild.de
privacy.club.bild.de
*.prod.ps.axelspringer.de
privacy.club.bild.de
*.prod.ps.axelspringer.de
aboservice.audiovideofotobild.de
privacy.club.bild.de
fanmeile.sportbild.de
marketing.sportbild.de
*.prod.ps.axelspringer.de
fanmeile.sportbild.de
privacy.club.bild.de
privacy.club.bild.de
*.prod.ps.axelspringer.de
fanmeile.sportbild.de
*.prod.ps.axelspringer.de
*.axelspringer.de
*.prod.ps.axelspringer.de
*.prod.ps.axelspringer.de
*.auth.bz-berlin.de
*.prod.ps.axelspringer.de
*.auth.bz-berlin.de
*.prod.ps.axelspringer.de
marketing.sportbild.de
privacy.club.bild.de
*.prod.ps.axelspringer.de
*.prod.ps.axelspringer.de
www.meinverein.sportbild.de
aboshop.axelspringer.de
aboservice.audiovideofotobild.de
images.bild.de
*.marketing.sportbild.de
*.prod.ps.axelspringer.de
*.prod.ps.axelspringer.de
*.prod.ps.axelspringer.de
*.prod.ps.axelspringer.de
sportbild.de
*.axelspringer.de
bild.de
*.prod.ps.axelspringer.de
privacy.club.bild.de
*.prod.ps.axelspringer.de
bild.de
aboservice.audiovideofotobild.de
*.prod.ps.axelspringer.de
*.prod.ps.axelspringer.de
el-shop.welt.de
*.prod.ps.axelspringer.de
*.prod.ps.axelspringer.de
*.prod.ps.axelspringer.de
bild.de
event.sportbild.de
el-shop.welt.de
bild.de
marketing.sportbild.de
kiosk.sportbild.de
bild.de
*.services.ps.axelspringer.de
*.axelspringer.de
marketing.sportbild.de
privacy.fanmeile.sportbild.de
*.auth.axelspringer.de
privacy.club.bild.de
fanmeile.sportbild.de
bild.de
bild.de
*.axelspringer.de
marketing.sportbild.de
aboservice.audiovideofotobild.de
*.axelspringer.de
images.bild.de
aboservice.audiovideofotobild.de
*.prod.ps.axelspringer.de
images.bild.de
el-shop.welt.de
*.prod.ps.axelspringer.de
privacy.fanmeile.sportbild.de
privacy.club.bild.de
ads.marketing.sportbild.de
privacy.club.bild.de
images.bild.de
*.prod.ps.axelspringer.de
www.marketing.sportbild.de
*.axelspringer.de
*.prod.ps.axelspringer.de
*.prod.ps.axelspringer.de
*.prod.ps.axelspringer.de
*.prod.ps.axelspringer.de
aboshop.axelspringer.de
bild.de
privacy.club.bild.de
*.prod.ps.axelspringer.de
images.bild.de
*.prod.ps.axelspringer.de
*.auth.bz-berlin.de
*.prod.ps.axelspringer.de
*.prod.ps.axelspringer.de
privacy.club.bild.de
privacy.club.bild.de
privacy.fanmeile.sportbild.de
privacy.club.bild.de
*.prod.ps.axelspringer.de
privacy.club.bild.de
*.prod.ps.axelspringer.de
aboservice.audiovideofotobild.de
privacy.club.bild.de
fanmeile.sportbild.de
marketing.sportbild.de
*.prod.ps.axelspringer.de
fanmeile.sportbild.de
privacy.club.bild.de
privacy.club.bild.de
*.prod.ps.axelspringer.de
fanmeile.sportbild.de
*.prod.ps.axelspringer.de
*.axelspringer.de
*.prod.ps.axelspringer.de
*.prod.ps.axelspringer.de
*.auth.bz-berlin.de
*.prod.ps.axelspringer.de
*.auth.bz-berlin.de
*.prod.ps.axelspringer.de
marketing.sportbild.de
privacy.club.bild.de
*.prod.ps.axelspringer.de
*.prod.ps.axelspringer.de
www.meinverein.sportbild.de
aboshop.axelspringer.de
aboservice.audiovideofotobild.de
images.bild.de
*.marketing.sportbild.de
*.prod.ps.axelspringer.de
*.prod.ps.axelspringer.de
*.prod.ps.axelspringer.de
*.prod.ps.axelspringer.de
sportbild.de
*.axelspringer.de
bild.de
*.prod.ps.axelspringer.de
privacy.club.bild.de
*.prod.ps.axelspringer.de
bild.de
aboservice.audiovideofotobild.de
*.prod.ps.axelspringer.de
Certificate
The complete raw certificate details for kiosk.sportbild.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEtDCCA5ygAwIBAgIQcK49X23Cfe7YiDyOfJCwSTANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMVGhhd3RlLCBJbmMuMRYwFAYDVQQDEw1U aGF3dGUgU1NMIENBMB4XDTE0MDYzMDAwMDAwMFoXDTE2MDYyOTIzNTk1OVowgYAx CzAJBgNVBAYTAkRFMQ8wDQYDVQQIEwZCZXJsaW4xDzANBgNVBAcUBkJlcmxpbjEb MBkGA1UEChQSQklMRCBHbWJIICYgQ28uIEtHMRUwEwYDVQQLFAxCZXRyaWViIDA1 MTMxGzAZBgNVBAMUEmtpb3NrLnNwb3J0YmlsZC5kZTCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBAMUEaeUxyNBRl18LjRANzAsJhwiyP6TvWMitv4f2A027 99RgJpJHy7GPnf5Lv3TWGeAWtVQdoDR5qIFCHIo99zS4ns9ym+S7TQEkKrhNKCvH jcoRXwNKYPERJFnh2SKmzjfwrbxuZRWfGO2uEKF5f3w5gBsFb2d8yQwyfvkqn/Lc lkWAzRmknILAmVY2taJzuUnhaYnAHGhhGvshrANBkvHR/uvkgtpNovTglJ/TbkUC rrvUe4mHxopC74VYeXIFT4CekG7HRM+wADE7rnJKj+kiG/+Qb+4J9/BC/SUP/Wwg ebUEQCDeln3SwwecSpccUmXI78dkD1+OEkU+H29jvsECAwEAAaOCAWswggFnMB0G A1UdEQQWMBSCEmtpb3NrLnNwb3J0YmlsZC5kZTAJBgNVHRMEAjAAMGUGA1UdIARe MFwwWgYKYIZIAYb4RQEHNjBMMCMGCCsGAQUFBwIBFhdodHRwczovL2Quc3ltY2Iu Y29tL2NwczAlBggrBgEFBQcCAjAZFhdodHRwczovL2Quc3ltY2IuY29tL3JwYTAO BgNVHQ8BAf8EBAMCBaAwHwYDVR0jBBgwFoAUp6KDuzRFQD381TBPErk+oQGf9tsw KwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL3RiLnN5bWNiLmNvbS90Yi5jcmwwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMFcGCCsGAQUFBwEBBEswSTAfBggr BgEFBQcwAYYTaHR0cDovL3RiLnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDov L3RiLnN5bWNiLmNvbS90Yi5jcnQwDQYJKoZIhvcNAQELBQADggEBAIGhgIRFUFIK /av+ApqOpY8nRUJCL5SlhxZTDB6J2l+a29y7KdWqAEZZSgITW3shOIFdc8Q1GNPR vqTYrvs0FF7WEraD9GRun6nBnaKHj0GgcZowYxzmp+dP807E9FtnM8824clpcLVF 6nBFDTNNESuH3tbOsv2DT5MvXusJoXbugti6J4sleNZrG1mAnRkc57qb0r/6D+4S WpeH7FVdjz7zcYwrVpug0iaox9hnFV8xFqk1WNTJMs8tFYGVDp7F1H3FD2et7ubT Z57pjFV66StROpiXIaAu4tLk7G8eB1XmkA7SlvI9ukG2OeD4ayUkUrbL8BzSpvfl qZl2bStsxJ0= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQRp5THI0FGXXwuNEA3M CwmHCLI/pO9YyK2/h/YDTbv31GAmkkfLsY+d/ku/dNYZ4Ba1VB2gNHmogUIcij33 NLiez3Kb5LtNASQquE0oK8eNyhFfA0pg8REkWeHZIqbON/CtvG5lFZ8Y7a4QoXl/ fDmAGwVvZ3zJDDJ++Sqf8tyWRYDNGaScgsCZVja1onO5SeFpicAcaGEa+yGsA0GS 8dH+6+SC2k2i9OCUn9NuRQKuu9R7iYfGikLvhVh5cgVPgJ6QbsdEz7AAMTuuckqP 6SIb/5Bv7gn38EL9JQ/9bCB5tQRAIN6WfdLDB5xKlxxSZcjvx2QPX44SRT4fb2O+ wQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 149778239968925891760868715572803711049 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-06-30 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-29 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berlin' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Berlin' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'BILD GmbH & Co. KG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Betrieb 0513' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'kiosk.sportbild.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24871122531962113647917949501957932982911497415065800369206146070224117967280939180586130434526262627420103950936035808564589431959135651543044155750480906215779979437529250994638487557200768796788033197798367008060917982586631264946081849813123164567090540742381665312482974380000142549126159850632132374484859244502784668641718385644535493331287412591754858973617379598750786240630787014808218414829819804142804506461774225972398915636250627695567826391119202468104438533112340203485087656179278110400233333813891570053995259842332756975339696127261711749557752595500607690763655111253183337464239878195470357741249 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk.sportbild.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/rpa' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a7a283bb3445403dfcd5304f12b93ea1019ff6db . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tb.symcb.com/tb.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tb.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tb.symcb.com/tb.crt' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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