winhost.teksavvy.com
Issued by Thawte TLS RSA CA G1
About this certificate
This digital certificate with serial number 0a:df:9b:bf:e0:a3:11:1d:f9:68:71:b9:36:f1:42:2a was issued on by DigiCert Inc.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=winhost.teksavvy.com
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0a:df:9b:bf:e0:a3:11:1d:f9:68:71:b9:36:f1:42:2aSerial Number (int): 14453321132891809465340569699763700266
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 45:84:7b:b3:60:3a:a6:13:ff:18:c2:f9:9c:1b:d0:22:3e:ae:bc:26
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7
Fingerprint (sha1): e0:95:66:42:41:0f:29:e7:62:60:a0:da:56:53:7e:8f:72:fe:d3:c1
Fingerprint (sha256): 15:3e:e7:e4:fc:98:33:5a:73:25:a9:8e:fe:de:78:12:ce:0e:90:22:f5:e5:4f:bd:98:54:dd:b6:ad:12:01:eb
Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt
Revocation information
OCSP Server: http://status.thawte.comCRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl
Check the revocation status for certificate winhost.teksavvy.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for winhost.teksavvy.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
winhost.teksavvy.com
Other certificates including the domain name teksavvy.com
(limited to 100 certificates)
secure0011.hubspot.com
*.business.teksavvy.com
secure0029.hubspot.com
*.teksavvy.com
www.teksavvy.com
directory.engagemojo.com
*.teksavvy.com
secure0029.hubspot.com
*.teksavvy.com
*.teksavvy.com
teksavvy.staging.teksavvy.com
blogs.teksavvy.com
webhost6.teksavvy.com
secure0011.hubspot.com
*.teksavvy.com
24x7.ifxnetworks.com
promos.teksavvy.com
www.teksavvy.com
*.teksavvy.com
*.teksavvy.com
promos.teksavvy.com
secure0029.hubspot.com
*.teksavvy.com
*.teksavvy.com
24x7.ifxnetworks.com
*.teksavvy.com
www.teksavvy.com
*.teksavvy.com
secure0036.hubspot.com
*.teksavvy.com
*.teksavvy.com
secure0029.hubspot.com
webhost1.teksavvy.com
secure.teksavvy.com
secure0029.hubspot.com
support.callocean.com
*.teksavvy.com
policy.teksavvy.com
assist.emergencysupport.us
secure0029.hubspot.com
cklass.teksavvy.com
secure0029.hubspot.com
directory.yaxxa.co.za
secure0029.hubspot.com
webhost1.teksavvy.com
winhost.teksavvy.com
business.teksavvy.com
*.teksavvy.com
*.teksavvy.com
secure0029.hubspot.com
*.teksavvy.com
monitoring.resolu.com.au
secure0036.hubspot.com
monitor.business.teksavvy.com
help.mitipi.com
*.teksavvy.com
secure0036.hubspot.com
*.teksavvy.com
secure0036.hubspot.com
*.teksavvy.com
*.teksavvy.com
secure0029.hubspot.com
*.teksavvy.com
*.teksavvy.com
*.teksavvy.com
support.cbont.com
*.teksavvy.com
secure0029.hubspot.com
24x7.ifxnetworks.com
*.teksavvy.com
business.teksavvy.com
teksavvy.staging.teksavvy.com
*.teksavvy.com
promos.teksavvy.com
secure0036.hubspot.com
webhost4.teksavvy.com
*.teksavvy.com
fthefineprint.teksavvy.com
fibre.teksavvy.com
*.teksavvy.com
webhost5.teksavvy.com
webhost1.teksavvy.com
*.teksavvy.com
*.teksavvy.com
blogs.teksavvy.com
secure0029.hubspot.com
*.teksavvy.com
24x7.ifxnetworks.com
webhost7.teksavvy.com
secure0036.hubspot.com
secure0036.hubspot.com
*.teksavvy.com
*.teksavvy.com
secure0036.hubspot.com
*.teksavvy.com
*.teksavvy.com
policy.teksavvy.com
webhost7.teksavvy.com
www.teksavvy.com
secure0011.hubspot.com
*.business.teksavvy.com
secure0029.hubspot.com
*.teksavvy.com
www.teksavvy.com
directory.engagemojo.com
*.teksavvy.com
secure0029.hubspot.com
*.teksavvy.com
*.teksavvy.com
teksavvy.staging.teksavvy.com
blogs.teksavvy.com
webhost6.teksavvy.com
secure0011.hubspot.com
*.teksavvy.com
24x7.ifxnetworks.com
promos.teksavvy.com
www.teksavvy.com
*.teksavvy.com
*.teksavvy.com
promos.teksavvy.com
secure0029.hubspot.com
*.teksavvy.com
*.teksavvy.com
24x7.ifxnetworks.com
*.teksavvy.com
www.teksavvy.com
*.teksavvy.com
secure0036.hubspot.com
*.teksavvy.com
*.teksavvy.com
secure0029.hubspot.com
webhost1.teksavvy.com
secure.teksavvy.com
secure0029.hubspot.com
support.callocean.com
*.teksavvy.com
policy.teksavvy.com
assist.emergencysupport.us
secure0029.hubspot.com
cklass.teksavvy.com
secure0029.hubspot.com
directory.yaxxa.co.za
secure0029.hubspot.com
webhost1.teksavvy.com
winhost.teksavvy.com
business.teksavvy.com
*.teksavvy.com
*.teksavvy.com
secure0029.hubspot.com
*.teksavvy.com
monitoring.resolu.com.au
secure0036.hubspot.com
monitor.business.teksavvy.com
help.mitipi.com
*.teksavvy.com
secure0036.hubspot.com
*.teksavvy.com
secure0036.hubspot.com
*.teksavvy.com
*.teksavvy.com
secure0029.hubspot.com
*.teksavvy.com
*.teksavvy.com
*.teksavvy.com
support.cbont.com
*.teksavvy.com
secure0029.hubspot.com
24x7.ifxnetworks.com
*.teksavvy.com
business.teksavvy.com
teksavvy.staging.teksavvy.com
*.teksavvy.com
promos.teksavvy.com
secure0036.hubspot.com
webhost4.teksavvy.com
*.teksavvy.com
fthefineprint.teksavvy.com
fibre.teksavvy.com
*.teksavvy.com
webhost5.teksavvy.com
webhost1.teksavvy.com
*.teksavvy.com
*.teksavvy.com
blogs.teksavvy.com
secure0029.hubspot.com
*.teksavvy.com
24x7.ifxnetworks.com
webhost7.teksavvy.com
secure0036.hubspot.com
secure0036.hubspot.com
*.teksavvy.com
*.teksavvy.com
secure0036.hubspot.com
*.teksavvy.com
*.teksavvy.com
policy.teksavvy.com
webhost7.teksavvy.com
www.teksavvy.com
secure0011.hubspot.com
Certificate
The complete raw certificate details for winhost.teksavvy.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIQCt+bv+CjER35aHG5NvFCKjANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRUaGF3dGUgVExTIFJTQSBDQSBHMTAe Fw0yMzA5MTkwMDAwMDBaFw0yNDEwMTkyMzU5NTlaMB8xHTAbBgNVBAMTFHdpbmhv c3QudGVrc2F2dnkuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA qGMy7T2hIVl07oHTiVPQf8d5KKCsRs3kqd3qAB8Go4zCG9bzXms+RMsoDVUNKxCX nu6V671CGl6fuMNO2v64ndOiCFcscrjN4eraKL8Efowrj2oEoggkJjF28LscrONl tGi4QdVoNXAcXr0u9t0MxZol3sKRdT1NHQvPtrHezSIEMo/l+LemgQFKUWWaLIU5 PkpXuPoHQB93vKIhorQJ/lr+dp9JIqYNxYI5yXoKFKV5jc9isFagRszIlTsgFG5Z 1oIhK3rd1nWpeovNg0WWpL683uhhuIHfCjGyhCOzPboDdnkh7R9TpK7iYfPOkg+3 tgTmQxM/R600f/w0k79xW+Qk0XjwUMgvUOdzVPuRFIe2JyMfHmzX5RthEIvG85ar edcvquJ5npgTXKkJmN65Zxnffd00qvGq1yU+yr1PGwlItKG0AJNIuGNxhnRy1Of9 tyCq6C97Wl/Gh7Cdu+qeD2tddjL3V+p2UKAqQJLMb4cspuOowdMdZV9CI96L2ajA DJxbYGbTzY/ln8yaAGhp+216wBlnSQEiZrx5xSnjS3itLZSCMxZMs0mzvYuKoNsQ KHD0OIAhLi8Z11a8niZepNPTR3k2Rsk1uP/X5cFORj3kfWzxWeI3A4nh3Opic6k1 vam05WBLloNZJgzMU/YmwqX7Px886fP9sNdOfYZ1ceUCAwEAAaOCAxEwggMNMB8G A1UdIwQYMBaAFKWM/jLM6w8s1BnGCLgAJIhdw8W3MB0GA1UdDgQWBBRFhHuzYDqm E/8YwvmcG9AiPq68JjAfBgNVHREEGDAWghR3aW5ob3N0LnRla3NhdnZ5LmNvbTA+ BgNVHSAENzA1MDMGBmeBDAECATApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRp Z2ljZXJ0LmNvbS9DUFMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF BwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY2RwLnRoYXd0 ZS5jb20vVGhhd3RlVExTUlNBQ0FHMS5jcmwwcAYIKwYBBQUHAQEEZDBiMCQGCCsG AQUFBzABhhhodHRwOi8vc3RhdHVzLnRoYXd0ZS5jb20wOgYIKwYBBQUHMAKGLmh0 dHA6Ly9jYWNlcnRzLnRoYXd0ZS5jb20vVGhhd3RlVExTUlNBQ0FHMS5jcnQwDAYD VR0TAQH/BAIwADCCAXwGCisGAQQB1nkCBAIEggFsBIIBaAFmAHUA7s3QZNXbGs7F XLedtM0TojKHRny87N7DUUhZRnEftZsAAAGKrTMjzwAABAMARjBEAiBR8OWCeshS f/2lVTEnnPSQlxyumerjzToVfLaLQDzZzgIgKz3j9gfaEYDwgqD1es4Cj7kRXXBZ GmK+Sc1f/lBWHWwAdgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAA AYqtMyQYAAAEAwBHMEUCIQD9jLlw4/zFlGPS86VgnY5CiG19hBSDHO26SM+kw0Gs QAIgP3x6kR0N1Bs6fgymUczQDa55/CdM944Ampku+WSGTCkAdQDatr9rP7W2Ip+b wrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYqtMyPhAAAEAwBGMEQCIDWX6XkPhGnX LpUKnvYFNdujvUDUjW4RoxE2iWGoywbWAiBMJPWxnwfMZu7pc9pV5W1gu+4ccBKH wWJDaOHv9xe62TANBgkqhkiG9w0BAQsFAAOCAQEAvuw4Z40T3xvpYqQfr/20FrLS APjoVyAt+Sn4710y/EIq/eSt20jc+FCkFRcmpl3xctNpSvgvysh7lzKWzHrjtOfE vBEiXjiSvygNLArqm5a1nYNiQcJqYz3cC8wbwrpbXb8+87S6qkVNG+IL7+L8A245 2g1Qn62qj40g9hwxBZtI43YNbmssoS+qtOhXTV3Cj35IZ60w40D8qiAzU6qoXH2+ lat+Z40bXvRxc4pTu4Jzg0iTN+QQY16zqqt+8OXwcIBTP2jUVPEbX6f1+Ph/32Ux 8Yic9FWqSM+GcS7lYRRo0oRoBM/7Bfw96/M3E19SQgGsp5qylo/Nwtry/mRSlQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqGMy7T2hIVl07oHTiVPQ f8d5KKCsRs3kqd3qAB8Go4zCG9bzXms+RMsoDVUNKxCXnu6V671CGl6fuMNO2v64 ndOiCFcscrjN4eraKL8Efowrj2oEoggkJjF28LscrONltGi4QdVoNXAcXr0u9t0M xZol3sKRdT1NHQvPtrHezSIEMo/l+LemgQFKUWWaLIU5PkpXuPoHQB93vKIhorQJ /lr+dp9JIqYNxYI5yXoKFKV5jc9isFagRszIlTsgFG5Z1oIhK3rd1nWpeovNg0WW pL683uhhuIHfCjGyhCOzPboDdnkh7R9TpK7iYfPOkg+3tgTmQxM/R600f/w0k79x W+Qk0XjwUMgvUOdzVPuRFIe2JyMfHmzX5RthEIvG85aredcvquJ5npgTXKkJmN65 Zxnffd00qvGq1yU+yr1PGwlItKG0AJNIuGNxhnRy1Of9tyCq6C97Wl/Gh7Cdu+qe D2tddjL3V+p2UKAqQJLMb4cspuOowdMdZV9CI96L2ajADJxbYGbTzY/ln8yaAGhp +216wBlnSQEiZrx5xSnjS3itLZSCMxZMs0mzvYuKoNsQKHD0OIAhLi8Z11a8niZe pNPTR3k2Rsk1uP/X5cFORj3kfWzxWeI3A4nh3Opic6k1vam05WBLloNZJgzMU/Ym wqX7Px886fP9sNdOfYZ1ceUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 14453321132891809465340569699763700266 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-19 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-19 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'winhost.teksavvy.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 686961048492044196248019417247631118056599558992672649094409308179918466498983446779906896800399809938527190618831115778703579322969449930073493072513961999175257471176604913811140061547116968631134992911161835986213150762878920275917781787154286815575764168965277449431337597547541996598271987974955282973066010453976988938499948630998354495987306041972152551638124690212933709674038597235383810726182891604011376659910198968799517881325003421308712010613210861433865992102375100765160857060668335211478800842334195570860368744753237033001337365398873535655438653343637423942374428214377743468460735336233121135092305718052304821511665839262340231361199795041151136454809867165650057193893632537879093475712013985104850044159937599193241125553341549288903961456427592856254282388150678515578376143118593489459481952643076897132639225713272473897491667436722726051328728843901933670096322845355399548049573688958467013158586889246227389112474521738179839825913327803956643915278019703569831160181766833314507090120417197462543036185149463424062944279350960312647965115418358231606964407267052616270646119689545181775756735934460533784306103728090613755310341650861779784615649442337533524102534924019689251829972356733556986769404389 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 45847bb3603aa613ff18c2f99c1bd0223eaebc26 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winhost.teksavvy.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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