*.tjmedia.co.kr
- tjmedia Co.,ltd -
Issued by Thawte RSA CA 2018
About this certificate
This digital certificate with serial number 0b:25:85:c0:78:7e:1b:5d:bb:a2:52:f9:22:c7:0c:0a was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
tjmedia Co.,ltd
Organization:
tjmedia Co.,ltd
State / Province:
Seoul
Locality: Gangseo-gu
Country: KR
Locality: Gangseo-gu
Country: KR
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0b:25:85:c0:78:7e:1b:5d:bb:a2:52:f9:22:c7:0c:0aSerial Number (int): 14816335746975006699912257091823668234
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: c5:32:f2:33:3e:6c:b1:79:7c:38:9e:f3:fc:58:c6:7b:91:5e:41:1e
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a
Fingerprint (sha1): c9:cc:f2:53:2a:2c:b7:f6:2d:a1:d5:f7:08:49:9a:56:5c:04:85:55
Fingerprint (sha256): 15:e9:a7:fc:0f:6a:f6:ed:df:41:ed:68:c4:25:49:d0:67:09:1e:29:00:27:1f:5a:97:7f:37:df:db:fa:24:4a
Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt
Revocation information
OCSP Server: http://status.thawte.comCRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl
Check the revocation status for certificate *.tjmedia.co.kr
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.tjmedia.co.kr
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.tjmedia.co.kr
tjmedia.co.kr
tjmedia.co.kr
Other certificates including the domain name tjmedia.co.kr
(limited to 100 certificates)
*.tjmedia.co.kr
*.tjmedia.co.kr
*.tjmedia.co.kr
*.tjmedia.co.kr
*.tjmedia.co.kr
*.tjmedia.co.kr
*.tjmedia.co.kr
*.tjmedia.co.kr
*.tjmedia.co.kr
*.tjmedia.co.kr
*.tjmedia.co.kr
*.tjmedia.co.kr
*.tjmedia.co.kr
*.tjmedia.co.kr
*.tjmedia.co.kr
*.tjmedia.co.kr
*.tjmedia.co.kr
*.tjmedia.co.kr
*.tjmedia.co.kr
*.tjmedia.co.kr
*.tjmedia.co.kr
*.tjmedia.co.kr
*.tjmedia.co.kr
*.tjmedia.co.kr
*.tjmedia.co.kr
*.tjmedia.co.kr
*.tjmedia.co.kr
*.tjmedia.co.kr
*.tjmedia.co.kr
*.tjmedia.co.kr
*.tjmedia.co.kr
*.tjmedia.co.kr
*.tjmedia.co.kr
*.tjmedia.co.kr
*.tjmedia.co.kr
*.tjmedia.co.kr
*.tjmedia.co.kr
*.tjmedia.co.kr
*.tjmedia.co.kr
*.tjmedia.co.kr
*.tjmedia.co.kr
*.tjmedia.co.kr
*.tjmedia.co.kr
*.tjmedia.co.kr
*.tjmedia.co.kr
*.tjmedia.co.kr
*.tjmedia.co.kr
*.tjmedia.co.kr
*.tjmedia.co.kr
Certificate
The complete raw certificate details for *.tjmedia.co.kr in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGdjCCBV6gAwIBAgIQCyWFwHh+G127olL5IscMCjANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMRswGQYDVQQDExJUaGF3dGUgUlNBIENBIDIwMTgwHhcN MTkxMTAxMDAwMDAwWhcNMjExMDMxMTIwMDAwWjBmMQswCQYDVQQGEwJLUjEOMAwG A1UECBMFU2VvdWwxEzARBgNVBAcTCkdhbmdzZW8tZ3UxGDAWBgNVBAoTD3RqbWVk aWEgQ28uLGx0ZDEYMBYGA1UEAwwPKi50am1lZGlhLmNvLmtyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZOXm3VgANP5rvjw60WxBTk7KDFt4SYAQUPT 2hKbGsxIolgsq8o3JpIjc8+zayHEjCK4KIpHpeC3pClxHyOb4EvXJmsuflIVvddH 3gQlzG3tiD7aqVIoL69Thk0krt7RpwifyKvf6ofWYXa1SJ0GCKtjY+LjReHAmhg4 ApFguhHIQjomZSj1aDovEPMT+UTGuz9/AXRlH9LYWKTB+nmo5dujmtLrl61ZgSkq AvQx+vsUm2NChtrGNFNgS+Bef+0RMvrlw8ba3ivRukpWEiKpGCeuB7LIx+a5BYOn aaSW0h1C0FWozlyaEk8rjtvsdE3G7GRIbdl31O9/WUft5HI+lQIDAQABo4IDKDCC AyQwHwYDVR0jBBgwFoAUo8heZVTlMHjBBeoHCmpZzLn+3lowHQYDVR0OBBYEFMUy 8jM+bLF5fDie8/xYxnuRXkEeMCkGA1UdEQQiMCCCDyoudGptZWRpYS5jby5rcoIN dGptZWRpYS5jby5rcjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH AwEGCCsGAQUFBwMCMDoGA1UdHwQzMDEwL6AtoCuGKWh0dHA6Ly9jZHAudGhhd3Rl LmNvbS9UaGF3dGVSU0FDQTIwMTguY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAEB MCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYG Z4EMAQICMG8GCCsGAQUFBwEBBGMwYTAkBggrBgEFBQcwAYYYaHR0cDovL3N0YXR1 cy50aGF3dGUuY29tMDkGCCsGAQUFBzAChi1odHRwOi8vY2FjZXJ0cy50aGF3dGUu Y29tL1RoYXd0ZVJTQUNBMjAxOC5jcnQwCQYDVR0TBAIwADCCAYAGCisGAQQB1nkC BAIEggFwBIIBbAFqAHcApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAA AAFuJSiy1AAABAMASDBGAiEAvVdOkD0nuqRFAH2QVdhd1AHL6GHRXobQDLeVvPX9 TtwCIQCvG50DEOdZidruQ2ngb27bBljc6VhLYbGigXRrKBbo6AB3AESUZS6w7s6v xEAH2Kj+KMDa5oK+2MsxtT/TM5a1toGoAAABbiUoslAAAAQDAEgwRgIhAKNRrI33 b7SWQVFiHrtMZzdHlICHqff39wvtCT82Jiw9AiEAgzwKURxQ0zBpi3y5ncN+zOVX lnU4gjVIUkd/qC7iG6sAdgC72d+8H4pxtZOUI5eqkntHOFeVCqtS6BqQlmQ2jh7R hQAAAW4lKLLbAAAEAwBHMEUCIDPXTRfhJZlitQw5NrfFG8mf6h0eJGDWQ/pp4LfZ ScJQAiEA0OR0Jr1PiYiCZp0GQwtakOucIQ+JngcA0nvd8Pf3DMowDQYJKoZIhvcN AQELBQADggEBABoWqHrb6p6flTeWE1OQDKl2huaVMO78C1BJ1ejA3SVVa/ac2si0 L9RYj80iXt2j9YOy97I2tm5EP9ThyFkc0Rkd4qmAtnOnZYepx+fi4WIX+X+voc/9 jJp0NaPtnfK/OCsYbo9J4MvduoAcRnts3m3toMcGGHXTKOcLjCCua8RD5y632MT3 pgRsjiq7Q1IWaw09nj4aFv+/6Yp9ILt3qIDPUJcMa4Vv3FcLcdvxQc9jiDVi6OM1 BPm1RwXu3TEv/1Nj4Q/JzKdxr0Na/qJYWyoMnwid5LFgNnD1KuO3do5RSCuFNlNt cHfEbYZZVt02gYgKxYcRdavrulQ/1DDmDy0= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZOXm3VgANP5rvjw60Wx BTk7KDFt4SYAQUPT2hKbGsxIolgsq8o3JpIjc8+zayHEjCK4KIpHpeC3pClxHyOb 4EvXJmsuflIVvddH3gQlzG3tiD7aqVIoL69Thk0krt7RpwifyKvf6ofWYXa1SJ0G CKtjY+LjReHAmhg4ApFguhHIQjomZSj1aDovEPMT+UTGuz9/AXRlH9LYWKTB+nmo 5dujmtLrl61ZgSkqAvQx+vsUm2NChtrGNFNgS+Bef+0RMvrlw8ba3ivRukpWEiKp GCeuB7LIx+a5BYOnaaSW0h1C0FWozlyaEk8rjtvsdE3G7GRIbdl31O9/WUft5HI+ lQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 14816335746975006699912257091823668234 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-01 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-31 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Seoul' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gangseo-gu' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tjmedia Co.,ltd' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.tjmedia.co.kr' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23931820072788787152753593770177344605779483439815905259047109284286545527810886192267080952643029503204754327818174758375909344725231779739681336294091414855148598133767444809958458948302692956187597399635396487486965680398557069621470886549988808197015964484333300380141591985480518130711121870892970316200419966618462572701348113834457157245712767381561428102885867978679217365801911696738097896077602380504798017029893466410848553602325622842838896411097998954465015620106971480175183458783659216673440834063809583267237069873768202159680706739260983337959001998644172866697761884482982306872055794266333795991189 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c532f2333e6cb1797c389ef3fc58c67b915e411e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tjmedia.co.kr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tjmedia.co.kr' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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