*.caser.es

- Caja de Seguros Reunidos Compania de Seguros y Reaseguros S.A -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 03:d4:57:1d:54:fd:73:48:79:d0:42:d7:ca:d4:ec:ce was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Caja de Seguros Reunidos Compania de Seguros y Reaseguros S.A

Organization: Caja de Seguros Reunidos Compania de Seguros y Reaseguros S.A
State / Province: MADRID
Locality: MADRID
Country: ES

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d4:57:1d:54:fd:73:48:79:d0:42:d7:ca:d4:ec:ce
Serial Number (int): 5090217814919505151396739464975150286
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: bc:a4:15:6b:27:87:fb:42:0d:d3:7f:02:a2:e1:b9:b9:92:bd:fd:25
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 60:9b:a9:72:f5:1c:7f:8e:09:46:ae:3b:e2:03:f3:ed:ea:81:31:8f
Fingerprint (sha256): 18:36:24:72:d0:54:9e:de:74:20:93:2e:de:81:37:20:f8:5f:2a:36:34:ed:98:f8:7c:53:fe:d7:ab:75:68:15

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate *.caser.es

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.caser.es

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.caser.es
caser.es

Other certificates including the domain name caser.es

(limited to 100 certificates)
cyberplus.allianz.es
cyberplus.allianz.es
ahorrobot.caser.es
incapsula.com
cajacantabria.segurosdesalud.caser.es
incapsula.com
incapsula.com
www.caser.es
image.em.shopmo.com
*.caser.es
incapsula.com
san-3-s11.tlsprovisioning.exacttarget.com
imperva.com
magazine.caser.es
cyberplus.allianz.es
laventanadigitalbancaseguros.caser.es
wm.caser.es
www.appduplex.com
imperva.com
ayudadigital.caser.es
incapsula.com
*.caser.es
alpha.nwzer.com
incubadora.caser.es
www.caser.es
incapsula.com
image.em.shopmo.com
CASER.ES
*.caser.es
imperva.com
lanzadera.caser.es
wmseg.caser.es
incapsula.com
incapsula.com
incapsula.com
agentesycorredores.caser.es
cyberplus.allianz.es
www.pcset.hashito.biz
incapsula.com
*.segurosdesalud.caser.es
image.em.shopmo.com
incapsula.com
imperva.com
ssl.caser.es
incapsula.com
incapsula.com
incubadora.caser.es
ssl.caser.es
*.caser.es
incapsula.com
misalud.caser.es
ssl.caser.es
image.em.shopmo.com
cyberplus.allianz.es
imperva.com
laventanadigitalbancaseguros.caser.es
incapsula.com
cyberplus.allianz.es
laventanadigitalbancaseguros.caser.es
ahorrobot.caser.es
webcolaboradores.caser.es
wm.caser.es
laventanadigitalbancaseguros.caser.es
smtcajach.caser.es
incubadora.caser.es
incapsula.com
cbuscodeandcoffee.com
cyberplus.allianz.es
wmi18n.caser.es
unfoldingstories.app
cyberplus.allianz.es
www.caser.es
agentesycorredores.caser.es
image.em.shopmo.com
image.em.shopmo.com
incapsula.com
image.em.shopmo.com
www.caser.es
cyberplus.allianz.es
incapsula.com
cyberplus.allianz.es
cyberplus.allianz.es
bitacora-sherlock.caser.es
incapsula.com
incapsula.com
cyberplus.allianz.es
incapsula.com
smetrics.caser.es
san-3-s11.tlsprovisioning.exacttarget.com
ssl.caser.es
wm.caser.es
wmseg.caser.es
incapsula.com
incapsula.com
image.em.shopmo.com
agentesycorredores.caser.es
incapsula.com
*.caser.es
laventanadigitalbancaseguros.caser.es
gobiernocorporativo.caser.es

Certificate

The complete raw certificate details for *.caser.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGlTCCBX2gAwIBAgIQA9RXHVT9c0h50ELXytTszjANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMRswGQYDVQQDExJUaGF3dGUgUlNBIENBIDIwMTgwHhcN
MjAwNjE3MDAwMDAwWhcNMjIwOTAxMTIwMDAwWjCBjDELMAkGA1UEBhMCRVMxDzAN
BgNVBAgTBk1BRFJJRDEPMA0GA1UEBxMGTUFEUklEMUYwRAYDVQQKEz1DYWphIGRl
IFNlZ3Vyb3MgUmV1bmlkb3MgQ29tcGFuaWEgZGUgU2VndXJvcyB5IFJlYXNlZ3Vy
b3MgUy5BMRMwEQYDVQQDDAoqLmNhc2VyLmVzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAv9MsnpqoAYt4HeybIGTCnT3gtaow7wItWQScXpHezyd3tgQR
uYYcLMx9J3+Jx762kIaPF3MhuQ+nBW2qdYR7Y5DQv6wFmN8bTcJabyekxc+Lj6jc
lv47elDpoeMEvA8AY07AWxqfhP0zuUc7RtRrA5oG65KNf0fOwaGrX+uWPrYfjxDn
5PxA12o8hooTKZR6LWM+mHZqK3ay2x0fERwIuroTz3q7BrYizbINjewbKMq5mUsS
zfJIBpKjIqAniIcZg1qriU6ioxZ/4GlSqmADuc8OUzQfMGsM1B/bqFOE+rmz5p6x
AOM5MTNjG2Suv4UTiHx06ceSST2J/SxY4A8tGQIDAQABo4IDIDCCAxwwHwYDVR0j
BBgwFoAUo8heZVTlMHjBBeoHCmpZzLn+3lowHQYDVR0OBBYEFLykFWsnh/tCDdN/
AqLhubmSvf0lMB8GA1UdEQQYMBaCCiouY2FzZXIuZXOCCGNhc2VyLmVzMA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOgYDVR0f
BDMwMTAvoC2gK4YpaHR0cDovL2NkcC50aGF3dGUuY29tL1RoYXd0ZVJTQUNBMjAx
OC5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0
cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIwbwYIKwYBBQUHAQEE
YzBhMCQGCCsGAQUFBzABhhhodHRwOi8vc3RhdHVzLnRoYXd0ZS5jb20wOQYIKwYB
BQUHMAKGLWh0dHA6Ly9jYWNlcnRzLnRoYXd0ZS5jb20vVGhhd3RlUlNBQ0EyMDE4
LmNydDAMBgNVHRMBAf8EAjAAMIIBfwYKKwYBBAHWeQIEAgSCAW8EggFrAWkAdgAp
eb7wnjk5IfBWc59jpXflvld9nGAK+PlNXSZcJV3HhAAAAXLBffTnAAAEAwBHMEUC
IQCEZZNEx0Z9EibH2JOGMOPw8lrHoLn+CjI5WUmXl6soSgIgNwVPFGYwFGTjOegg
c9QzFmNE6YTuJK1djDQU1p4y1QoAdwBByMqx3yJGShDGoToJQodeTjGLGwPr60vH
aPCQYpYG9gAAAXLBffSkAAAEAwBIMEYCIQDadMlIasmnlxNppgUgpUcJ433Cqgop
ptbPHmOR2hPHRAIhANF06vg3I610+EFc0acYqru6gJKzR8ss/S/yRnVIFJyUAHYA
RqVV63X6kSAwtaKJafTzfREsQXS+/Um4havy/HD+bUcAAAFywX31OgAABAMARzBF
AiAxYwyr6IdXiLWr6V7J8nJunJmeG50sFu8GqyWJJIsZDwIhANCG6vZKXE7Wt0yS
h0zqQ3DebXsfAjUCqRu7cg03wmbfMA0GCSqGSIb3DQEBCwUAA4IBAQCyb74xmMz5
WM+5lM3d28LlE+3Z4MCpQAbs8KUB4zj94Ozg1UWDgm3avf8GsnCcbvl1i5GbmwBt
ykrUnSlGeY3W07+oIOzorYkKvjdIMwyYwKidtPMD6PaVo4KgxxSyRLlzOI0yLyFs
YVu1wOcpM6eZJPLLQrDw05VYlxjAI1HwiCEq0USFj1LFnJW2owVAcVhPqa9YC6as
YNLkp/9Yz8SNY6kfolzZkXT9p5XyQqXAFRWTc0+Li7elCgFBfDC868tt8UbG4znI
UL9hzIbkDFH4nvPSvpczgw5yOhKT2ybosLi1/U0+EeAKfIvHii9WGAjtniPlPKNP
cskupelxpwRA
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9MsnpqoAYt4HeybIGTC
nT3gtaow7wItWQScXpHezyd3tgQRuYYcLMx9J3+Jx762kIaPF3MhuQ+nBW2qdYR7
Y5DQv6wFmN8bTcJabyekxc+Lj6jclv47elDpoeMEvA8AY07AWxqfhP0zuUc7RtRr
A5oG65KNf0fOwaGrX+uWPrYfjxDn5PxA12o8hooTKZR6LWM+mHZqK3ay2x0fERwI
uroTz3q7BrYizbINjewbKMq5mUsSzfJIBpKjIqAniIcZg1qriU6ioxZ/4GlSqmAD
uc8OUzQfMGsM1B/bqFOE+rmz5p6xAOM5MTNjG2Suv4UTiHx06ceSST2J/SxY4A8t
GQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5090217814919505151396739464975150286
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-01 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MADRID'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MADRID'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Caja de Seguros Reunidos Compania de Seguros y Reaseguros S.A'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.caser.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24215650174558985227622722576890099290212774932246983493678221212902293916831198417185199237253711622014656240172595803877411932141731560645558667072228185425759479969656937420613605862538533411283511517053926115635857618869438649941913222988996158089663584183017428220304237386971456899606650342371503840319330412080162244505584397181291931984785331250940737735572194308569158820585347667086881548414587839136626657571486126475611334614009093766175873913469066029753535923577558236421746295813886633655138439586637332797809282437339452174506838718669501006769619061087251739052606666978429754665411536511278733274393
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bca4156b2787fb420dd37f02a2e1b9b992bdfd25
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caser.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caser.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							01690076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc78400000172c17df4e7000004030047304502210084659344c7467d1226c7d8938630e3f0f25ac7a0b9fe0a323959499797ab284a022037054f1466301464e339e82073d433166344e984ee24ad5d8c3414d69e32d50a00770041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f600000172c17df4a40000040300483046022100da74c9486ac9a7971369a60520a54709e37dc2aa0a29a6d6cf1e6391da13c744022100d174eaf83723ad74f8415cd1a718aabbba8092b347cb2cfd2ff2467548149c9400760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d4700000172c17df53a0000040300473045022031630cabe8875788b5abe95ec9f2726e9c999e1b9d2c16ef06ab2589248b190f022100d086eaf64a5c4ed6b74c92874cea4370de6d7b1f023502a91bbb720d37c266df
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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