*.engenoil.com
- Engen Petroleum Limited -
Issued by Thawte SSL CA
About this certificate
This digital certificate with serial number 71:4e:50:9a:42:70:3d:5a:b2:f0:1c:83:d1:d2:bd:51 was issued on by Thawte, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Engen Petroleum Limited
Organization:
Engen Petroleum Limited
Organization unit: MCC
Organization unit: MCC
State / Province:
Western Cape
Locality: Cape Town
Country: ZA
Locality: Cape Town
Country: ZA
Thawte, Inc.
Organization:
Thawte, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 71:4e:50:9a:42:70:3d:5a:b2:f0:1c:83:d1:d2:bd:51Serial Number (int): 150609397493128229600959353482497932625
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: a7:a2:83:bb:34:45:40:3d:fc:d5:30:4f:12:b9:3e:a1:01:9f:f6:db
Fingerprint (sha1): 39:a5:dc:49:b0:67:4d:8f:01:15:61:08:fd:22:9f:ba:1c:67:ea:f8
Fingerprint (sha256): 18:77:5a:d3:10:19:15:7e:8b:80:a1:a1:9a:4f:74:b7:b6:81:d3:21:f3:cc:b7:e9:c2:a5:1d:da:4f:46:42:4c
Issuing Certificate URL: http://svr-ov-aia.thawte.com/ThawteOV.cer
Revocation information
OCSP Server: http://ocsp.thawte.comCRL Distribution Point: http://svr-ov-crl.thawte.com/ThawteOV.crl
Check the revocation status for certificate *.engenoil.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.engenoil.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.engenoil.com
Other certificates including the domain name engenoil.com
(limited to 100 certificates)
*.engenoil.com
connect.engenoil.com
*.engenoil.com
sip.engenoil.com
sip.engenoil.com
careers.engenoil.com
MessageBrokerqa.engenoil.com
*.engenoil.com
Mobile.engenoil.com
ACWC.engenoil.com
Mobile.engenoil.com
careers.engenoil.com
*.engenoil.com
*.engenoil.com
*.engenoil.com
sip.engenoil.com
sip.engenoil.com
login.identity.engenoil.com
boardpad.engenoil.com
secure.engenoil.com
Mobile.engenoil.com
connect.engenoil.com
1card.engenoil.com
esbprod.engenoil.com
sts.engenoil.com
rms.engenoil.com
Mobile.engenoil.com
sfbweb-ext.engenoil.com
esbqa.engenoil.com
sip.engenoil.com
Mobile.engenoil.com
sfbweb-ext.engenoil.com
Mobile.engenoil.com
mobile.engenoil.com
wac.engenoil.com
sip.engenoil.com
sip.engenoil.com
sts.engenoil.com
sip.engenoil.com
careers.engenoil.com
*.engenoil.com
Mobile.engenoil.com
*.engenoil.com
*.engenoil.com
*.engenoil.com
sfbweb-ext.engenoil.com
sfbweb-ext.engenoil.com
MessageBrokerprod.engenoil.com
rp.engenoil.com
*.engenoil.com
*.engenoil.com
Mobile.engenoil.com
sip.engenoil.com
sts.engenoil.com
secure.engenoil.com
MessageBrokerprod.engenoil.com
MessageBrokerQA.engenoil.com
sip.engenoil.com
wac.engenoil.com
esbdev.engenoil.com
sip.engenoil.com
*.engenoil.com
web-ext.engenoil.com
connect.engenoil.com
*.engenoil.com
sip.engenoil.com
sip.engenoil.com
careers.engenoil.com
MessageBrokerqa.engenoil.com
*.engenoil.com
Mobile.engenoil.com
ACWC.engenoil.com
Mobile.engenoil.com
careers.engenoil.com
*.engenoil.com
*.engenoil.com
*.engenoil.com
sip.engenoil.com
sip.engenoil.com
login.identity.engenoil.com
boardpad.engenoil.com
secure.engenoil.com
Mobile.engenoil.com
connect.engenoil.com
1card.engenoil.com
esbprod.engenoil.com
sts.engenoil.com
rms.engenoil.com
Mobile.engenoil.com
sfbweb-ext.engenoil.com
esbqa.engenoil.com
sip.engenoil.com
Mobile.engenoil.com
sfbweb-ext.engenoil.com
Mobile.engenoil.com
mobile.engenoil.com
wac.engenoil.com
sip.engenoil.com
sip.engenoil.com
sts.engenoil.com
sip.engenoil.com
careers.engenoil.com
*.engenoil.com
Mobile.engenoil.com
*.engenoil.com
*.engenoil.com
*.engenoil.com
sfbweb-ext.engenoil.com
sfbweb-ext.engenoil.com
MessageBrokerprod.engenoil.com
rp.engenoil.com
*.engenoil.com
*.engenoil.com
Mobile.engenoil.com
sip.engenoil.com
sts.engenoil.com
secure.engenoil.com
MessageBrokerprod.engenoil.com
MessageBrokerQA.engenoil.com
sip.engenoil.com
wac.engenoil.com
esbdev.engenoil.com
sip.engenoil.com
*.engenoil.com
web-ext.engenoil.com
Certificate
The complete raw certificate details for *.engenoil.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIErzCCA5egAwIBAgIQcU5QmkJwPVqy8ByD0dK9UTANBgkqhkiG9w0BAQUFADA8 MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMVGhhd3RlLCBJbmMuMRYwFAYDVQQDEw1U aGF3dGUgU1NMIENBMB4XDTE0MDEyMTAwMDAwMFoXDTE1MDEyMTIzNTk1OVowgYEx CzAJBgNVBAYTAlpBMRUwEwYDVQQIEwxXZXN0ZXJuIENhcGUxEjAQBgNVBAcUCUNh cGUgVG93bjEgMB4GA1UEChQXRW5nZW4gUGV0cm9sZXVtIExpbWl0ZWQxDDAKBgNV BAsUA01DQzEXMBUGA1UEAxQOKi5lbmdlbm9pbC5jb20wggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQC0VmsrvFBDOg6tcPGMqCRu055YozPiiMGknRfk9YKl ICFWVZBetYuU+5g5qfxPHNIzmi7FyJBcEo1LVbmmo35CjRDsvmHrlu3UTXKEL50k PqfO6c+YBGrQmJuZNAJkYhNex+mxlAp43EKhWvrv+t/WbbrlVNWwzeDlzfyiu5Xn bIuzEK1QXWGVSAQlog5aFt68DKLKpu2lot9De3XQphSpaNDcUWcuIOK9QRwepCkA 2HDTPwis6+QHuPC5T1405dQx7EYVCybfjsWodAxQ0GXTgCpiMffC/Nqo0KlpWm2/ twKbcvUHrRmggGBqplQhmNWFAHVoq6bZ9qOUGg/03VwdAgMBAAGjggFlMIIBYTAZ BgNVHREEEjAQgg4qLmVuZ2Vub2lsLmNvbTAJBgNVHRMEAjAAMEIGA1UdIAQ7MDkw NwYKYIZIAYb4RQEHNjApMCcGCCsGAQUFBwIBFhtodHRwczovL3d3dy50aGF3dGUu Y29tL2Nwcy8wDgYDVR0PAQH/BAQDAgWgMB8GA1UdIwQYMBaAFKeig7s0RUA9/NUw TxK5PqEBn/bbMDoGA1UdHwQzMDEwL6AtoCuGKWh0dHA6Ly9zdnItb3YtY3JsLnRo YXd0ZS5jb20vVGhhd3RlT1YuY3JsMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjBpBggrBgEFBQcBAQRdMFswIgYIKwYBBQUHMAGGFmh0dHA6Ly9vY3NwLnRo YXd0ZS5jb20wNQYIKwYBBQUHMAKGKWh0dHA6Ly9zdnItb3YtYWlhLnRoYXd0ZS5j b20vVGhhd3RlT1YuY2VyMA0GCSqGSIb3DQEBBQUAA4IBAQAQVgtOTfa0yPr6W7s1 E4APCJWUR2bRws1buWx+Hd/Az8IoRpAevggv4SSG84Ze5GhxyCUk1T8ElBZkfEHs 9MnMnegGOzJSBvaMiw0EVQNlgYkOhKI+7vkyCsjQXxDzyYTjETB6L+1nTsYErH5L 90T4FF/2RhvZ6njmw0ug1CtcApMhjRHTBHY5zf5A9BpmLNxVUp2a0UaGOvzzLBLO dsf7vRQFRx+Oomn110Ek8NNEtGxk6br6t+q9PXxyt1wLM9xNIoTAYP27DAe/zwKW mjtiP9BfB4GYdQUnAtmunaF9ud8f1dqzSiaAMn4k+40YLrnrivM9tehct44HKAlv SFIJ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFZrK7xQQzoOrXDxjKgk btOeWKMz4ojBpJ0X5PWCpSAhVlWQXrWLlPuYOan8TxzSM5ouxciQXBKNS1W5pqN+ Qo0Q7L5h65bt1E1yhC+dJD6nzunPmARq0JibmTQCZGITXsfpsZQKeNxCoVr67/rf 1m265VTVsM3g5c38oruV52yLsxCtUF1hlUgEJaIOWhbevAyiyqbtpaLfQ3t10KYU qWjQ3FFnLiDivUEcHqQpANhw0z8IrOvkB7jwuU9eNOXUMexGFQsm347FqHQMUNBl 04AqYjH3wvzaqNCpaVptv7cCm3L1B60ZoIBgaqZUIZjVhQB1aKum2fajlBoP9N1c HQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 150609397493128229600959353482497932625 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-01-21 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-21 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Western Cape' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Cape Town' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Engen Petroleum Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'MCC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.engenoil.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22765509511621144944495078524145381768489913349448903713003501695163795310424603598062998606244160186342207957634064483987378166000671462612968159558848903999169779588191616019876136498070874239781940220555321522863455947515884823426461010401993410167410380998197742488010542265146561510228861486091797149314513515575445800364445731787710470807849685552887477834971382035894118749836049233787581174822165321347421203519353894996781283925420631932130753895744451119048667285226965511428308585698051550886823758987683508389714917280462518021504507944511468942808694363037307612942111129780217833290964548812264972311581 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.engenoil.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a7a283bb3445403dfcd5304f12b93ea1019ff6db . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-crl.thawte.com/ThawteOV.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-aia.thawte.com/ThawteOV.cer' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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