*.sonnenbatterie.de

- sonnen GmbH -

Issued by thawte SHA256 SSL CA

About this certificate

This digital certificate with serial number 64:75:09:cc:8c:71:fc:79:33:2a:fd:46:e7:fd:64:f7 was issued on by thawte, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

sonnen GmbH

Organization: sonnen GmbH
State / Province: Bayern
Locality: Wildpoldsried
Country: DE

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 64:75:09:cc:8c:71:fc:79:33:2a:fd:46:e7:fd:64:f7
Serial Number (int): 133530497058637450162578975220379247863
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 2b:9a:35:ae:01:18:38:30:e1:70:7a:05:e0:11:76:a3:ce:bd:90:14

Fingerprint (sha1): f6:cc:78:52:4a:e9:c0:08:0f:b6:55:e3:a2:74:a1:19:41:3e:42:e7
Fingerprint (sha256): 19:11:8f:05:eb:54:9b:8c:9c:2a:32:9a:43:19:a6:d8:18:d2:c1:43:5e:9f:d5:84:49:11:c7:b9:b7:b4:c0:b8

Issuing Certificate URL: http://tg.symcb.com/tg.crt

Revocation information

OCSP Server: http://tg.symcd.com
CRL Distribution Point: http://tg.symcb.com/tg.crl

Check the revocation status for certificate *.sonnenbatterie.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.sonnenbatterie.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.sonnenbatterie.de
sonnenbatterie.de

Other certificates including the domain name sonnenbatterie.de

(limited to 100 certificates)
master.preview.mvp.sonnenbatterie.de
owncloud.sonnenbatterie.de
live.sonnenbatterie.de
*.sonnenbatterie.de
finde-meine.sonnenbatterie.de
*.sonnenbatterie.de
solar.sonnenbatterie.de
finde-meine.sonnenbatterie.de
meine.sonnenbatterie.de
wiki.sonnenbatterie.de
my-api.sonnen.de
wiki.sonnenbatterie.de
owncloud.sonnenbatterie.de
go.sonnenbatterie.de
solar.sonnenbatterie.de
meine.sonnenbatterie.de
*.sonnenbatterie.de
wiki.sonnenbatterie.de
*.sonnenbatterie.de
meine.sonnenbatterie.de
go.sonnenbatterie.de
master.preview.mvp.sonnenbatterie.de
live.sonnenbatterie.de
finde-meine.sonnenbatterie.de
www.meine.sonnenbatterie.de
finde-meine.sonnenbatterie.de
finde-meine.sonnenbatterie.de
master.preview.mvp.sonnenbatterie.de
owncloud.sonnenbatterie.de
*.sonnenbatterie.de
master.preview.mvp.sonnenbatterie.de
portal.sonnenbatterie.de
*.sonnenbatterie.de
core-api.sonnenbatterie.de
live.sonnenbatterie.de
core-api.sonnenbatterie.de
my-api.sonnen.de
*.sonnenbatterie.de
master.preview.mvp.sonnenbatterie.de
api.sonnenbatterie.de
live.sonnenbatterie.de
*.sonnenbatterie.de
master.preview.mvp.sonnenbatterie.de
www.meine.sonnenbatterie.de
owncloud.sonnenbatterie.de
ecoflex.rwe.com
meine.sonnenbatterie.de
stromspeicher.sonnenbatterie.de
meine.sonnenbatterie.de
wiki.sonnenbatterie.de
*.sonnenbatterie.de
*.sonnenbatterie.de
live.sonnenbatterie.de
api.sonnenbatterie.de
meine.sonnenbatterie.de
wiki.sonnenbatterie.de
sizing.sonnenbatterie.de
www.meine.sonnenbatterie.de
ecoflex.rwe.com
*.sonnenbatterie.de
wiki.sonnenbatterie.de
finde-meine.sonnenbatterie.de
meine.sonnenbatterie.de
*.sonnenbatterie.de
owncloud.sonnenbatterie.de
*.sonnenbatterie.de
my-api.sonnen.de
wiki.sonnenbatterie.de
*.sonnenbatterie.de
stromspeicher.sonnenbatterie.de
*.sonnenbatterie.de
master.preview.mvp.sonnenbatterie.de
owncloud.sonnenbatterie.de
live.sonnenbatterie.de
finde-meine.sonnenbatterie.de

Certificate

The complete raw certificate details for *.sonnenbatterie.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGuDCCBaCgAwIBAgIQZHUJzIxx/HkzKv1G5/1k9zANBgkqhkiG9w0BAQsFADBD
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMR0wGwYDVQQDExR0
aGF3dGUgU0hBMjU2IFNTTCBDQTAeFw0xNzEwMDkwMDAwMDBaFw0yMDEwMDgyMzU5
NTlaMGoxCzAJBgNVBAYTAkRFMQ8wDQYDVQQIDAZCYXllcm4xFjAUBgNVBAcMDVdp
bGRwb2xkc3JpZWQxFDASBgNVBAoMC3Nvbm5lbiBHbWJIMRwwGgYDVQQDDBMqLnNv
bm5lbmJhdHRlcmllLmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
mmUfOsEw9AeKWB+oTQYXAR4Rw0TldM0KHYMY/Z0iBiu/SoVvWdjpo23onsZJ8PgT
AD7BbGfu5RQC9FbvUAmByC/P3yuUH01YNmRKpRsGj3bRQPRqM6uUeEhaTkOAu746
ot02hUbwFCGjGGA/gD1pJktfylqaOdFXLXf0EXxqxRnXZGRjiz2RiwqXko0isomn
8NF7nwt0hUFWmSWBeZwU63XJ87kXTuwGX+LpQW/X/aGOhFEQwWcC+Hj53twpM9zp
FlJuOuF+d52CLxegy/bqrhNT3g/J+QUuvtQuVfQHKELGkm1VfPpsuqz0tix7ECZZ
NTNGpvsY5cT6hZK90PAwXQIDAQABo4IDfzCCA3swMQYDVR0RBCowKIITKi5zb25u
ZW5iYXR0ZXJpZS5kZYIRc29ubmVuYmF0dGVyaWUuZGUwCQYDVR0TBAIwADBuBgNV
HSAEZzBlMGMGBmeBDAECAjBZMCYGCCsGAQUFBwIBFhpodHRwczovL3d3dy50aGF3
dGUuY29tL2NwczAvBggrBgEFBQcCAjAjDCFodHRwczovL3d3dy50aGF3dGUuY29t
L3JlcG9zaXRvcnkwDgYDVR0PAQH/BAQDAgWgMB8GA1UdIwQYMBaAFCuaNa4BGDgw
4XB6BeARdqPOvZAUMCsGA1UdHwQkMCIwIKAeoByGGmh0dHA6Ly90Zy5zeW1jYi5j
b20vdGcuY3JsMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBXBggrBgEF
BQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly90Zy5zeW1jZC5jb20wJgYIKwYB
BQUHMAKGGmh0dHA6Ly90Zy5zeW1jYi5jb20vdGcuY3J0MIIB8wYKKwYBBAHWeQIE
AgSCAeMEggHfAd0AdQDd6x0reg1PpiCLga2BaHB+Lo6dAdVciI09EcTNtuy+zAAA
AV8AWNM1AAAEAwBGMEQCIDyEjg9mSIlsQyEkwxG/9Zq84WyfARmBu5zMslL3Ae0S
AiAp7qkuigDH+EQySF+LOEq7swuSMkgX/u9fhXVeuRJb0gB1AKS5CZC0GFgUh7sT
osxncAo8NZgE+RvfuON3zQ7IDdwQAAABXwBY02kAAAQDAEYwRAIgBlxmDS/CH1n0
87tpHMZy+Zq0g0G4DTEzMwacIJ+QeysCIGr3F2kM+nHc3nms3iGJLiUqfkiNZTsU
D61DztJuWeH5AHYA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo/csAAAFf
AFjVMAAABAMARzBFAiBN8WRuM66KGKptrTG6r6iJWzppW+tofropzyopAJb6sAIh
APhm9BQ4xXwLCjxXOo6TmxSHmOi6qsR3HmyhHddMWWElAHUAvHjh38X2PGhGSTNN
oQ+hXwl5aSAJwIG08/aRfz7ZuKUAAAFfAFjT+AAABAMARjBEAiBPXDwftkctusVc
AghPTIz+abr3L8/f+EjOIgn/o+dB2gIgAi80G/dpy/9ah+MGgQ0hoEyCYb3ameHS
AlNGzi+3GocwDQYJKoZIhvcNAQELBQADggEBAB/fDgDwAsSYHcoOs1T+QU2XgCt8
Di1y5uS9aQuRdv0ztSi759JDHIONJY70zwIcSLsbcdj0bIvcV0aPowxbqpJe+F6S
v0x1tVtiUaoyEuGa0ZwxS5kPLUEfOnyr9INndmvFIUjhCfIqYYMobSeJeWHevLBQ
xq4M5Quf5HK/FoYSm3vb8jUEMLbYTku5s9Pgmnft9lV0w/kdIZGkrlFppngrKris
HWKDaqyDVNQk0fAH0DI+LFhj44/FiPKCJp9YOQzN4TGbgYe97olZwSa1Yr5UoZYP
4WJhZ45Y2bi5dEXMFuv67P07dlA8a2TDvSf54GHpcNt30AAd7rza805mytg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmUfOsEw9AeKWB+oTQYX
AR4Rw0TldM0KHYMY/Z0iBiu/SoVvWdjpo23onsZJ8PgTAD7BbGfu5RQC9FbvUAmB
yC/P3yuUH01YNmRKpRsGj3bRQPRqM6uUeEhaTkOAu746ot02hUbwFCGjGGA/gD1p
JktfylqaOdFXLXf0EXxqxRnXZGRjiz2RiwqXko0isomn8NF7nwt0hUFWmSWBeZwU
63XJ87kXTuwGX+LpQW/X/aGOhFEQwWcC+Hj53twpM9zpFlJuOuF+d52CLxegy/bq
rhNT3g/J+QUuvtQuVfQHKELGkm1VfPpsuqz0tix7ECZZNTNGpvsY5cT6hZK90PAw
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 133530497058637450162578975220379247863
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Wildpoldsried'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'sonnen GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.sonnenbatterie.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19490564076675733203657952211024587197731479224010149194759479307719008436372190004207587620562068402895321605907253995298147965105366410748055346208595065822304737597870030092179170447575354301118568470807299185847765517551565012072965478861777500451788776161907967168281040894556002359424949807423230262660727113752057657474036315839977486983402374854233511426591821915828009538163729262297046199214860015281079115856983205401113354785024022707368322011153598831902306461500787580106611445859520778466340958803485362294989900209956015304422511400090448972922583633816048990397158220729385626831519817783226282291293
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sonnenbatterie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sonnenbatterie.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2b9a35ae01183830e1707a05e01176a3cebd9014
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcb.com/tg.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcb.com/tg.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (479 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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