mrc.apac1.birst.com
- Birst, Inc. -
Issued by thawte SHA256 SSL CA
About this certificate
This digital certificate with serial number 27:39:cc:ce:b1:1d:07:04:2e:6a:37:ba:68:85:12:4a was issued on by thawte, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Birst, Inc.
Organization:
Birst, Inc.
Organization unit: Operations
Organization unit: Operations
State / Province:
California
Locality: San Francisco
Country: US
Locality: San Francisco
Country: US
thawte, Inc.
Organization:
thawte, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 27:39:cc:ce:b1:1d:07:04:2e:6a:37:ba:68:85:12:4aSerial Number (int): 52140006743922765818138547890755539530
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 2b:9a:35:ae:01:18:38:30:e1:70:7a:05:e0:11:76:a3:ce:bd:90:14
Fingerprint (sha1): 79:00:84:28:7c:f5:71:7e:a3:69:04:1e:6a:b5:a3:86:69:b6:f5:7b
Fingerprint (sha256): 19:3b:5b:c6:fe:2f:48:63:28:b6:53:e9:cb:c4:f5:5d:24:20:ed:8d:14:87:46:55:72:26:f6:8a:75:4b:31:b7
Issuing Certificate URL: http://tg.symcb.com/tg.crt
Revocation information
OCSP Server: http://tg.symcd.comCRL Distribution Point: http://tg.symcb.com/tg.crl
Check the revocation status for certificate mrc.apac1.birst.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mrc.apac1.birst.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mrc.apac1.birst.com
Other certificates including the domain name birst.com
(limited to 100 certificates)
webdav.birst.com
app3112.bws.birst.com
mrc.bws.birst.com
btm.birst.com
5663998322147328-fe1.pantheonsite.io
maps.bws.birst.com
app2101.apac1.birst.com
app2102.bws.birst.com
5663998322147328-fe1.pantheonsite.io
5663998322147328-fe1.pantheonsite.io
app2101.bws.birst.com
5663998322147328-fe1.pantheonsite.io
app2103.apac1.birst.com
sde.birst.com
5663998322147328-fe1.pantheonsite.io
login.bws.birst.com
5663998322147328-fe1.pantheonsite.io
rc.sde.birst.com
login.bws.birst.com
5663998322147328-fe1.pantheonsite.io
5663998322147328-fe1.pantheonsite.io
5663998322147328-fe1.pantheonsite.io
5663998322147328-fe1.pantheonsite.io
birstupdates.bws.birst.com
login.bws.birst.com
app2102.eu1.birst.com
5663998322147328-fe1.pantheonsite.io
vanity2.lithium.com
app2101.bws.birst.com
5663998322147328-fe1.pantheonsite.io
5663998322147328-fe1.pantheonsite.io
5663998322147328-fe1.pantheonsite.io
licensing.bws.birst.com
5663998322147328-fe1.pantheonsite.io
*.bws.birst.com
mrc.bws.birst.com
vanity1.jiveon.com
c43rc.bws.birst.com
5663998322147328-fe1.pantheonsite.io
5663998322147328-fe1.pantheonsite.io
login.bws.birst.com
5663998322147328-fe1.pantheonsite.io
stage.birst.com
5663998322147328-fe1.pantheonsite.io
app2102.apac2.birst.com
vanity2.lithium.com
app2103.bws.birst.com
freetrial.bws.birst.com
5663998322147328-fe1.pantheonsite.io
app2101.apac2.birst.com
5663998322147328-fe1.pantheonsite.io
mrc.apac1.birst.com
partners.birst.com
birstupdates.bws.birst.com
bwa.birst.com
login.apac1.birst.com
app.birst.com
5663998322147328-fe1.pantheonsite.io
5663998322147328-fe1.pantheonsite.io
rc.birst.com
app2102.eu1.birst.com
rc.birst.com
5663998322147328-fe1.pantheonsite.io
5663998322147328-fe1.pantheonsite.io
dev.www.birst.com
app2101.eu1.birst.com
5663998322147328-fe1.pantheonsite.io
5663998322147328-fe1.pantheonsite.io
stage.sde.birst.com
stage.sde.birst.com
5663998322147328-fe1.pantheonsite.io
static.captora.com
*.saml.birst.com
login.apac2.birst.com
5663998322147328-fe1.pantheonsite.io
btm.apac1.birst.com
mail.birst.com
5663998322147328-fe1.pantheonsite.io
app2102.apac1.birst.com
5663998322147328-fe1.pantheonsite.io
vanity1.jiveon.com
app2102.eu1.birst.com
app2101.bws.birst.com
login.bws.birst.com
vanity2.lithium.com
sslvpn.birst.com
app2103.bws.birst.com
vanity1.jiveon.com
static.captora.com
vanity1.jiveon.com
5663998322147328-fe1.pantheonsite.io
vanity1.jiveon.com
5663998322147328-fe1.pantheonsite.io
5663998322147328-fe1.pantheonsite.io
www.birst.com
app2103.apac2.birst.com
app2101.apac1.birst.com
vanity1.jiveon.com
5663998322147328-fe1.pantheonsite.io
app2101.apac1.birst.com
app3112.bws.birst.com
mrc.bws.birst.com
btm.birst.com
5663998322147328-fe1.pantheonsite.io
maps.bws.birst.com
app2101.apac1.birst.com
app2102.bws.birst.com
5663998322147328-fe1.pantheonsite.io
5663998322147328-fe1.pantheonsite.io
app2101.bws.birst.com
5663998322147328-fe1.pantheonsite.io
app2103.apac1.birst.com
sde.birst.com
5663998322147328-fe1.pantheonsite.io
login.bws.birst.com
5663998322147328-fe1.pantheonsite.io
rc.sde.birst.com
login.bws.birst.com
5663998322147328-fe1.pantheonsite.io
5663998322147328-fe1.pantheonsite.io
5663998322147328-fe1.pantheonsite.io
5663998322147328-fe1.pantheonsite.io
birstupdates.bws.birst.com
login.bws.birst.com
app2102.eu1.birst.com
5663998322147328-fe1.pantheonsite.io
vanity2.lithium.com
app2101.bws.birst.com
5663998322147328-fe1.pantheonsite.io
5663998322147328-fe1.pantheonsite.io
5663998322147328-fe1.pantheonsite.io
licensing.bws.birst.com
5663998322147328-fe1.pantheonsite.io
*.bws.birst.com
mrc.bws.birst.com
vanity1.jiveon.com
c43rc.bws.birst.com
5663998322147328-fe1.pantheonsite.io
5663998322147328-fe1.pantheonsite.io
login.bws.birst.com
5663998322147328-fe1.pantheonsite.io
stage.birst.com
5663998322147328-fe1.pantheonsite.io
app2102.apac2.birst.com
vanity2.lithium.com
app2103.bws.birst.com
freetrial.bws.birst.com
5663998322147328-fe1.pantheonsite.io
app2101.apac2.birst.com
5663998322147328-fe1.pantheonsite.io
mrc.apac1.birst.com
partners.birst.com
birstupdates.bws.birst.com
bwa.birst.com
login.apac1.birst.com
app.birst.com
5663998322147328-fe1.pantheonsite.io
5663998322147328-fe1.pantheonsite.io
rc.birst.com
app2102.eu1.birst.com
rc.birst.com
5663998322147328-fe1.pantheonsite.io
5663998322147328-fe1.pantheonsite.io
dev.www.birst.com
app2101.eu1.birst.com
5663998322147328-fe1.pantheonsite.io
5663998322147328-fe1.pantheonsite.io
stage.sde.birst.com
stage.sde.birst.com
5663998322147328-fe1.pantheonsite.io
static.captora.com
*.saml.birst.com
login.apac2.birst.com
5663998322147328-fe1.pantheonsite.io
btm.apac1.birst.com
mail.birst.com
5663998322147328-fe1.pantheonsite.io
app2102.apac1.birst.com
5663998322147328-fe1.pantheonsite.io
vanity1.jiveon.com
app2102.eu1.birst.com
app2101.bws.birst.com
login.bws.birst.com
vanity2.lithium.com
sslvpn.birst.com
app2103.bws.birst.com
vanity1.jiveon.com
static.captora.com
vanity1.jiveon.com
5663998322147328-fe1.pantheonsite.io
vanity1.jiveon.com
5663998322147328-fe1.pantheonsite.io
5663998322147328-fe1.pantheonsite.io
www.birst.com
app2103.apac2.birst.com
app2101.apac1.birst.com
vanity1.jiveon.com
5663998322147328-fe1.pantheonsite.io
app2101.apac1.birst.com
Certificate
The complete raw certificate details for mrc.apac1.birst.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIQJznMzrEdBwQuaje6aIUSSjANBgkqhkiG9w0BAQsFADBD MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMR0wGwYDVQQDExR0 aGF3dGUgU0hBMjU2IFNTTCBDQTAeFw0xNjA2MTYwMDAwMDBaFw0xNzA2MTYyMzU5 NTlaMIGDMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTEWMBQGA1UE BwwNU2FuIEZyYW5jaXNjbzEUMBIGA1UECgwLQmlyc3QsIEluYy4xEzARBgNVBAsM Ck9wZXJhdGlvbnMxHDAaBgNVBAMME21yYy5hcGFjMS5iaXJzdC5jb20wggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKmv6Z1aHe0fVN4H4rnCRHnU/A84sb 0UTIfMdm3nT67TespV41UfO6wcGPq3+D/opoLPzVPcIABor9pewiCpA5YjL4Agei 04kdyP8KwGpSWtf/DggBWVjU5F0FJXbpdRafxLETpQIBNMW8GehsVvC3bJz6/C3w qYkAcV6vs7tVrwF96x6lFQmCA+ofDUfGIBxPZvz63uNcIOGLc+DmOSPTm2x5yU73 rQNTZnqJ5H7WruFp7lDmz4S1+ToRjZmk7UL1ByNLMc0wWOsOIkwlkDZNtMAHTNfn 1y7K1AB/Z2Kh21THFC26PQ2FHVYFMwg1sQGUDtFwrsXLANdh7zxWyDbBAgMBAAGj ggGKMIIBhjAeBgNVHREEFzAVghNtcmMuYXBhYzEuYmlyc3QuY29tMAkGA1UdEwQC MAAwbgYDVR0gBGcwZTBjBgZngQwBAgIwWTAmBggrBgEFBQcCARYaaHR0cHM6Ly93 d3cudGhhd3RlLmNvbS9jcHMwLwYIKwYBBQUHAgIwIwwhaHR0cHM6Ly93d3cudGhh d3RlLmNvbS9yZXBvc2l0b3J5MA4GA1UdDwEB/wQEAwIFoDAfBgNVHSMEGDAWgBQr mjWuARg4MOFwegXgEXajzr2QFDArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8vdGcu c3ltY2IuY29tL3RnLmNybDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw VwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8vdGcuc3ltY2QuY29t MCYGCCsGAQUFBzAChhpodHRwOi8vdGcuc3ltY2IuY29tL3RnLmNydDATBgorBgEE AdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKpx2g+KCMiy5NOGg8yrz tTIisEQTXRSERohpsrSiPJGrFlkSaL45SOY7o3edwk9OpJdKDe0Ajv3VQiqVawFa cnR/Qz0DDxs9FJ8ZEh3ORgHMNfsHzPuTnlVLxbwh2emzYEOrS9aIJe2wsl0Uj29Q jRy74vZEa5jLw0xPdfk5VPUVx3UlSef4/Hr7mKkcENU9MhXi6phwNAzi3TM8xsOo lxmylj2tK13oG5xKwFmsO1oz42iSF75xNr/iYuwGZ1D//Nr/+sxfgADPBOU0ij1g AECcZFnM99hlJYnFWK9BEEDAZXZS1MlplrhixwjgAHpanbZOtZ7lnYVSd2VCXWuR Lw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypr+mdWh3tH1TeB+K5wk R51PwPOLG9FEyHzHZt50+u03rKVeNVHzusHBj6t/g/6KaCz81T3CAAaK/aXsIgqQ OWIy+AIHotOJHcj/CsBqUlrX/w4IAVlY1ORdBSV26XUWn8SxE6UCATTFvBnobFbw t2yc+vwt8KmJAHFer7O7Va8BfesepRUJggPqHw1HxiAcT2b8+t7jXCDhi3Pg5jkj 05tseclO960DU2Z6ieR+1q7hae5Q5s+Etfk6EY2ZpO1C9QcjSzHNMFjrDiJMJZA2 TbTAB0zX59cuytQAf2diodtUxxQtuj0NhR1WBTMINbEBlA7RcK7FywDXYe88Vsg2 wQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 52140006743922765818138547890755539530 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SHA256 SSL CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-16 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-16 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Francisco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Birst, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Operations' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mrc.apac1.birst.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25576568256877104383125337609305735344305363448998910730447287795684731355581181415747262818717095925207918181175672246874069658426697790385777792010237714456389276416844030842173628085613094756556444720908532254055211200377313553395782145380449488359667338837172712478228993784152870502185603810659855890162547619613071675901256541533637059236325157336326383106286193412824624559015750729536837005164167452538775271077111627944425724766369685318122764935779780888351902227652920122478389764530501143253800552527094985355525604911487405424664534705969133138532512556996215108163626407724427930571757411666816901068481 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrc.apac1.birst.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2b9a35ae01183830e1707a05e01176a3cebd9014 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcb.com/tg.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcb.com/tg.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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