poruchy.o2.cz

- O2 Czech Republic a.s. -

Issued by Thawte EV RSA CA 2018

About this certificate

This digital certificate with serial number 0d:50:8f:de:31:99:cd:4f:d2:43:ea:72:ea:65:7e:2a was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

O2 Czech Republic a.s.

Company registration number: 60193336
Organization: O2 Czech Republic a.s.
Organization unit: Operations
State / Province: Praha
Locality: Praha
Country: CZ

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:50:8f:de:31:99:cd:4f:d2:43:ea:72:ea:65:7e:2a
Serial Number (int): 17698265682462793602805429795924835882
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7a:33:b7:7e:d2:9d:c1:f5:bb:fd:24:95:9a:77:1d:ef:3a:4a:81:d3
AuthorityKeyId: e7:01:fc:0c:16:18:ca:7d:b2:8c:ec:87:27:a3:6f:61:81:3b:84:39

Fingerprint (sha1): 9b:a1:59:6b:51:99:c6:43:b0:f0:08:7f:0b:92:3b:3c:ed:21:f0:4a
Fingerprint (sha256): 19:7f:04:1e:80:74:ad:df:bf:fb:b0:8e:13:9a:66:79:32:cd:5d:2a:95:67:4a:5b:a1:b8:f8:d4:db:27:0e:fd

Issuing Certificate URL: http://cacerts.thawte.com/ThawteEVRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteEVRSACA2018.crl

Check the revocation status for certificate poruchy.o2.cz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for poruchy.o2.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

poruchy.o2.cz

Other certificates including the domain name o2.cz

(limited to 100 certificates)
kissdesk.o2.cz
pf2019.o2.cz
chcido.o2.cz
eshop.o2.cz
kaufland-01.cpten02.captiveportal.o2.cz
mdml.o2.cz
e-ucet.o2.cz
eshop.o2.cz
ssl-dc.o2.cz
kiss.o2.cz
cloud2-ace.o2.cz
meeting.o2.cz
adm.proxima.o2.cz
kiss.o2.cz
cloud2.o2.cz
od.o2.cz
kissdesk.o2.cz
adm.proxima.o2.cz
e-ucet.o2.cz
obchodnici.o2.cz
kiss.o2.cz
images.o2.cz
*.o2.cz
sstats.www.o2.cz
eshop.o2.cz
kiss.o2.cz
archiv.o2.cz
smdm-ds.o2.cz
pf2018.o2.cz
cloud2-con.o2.cz
otrs-gsd.o2.cz
virtualni-prodejna.o2.cz
s.o2.cz
sstats.www.o2.cz
pf2013.o2.cz
sstats.www.o2.cz
dexch.o2.cz
kaufland-01.cpten02.captiveportal.o2.cz
sso.o2.cz
o2m2mportal.o2.cz
spojit.o2.cz
smsender.o2.cz
meeting.o2.cz
kissdesk.o2.cz
kissdesk.o2.cz
kiss.o2.cz
eventsbd.o2.cz
www.o2.cz
vdesktop.o2.cz
cloud2.o2.cz
jjokji.64bit.kr
smdm.o2.cz
www.o2.cz
mail.o2.cz
adm.stage.proxima.o2.cz
e-ucet.o2.cz
kaufland-01.cpten02.captiveportal.o2.cz
virtualni-prodejna.o2.cz
korporace.o2.cz
mobilesignage.o2.cz
kiss.o2.cz
*.openstack.o2.cz
od.o2.cz
kissdesk.o2.cz
blog.o2.cz
*.o2.cz
poruchy.o2.cz
sec.o2.cz
www.o2.cz
kiss.o2.cz
kiss.o2.cz
mdml.o2.cz
carcontrol.o2.cz
procurement.o2.cz
cloud.o2.cz
mail.o2.cz
kissdesk.o2.cz
korporace.o2.cz
kiss.o2.cz
dexchc3.o2.cz
kaufland-01.cpten02.captiveportal.o2.cz
smdm-ds.o2.cz
mail.o2.cz
ekancelar.o2.cz
adm.proxima.o2.cz
m.moje.o2.cz
dexch.o2.cz
eventsbd.o2.cz
www.dtrmediaworks.com
api.stage.proxima.o2.cz
iwifio2-guest02.o2.cz
kiss.o2.cz
*.cpten01.captiveportal.o2.cz
vo.m.o2.cz
virtualni-prodejna.o2.cz
obchodnici.o2.cz
api-exponea.o2.cz
adm.stage.proxima.o2.cz
obchodnici.o2.cz
login.o2.cz

Certificate

The complete raw certificate details for poruchy.o2.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIQDVCP3jGZzU/SQ+py6mV+KjANBgkqhkiG9w0BAQsFADBf
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR4wHAYDVQQDExVUaGF3dGUgRVYgUlNBIENBIDIwMTgw
HhcNMTkwMzIxMDAwMDAwWhcNMjEwMzIwMTIwMDAwWjCBwjEdMBsGA1UEDwwUUHJp
dmF0ZSBPcmdhbml6YXRpb24xEzARBgsrBgEEAYI3PAIBAxMCQ1oxETAPBgNVBAUT
CDYwMTkzMzM2MQswCQYDVQQGEwJDWjEOMAwGA1UECBMFUHJhaGExDjAMBgNVBAcT
BVByYWhhMR8wHQYDVQQKExZPMiBDemVjaCBSZXB1YmxpYyBhLnMuMRMwEQYDVQQL
EwpPcGVyYXRpb25zMRYwFAYDVQQDEw1wb3J1Y2h5Lm8yLmN6MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOt5shXuXwWYdSX+OMsvvctcovcKSJSdeoxz
26muE72sh/MUY93qFdWaPGp91Da6G9tF/kP0JUxBSxlScNDfgHqmbttjNSnFhjKd
5Eeim/EKisGEdYHCRkvmdCibPoVnMMrdVgc0LsaqhVnvzBrlGWYAi1aXFXj0aZPk
k2QYeokWIh3ZS/H8mvVbt9ynz/ufRuZ15Vc2/Lt/m7K8hvzb4DsD8/STdeiLF6HJ
lUw7ddRp+gPvswRtqMb47miKKqZvMxnLfl0ix5BOEQTfIDQIqI6k6zkXhbNWpiDv
IrXjI7hxy1Jo+LskD+hf5T8+wN8EOSLBvo1BYEDFAOBujtasXQIDAQABo4IBqzCC
AacwHwYDVR0jBBgwFoAU5wH8DBYYyn2yjOyHJ6NvYYE7hDkwHQYDVR0OBBYEFHoz
t37SncH1u/0klZp3He86SoHTMBgGA1UdEQQRMA+CDXBvcnVjaHkubzIuY3owDgYD
VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA8BgNV
HR8ENTAzMDGgL6AthitodHRwOi8vY2RwLnRoYXd0ZS5jb20vVGhhd3RlRVZSU0FD
QTIwMTguY3JsMEsGA1UdIAREMEIwNwYJYIZIAYb9bAIBMCowKAYIKwYBBQUHAgEW
HGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwBwYFZ4EMAQEwcQYIKwYBBQUH
AQEEZTBjMCQGCCsGAQUFBzABhhhodHRwOi8vc3RhdHVzLnRoYXd0ZS5jb20wOwYI
KwYBBQUHMAKGL2h0dHA6Ly9jYWNlcnRzLnRoYXd0ZS5jb20vVGhhd3RlRVZSU0FD
QTIwMTguY3J0MAkGA1UdEwQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZI
hvcNAQELBQADggEBAIHsBFx5L4Vms2lQzcpkM6GRKL4PMacX9t0GtwFajup7Kcr0
2kelAEFx7WHbql99+q3J1Oap75+VuUGsuTRwrNY1dHL9+mNt8gVXDxkRK1w6MpAm
hW8Q0034MVlB3OJGkGwMcJIUrBYmpgJY1OwJ5qJ4kRIpQaKIwB/Fp1oBvdWT58bA
5RxoMPbDpJG3B7iXJvMD+4OBpOPZzG1plK3h7b+kEanehX5qPI0YNNFOpKOQiVyU
9MEGousPqImz3yxp56PVDjnh1U475cca0vlwv83aoI0tTiBccxXgaLacO3W6o+sZ
6OBb/6ix9oTjPNoKqf8elJ8I1MlEUgvIJT6rz5s=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOt5shXuXwWYdSX+OMsv
vctcovcKSJSdeoxz26muE72sh/MUY93qFdWaPGp91Da6G9tF/kP0JUxBSxlScNDf
gHqmbttjNSnFhjKd5Eeim/EKisGEdYHCRkvmdCibPoVnMMrdVgc0LsaqhVnvzBrl
GWYAi1aXFXj0aZPkk2QYeokWIh3ZS/H8mvVbt9ynz/ufRuZ15Vc2/Lt/m7K8hvzb
4DsD8/STdeiLF6HJlUw7ddRp+gPvswRtqMb47miKKqZvMxnLfl0ix5BOEQTfIDQI
qI6k6zkXhbNWpiDvIrXjI7hxy1Jo+LskD+hf5T8+wN8EOSLBvo1BYEDFAOBujtas
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17698265682462793602805429795924835882
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte EV RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '60193336'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Praha'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Praha'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'O2 Czech Republic a.s.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Operations'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'poruchy.o2.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24858825007828921789651180223101879529834613557170938146587031580087382801428006963798009253374469061113719278375888324466929554742910232073744683944499528430485498466857127090162111792302367909193172322041635658945195678010120440182403493679484006645615097002948697960786523255936413928584807767627745400419275145958092128587103508907421547387215431788518536799619398984249052304688981738460496465216211120969473116042861525990757343241390266663401325449622847573749267804646357655804905079025083858228811506934707252292309584914595043400369173363648060504927406962087565605343899815755250128907360211291034663431261
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e701fc0c1618ca7db28cec8727a36f61813b8439
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7a33b77ed29dc1f5bbfd24959a771def3a4a81d3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poruchy.o2.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteEVRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteEVRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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