servizionline.acegasapsamga.it
- HERA SPA -
Issued by thawte SSL CA - G2
About this certificate
This digital certificate with serial number 6e:dd:08:e1:c4:16:11:9a:08:d7:6d:17:2c:51:c4:de was issued on by thawte, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
HERA SPA
Organization:
HERA SPA
Organization unit: DSI
Organization unit: DSI
State / Province:
Bologna
Locality: Bologna
Country: IT
Locality: Bologna
Country: IT
thawte, Inc.
Organization:
thawte, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 6e:dd:08:e1:c4:16:11:9a:08:d7:6d:17:2c:51:c4:deSerial Number (int): 147362757288376079262844415710726309086
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60
Fingerprint (sha1): 65:a8:91:ff:47:38:5d:e6:14:69:bb:c6:4a:eb:13:49:c3:ad:8c:27
Fingerprint (sha256): 19:df:68:16:70:b8:7c:75:2b:e1:16:c0:81:ed:02:22:95:93:d8:e1:88:33:4c:e3:cb:49:72:04:f9:a0:1a:da
Issuing Certificate URL: http://tj.symcb.com/tj.crt
Revocation information
OCSP Server: http://tj.symcd.comCRL Distribution Point: http://tj.symcb.com/tj.crl
Check the revocation status for certificate servizionline.acegasapsamga.it
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for servizionline.acegasapsamga.it
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
servizionline.acegasapsamga.it
Other certificates including the domain name acegasapsamga.it
(limited to 100 certificates)
nova.tutorsunited.org
nova.tutorsunited.org
*.acegasapsamga.it
planner.podmanagement.co.uk
acegasapsamga.it
www.miupdate.co.uk
v2.dieschrankhelden.de
servizionline.acegasapsamga.it
acegasapsamga.it
servizionline.acegasapsamga.it
www.f2b2.org
www.gruppohera.it
servizionline.acegasapsamga.it
adventure.tyf.com
sts.gruppohera.it
adventure.tyf.com
greeneco-air-gf.sunapps.fr
fieldservice.mango-solar.de
www.gruppohera.it
privacy.appzco.uk
sts.gruppohera.it
servizionline.acegasapsamga.it
select.converge-digital.com
*.acegasapsamga.it
sts.gruppohera.it
www.itvcreate.com
*.acegasapsamga.it
richieste.acegasapsamga.it
corpoapp.wast.fr
sts.gruppohera.it
adventure.tyf.com
servizionline.acegasapsamga.it
adventure.tyf.com
app.futurest8.co.za
www.gruppohera.it
check.ticketpay.de
nova.tutorsunited.org
sip.gruppohera.it
my.answerbee.co.uk
www.gruppohera.it
my.sixlinks.com
docenti.forema.it
wanapptest.workapp.be
*.acegasapsamga.it
select.converge-digital.com
nova.tutorsunited.org
sip.gruppohera.it
www.gruppohera.it
partnership.coherenze.com
portal.wakelake.sk
db.weconnectminds.com
sip.gruppohera.it
servizionline.acegasapsamga.it
nova.tutorsunited.org
portal.pleaseconnectme.co.uk
myapp.atelieruldeit.ro
nova.tutorsunited.org
login.aimloop.com
nova.tutorsunited.org
inhus.dsst.lt
adventure.tyf.com
complex2.propertydashboard.co.za
adventure.tyf.com
permissions.genesis-tec.com
sip.gruppohera.it
nova.tutorsunited.org
adventure.tyf.com
complex1.propertydashboard.co.za
portal.mmbb.be
grc.orangeoaks.nl
*.acegasapsamga.it
coty.asecca.co.uk
*.acegasapsamga.it
pat.acegasapsamga.it
virtualvda.intelauto.co.uk
nova.tutorsunited.org
*.acegasapsamga.it
planner.podmanagement.co.uk
acegasapsamga.it
www.miupdate.co.uk
v2.dieschrankhelden.de
servizionline.acegasapsamga.it
acegasapsamga.it
servizionline.acegasapsamga.it
www.f2b2.org
www.gruppohera.it
servizionline.acegasapsamga.it
adventure.tyf.com
sts.gruppohera.it
adventure.tyf.com
greeneco-air-gf.sunapps.fr
fieldservice.mango-solar.de
www.gruppohera.it
privacy.appzco.uk
sts.gruppohera.it
servizionline.acegasapsamga.it
select.converge-digital.com
*.acegasapsamga.it
sts.gruppohera.it
www.itvcreate.com
*.acegasapsamga.it
richieste.acegasapsamga.it
corpoapp.wast.fr
sts.gruppohera.it
adventure.tyf.com
servizionline.acegasapsamga.it
adventure.tyf.com
app.futurest8.co.za
www.gruppohera.it
check.ticketpay.de
nova.tutorsunited.org
sip.gruppohera.it
my.answerbee.co.uk
www.gruppohera.it
my.sixlinks.com
docenti.forema.it
wanapptest.workapp.be
*.acegasapsamga.it
select.converge-digital.com
nova.tutorsunited.org
sip.gruppohera.it
www.gruppohera.it
partnership.coherenze.com
portal.wakelake.sk
db.weconnectminds.com
sip.gruppohera.it
servizionline.acegasapsamga.it
nova.tutorsunited.org
portal.pleaseconnectme.co.uk
myapp.atelieruldeit.ro
nova.tutorsunited.org
login.aimloop.com
nova.tutorsunited.org
inhus.dsst.lt
adventure.tyf.com
complex2.propertydashboard.co.za
adventure.tyf.com
permissions.genesis-tec.com
sip.gruppohera.it
nova.tutorsunited.org
adventure.tyf.com
complex1.propertydashboard.co.za
portal.mmbb.be
grc.orangeoaks.nl
*.acegasapsamga.it
coty.asecca.co.uk
*.acegasapsamga.it
pat.acegasapsamga.it
virtualvda.intelauto.co.uk
Certificate
The complete raw certificate details for servizionline.acegasapsamga.it in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGwTCCBamgAwIBAgIQbt0I4cQWEZoI120XLFHE3jANBgkqhkiG9w0BAQsFADBB MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMRswGQYDVQQDExJ0 aGF3dGUgU1NMIENBIC0gRzIwHhcNMTYxMjE5MDAwMDAwWhcNMTkxMjE5MjM1OTU5 WjB7MQswCQYDVQQGEwJJVDEQMA4GA1UECAwHQm9sb2duYTEQMA4GA1UEBwwHQm9s b2duYTERMA8GA1UECgwISEVSQSBTUEExDDAKBgNVBAsMA0RTSTEnMCUGA1UEAwwe c2Vydml6aW9ubGluZS5hY2VnYXNhcHNhbWdhLml0MIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAtgxDZPVQoQFjXfLg9nHXRuWgextMZ4SUuNVAbIutSYFp VRMc3vyVVCqOAQlq11A2+D6Zz1Ky/gOTjwGd7VjuexYgRuLs5/hqZ4T3DsMkheAA bWZnLwPZUxMjaFR61NSwTkrP0OBMfR5Y2gVNNbbq1x/5IfNl3ij8yxvtbL84atwR +QMMh+izhtJuTUT+HhucZR1jXh1Lz8xbh0cXE6MaeLrA60YkK+hSXiAscZD9b7nx V0Kc90L7F6oMajNa8dvX6Q0zIWNvo4PL2lCTWSaq4HIMvpFsq+Ujkm5swE++ng09 Pp9JvI+kWIC84mefw7sHX5a7l3sb4iy/CT206xhSqwIDAQABo4IDeTCCA3UwKQYD VR0RBCIwIIIec2Vydml6aW9ubGluZS5hY2VnYXNhcHNhbWdhLml0MAkGA1UdEwQC MAAwbgYDVR0gBGcwZTBjBgZngQwBAgIwWTAmBggrBgEFBQcCARYaaHR0cHM6Ly93 d3cudGhhd3RlLmNvbS9jcHMwLwYIKwYBBQUHAgIwIwwhaHR0cHM6Ly93d3cudGhh d3RlLmNvbS9yZXBvc2l0b3J5MA4GA1UdDwEB/wQEAwIFoDAfBgNVHSMEGDAWgBTC T0hX/NFPmsBdOH0OBdvZLrVSYDArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8vdGou c3ltY2IuY29tL3RqLmNybDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw VwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8vdGouc3ltY2QuY29t MCYGCCsGAQUFBzAChhpodHRwOi8vdGouc3ltY2IuY29tL3RqLmNydDCCAfUGCisG AQQB1nkCBAIEggHlBIIB4QHfAHUA3esdK3oNT6Ygi4GtgWhwfi6OnQHVXIiNPRHE zbbsvswAAAFZFoGBdwAABAMARjBEAiAdnfGTp6V0M3NYC1AzRxqItqv4Z+S4U7Ko JVoVPfgHAwIgORr9faZchctbWrbU9vWqmX3sQ4lWQFZTz9xzVvETXPIAdgDuS723 dc5guuFCaR+r4Z5mow9+X7By2IMAxHuJeqj9ywAAAVkWgYG3AAAEAwBHMEUCIGfe yEGTOGaqyDmQ4/owg4QXSErN/oxNkp9q/G4yLX9wAiEAhE6sv7//3aiCLUTmIFDV G/Lu/mRDshEU85TuxUM3VXUAdgC8eOHfxfY8aEZJM02hD6FfCXlpIAnAgbTz9pF/ Ptm4pQAAAVkWgYJfAAAEAwBHMEUCIF1EFz9GvgWvSubtzCCsCq688TdDsnTK5tc5 4A3JVPbCAiEAt4wJ3eLl4tGJ9WoEWgeHACrEKeSf5PnhNrmlKfHHFI8AdgCkuQmQ tBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAVkWgYGNAAAEAwBHMEUCIED/ Ilyc+3ndKphPkayMSbKjGqj0DG7mMfrrAz1HxUl0AiEAuZRrsuyl82CK/6WP1FJi O7kd0QpRNMgWPI0U+U2VrvIwDQYJKoZIhvcNAQELBQADggEBAJgChqHSGJOoTZYM ewX0PD1x4Qa+AhmjguhXipxntV8FDU2WXI0KnCx85gzrXGHc12BdBfYypW57STYa VkaChblhbcaraB2vB2waPIMtsMZ5Tjfz/FhFKF7vdQrJ+eDxE2DN0CzQpwALRNG+ wk6yYmAGIRXN+2pBO7/98e3xPc0MWHnoJNZ32WcpFrEZqmSmP/mmABFYL4vSUDXe Fo/3cr9pS+1XthdRkyYKSwK2/UQPBbMT0TtVcbgMIUtxjxwWVqFFgK5ZgfC2uNz5 VTKMmmW3eL0MDxB1+AEgF31suSJSbLTnfWWlxaV/shvPmqOy/RG2ClAruox6y9BA sbtf0wY= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgxDZPVQoQFjXfLg9nHX RuWgextMZ4SUuNVAbIutSYFpVRMc3vyVVCqOAQlq11A2+D6Zz1Ky/gOTjwGd7Vju exYgRuLs5/hqZ4T3DsMkheAAbWZnLwPZUxMjaFR61NSwTkrP0OBMfR5Y2gVNNbbq 1x/5IfNl3ij8yxvtbL84atwR+QMMh+izhtJuTUT+HhucZR1jXh1Lz8xbh0cXE6Ma eLrA60YkK+hSXiAscZD9b7nxV0Kc90L7F6oMajNa8dvX6Q0zIWNvo4PL2lCTWSaq 4HIMvpFsq+Ujkm5swE++ng09Pp9JvI+kWIC84mefw7sHX5a7l3sb4iy/CT206xhS qwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 147362757288376079262844415710726309086 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-19 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-19 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bologna' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bologna' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'HERA SPA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DSI' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'servizionline.acegasapsamga.it' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22981418742342913351645027900003817854359572248857884579788288569101950105061044001285596856700061860506953801089120496363123944600640813986658255413154457104439092642197237386326748035623603717781899433809600726216817593067003453294805356641879285168685876999117085077624909742980240856013203207290612299826786800933757033564629826293828472324953004543884557177432922541011402040814156432765330138494414442369508919485032020627987405269182367595301089378654917679470033740992214730295007539562228352443561059330290026385712960917515399189907565106747397762705940679117275432362298421663318588861708158340843435479723 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servizionline.acegasapsamga.it' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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