sso-mail.snhu.edu

- Southern New Hampshire University -

Issued by Thawte TLS RSA CA G1

About this certificate

This digital certificate with serial number 0e:85:49:1c:bf:84:80:35:9e:86:70:20:6d:a0:45:0a was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Southern New Hampshire University

Organization: Southern New Hampshire University
State / Province: New Hampshire
Locality: Manchester
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:85:49:1c:bf:84:80:35:9e:86:70:20:6d:a0:45:0a
Serial Number (int): 19301250316735391802666478812425897226
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e6:19:56:71:cf:80:f8:ff:ae:59:cb:1b:a5:2f:0f:50:52:fa:d2:e0
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7

Fingerprint (sha1): d3:bb:73:4b:61:b6:59:2b:1b:42:94:ad:fe:ec:d1:2d:4b:f3:bb:64
Fingerprint (sha256): 1a:1f:6f:9b:df:14:2c:72:42:cb:df:a1:f5:0a:4b:21:42:b1:22:be:49:6d:0f:03:6a:97:f8:f2:8f:ea:cf:c3

Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl

Check the revocation status for certificate sso-mail.snhu.edu

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sso-mail.snhu.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sso-mail.snhu.edu
adfsproxy1.snhu.edu
my.snhu.edu

Other certificates including the domain name snhu.edu

(limited to 100 certificates)
plannedgiving.snhu.edu
uconnectlabs.com
uconnectlabs.com
facultysuccess.snhu.edu
radio.snhu.edu
www.snhu.edu
blogging.snhu.edu
uconnectlabs.com
radio.snhu.edu
uconnectlabs.com
in.snhu.edu
uconnectlabs.com
webapps.snhu.edu
mypc.snhu.edu
whatsup.snhu.edu
webmail.snhu.edu
tls.automattic.com
scalefunder.net
uconnectlabs.com
scalefunder.net
desktop.snhu.edu
ui46-2.snhu.edu
penmenprint.snhu.edu
academicarchive.snhu.edu
myrwp2.snhu.edu
sisgatewaydev.snhu.edu
libcal.snhu.edu
webmanager.snhu.edu
uconnectlabs.com
whatsup.snhu.edu
radio.snhu.edu
click.dream.snhu.edu
akamai-san89.exacttarget.com
brightspace01.snhu.edu
scalefunder.net
uconnectlabs.com
scalefunder.net
inconnect-test1.snhu.edu
snhuweb-test2.snhu.edu
uconnectlabs.com
onlinestats.snhu.edu
snhu-bam.snhu.edu
degrees.snhu.edu
uconnectlabs.com
uconnectlabs.com
webmail.snhu.edu
facultysuccess.snhu.edu
intransform.snhu.edu
ui-3.snhu.edu
plannedgiving.snhu.edu
radio.snhu.edu
penelopent.snhu.edu
compass.snhu.edu
*.mule.snhu.edu
adfs-encryption.snhu.edu
dev.snhu.edu
afro.snhu.edu
camfi.snhu.edu
scalefunder.net
ethossvc.snhu.edu
deis.snhu.edu
onlinestats.snhu.edu
uconnectlabs.com
coce-uat-bi.snhu.edu
radio.snhu.edu
sisgateway.snhu.edu
radio.snhu.edu
scalefunder.net
uconnectlabs.com
eforms.snhu.edu
uconnectlabs.com
bus-depot.snhu.edu
SISSVC-STAGE.snhu.edu
adfs-signing.snhu.edu
sso-mail.snhu.edu
libguides.snhu.edu
compass.snhu.edu
sisgatewaytest.snhu.edu
www.snhu.edu
uconnectlabs.com
uconnectlabs.com
my.snhu.edu
uconnectlabs.com
www.snhu.edu
akamai-san89.exacttarget.com
blockchain.snhu.edu
itsstaging.snhu.edu
inconnect-test1.snhu.edu
myrwp.snhu.edu
fis.snhu.edu
uconnectlabs.com
rdsweb.snhu.edu
academicarchive.snhu.edu
CollUI-train.snhu.edu
libanswers.snhu.edu
penpal.snhu.edu
myrwp.snhu.edu
alumni.snhu.edu
akamai-san89.exacttarget.com
ceta-git.lab.snhu.edu

Certificate

The complete raw certificate details for sso-mail.snhu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGmjCCBYKgAwIBAgIQDoVJHL+EgDWehnAgbaBFCjANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRUaGF3dGUgVExTIFJTQSBDQSBHMTAe
Fw0yMzAzMjMwMDAwMDBaFw0yNDAzMjIyMzU5NTlaMIGCMQswCQYDVQQGEwJVUzEW
MBQGA1UECBMNTmV3IEhhbXBzaGlyZTETMBEGA1UEBxMKTWFuY2hlc3RlcjEqMCgG
A1UEChMhU291dGhlcm4gTmV3IEhhbXBzaGlyZSBVbml2ZXJzaXR5MRowGAYDVQQD
ExFzc28tbWFpbC5zbmh1LmVkdTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALV8mFupEtIp4809MPgOzLtkJZ6eRTxK7Gi5k866oH47Ch5X8d455X4nbJTh
Pn4k7wofOnrgvExz49MkXMwYFOv6XOkY2gAmqvL4NHj6Jh+BKITLD5K0Uxs2mmzQ
Glr6NagAiLfOrom2gww9GlBGOYJRFtnNn5GzRfhyClpP1puoa6GbF9Zr6PfUzN/C
i9QJVAt3LkkxS7Hwh5q/twcejKEvONjYAbL4phAZ/Lc3cksYukOi6NIp2NtWFGDf
olxI0IN5r7TJFS7EWsjzDoL4trJnQQjROjsKRsiq1R8k/oJ3+8y/1ZF0GKGskBCJ
aC7CwMN8pAYzYvaIuUZ9fyzDbA0CAwEAAaOCAy0wggMpMB8GA1UdIwQYMBaAFKWM
/jLM6w8s1BnGCLgAJIhdw8W3MB0GA1UdDgQWBBTmGVZxz4D4/65ZyxulLw9QUvrS
4DA+BgNVHREENzA1ghFzc28tbWFpbC5zbmh1LmVkdYITYWRmc3Byb3h5MS5zbmh1
LmVkdYILbXkuc25odS5lZHUwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY2RwLnRo
YXd0ZS5jb20vVGhhd3RlVExTUlNBQ0FHMS5jcmwwPgYDVR0gBDcwNTAzBgZngQwB
AgIwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMHAG
CCsGAQUFBwEBBGQwYjAkBggrBgEFBQcwAYYYaHR0cDovL3N0YXR1cy50aGF3dGUu
Y29tMDoGCCsGAQUFBzAChi5odHRwOi8vY2FjZXJ0cy50aGF3dGUuY29tL1RoYXd0
ZVRMU1JTQUNBRzEuY3J0MAkGA1UdEwQCMAAwggF8BgorBgEEAdZ5AgQCBIIBbASC
AWgBZgB1AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABhw6thZQA
AAQDAEYwRAIgQdIv9YysDkSB1W0ehDPJQtuFi4/OwRRxatiGP4umthoCICb4kBD4
S7U6oThHSS4Jmg9Cv/M7p2KD3LtpproCNd1hAHYASLDja9qmRzQP5WoC+p0w6xxS
ActW3SyB2bu/qznYhHMAAAGHDq2FhQAABAMARzBFAiB2sZstjTiF/G8hWFc/Iavf
FUql/p8E59JP06jrxh50owIhAMMr6QJZ806ysYEFrvDpGnwNc0tWZwTS9dg9Zaku
Pjr8AHUA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGHDq2FVQAA
BAMARjBEAiA7t/DWsXJtfGVsKRrPai3JY8Z+Fk8D82juT1yy4XtlaAIgcVIpYW0k
Fhb1AwwXcKFg1OCwRN4iN08weHRA80ZgVZEwDQYJKoZIhvcNAQELBQADggEBACcs
wxrqKOuRvHECASgZAbVdJ0W2QNcgwq5+OZBdvjJiMRqp5R72US7cFVdz91pGaFne
2C1FgXlFpdvuDshthPZZyPNmdrV/prwqzVVdNG48Px1uO4RXQzGsEAGyoO/msP8W
xtT0GzbcqPQ8Fihkj2BIFQM6JQPBQB+s+MsAwMcIv504hFuadWUiiiB64GwAcbE0
JXfeLkShJA+toiqCm7qA0Vrr/+gVeAnRUDuJbzc41CwvkeUTd7WQiwzfFPWvOiFG
28fjrKH7ws6QOCREKgzGyN+/F48w9xrJmDvjQEdcWx89pluSZjkamRKSMQZDjs7O
9gNgeRyPqOeJW/Oe7zM=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXyYW6kS0injzT0w+A7M
u2Qlnp5FPErsaLmTzrqgfjsKHlfx3jnlfidslOE+fiTvCh86euC8THPj0yRczBgU
6/pc6RjaACaq8vg0ePomH4EohMsPkrRTGzaabNAaWvo1qACIt86uibaDDD0aUEY5
glEW2c2fkbNF+HIKWk/Wm6hroZsX1mvo99TM38KL1AlUC3cuSTFLsfCHmr+3Bx6M
oS842NgBsvimEBn8tzdySxi6Q6Lo0inY21YUYN+iXEjQg3mvtMkVLsRayPMOgvi2
smdBCNE6OwpGyKrVHyT+gnf7zL/VkXQYoayQEIloLsLAw3ykBjNi9oi5Rn1/LMNs
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19301250316735391802666478812425897226
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Southern New Hampshire University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sso-mail.snhu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22910573356550804205485750132557797116531258351208997265027646535262512991579029638959118373623400685663745139738578381428837320476553614161305144447470060482926236491503621975371447782596180243287552130548563790935895978504735918448835084798074957741127445899077800458896749308345486949526699842432766342167427515463639344984023244528174233140449740884703138525119760565230403180427278709689010557047458918744809606612495530521475133427039392101340467668083888358683829452217669915231490061658803711366243858184806252623534202399597979844022715298550548766414326954710072054264367610732877286978470785425177892318221
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e6195671cf80f8ffae59cb1ba52f0f5052fad2e0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso-mail.snhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adfsproxy1.snhu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.snhu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN asn1: syntax error: invalid boolean
false
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:15|false]  
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 53686719062044845909937827584245522059627058856026424439452413753283189830819
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 88278588067813996617836844143743830925444509329503034871876707912068106173180
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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