*.albis-elcon.com

- albis-elcon system Germany GmbH -

Issued by Thawte TLS RSA CA G1

About this certificate

This digital certificate with serial number 07:4a:d1:05:65:db:c3:bb:cf:f9:4f:d2:1a:df:29:0b was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

albis-elcon system Germany GmbH

Organization: albis-elcon system Germany GmbH
State / Province: Sachsen
Locality: Hartmannsdorf
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:4a:d1:05:65:db:c3:bb:cf:f9:4f:d2:1a:df:29:0b
Serial Number (int): 9693065389297629197721053187394185483
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 70:2f:74:b3:8a:ab:a8:58:7d:f6:f4:99:eb:fc:77:27:15:fe:a9:8d
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7

Fingerprint (sha1): 4b:9c:a9:8e:03:a4:96:a5:28:f2:8f:fe:49:41:80:72:09:1d:e4:a8
Fingerprint (sha256): 1b:85:06:e0:2d:36:3f:ae:0e:b5:89:4d:16:95:8f:32:06:55:88:15:60:90:4b:66:55:28:ff:8a:4f:c2:26:58

Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl

Check the revocation status for certificate *.albis-elcon.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.albis-elcon.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.albis-elcon.com
albis-elcon.com

Other certificates including the domain name albis-elcon.com

(limited to 100 certificates)
go.albis-elcon.com
www.elcon-system.com
webmail.albis-elcon.com
meetme.albis-elcon.com
go.albis-elcon.com
*.albis-elcon.com
go.albis-elcon.com
www.elcon-system.com
*.albis-elcon.com
meetme.albis-elcon.com
webmail.albis-elcon.com
go.albis-elcon.com
go.albis-elcon.com
*.albis-elcon.com
www.elcon-system.com
www.elcon-system.com
snts.albis-elcon.com
www.elcon-system.com
go.albis-elcon.com
*.albis-elcon.com
www.elcon-system.com
www.elcon-system.com
webmail.elcon-system.com
www.elcon-system.com
go.albis-elcon.com
jabber.albis-elcon.com
jabber.albis-elcon.com
*.albis-elcon.com
www.albis-elcon.com
www.elcon-system.com
go.albis-elcon.com
webmail.elcon-system.com
meetme.albis-elcon.com
go.albis-elcon.com
mx1.albis-elcon.com
webmail.elcon-system.com
go.albis-elcon.com
www.albis-elcon.com
webmail.albis-elcon.com
www.elcon-system.com
webmail.elcon-system.com
go.albis-elcon.com

Certificate

The complete raw certificate details for *.albis-elcon.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGhTCCBW2gAwIBAgIQB0rRBWXbw7vP+U/SGt8pCzANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRUaGF3dGUgVExTIFJTQSBDQSBHMTAe
Fw0yMzA3MTcwMDAwMDBaFw0yNDA3MTQyMzU5NTlaMH0xCzAJBgNVBAYTAkRFMRAw
DgYDVQQIEwdTYWNoc2VuMRYwFAYDVQQHEw1IYXJ0bWFubnNkb3JmMSgwJgYDVQQK
Ex9hbGJpcy1lbGNvbiBzeXN0ZW0gR2VybWFueSBHbWJIMRowGAYDVQQDDBEqLmFs
YmlzLWVsY29uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMoI
ECeNamK/ZYRUB1cG1uLeh+uaQr42b8FtHOhmK9c5yfwErpQ9k8+/zP2of8acsh+u
rGdudP+Ypj9IJX5sWnlIaRADbCUoKYXgBMypjzXOmOmgBitvtzRuTAYGH20QW/m3
rk2UDTmfV7kTChuV0gT6JUdAbsXWgTH6lTjpE0N1iQFWoUiAUQYO1QhUiYhpfkKQ
GPH3Ahc89Qt0y5U6yXl3jIRPchiJro6BjE6oC+krVsvubnQJ1G285oQSVOhwqYh/
8AUBNnO4KEdaPJwevAQRa1sgCwubftAw9g6WS3YAqdBPwibEq72n/f1pcqXgTHHy
UEV3xDQChWDeKGUo9f0CAwEAAaOCAx4wggMaMB8GA1UdIwQYMBaAFKWM/jLM6w8s
1BnGCLgAJIhdw8W3MB0GA1UdDgQWBBRwL3SziquoWH329Jnr/HcnFf6pjTAtBgNV
HREEJjAkghEqLmFsYmlzLWVsY29uLmNvbYIPYWxiaXMtZWxjb24uY29tMA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0f
BDQwMjAwoC6gLIYqaHR0cDovL2NkcC50aGF3dGUuY29tL1RoYXd0ZVRMU1JTQUNB
RzEuY3JsMD4GA1UdIAQ3MDUwMwYGZ4EMAQICMCkwJwYIKwYBBQUHAgEWG2h0dHA6
Ly93d3cuZGlnaWNlcnQuY29tL0NQUzBwBggrBgEFBQcBAQRkMGIwJAYIKwYBBQUH
MAGGGGh0dHA6Ly9zdGF0dXMudGhhd3RlLmNvbTA6BggrBgEFBQcwAoYuaHR0cDov
L2NhY2VydHMudGhhd3RlLmNvbS9UaGF3dGVUTFNSU0FDQUcxLmNydDAJBgNVHRME
AjAAMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdQDuzdBk1dsazsVct520zROi
ModGfLzs3sNRSFlGcR+1mwAAAYljA+QtAAAEAwBGMEQCIAqcfyK0scO5XjVm9rmV
mNDCMBfQ3zVyeP7bVOj1y8tgAiBVeM3XIid0tyDjLAO4D2eC9eQZKpJvX3D+U3sw
z4FU6QB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABiWMD4+8A
AAQDAEcwRQIgNittRcJD0r8OR2QymlKa4xl23pBexGx/pjCPNV2vbt8CIQCKRQBr
K8kBbTi1ozJA950EUCsw1wElLv4CL9SDlaUf5wB3ANq2v2s/tbYin5vCu1xr6HCR
cWy7UYSFNL2kPTBI1/urAAABiWMD448AAAQDAEgwRgIhAPX7g4/BZaCbbFeRNQEz
ZDIeKRlICAQvw/U8DQFlY3zqAiEAsEhc2IyWnwtth0Yi5hEarflGensTnnM/NDPG
aD39L60wDQYJKoZIhvcNAQELBQADggEBAJiBuLwI8zWG5c1PN73DQepcp+I7IzCb
InC5ImHar7F5yZMkdw/V9lGYPxva/owEbbc7EXBEqteM7akVjtICEoxdzhwDRkUL
eDwGWdwr4WMR82qrfKg6cqcMbiC7QbIgn6uEQ4MbvTttkhUd4M7RSOWO26FbFXIp
bq82OSqTLo7LCW1E3fpzhiS0fScDXNjPQWUh5YubI3C31hXJRuOL1593URzcaXIq
W+2X3l72jYtfgqltMI1pSSIPvNhrHVnXLT7Cq9CxIAi0Czqc9jDDCRQ0XCx3+ADQ
0+wOqghs0kcC7JivOac7MPPIaiyT036FEydyVtFK9SxGYOAq98Wcqhw=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyggQJ41qYr9lhFQHVwbW
4t6H65pCvjZvwW0c6GYr1znJ/ASulD2Tz7/M/ah/xpyyH66sZ250/5imP0glfmxa
eUhpEANsJSgpheAEzKmPNc6Y6aAGK2+3NG5MBgYfbRBb+beuTZQNOZ9XuRMKG5XS
BPolR0BuxdaBMfqVOOkTQ3WJAVahSIBRBg7VCFSJiGl+QpAY8fcCFzz1C3TLlTrJ
eXeMhE9yGImujoGMTqgL6StWy+5udAnUbbzmhBJU6HCpiH/wBQE2c7goR1o8nB68
BBFrWyALC5t+0DD2DpZLdgCp0E/CJsSrvaf9/WlypeBMcfJQRXfENAKFYN4oZSj1
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9693065389297629197721053187394185483
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sachsen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hartmannsdorf'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'albis-elcon system Germany GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.albis-elcon.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25504113667680395071966132165490658437707080555696847724554940786129919084765662759513091958171424730644299465704299217945333350955810125862615341771186545834661745253600432928505906047303965656661835527778148603521418139202551406067002796352184180818344486867256596357094851219596447949480216285165186298584984643888169908668682519515131564169683956805397028275090608055645632182002513653405717019907751395317935060180555193425035360304446334416192434669117394677353954900275647505960868472579814298892266867735050655279805662223043456923357108402874579429774220474787966291922674849681455915828978992877493216146941
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							702f74b38aaba8587df6f499ebfc772715fea98d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.albis-elcon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albis-elcon.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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