XITMI1WDCCCP010.fgcorp.fgad.fg.local
- Fiat Services -
Issued by Thawte SSL CA
About this certificate
This digital certificate with serial number 59:6b:e0:1b:af:3e:59:aa:1f:ba:16:b1:73:dc:bb:a3 was issued on by Thawte, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DNSNames must have a valid TLD. (BRs: 3.2.2.4)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Fiat Services
Organization:
Fiat Services
Organization unit: ICT Architectures
Organization unit: ICT Architectures
State / Province:
Torino
Locality: Torino
Country: IT
Locality: Torino
Country: IT
Thawte, Inc.
Organization:
Thawte, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 59:6b:e0:1b:af:3e:59:aa:1f:ba:16:b1:73:dc:bb:a3Serial Number (int): 118861412841867598652404797359121021859
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: a7:a2:83:bb:34:45:40:3d:fc:d5:30:4f:12:b9:3e:a1:01:9f:f6:db
Fingerprint (sha1): a6:01:c6:47:95:9b:1b:68:6b:8a:23:44:37:9f:b0:9a:bf:87:67:81
Fingerprint (sha256): 1c:8f:51:6a:36:80:31:f5:c5:63:5d:cc:80:e1:b5:c1:fc:b9:75:93:a5:dc:de:89:2a:c0:d9:96:c6:3a:16:3b
Issuing Certificate URL: http://svr-ov-aia.thawte.com/ThawteOV.cer
Revocation information
OCSP Server: http://ocsp.thawte.comCRL Distribution Point: http://svr-ov-crl.thawte.com/ThawteOV.crl
Check the revocation status for certificate XITMI1WDCCCP010.fgcorp.fgad.fg.local
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for XITMI1WDCCCP010.fgcorp.fgad.fg.local
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
XITMI1WDCCCP010.fgcorp.fgad.fg.local
Other certificates including the domain name fg.local
(limited to 100 certificates)
hpadsm.fg.local
lyncpool01.fgcorp.fgad.fg.local
XITMI2WDCCCP020.fgcorp.fgad.fg.local
XITMI1WDCCCP010.fgcorp.fgad.fg.local
eoffice.eSeeLYNX.com
mail.fentonglass.com
lyncpool01.fgcorp.fgad.fg.local
mx.fraymangroup.com
xittor47apcp030.fgcorp.fgad.fg.local
CAGLyncEEPool01.fgcorp.fgad.fg.local
CAGLyncEEPool01.fgcorp.fgad.fg.local
webmail.fishergerman.co.uk
mail.fusiongroupinc.com
eoffice.eSeeLYNX.com
fiberutilities.com
owa.fraymangroup.com
mail.foresitegroupinc.com
XITMI1WDCCCP010.fgcorp.fgad.fg.local
CAGLyncEEPool01.fgcorp.fgad.fg.local
hpadsm.fiatgroup.com
lyncpool01.fgcorp.fgad.fg.local
mail.fentonglass.com
exmail.fiberutilities.com
exmail.fiberutilities.com
XITMI2WDCCCP020.fgcorp.fgad.fg.local
myarea.fg.local
lyncpool01.fgcorp.fgad.fg.local
remote.fgplc.com
CAGLyncEEPool01.fgcorp.fgad.fg.local
lyncdir01.fgcorp.fgad.fg.local
lyncpool01.fgcorp.fgad.fg.local
lyncpool01.fgcorp.fgad.fg.local
XITMI2WDCCCP020.fgcorp.fgad.fg.local
XITMI1WDCCCP010.fgcorp.fgad.fg.local
eoffice.eSeeLYNX.com
mail.fentonglass.com
lyncpool01.fgcorp.fgad.fg.local
mx.fraymangroup.com
xittor47apcp030.fgcorp.fgad.fg.local
CAGLyncEEPool01.fgcorp.fgad.fg.local
CAGLyncEEPool01.fgcorp.fgad.fg.local
webmail.fishergerman.co.uk
mail.fusiongroupinc.com
eoffice.eSeeLYNX.com
fiberutilities.com
owa.fraymangroup.com
mail.foresitegroupinc.com
XITMI1WDCCCP010.fgcorp.fgad.fg.local
CAGLyncEEPool01.fgcorp.fgad.fg.local
hpadsm.fiatgroup.com
lyncpool01.fgcorp.fgad.fg.local
mail.fentonglass.com
exmail.fiberutilities.com
exmail.fiberutilities.com
XITMI2WDCCCP020.fgcorp.fgad.fg.local
myarea.fg.local
lyncpool01.fgcorp.fgad.fg.local
remote.fgplc.com
CAGLyncEEPool01.fgcorp.fgad.fg.local
lyncdir01.fgcorp.fgad.fg.local
lyncpool01.fgcorp.fgad.fg.local
Certificate
The complete raw certificate details for XITMI1WDCCCP010.fgcorp.fgad.fg.local in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIQWWvgG68+Waofuhaxc9y7ozANBgkqhkiG9w0BAQUFADA8 MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMVGhhd3RlLCBJbmMuMRYwFAYDVQQDEw1U aGF3dGUgU1NMIENBMB4XDTE0MDUwNzAwMDAwMFoXDTE1MDUwNzIzNTk1OVowgZIx CzAJBgNVBAYTAklUMQ8wDQYDVQQIEwZUb3Jpbm8xDzANBgNVBAcUBlRvcmlubzEW MBQGA1UEChQNRmlhdCBTZXJ2aWNlczEaMBgGA1UECxQRSUNUIEFyY2hpdGVjdHVy ZXMxLTArBgNVBAMUJFhJVE1JMVdEQ0NDUDAxMC5mZ2NvcnAuZmdhZC5mZy5sb2Nh bDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK5cX0Z5KEBZkLMw8Il4 ZiJLXxNhQvZ4gPom0sLmoYU+3NIuGJcxR2tTOU4csVwIxMWvfBKfVVks+J7PNpfL aTMCz2LZi3kyo7qwshuW7iHw3cuScA32gLtNqKFbd2D52vq/XW3a588OlEpnoknx Mc2wrEA+QtBP7vvunMzLzkU2/Ku1o1UijZ2V9V3HZBqCgB8wdglWhRUd+Y5fSlPb rXoRUtvAWS+S5OUcGLeRlq+rTRzn9LP1KElb7/G4wOi3JpMMjN6FJCP7u9stdHWr vub7Xn7/LXsvT91/dfgDbJNvcBYamYVZeQPh1t/iujeq3AGJx2J3llw3LJy7Ej4W NeMCAwEAAaOCAXswggF3MC8GA1UdEQQoMCaCJFhJVE1JMVdEQ0NDUDAxMC5mZ2Nv cnAuZmdhZC5mZy5sb2NhbDAJBgNVHRMEAjAAMEIGA1UdIAQ7MDkwNwYKYIZIAYb4 RQEHNjApMCcGCCsGAQUFBwIBFhtodHRwczovL3d3dy50aGF3dGUuY29tL2Nwcy8w DgYDVR0PAQH/BAQDAgWgMB8GA1UdIwQYMBaAFKeig7s0RUA9/NUwTxK5PqEBn/bb MDoGA1UdHwQzMDEwL6AtoCuGKWh0dHA6Ly9zdnItb3YtY3JsLnRoYXd0ZS5jb20v VGhhd3RlT1YuY3JsMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBpBggr BgEFBQcBAQRdMFswIgYIKwYBBQUHMAGGFmh0dHA6Ly9vY3NwLnRoYXd0ZS5jb20w NQYIKwYBBQUHMAKGKWh0dHA6Ly9zdnItb3YtYWlhLnRoYXd0ZS5jb20vVGhhd3Rl T1YuY2VyMA0GCSqGSIb3DQEBBQUAA4IBAQB2cmiTVrlC4uHzX/qPAp94w39MAWkE +9jDxSExSMIMv2ATaSlNBt0grwsRiwvEusitCtvOEOFmyWe6Rl4S3ALGVA31VlLJ YGNM6m9K6ySLSxdV5toyyOSzXxT3LwBFPR+hjXMr7kpAiT3r1tJJjyECaYAHvC14 WxJjN+dNfxo9o5B2ngej6JmgQd1Ll6sWooOe/H575XeI8s2xHRQR8w+8nZaGJEIn sTGJ48uY9kxbmOeGTos61zk8JtYI9NMhubPd+2oWpr7tZFGb0lNo+OjbLiGxg9bk 5kDtSeFI9B/uvYkEYDO+YLvaILWBxa3P9dBQiyXYpzaf8E5L2LmiSjq4 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlxfRnkoQFmQszDwiXhm IktfE2FC9niA+ibSwuahhT7c0i4YlzFHa1M5ThyxXAjExa98Ep9VWSz4ns82l8tp MwLPYtmLeTKjurCyG5buIfDdy5JwDfaAu02ooVt3YPna+r9dbdrnzw6USmeiSfEx zbCsQD5C0E/u++6czMvORTb8q7WjVSKNnZX1XcdkGoKAHzB2CVaFFR35jl9KU9ut ehFS28BZL5Lk5RwYt5GWr6tNHOf0s/UoSVvv8bjA6LcmkwyM3oUkI/u72y10dau+ 5vtefv8tey9P3X91+ANsk29wFhqZhVl5A+HW3+K6N6rcAYnHYneWXDcsnLsSPhY1 4wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 118861412841867598652404797359121021859 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-05-07 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-07 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Torino' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Torino' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Fiat Services' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'ICT Architectures' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'XITMI1WDCCCP010.fgcorp.fgad.fg.local' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22011015478358074375477487840050579569073848524595922194950573378329076650850511368077454667726974375411340511110681804819256761064778742029743734391129006326320747293852988047662743024165778713157265218827139253126735760400087781061321460084830286497237467895607875208352875380241581681500672326019602686437181688038005680499221978111054788522093031491214032616286012383748292383076755358655190553482355460461428413988625777934474840329687680500846292145032669994489410962524352372068574923793799420967270274243110523560554568021017141569768707475170421875749188617468661445717952763188758197537863445747889975211491 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'XITMI1WDCCCP010.fgcorp.fgad.fg.local' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a7a283bb3445403dfcd5304f12b93ea1019ff6db . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-crl.thawte.com/ThawteOV.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-aia.thawte.com/ThawteOV.cer' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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