www.mnh.fr
- MUTUELLE NAT HOSPIT PROF SANTE SOCIAL -
Issued by Thawte TLS RSA CA G1
About this certificate
This digital certificate with serial number 0c:5b:fa:c8:f8:33:b7:e9:bf:02:3c:0d:73:b1:52:a4 was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
MUTUELLE NAT HOSPIT PROF SANTE SOCIAL
Company registration number:
775 606 361
Organization: MUTUELLE NAT HOSPIT PROF SANTE SOCIAL
Organization: MUTUELLE NAT HOSPIT PROF SANTE SOCIAL
State / Province:
Loiret
Locality: AMILLY
Country: FR
Locality: AMILLY
Country: FR
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0c:5b:fa:c8:f8:33:b7:e9:bf:02:3c:0d:73:b1:52:a4Serial Number (int): 16428321488393881716930752301660983972
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 72:0f:c2:ac:a2:f9:c5:67:ef:9a:e4:9b:00:02:77:1c:03:c6:4b:de
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7
Fingerprint (sha1): d9:08:33:2d:b5:c8:b5:bc:b3:a2:3e:43:db:d5:ff:b1:48:06:c7:04
Fingerprint (sha256): 1d:5b:60:2b:e2:f4:f6:d9:5b:a3:fa:2f:9e:c9:f3:3c:b8:e8:33:f0:dc:47:87:59:48:c2:81:10:41:fd:e9:ae
Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt
Revocation information
OCSP Server: http://status.thawte.comCRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl
Check the revocation status for certificate www.mnh.fr
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.mnh.fr
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.mnh.fr
mnh.fr
mnh.fr
Other certificates including the domain name mnh.fr
(limited to 100 certificates)
imperva.com
adhesion.mnh.fr
akamai-san109.exacttarget.com
incapsula.com
incapsula.com
imperva.com
imperva.com
akamai-san109.exacttarget.com
www.mnh.fr
incapsula.com
*.mnh.fr
akamai-san109.exacttarget.com
incapsula.com
www.mnh.fr
incapsula.com
incapsula.com
incapsula.com
incapsula.com
www.mnh.fr
*.mnh.fr
incapsula.com
adherent.mnh.fr
*.mnh.fr
www.mnh.fr
incapsula.com
incapsula.com
imperva.com
*.mnh.fr
akamai-san109.exacttarget.com
incapsula.com
adherent.mnh.fr
*.mnh.fr
akamai-san109.exacttarget.com
*.mnh.fr
incapsula.com
incapsula.com
*.mnh.fr
*.mnh.fr
incapsula.com
incapsula.com
*.mnh.fr
secgate.mnh.fr
www.mnh.fr
www.mnh.fr
incapsula.com
ppradherent.mnh.fr
*.mnh.fr
incapsula.com
adherent.mnh.fr
ppradherent.mnh.fr
secgate.mnh.fr
incapsula.com
incapsula.com
incapsula.com
secgate.mnh.fr
incapsula.com
incapsula.com
adherent.mnh.fr
adherent.mnh.fr
akamai-san109.exacttarget.com
*.mnh.fr
ppradherent.mnh.fr
incapsula.com
secgate.mnh.fr
sts.mnh.fr
*.mnh.fr
sts.mnh.fr
adherent.mnh.fr
sts.mnh.fr
imperva.com
incapsula.com
incapsula.com
incapsula.com
concours-mnh-bfm.mnh.fr
adherent.mnh.fr
incapsula.com
incapsula.com
incapsula.com
*.mnh.fr
incapsula.com
sts.mnh.fr
incapsula.com
imperva.com
sts.mnh.fr
ppradherent.mnh.fr
*.mnh.fr
sts.mnh.fr
akamai-san109.exacttarget.com
imperva.com
*.mnh.fr
certificat-mutualiste.mnh.fr
incapsula.com
akamai-san109.exacttarget.com
sts.mnh.fr
incapsula.com
secgate.mnh.fr
incapsula.com
www.mnh.fr
incapsula.com
sts.mnh.fr
adhesion.mnh.fr
akamai-san109.exacttarget.com
incapsula.com
incapsula.com
imperva.com
imperva.com
akamai-san109.exacttarget.com
www.mnh.fr
incapsula.com
*.mnh.fr
akamai-san109.exacttarget.com
incapsula.com
www.mnh.fr
incapsula.com
incapsula.com
incapsula.com
incapsula.com
www.mnh.fr
*.mnh.fr
incapsula.com
adherent.mnh.fr
*.mnh.fr
www.mnh.fr
incapsula.com
incapsula.com
imperva.com
*.mnh.fr
akamai-san109.exacttarget.com
incapsula.com
adherent.mnh.fr
*.mnh.fr
akamai-san109.exacttarget.com
*.mnh.fr
incapsula.com
incapsula.com
*.mnh.fr
*.mnh.fr
incapsula.com
incapsula.com
*.mnh.fr
secgate.mnh.fr
www.mnh.fr
www.mnh.fr
incapsula.com
ppradherent.mnh.fr
*.mnh.fr
incapsula.com
adherent.mnh.fr
ppradherent.mnh.fr
secgate.mnh.fr
incapsula.com
incapsula.com
incapsula.com
secgate.mnh.fr
incapsula.com
incapsula.com
adherent.mnh.fr
adherent.mnh.fr
akamai-san109.exacttarget.com
*.mnh.fr
ppradherent.mnh.fr
incapsula.com
secgate.mnh.fr
sts.mnh.fr
*.mnh.fr
sts.mnh.fr
adherent.mnh.fr
sts.mnh.fr
imperva.com
incapsula.com
incapsula.com
incapsula.com
concours-mnh-bfm.mnh.fr
adherent.mnh.fr
incapsula.com
incapsula.com
incapsula.com
*.mnh.fr
incapsula.com
sts.mnh.fr
incapsula.com
imperva.com
sts.mnh.fr
ppradherent.mnh.fr
*.mnh.fr
sts.mnh.fr
akamai-san109.exacttarget.com
imperva.com
*.mnh.fr
certificat-mutualiste.mnh.fr
incapsula.com
akamai-san109.exacttarget.com
sts.mnh.fr
incapsula.com
secgate.mnh.fr
incapsula.com
www.mnh.fr
incapsula.com
sts.mnh.fr
Certificate
The complete raw certificate details for www.mnh.fr in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgIQDFv6yPgzt+m/AjwNc7FSpDANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRUaGF3dGUgVExTIFJTQSBDQSBHMTAe Fw0xOTAxMjkwMDAwMDBaFw0yMTAyMDQxMjAwMDBaMIG+MR0wGwYDVQQPDBRQcml2 YXRlIE9yZ2FuaXphdGlvbjETMBEGCysGAQQBgjc8AgEDEwJGUjEUMBIGA1UEBRML Nzc1IDYwNiAzNjExCzAJBgNVBAYTAkZSMQ8wDQYDVQQIEwZMb2lyZXQxDzANBgNV BAcTBkFNSUxMWTEuMCwGA1UEChMlTVVUVUVMTEUgTkFUIEhPU1BJVCBQUk9GIFNB TlRFIFNPQ0lBTDETMBEGA1UEAxMKd3d3Lm1uaC5mcjCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBALqicQYvYxNMTbzCbTkYD4yAJD0VjSoHwVKpxQyi4nJZ Tj2d9KZ+LWE5jpWz0IjrDgQdaKuzja/DfedR1lm0q4gtM7RvgQcqYB+9b8AXpsI0 6qq0l0c89ncS8td9uCABBH5LiwjhCVOEAsMLpTbO1KBBgq6IJl+D9Kbs8Q9NmVaI CsCV0AD/ICA6Tq6S471/AM1DhH13Y4FBJ6eFJTUD6az1600YajQ9iIOb9DOehre5 ZjDgNDdpwN+aWN0YdxS+NTyDb3zyl3Qrp19W4407FqTEyg4XA80SnFwiuuQJ+8eR ArvRKpj0dlyQ0iF01PukjPrla+6t+TvMYo65Keun/8MCAwEAAaOCAa4wggGqMB8G A1UdIwQYMBaAFKWM/jLM6w8s1BnGCLgAJIhdw8W3MB0GA1UdDgQWBBRyD8KsovnF Z++a5JsAAnccA8ZL3jAdBgNVHREEFjAUggp3d3cubW5oLmZyggZtbmguZnIwDgYD VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNV HR8ENDAyMDCgLqAshipodHRwOi8vY2RwLnRoYXd0ZS5jb20vVGhhd3RlVExTUlNB Q0FHMS5jcmwwSwYDVR0gBEQwQjA3BglghkgBhv1sAgEwKjAoBggrBgEFBQcCARYc aHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAHBgVngQwBATBwBggrBgEFBQcB AQRkMGIwJAYIKwYBBQUHMAGGGGh0dHA6Ly9zdGF0dXMudGhhd3RlLmNvbTA6Bggr BgEFBQcwAoYuaHR0cDovL2NhY2VydHMudGhhd3RlLmNvbS9UaGF3dGVUTFNSU0FD QUcxLmNydDAJBgNVHRMEAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3 DQEBCwUAA4IBAQCZKK/sCSdUj99GIEPwoWGeDdmW0DRzIIfnHMHoZhBZE9UjLTiZ fHBjYNxHWlk7IqG1haoZLS/53BOJjrmU0ZR0foZjND6/Ce9m7KLsuvwaLVoNPwEt YjKY1MxoJ6ju2gJ+dKKxKLQxy0guHIEKutpPZK7lal4IGGVI113MN4O7MrCmg6R6 JHWL6joOjRUcUTwDzAiyQ8gRvXbWxgGGpyhAntjyzwslgXtXQjB7UqzuLHlEJcjq gRNrVn5tyFhVshEIiU3064w2EyKtrZtroRJaJpul/hVO+E8zecail/NTWb7Gi0fU hFvbGl1zL49RWbdpuGfu+AOk+O+5bcXZtihg -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqJxBi9jE0xNvMJtORgP jIAkPRWNKgfBUqnFDKLicllOPZ30pn4tYTmOlbPQiOsOBB1oq7ONr8N951HWWbSr iC0ztG+BBypgH71vwBemwjTqqrSXRzz2dxLy1324IAEEfkuLCOEJU4QCwwulNs7U oEGCrogmX4P0puzxD02ZVogKwJXQAP8gIDpOrpLjvX8AzUOEfXdjgUEnp4UlNQPp rPXrTRhqND2Ig5v0M56Gt7lmMOA0N2nA35pY3Rh3FL41PINvfPKXdCunX1bjjTsW pMTKDhcDzRKcXCK65An7x5ECu9EqmPR2XJDSIXTU+6SM+uVr7q35O8xijrkp66f/ wwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16428321488393881716930752301660983972 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-29 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-04 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '775 606 361' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Loiret' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AMILLY' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MUTUELLE NAT HOSPIT PROF SANTE SOCIAL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.mnh.fr' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23560427613121760226248270587552044416433102695103013775543607553737195846610287440838374065982711554342553797461405699119829946999634489286137927231223815528663925118425009634774126509841528393202792629752663228891011395892250467323109374232360854312117713441809034080775121996221403880247997362327755169695182477030924991995550992514976862122224022039961300420909844928462896344594423918475697859240297572552598589332477856130498393174223860278461261499010318334975587159607599024954121904644402178339380982537655553279899271703116887804720575073544330320622344051550012512340233947231018232630661539304719117713347 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 720fc2aca2f9c567ef9ae49b0002771c03c64bde . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mnh.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mnh.fr' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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