*.tle.courses.open.uwi.edu

- University of the West Indies -

Issued by Thawte TLS RSA CA G1

About this certificate

This digital certificate with serial number 06:87:d5:4b:75:33:23:c4:be:f8:68:94:9f:8e:76:af was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of the West Indies

Organization: University of the West Indies
Organization unit: Open Campus
Locality: St. Michael
Country: BB

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:87:d5:4b:75:33:23:c4:be:f8:68:94:9f:8e:76:af
Serial Number (int): 8680654182241033620947401308782884527
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 19:58:76:5a:cf:f6:ec:ec:38:5d:93:d3:b4:15:07:a8:c1:13:11:62
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7

Fingerprint (sha1): 1d:d4:19:81:61:f0:b0:12:13:38:cb:12:80:91:74:f2:57:de:41:d8
Fingerprint (sha256): 1f:0e:21:17:cc:6c:c8:9c:6a:4b:d2:b5:0a:5a:97:24:25:3c:f2:4b:f5:d5:99:77:74:ca:b1:9e:28:a6:57:f8

Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl

Check the revocation status for certificate *.tle.courses.open.uwi.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.tle.courses.open.uwi.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.tle.courses.open.uwi.edu

Other certificates including the domain name uwi.edu

(limited to 100 certificates)
moodlerooms.com
uwischolar.sta.uwi.edu
blackboardopenlms.com
*.cavehill.uwi.edu
*.uwi.edu
mysta.uwi.edu
clinicallabs.mona.uwi.edu
uwischolar.sta.uwi.edu
libguides.uwi.edu
moodlerooms.com
uwischolar.sta.uwi.edu
MAIL.STA.UWI.EDU
my.uwi.edu
clinicallabs.mona.uwi.edu
dataverse.sta.uwi.edu
libguides.uwi.edu
idcard.sta.uwi.edu
uwischolar.sta.uwi.edu
*.library.open.uwi.edu
ssrpm.cavehill.uwi.edu
geomatics.sta.uwi.edu
moodlerooms.com
moodlerooms.com
peoplesoftportal1.sta.uwi.edu
ssb2.sta.uwi.edu
uwischolar.sta.uwi.edu
journals.sta.uwi.edu
moodlerooms.com
moodlerooms.com
redcap.mona.uwi.edu
uwischolar.sta.uwi.edu
moodlerooms.com
sta.uwi.edu
uwispace.sta.uwi.edu
uwischolar.sta.uwi.edu
innovation.cavehill.uwi.edu
clinicallabs.mona.uwi.edu
moodlerooms.com
eservices.mona.uwi.edu
requirements.open.uwi.edu
ourvle.mona.uwi.edu
servicedesk.sta.uwi.edu
my.uwi.edu
apps.sta.uwi.edu
libraries.sta.uwi.edu
journals.sta.uwi.edu
journals.sta.uwi.edu
mycas.sta.uwi.edu
careers.sta.uwi.edu
support.mona.uwi.edu
www.mona.uwi.edu
uwischolar.sta.uwi.edu
idcard-login.sta.uwi.edu
test-research-clinic.cavehill.uwi.edu
libraries.sta.uwi.edu
ourvle.mona.uwi.edu
fsweb.sta.uwi.edu
mycas.sta.uwi.edu
my.uwi.edu
*.global.uwi.edu
enroltest.myelearning.sta.uwi.edu
moodlerooms.com
my.uwi.edu
www.uwi.edu
journals.sta.uwi.edu
ban.mona.uwi.edu
uwischolar.sta.uwi.edu
libraries.sta.uwi.edu
uwischolar.sta.uwi.edu
archivespace.sta.uwi.edu
blackboardopenlms.com
staevisionsstvm.sta.uwi.edu
uwischolar.sta.uwi.edu
uwischolar.sta.uwi.edu
libraries.sta.uwi.edu
mycavehill.uwi.edu
apps.mona.uwi.edu
uwischolar.sta.uwi.edu
apps.mona.uwi.edu
libguides.uwi.edu
journals.sta.uwi.edu
downloads.open.uwi.edu
*.cavehill.uwi.edu
staevisionsstvm.sta.uwi.edu
my.uwi.edu
moodlerooms.com
espro.mona.uwi.edu
journals.sta.uwi.edu
sta.uwi.edu
mycas.open.uwi.edu
journals.sta.uwi.edu
moodlerooms.com
servicedesk.sta.uwi.edu
geomatics.sta.uwi.edu
journals.sta.uwi.edu
moodlerooms.com
mail.sta.uwi.edu
*.tle.courses.open.uwi.edu
MAIL.STA.UWI.EDU
uwispace.sta.uwi.edu

Certificate

The complete raw certificate details for *.tle.courses.open.uwi.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIQBofVS3UzI8S++GiUn452rzANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRUaGF3dGUgVExTIFJTQSBDQSBHMTAe
Fw0xODA4MzAwMDAwMDBaFw0yMDEwMjExMjAwMDBaMIGGMQswCQYDVQQGEwJCQjEU
MBIGA1UEBxMLU3QuIE1pY2hhZWwxJjAkBgNVBAoTHVVuaXZlcnNpdHkgb2YgdGhl
IFdlc3QgSW5kaWVzMRQwEgYDVQQLEwtPcGVuIENhbXB1czEjMCEGA1UEAwwaKi50
bGUuY291cnNlcy5vcGVuLnV3aS5lZHUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDCfq4b/fM9NaCHv/J2lZ8MjEfpaTz56DLA9/RrzRRuHle0X4xWIDLW
t2qoGm5YqfQesuDrr1er3bplzTvh+JR5rTXitSY3m0BtNNBTXJX3KnXwTYw6Dyll
vfnwisX91yrgnpJ0451W0fGuhF8DI3lHZLPdqha8KjCdVZWGjV5IHeAke70vZw4K
Xyz2CuaWBsKEANdRR9QAwVrgpXFjewbH3xu6GqfS0PMZIMr5w0EkTGR7PUYld1RQ
Vw84Li//a6yCk4SgH9sh3+2g7eBm6m7J5pAcqhzuBs/+2zvcwmSI6BH/ro97d+gk
OJ9K+8gB+HoLgYZkhTPdYg6ruwB83ScJAgMBAAGjggG3MIIBszAfBgNVHSMEGDAW
gBSljP4yzOsPLNQZxgi4ACSIXcPFtzAdBgNVHQ4EFgQUGVh2Ws/27Ow4XZPTtBUH
qMETEWIwJQYDVR0RBB4wHIIaKi50bGUuY291cnNlcy5vcGVuLnV3aS5lZHUwDgYD
VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNV
HR8ENDAyMDCgLqAshipodHRwOi8vY2RwLnRoYXd0ZS5jb20vVGhhd3RlVExTUlNB
Q0FHMS5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYc
aHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIwcAYIKwYBBQUH
AQEEZDBiMCQGCCsGAQUFBzABhhhodHRwOi8vc3RhdHVzLnRoYXd0ZS5jb20wOgYI
KwYBBQUHMAKGLmh0dHA6Ly9jYWNlcnRzLnRoYXd0ZS5jb20vVGhhd3RlVExTUlNB
Q0FHMS5jcnQwCQYDVR0TBAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG
9w0BAQsFAAOCAQEAAazmxeCsA3sZjVLB49ALHLeE6xCJ8JkTaSWsIqvZS53W+Tyx
imI9yY6G3nz8zuD3BGTYFyZ95fAvpAosnfcxXJwGKKnnXo6/DGi/jRUmTKt1AeZS
xwD70LGmKn7uQLquC7uqiRxWG9o+qXAfKchnwGTpeMb+8lzhVjYmtc3vOoM1JoOy
9Nxi1z9IFaKX+IsXUCW0VfEtPf1Keu6DAV6Gtzx3Y+txHE/BZrzuGoQNqjl2Y21o
rdLloEwbb9m/cV1soAg4+1vf8Nl6fG5wkdyCiwgoQ9dnaMPUwVZzK4Os5NZo7Iry
OPBiwWmKF0E62Feo9wEK5/n+U2KptsYH3hfoXw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwn6uG/3zPTWgh7/ydpWf
DIxH6Wk8+egywPf0a80Ubh5XtF+MViAy1rdqqBpuWKn0HrLg669Xq926Zc074fiU
ea014rUmN5tAbTTQU1yV9yp18E2MOg8pZb358IrF/dcq4J6SdOOdVtHxroRfAyN5
R2Sz3aoWvCownVWVho1eSB3gJHu9L2cOCl8s9grmlgbChADXUUfUAMFa4KVxY3sG
x98buhqn0tDzGSDK+cNBJExkez1GJXdUUFcPOC4v/2usgpOEoB/bId/toO3gZupu
yeaQHKoc7gbP/ts73MJkiOgR/66Pe3foJDifSvvIAfh6C4GGZIUz3WIOq7sAfN0n
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8680654182241033620947401308782884527
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-21 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'St. Michael'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of the West Indies'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Open Campus'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.tle.courses.open.uwi.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24552699456161579102296817464940137090580058213644207480132040031235863725244891923811467395884554001583899290451413116333233336231550770370971103092728383529841212952489077519982957938817309790466632740869457063578408449657798828759019363371638150153195995057020118280543339924880912583222990099158280455881781317409102004006267005166288574548551909963499732027841985410777791159752503908030003042258756060700002561974107446310794589790848794548090990798821581374633121937767620000719228684491961696401079651353555834001328466516544056054253700303667507155708723110126495023864794460038793443437837263417265214007049
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1958765acff6ecec385d93d3b41507a8c1131162
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tle.courses.open.uwi.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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