*.opt.nc
- OFFICE DES POSTES ET TELECOMMUNICATIONS DE NOUVELLE-CALEDONIE -
Issued by Thawte RSA CA 2018
About this certificate
This digital certificate with serial number 01:08:da:30:b6:6f:15:87:09:52:07:d4:6f:a5:46:43 was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
OFFICE DES POSTES ET TELECOMMUNICATIONS DE NOUVELLE-CALEDONIE
Organization:
OFFICE DES POSTES ET TELECOMMUNICATIONS DE NOUVELLE-CALEDONIE
Locality:
NOUMEA
Country: NC
Country: NC
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 01:08:da:30:b6:6f:15:87:09:52:07:d4:6f:a5:46:43Serial Number (int): 1375191795359155456912900484864755267
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: e5:94:5a:00:54:71:24:51:f3:29:5a:5e:64:f5:5f:06:11:19:80:6a
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a
Fingerprint (sha1): 01:4b:ba:33:ca:ec:4c:0d:de:ba:24:dd:04:1c:21:3a:65:a3:5f:e4
Fingerprint (sha256): 1f:f0:f3:c8:1f:ba:97:46:0a:e1:16:b5:57:e0:34:a6:8f:3b:3d:df:df:24:59:f8:a7:ca:1f:1e:33:7c:4e:57
Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt
Revocation information
OCSP Server: http://status.thawte.comCRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl
Check the revocation status for certificate *.opt.nc
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.opt.nc
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.opt.nc
opt.nc
opt.nc
Other certificates including the domain name opt.nc
(limited to 100 certificates)
helios.opt.nc
*.opt.nc
eos.opt.nc
*.opt.nc
*.opt.nc
sip.opt.nc
helios.opt.nc
*.opt.nc
*.opt.nc
*.opt.nc
*.opt.nc
*.opt.nc
maps.opendata.opt.nc
eos.opt.nc
helios.opt.nc
*.opt.nc
eos.opt.nc
*.opt.nc
maps.opendata.opt.nc
*.opt.nc
sip.opt.nc
*.opt.nc
*.opt.nc
*.opt.nc
eos.opt.nc
eos.opt.nc
*.opt.nc
helios.opt.nc
*.opt.nc
*.opt.nc
helios.opt.nc
webmail.opt.nc
*.opt.nc
*.opt.nc
*.opt.nc
*.opt.nc
maps.opendata.opt.nc
*.opt.nc
payments.opt.nc
maps.opendata.opt.nc
*.opt.nc
sip.opt.nc
maps.opendata.opt.nc
*.opt.nc
*.opt.nc
sip.opt.nc
eos.opt.nc
*.opt.nc
*.opt.nc
*.opt.nc
maps.opendata.opt.nc
sip.opt.nc
*.opt.nc
*.opt.nc
sip.opt.nc
*.opt.nc
webmail.opt.nc
eos.opt.nc
*.opt.nc
titan.opt.nc
*.opt.nc
titan.opt.nc
*.opt.nc
*.opt.nc
payments.opt.nc
titan.opt.nc
eos.opt.nc
webmail.opt.nc
maps.opendata.opt.nc
*.opt.nc
*.opt.nc
*.opt.nc
titan.opt.nc
*.opt.nc
*.opt.nc
*.opt.nc
auth.opt.nc
*.opt.nc
maps.opendata.opt.nc
*.opt.nc
eos.opt.nc
*.opt.nc
*.opt.nc
sip.opt.nc
helios.opt.nc
*.opt.nc
*.opt.nc
*.opt.nc
*.opt.nc
*.opt.nc
maps.opendata.opt.nc
eos.opt.nc
helios.opt.nc
*.opt.nc
eos.opt.nc
*.opt.nc
maps.opendata.opt.nc
*.opt.nc
sip.opt.nc
*.opt.nc
*.opt.nc
*.opt.nc
eos.opt.nc
eos.opt.nc
*.opt.nc
helios.opt.nc
*.opt.nc
*.opt.nc
helios.opt.nc
webmail.opt.nc
*.opt.nc
*.opt.nc
*.opt.nc
*.opt.nc
maps.opendata.opt.nc
*.opt.nc
payments.opt.nc
maps.opendata.opt.nc
*.opt.nc
sip.opt.nc
maps.opendata.opt.nc
*.opt.nc
*.opt.nc
sip.opt.nc
eos.opt.nc
*.opt.nc
*.opt.nc
*.opt.nc
maps.opendata.opt.nc
sip.opt.nc
*.opt.nc
*.opt.nc
sip.opt.nc
*.opt.nc
webmail.opt.nc
eos.opt.nc
*.opt.nc
titan.opt.nc
*.opt.nc
titan.opt.nc
*.opt.nc
*.opt.nc
payments.opt.nc
titan.opt.nc
eos.opt.nc
webmail.opt.nc
maps.opendata.opt.nc
*.opt.nc
*.opt.nc
*.opt.nc
titan.opt.nc
*.opt.nc
*.opt.nc
*.opt.nc
auth.opt.nc
*.opt.nc
maps.opendata.opt.nc
Certificate
The complete raw certificate details for *.opt.nc in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGeDCCBWCgAwIBAgIQAQjaMLZvFYcJUgfUb6VGQzANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMRswGQYDVQQDExJUaGF3dGUgUlNBIENBIDIwMTgwHhcN MTkxMjEyMDAwMDAwWhcNMjIwMjA5MTIwMDAwWjB5MQswCQYDVQQGEwJOQzEPMA0G A1UEBxMGTk9VTUVBMUYwRAYDVQQKEz1PRkZJQ0UgREVTIFBPU1RFUyBFVCBURUxF Q09NTVVOSUNBVElPTlMgREUgTk9VVkVMTEUtQ0FMRURPTklFMREwDwYDVQQDDAgq Lm9wdC5uYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM51XEZeZddy 5Ubbq3uCJJ8nfuiy3/Et7jeV3imB8XUpliO2nNon9iJ6RP7iXVA87zMU3dxuA9Tk GrxxoyYm8S/Yx1xUtQnH8fSMuQmBLIwHHYHm4OfqPOQxKtyp/3lr9khSE8JOuEWC OK+qWfbhe9nGOR5BjA7qdk1IVDk0dkktCR3IVfdRWoiFbwU2t3M44ISihFrLNGUB 5CzuKJbSqBkUXo+st6th9rtSIzcJyVCbhr0rnAZ8QZX6cTAkj9uBu4sLPCeQ9AWF e4VpqiLWQtiXHOGDNv2B5+Fa2oVaVCJDNGnLId7fue53pcUDYkIfYE52EltqUYRw awYxMqT3mxcCAwEAAaOCAxcwggMTMB8GA1UdIwQYMBaAFKPIXmVU5TB4wQXqBwpq Wcy5/t5aMB0GA1UdDgQWBBTllFoAVHEkUfMpWl5k9V8GERmAajAbBgNVHREEFDAS gggqLm9wdC5uY4IGb3B0Lm5jMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwOgYDVR0fBDMwMTAvoC2gK4YpaHR0cDovL2NkcC50 aGF3dGUuY29tL1RoYXd0ZVJTQUNBMjAxOC5jcmwwTAYDVR0gBEUwQzA3BglghkgB hv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQ UzAIBgZngQwBAgIwbwYIKwYBBQUHAQEEYzBhMCQGCCsGAQUFBzABhhhodHRwOi8v c3RhdHVzLnRoYXd0ZS5jb20wOQYIKwYBBQUHMAKGLWh0dHA6Ly9jYWNlcnRzLnRo YXd0ZS5jb20vVGhhd3RlUlNBQ0EyMDE4LmNydDAJBgNVHRMEAjAAMIIBfQYKKwYB BAHWeQIEAgSCAW0EggFpAWcAdgCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80O yA3cEAAAAW74QYF8AAAEAwBHMEUCIQCuClazXWyF9AgRwj+vn4wGLk6/f303dSXf ybxTN2QGvAIgJ43+zHm46TcOQSa+YYlEvXo4HeMyVwLHG9Z4FaXGn+kAdgCHdb/n WXz4jEOZX73zbv9WjUdWNv9KtWDBtOr/XqCDDwAAAW74QYIcAAAEAwBHMEUCIA7q tquCqfPO4yBLk4H3ctJaSCW/BMlzPKYxPIcPHoZOAiEApkpVFDbFPEzl/BuO1bb1 XWXtJvcyPhWlzgV5nibfvewAdQBWFAaaL9fC7NP14b1Esj7HRna5vJkRXMDvlJhV 1onQ3QAAAW74QYIQAAAEAwBGMEQCIE0Opx0FgxHdTSActfUiHN0uPhX+EbTf6lyf Ow/SYwcWAiB72QfG/9LdWGr3rP9T8xEve0Q7/Lx6Mh+ElXGSR4f42jANBgkqhkiG 9w0BAQsFAAOCAQEARfu5Ulw5yjrSIR8fK4Ctlk+c2lJ5gtvikXDsm72iL/oSy/3r FZyzonVAn1N0uDU9l/eTNkXnmifWuC+DYOfKGQMjqWU222AqKA84ngGxoq0JuaTD Ohr98hKmZxfxtW9twsrt9ukn4cjArJ8wxGro5IY4m+yJHu4vNM5Ct+JMqe50PERY IdRF2srFebv7KltTsBURtNKmQbru2ysrkMfQepJkQi/T7sSPNwXR2rFYkY9p3AxH XW82qJPbUarhDqEREwEAWY9MZm7IyGAQRyuKAJ6NxLEz5vLgl55Nz5W0yioMz63z ZI5zlCNJDBcGsQUYKMU2bQcBSdg9YzehHCTbzg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznVcRl5l13LlRture4Ik nyd+6LLf8S3uN5XeKYHxdSmWI7ac2if2InpE/uJdUDzvMxTd3G4D1OQavHGjJibx L9jHXFS1Ccfx9Iy5CYEsjAcdgebg5+o85DEq3Kn/eWv2SFITwk64RYI4r6pZ9uF7 2cY5HkGMDup2TUhUOTR2SS0JHchV91FaiIVvBTa3czjghKKEWss0ZQHkLO4oltKo GRRej6y3q2H2u1IjNwnJUJuGvSucBnxBlfpxMCSP24G7iws8J5D0BYV7hWmqItZC 2Jcc4YM2/YHn4VrahVpUIkM0acsh3t+57nelxQNiQh9gTnYSW2pRhHBrBjEypPeb FwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1375191795359155456912900484864755267 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-12 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-09 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NOUMEA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OFFICE DES POSTES ET TELECOMMUNICATIONS DE NOUVELLE-CALEDONIE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.opt.nc' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26062963417223774123309119872127966393891223847011234940689422520554868298052760457276291418374704611324179467315793234639351436200093854263353557806911299522396931473048502547974424958436555271602853427850386328703850694840186428505656563468504603597493562673848892441729961487932812816375786553891007392451979995012673350460801931415827958209828226593430902196625663991872820074765978125797896302120085382856281067308759820857019801834724578833498204070859167625578212121768315041810759350727410393251966818292846318731956013841394474851307953991320093422101223774725847681231476802419913985053257270398899786849047 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e5945a0054712451f3295a5e64f55f061119806a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.opt.nc' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opt.nc' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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