*.directchannel.it

- PRESS-DI ABBONAMENTI S.P.A. -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 09:f6:95:ca:c0:ca:97:c3:83:e2:ac:64:3f:87:d6:1b was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

PRESS-DI ABBONAMENTI S.P.A.

Organization: PRESS-DI ABBONAMENTI S.P.A.
State / Province: MILANO
Locality: MILANO
Country: IT

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:f6:95:ca:c0:ca:97:c3:83:e2:ac:64:3f:87:d6:1b
Serial Number (int): 13243395132049624018259891364337014299
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e7:0f:9b:b0:d3:cc:63:c0:b3:9f:a4:5a:77:bd:35:4d:cd:5c:30:12
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 29:68:76:54:92:b6:ce:c1:2d:49:3a:14:4a:f2:aa:14:b3:e1:f6:78
Fingerprint (sha256): 21:8a:28:df:42:4d:1b:56:77:f6:c4:dd:1d:ba:c8:a4:55:f2:3f:e8:d2:36:6e:1a:5b:cf:65:01:51:c6:c5:f8

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate *.directchannel.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.directchannel.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.directchannel.it
directchannel.it

Other certificates including the domain name directchannel.it

(limited to 100 certificates)
sgboxportal.sgbox.it
support.eposnw.com
supportdesk.saluconnect.com
help.lbm.network
assistenza.edilbruny.it
assistenza.cmstlc.it
support.xifram.it
support.seosmash.it
chargewell.mobile-xl.eu
procedure.technoparts.it
soporte.fifa23legacycup.pro
help.interfone.be
ts.parcum.team
support.inovatraining.com
asup.fancom.com
assistenza.edilbruny.it
assistenza.edilbruny.it
assistenza.edilbruny.it
support.despeelgoedschuit.nl
help.interfone.be
assistenza.edilbruny.it
aboma.mijnfleetkennis.nl
support.e-smartsys.com
users.digitrame.fr
ticket.widemann.gmbh
*.directchannel.it
*.directchannel.it
helpdesk.itconsulting.cologne
helpdesk.itconsulting.cologne
support.inovatraining.com
assistenza.edilbruny.it
support.medianit.co.uk
chargewell.mobile-xl.eu
assistenza.edilbruny.it
hc.tr7.com
suporte.tdoispontos.pt
support.xifram.it
support.medianit.co.uk
support.justin-legal.com
helpdesk.pumtrix.com
cetec.support.arlian.fr
support.xifram.it
directchannel.it
directchannel.it
asup.fancom.com
*.directchannel.it
support.kw-management.de
support.manstein.at
support.medianit.co.uk
support.kw-management.de
support.despeelgoedschuit.nl
supporto.directchannel.it
*.directchannel.it
help.feret.com
assistenza.edilbruny.it
support.airgp.co.uk
help.lbm.network
support.imineit.cloud
support.despeelgoedschuit.nl
support.airgp.co.uk
support.medianit.co.uk
support.smarthome247.com.mt
helpdesk.dataroad.pt
helpdesk.atlastech.group
sgboxportal.sgbox.it
ts.parcum.team
ts.parcum.team
cetec.support.arlian.fr
help.syntomax.com
support.smarthome247.com.mt
support.inovatraining.com
support.eposnw.com
support.airgp.co.uk
support.innovaweb.tech
support.manstein.at
supportdesk.saluconnect.com
helpdesk.itconsulting.cologne
users.digitrame.fr
asup.fancom.com
support.airgp.co.uk
support.lnmlaser.com
helpdesk.pumtrix.com
support.manstein.at
supportdesk.saluconnect.com
assistenza.edilbruny.it
cetec.support.arlian.fr
support.les7royaumes.com
ts.parcum.team
support.justin-legal.com
assistenza.edilbruny.it
users.digitrame.fr
assistenza.edilbruny.it
procedure.technoparts.it
help.feret.com
support.innovaweb.tech
support.e-smartsys.com
assistenza.edilbruny.it
procedure.technoparts.it
support.innovaweb.tech
assistenza.cmstlc.it

Certificate

The complete raw certificate details for *.directchannel.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGDTCCBPWgAwIBAgIQCfaVysDKl8OD4qxkP4fWGzANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMRswGQYDVQQDExJUaGF3dGUgUlNBIENBIDIwMTgwHhcN
MTgwNTA4MDAwMDAwWhcNMTgxMjAxMTIwMDAwWjByMQswCQYDVQQGEwJJVDEPMA0G
A1UECBMGTUlMQU5PMQ8wDQYDVQQHEwZNSUxBTk8xJDAiBgNVBAoTG1BSRVNTLURJ
IEFCQk9OQU1FTlRJIFMuUC5BLjEbMBkGA1UEAwwSKi5kaXJlY3RjaGFubmVsLml0
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQVy78VfIiL0F+K1lMPx
a6ztwv0ghcL3vQtS0a6vObSNU2TsCl7P2ob0Mxy3tAaerl4kEai1vzTjAMyz9jsI
QJ1l7Sf4bTS8eJCF0Az+eFuwa5/PGV1exRZoZbTufb7tUmwH0gKIdq4bJoJKC0zU
cz2Ai7Ob+GRglczNRNKkdQRclaYgTRobayVuOVKKLDuhtnTK0Ce4FQqIwxgNMgWr
qNpiX+UJThBlRdP6wh7lbso8tqsr2kbGsrQVeHlu6CieOlmVy2IOYHaH5jHkltpp
JegmVO3b7INymZbyQ1UUIKA23C14yNSaQMtNAbi4ADIfGvHE7Hg2nUMBjZomEaE+
YQIDAQABo4ICszCCAq8wHwYDVR0jBBgwFoAUo8heZVTlMHjBBeoHCmpZzLn+3low
HQYDVR0OBBYEFOcPm7DTzGPAs5+kWne9NU3NXDASMC8GA1UdEQQoMCaCEiouZGly
ZWN0Y2hhbm5lbC5pdIIQZGlyZWN0Y2hhbm5lbC5pdDAOBgNVHQ8BAf8EBAMCBaAw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDoGA1UdHwQzMDEwL6AtoCuG
KWh0dHA6Ly9jZHAudGhhd3RlLmNvbS9UaGF3dGVSU0FDQTIwMTguY3JsMEwGA1Ud
IARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRp
Z2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMG8GCCsGAQUFBwEBBGMwYTAkBggrBgEF
BQcwAYYYaHR0cDovL3N0YXR1cy50aGF3dGUuY29tMDkGCCsGAQUFBzAChi1odHRw
Oi8vY2FjZXJ0cy50aGF3dGUuY29tL1RoYXd0ZVJTQUNBMjAxOC5jcnQwCQYDVR0T
BAIwADCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2AKS5CZC0GFgUh7sTosxncAo8
NZgE+RvfuON3zQ7IDdwQAAABYz/RAwoAAAQDAEcwRQIhAOHxFD/CN9mSV7tdhhv7
9weVrUTie2Kw3DaafKxDhGLtAiA8epsuZWAUNuEZ8pBFQU7S+OxkahTaRLp7Ablg
lJcctAB3AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABYz/RBIIA
AAQDAEgwRgIhAKKMHVWnlfDT2wSCWTQRJiOj3UEkLTZzf+WWzlwCsG9oAiEAvWMh
DRCzQG14hJnjdXbFLpAupmO0F7ReUDakW91/cGQwDQYJKoZIhvcNAQELBQADggEB
AEU16REPTaGzi4LiCVZJd8mPcrcPjyRDguVKkhOKnfTrD6Dqoob5YnFIpS38lzRu
/0zmkwMVC5hhBEdSI7JmK60VAfB6Vi5GyRAmTzWLta3tBX++GUTySXNUly3UvEJb
MCc8rWnd9O4HH41RGshTerxeqVLe3hiebwnXcPEWjRAZwWM7BUiBh8fu5PEOudNM
t+Z02mb3/HtVGAk3Jgq4KQ6TvfcDmcp/WO/l2WpzaQNE1nc+JHdzCRnBAhQzTVaj
eSA161qcFdNOA1DQuOjzshkAGzCp26CMVmpMbNze1OFsxG07q/MWHhWm8aPDgFwv
S+KM1Qx9OTYqEvUVHg280Iw=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQVy78VfIiL0F+K1lMPx
a6ztwv0ghcL3vQtS0a6vObSNU2TsCl7P2ob0Mxy3tAaerl4kEai1vzTjAMyz9jsI
QJ1l7Sf4bTS8eJCF0Az+eFuwa5/PGV1exRZoZbTufb7tUmwH0gKIdq4bJoJKC0zU
cz2Ai7Ob+GRglczNRNKkdQRclaYgTRobayVuOVKKLDuhtnTK0Ce4FQqIwxgNMgWr
qNpiX+UJThBlRdP6wh7lbso8tqsr2kbGsrQVeHlu6CieOlmVy2IOYHaH5jHkltpp
JegmVO3b7INymZbyQ1UUIKA23C14yNSaQMtNAbi4ADIfGvHE7Hg2nUMBjZomEaE+
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13243395132049624018259891364337014299
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-01 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MILANO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MILANO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PRESS-DI ABBONAMENTI S.P.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.directchannel.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20832007307201812496269382688881934371734278296803754197173744317752983876309860719606791175857086221808981906928770950332499949771264852470146687754638885203521061574778364649847236785671794086888453120631311652008383575623055033082174838079873271751472243454478996499165101791318494881553704782509607873781166380006479711764355067258854143819413755490060309797020572890680163172534621583388537738267700398058751293935689047401620868546078424838348201887439147687435693093822291461553789685053007409151426615661678044094794401058127545711080704882404953166727907177760337410694766243052719204908235043375780513005153
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e70f9bb0d3cc63c0b39fa45a77bd354dcd5c3012
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.directchannel.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directchannel.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001633fd1030a0000040300473045022100e1f1143fc237d99257bb5d861bfbf70795ad44e27b62b0dc369a7cac438462ed02203c7a9b2e65601436e119f29045414ed2f8ec646a14da44ba7b01b96094971cb40077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001633fd104820000040300483046022100a28c1d55a795f0d3db04825934112623a3dd41242d36737fe596ce5c02b06f68022100bd63210d10b3406d788499e37576c52e902ea663b417b45e5036a45bdd7f7064
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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