ksclib.keene.edu

- Keene State College -

Issued by Thawte SSL CA

About this certificate

This digital certificate with serial number 69:ca:ce:c2:fb:d0:e3:7c:fb:c3:a6:69:63:b7:93:38 was issued on by Thawte, Inc..

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Keene State College

Organization: Keene State College
Organization unit: Mason Library
State / Province: New Hampshire
Locality: Keene
Country: US

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 69:ca:ce:c2:fb:d0:e3:7c:fb:c3:a6:69:63:b7:93:38
Serial Number (int): 140621977147415350165618586232490005304
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: a7:a2:83:bb:34:45:40:3d:fc:d5:30:4f:12:b9:3e:a1:01:9f:f6:db

Fingerprint (sha1): 89:1b:a7:58:46:0a:5c:8e:d9:60:e1:04:80:f8:e9:1c:7a:c4:be:5c
Fingerprint (sha256): 22:d2:ce:40:5c:b7:5c:57:a5:0d:ae:80:c9:12:81:43:79:0e:da:d3:af:4b:c8:ec:e9:69:dc:f9:13:12:81:69

Issuing Certificate URL: http://tb.symcb.com/tb.crt

Revocation information

OCSP Server: http://tb.symcd.com
CRL Distribution Point: http://tb.symcb.com/tb.crl

Check the revocation status for certificate ksclib.keene.edu

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ksclib.keene.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

0-1.next.westlaw.com.ksclib.keene.edu
0-essential.bna.com.ksclib.keene.edu
0-images.webofknowledge.com.ksclib.keene.edu
0-jump.valueline.com.ksclib.keene.edu
0-site.ebrary.com.ksclib.keene.edu
0-ulrichsweb.serialssolutions.com.ksclib.keene.edu
0-wcs.webofknowledge.com.ksclib.keene.edu
0-www-secure.easybib.com.ksclib.keene.edu
0-www.agronomy.org.ksclib.keene.edu
0-www.jstor.org.ksclib.keene.edu
0-www.soils.org.ksclib.keene.edu
0-www.statista.com.ksclib.keene.edu
0-keene.kanopystreaming.com.ksclib.keene.edu
0-docuseek2.com.ksclib.keene.edu
ksclib.keene.edu

Other certificates including the domain name keene.edu

(limited to 100 certificates)
ksclib.keene.edu
pw.keene.edu
colleague.keene.edu
commons.keene.edu
online.keene.edu
keene.edu
sectest.keene.edu
stuplantestselfserv.keene.edu
celt.reclaimhosting.com
jade.keene.edu
library.keene.edu
celt.reclaimhosting.com
StuPlan.keene.edu
kscvpn.keene.edu
ksclib.keene.edu
bookstore.keene.edu
giving.keene.edu
keene.edu
ksclib.keene.edu
library.keene.edu
wpdev.keene.edu
ksclib.keene.edu
sci-1.keene.edu
fett.keene.edu
kscap-tmi01.keene.edu
blu-socket.keene.edu
dept.keene.edu
kscap-web02.keene.edu
commons.keene.edu
owa.keene.edu
ksclib.keene.edu
hmsweb.keene.edu
pw.keene.edu
ksclib.keene.edu
celt.reclaimhosting.com
cppm-radsec.unh.edu
dept.keene.edu
BLACK.KEENE.EDU
wpdev.keene.edu
colleague.keene.edu
library.keene.edu
www.keene.edu
kscap-idmsql.keene.edu
hale.keene.edu
ksclib.keene.edu
owl.keene.edu
ksclib.keene.edu
ksclib.keene.edu
library.keene.edu
ksclib.keene.edu
kscap-cwatest.keene.edu
dept.keene.edu
ksclib.keene.edu
mycourses.keene.edu
bookstore.keene.edu
ksclib.keene.edu
bond.keene.edu
HALE.KEENE.EDU
bookstore.keene.edu
www.keene.edu
liberty.keene.edu
bookstore.keene.edu
hale.keene.edu
jade.keene.edu
StuPlan.keene.edu
arms.keene.edu
fett.keene.edu
ksclib.keene.edu
bluecourseevals.keene.edu
minerva.keene.edu
alumni.keene.edu
django.keene.edu
ksclib.keene.edu
pw.keene.edu
vpn.keene.edu
academics.keene.edu
sites.keene.edu
libanswers.keene.edu
print.keene.edu
wpdev.keene.edu
kscap-web01.keene.edu
ksclib.keene.edu
wpdev.keene.edu
celt.reclaimhosting.com
stuplantest.keene.edu
clearpass-web.unh.edu
ksclib.keene.edu
ksclib.keene.edu
owlcardaccess.keene.edu
blu-gw2.keene.edu
jade.keene.edu
bookstore.keene.edu
owl.keene.edu
ksclib.keene.edu
fett.keene.edu
reslife.keene.edu
libanswers.keene.edu
keene.edu
sites.keene.edu
minerva.keene.edu

Certificate

The complete raw certificate details for ksclib.keene.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwM6BjH1kaOrbLyntEcC
DEXbYDURRsoS84p96HTkzPMMYEh+VSqusk7/74ki9ljAITYkAA41sJVioVNfkOMk
bS1WNHoo/fLwJYu8BoMAQV6ODccdNcX+aM50q4ihDkxiOs35EQzR3qP9slTpaR/l
Q4b2z8WvNtPYS8rXFKOjxGIQE44OOTTJh2siTADdfPaNRTjo/sAMWOjyartY9e1g
P1p1GntFVUDwmkaVuGFTHPZZIi9Wu/cpl3TJojjqu5Soz/sycVsAnMjxh60vTU1X
eFTinFxubnnfJdYFpBWwKUvhYfpIgiV/vu5t/CkofJ23oLIzC8l/BDVBHrWRRVgU
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 140621977147415350165618586232490005304
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-07-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Keene'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Keene State College'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Mason Library'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'ksclib.keene.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25123013812129423350766392136188314848739445470298800131739347657727538635387584184091331100851907737731681655109338226730110639799885509421937164336488143348441870820540021938376495239641978342984708247768350879304071430383935006766051783448465905397922692198555257423095542991234171162058162577084809255069661088127782980410793292068843131688047483640196146885049626187704567873924227731902101875416899299665801660392507056641556230904498266594139421755542982475053747471324212827084979161517601546114884926421990434926377111948583879951075314767515001401627961667761642178401944597692363458020447829623186877060187
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (580 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-1.next.westlaw.com.ksclib.keene.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-essential.bna.com.ksclib.keene.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-images.webofknowledge.com.ksclib.keene.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-jump.valueline.com.ksclib.keene.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-site.ebrary.com.ksclib.keene.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-ulrichsweb.serialssolutions.com.ksclib.keene.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-wcs.webofknowledge.com.ksclib.keene.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-www-secure.easybib.com.ksclib.keene.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-www.agronomy.org.ksclib.keene.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-www.jstor.org.ksclib.keene.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-www.soils.org.ksclib.keene.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-www.statista.com.ksclib.keene.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-keene.kanopystreaming.com.ksclib.keene.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-docuseek2.com.ksclib.keene.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ksclib.keene.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a7a283bb3445403dfcd5304f12b93ea1019ff6db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tb.symcb.com/tb.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tb.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tb.symcb.com/tb.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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