thalesrc.otxlab.net

- Open Text Corporation -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 4b:7d:db:c9:fa:d1:f1:d5:12:06:e0:7c:32:44:71:60 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Open Text Corporation

Organization: Open Text Corporation
Organization unit: Cloud Services
State / Province: Ontario
Locality: Waterloo
Country: CA

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 4b:7d:db:c9:fa:d1:f1:d5:12:06:e0:7c:32:44:71:60
Serial Number (int): 100345594641374468976720098642450739552
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 49:a1:54:5d:36:1b:be:19:72:cd:c9:09:a5:c7:73:4b:e7:71:ea:4e
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 4c:d1:5f:48:b1:b5:35:8c:40:9a:cb:3f:93:f7:89:2d:ef:33:ab:78
Fingerprint (sha256): 23:a7:39:cc:4b:97:1f:64:17:4e:7b:92:15:61:43:25:49:3f:77:64:c8:a5:cd:3e:c4:6a:f9:9b:2f:21:7a:9d

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate thalesrc.otxlab.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for thalesrc.otxlab.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

thalesrc.otxlab.net
www.thalesrc.otxlab.net

Other certificates including the domain name otxlab.net

(limited to 100 certificates)
bp2-tcserver-l002.otxlab.net
bp2-svnserver-l001.otxlab.net
bp2-bdprod-l001.otxlab.net
otxlab.net
ban-vcd02-l002.otxlab.net
tk2-vcdconsoleproxy02-l001.otxlab.net
archiveserver.otxlab.net
*.otxlab.net
bp2-bdprod-l001.otxlab.net
bp2-vagwy-d001.otxlab.net
ban-vcdconsoleproxy02-l001.otxlab.net
bp2-artprd01-l001.otxlab.net
otxlab.net
ban-vcd.otxlab.net
otxlab.net
*.cfcr-lab.bp-paas.otxlab.net
srinivas-dev.otxlab.net
ban-vcdconsoleproxy02-l001.otxlab.net
thalesrc.otxlab.net
*.cluster-1.otl-ps-coe-analytics-mbir.otxlab.net
perforce.otxlab.net
otxlab.net
dcsp2016.otxlab.net
bp2-vagwy-d001.otxlab.net
*.bp-paas-ci.otxlab.net
bp2-bdprod-l001.otxlab.net
tk2-vcd02-l002.otxlab.net
bp2-bdtest-l001.otxlab.net
tk2-vcd02-l002.otxlab.net
thalescs.otxlab.net
wlrbprod01.opentext.net
bp2-tcserver-l002.otxlab.net
bp2-tcserver-l001.otxlab.net
bp2-tcserver-l002.otxlab.net
otxlab.net
bp2-bdtest-l001.otxlab.net
wlrbprod01.opentext.net
mu2otmm18.otxlab.net
mu2otmm18.otxlab.net
win12r2sql12sp2.otxlab.net
ban-vcdconsoleproxy02-l002.otxlab.net
bp2-tcserver-l002.otxlab.net
tk2-vcdconsoleproxy02-l001.otxlab.net
dcsp2016.otxlab.net
lab.archive.de.otxlab.net
bp2-bdprod-l001.otxlab.net
otxlab.net
archiveserver.otxlab.net
win2016-std-001.otxlab.net
ban-vcd02-l001.otxlab.net
*.bp-paas.otxlab.net
cs242vm.otxlab.net
*.cluster-1.otl-ps-coe-analytics-mbir.otxlab.net
vmxecmsf2k19.otxlab.net
tk2-vcd02-l001.otxlab.net
*.bp-paas.otxlab.net
perforce.otxlab.net
*.otxlab.net
vmxecmsf2k19.otxlab.net
mb-rhel-test.otxlab.net
bp2tfiblis.otxlab.net
bp2tfiblis.otxlab.net
bp2-tcserver-l001.otxlab.net
ban-vcd.otxlab.net
*.cfcr-lab.bp-paas.otxlab.net
*.cfcr-lab.bp-paas.otxlab.net
ban-vcdconsoleproxy02-l001.otxlab.net
thalescs.otxlab.net
ban-vcdconsoleproxy02-l002.otxlab.net
thalesrc.otxlab.net
bp2-vagwy-q002.otxlab.net
ban-vcdconsoleproxy02-l001.otxlab.net
ban-vcd.otxlab.net
tk2-vcdconsoleproxy02-l002.otxlab.net
cs242vm.otxlab.net
bp2-artprd01-l001.otxlab.net
ban-vcdconsoleproxy02-l002.otxlab.net
win2016-std-001.otxlab.net
tk2-vcdconsoleproxy02-l002.otxlab.net
ban-vcdconsoleproxy02-l002.otxlab.net
tk2-vcd02-l001.otxlab.net
ban-vcd.otxlab.net
mb-rhel-test.otxlab.net
win12r2sql12sp2.otxlab.net
ban-vcd02-l002.otxlab.net
*.cfcr-lab.bp-paas.otxlab.net
snapntws19vm1.otxlab.net
snapntws19vm1.otxlab.net
bp2-svnserver-l001.otxlab.net
*.bp-paas.otxlab.net
ban-vcd02-l001.otxlab.net
tradinggrid.otxlab.net

Certificate

The complete raw certificate details for thalesrc.otxlab.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+yPjnRjJBjMdT9xZZbb
rMdsvzNpOEPM8gXQ7fO4qup2kxhqqw9VJn0k7sgbWIdBMs29pIyF7guvK6Kj1zEi
dFTmfDbr7f8pTz6h3x2Y6A+cZ4HNd4ytsACnUfZ7MSiUAfn2rTSbhDFrxbq7hS8s
q1Sac1j0rPdXTyYe/UKXbsMr9OZK92p0oPQA7RE5TIvBLwIQO5pYaMQ3I3cxbLr5
lRR0Zfc6s6yKxqBdPivuadbewmg19u0op/m2eNF+S0eBzcvJ29lAT2Dar9FHZHB2
GOHvaCCd7q2JTzBo6l8wgAmt28R+p1F+G3aYgHGZj2OYpGTcfOx+CazZkXt3lWBZ
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 100345594641374468976720098642450739552
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Waterloo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Open Text Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cloud Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thalesrc.otxlab.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20693496171586689506534317475200426906366211577136738474820417145956338596763301957025395390047365385413727649010164463926082913040902736241978255898037922700724449678191774498298194094159874616132522591592396045755923110402097432750380125840230426127332954602106471892831581769726646375741549309196371738519072080983499310490453842548985472717865518349855885828104871135511701055345998365397029369210013951046540586548555772882291702755019064740967603838504441331210064690418734377233621435248082209435978485812621061197241811910163251763137021659557085067156850276198519265677917984696667411129422045583881711671751
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							49a1545d361bbe1972cdc909a5c7734be771ea4e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thalesrc.otxlab.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thalesrc.otxlab.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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