api-dev.globalcrossing.com

- Global Crossing Telecommunications Inc. -

Issued by Thawte SSL CA

About this certificate

This digital certificate with serial number 23:13:c7:80:d3:87:77:60:3f:7e:99:b5:49:8e:5c:86 was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Global Crossing Telecommunications Inc.

Organization: Global Crossing Telecommunications Inc.
Organization unit: IT
State / Province: New York
Locality: Rochester
Country: US

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 23:13:c7:80:d3:87:77:60:3f:7e:99:b5:49:8e:5c:86
Serial Number (int): 46625679898965251579850844295467523206
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: a7:a2:83:bb:34:45:40:3d:fc:d5:30:4f:12:b9:3e:a1:01:9f:f6:db

Fingerprint (sha1): df:9d:f8:0e:d9:e1:a4:d3:35:2b:07:0e:52:29:c7:43:bf:4a:d0:fa
Fingerprint (sha256): 25:22:25:1a:ce:cf:4a:6d:67:cd:73:1b:e1:77:0e:b2:43:81:c3:a3:e8:fd:e8:6f:75:d2:ce:45:a5:a8:0c:b9

Issuing Certificate URL: http://svr-ov-aia.thawte.com/ThawteOV.cer

Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-ov-crl.thawte.com/ThawteOV.crl

Check the revocation status for certificate api-dev.globalcrossing.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api-dev.globalcrossing.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api-dev.globalcrossing.com

Other certificates including the domain name globalcrossing.com

(limited to 100 certificates)
edge-ext.globalcrossing.com
zextsvcz.globalcrossing.com
enrollment.globalcrossing.com
uptime.globalcrossing.com
b2bqa.globalcrossing.com
b2bqa.globalcrossing.com
ecd.globalcrossing.com
lyncdiscoverinternal.globalcrossing.com
dialin-na.globalcrossing.com
extranet.globalcrossing.com
b2bdev.globalcrossing.com
dialin.globalcrossing.com
meet-na.globalcrossing.com
api-nvt.globalcrossing.com
tools.globalcrossing.com
api-dev.globalcrossing.com
ucommand.globalcrossing.com
api.globalcrossing.com
b2bp.globalcrossing.com
meet-na.globalcrossing.com
uptime.globalcrossing.com
owa2007.globalcrossing.com
xextsvcx.globalcrossing.com
desio.globalcrossing.com
b2bdev.globalcrossing.com
globalcrossing.com
activesync-roc.globalcrossing.com
owa-test.globalcrossing.com
b2buat.globalcrossing.com
cwa.globalcrossing.com
ecd.level3.com
myapps.globalcrossing.com
securityforms.globalcrossing.com
ucommand.globalcrossing.com
glbcap1.globalcrossing.com
webvpn.globalcrossing.com
apidev.globalcrossing.com
api-qa.globalcrossing.com
dialin.globalcrossing.com
meet.globalcrossing.com
api-dev.globalcrossing.com
uptime.globalcrossing.com
lyncdiscover.globalcrossing.com
api-sbe2.globalcrossing.com
uptime.globalcrossing.com
api-sb2.globalcrossing.com
owa2010.globalcrossing.com
owa2007.globalcrossing.com
desio.globalcrossing.com
globalcrossing.com
web-na.globalcrossing.com
glbcap1.globalcrossing.com
glbcwces.globalcrossing.com
glbcap1.globalcrossing.com
api-qa.globalcrossing.com
api-sb2.globalcrossing.com
ews.globalcrossing.com
ecd.globalcrossing.com
smtp.globalcrossing.com
share.globalcrossing.com
myapps.globalcrossing.com
activesync-test.globalcrossing.com
lyncdiscover.globalcrossing.com
owa2007.globalcrossing.com
YEXTSVCY.GLOBALCROSSING.COM
web-emea.globalcrossing.com
ucommand.globalcrossing.com
cu4web.globalcrossing.com
ap.beta.globalcrossing.com
owa2007.globalcrossing.com
b2b.globalcrossing.com
apidev.globalcrossing.com
owa2010.globalcrossing.com
glbcap1.globalcrossing.com
activesync2010.globalcrossing.com
cwa.globalcrossing.com
api-sb2.globalcrossing.com
apm.level3.com
api.globalcrossing.com
confsummary.globalcrossing.com
uptime.globalcrossing.com
owa.globalcrossing.com
xextsvcx.globalcrossing.com
api.globalcrossing.com
confsummary.globalcrossing.com
ecd.globalcrossing.com
enrollment.globalcrossing.com
glbcwces.globalcrossing.com
desio.globalcrossing.com
yextsvcy.globalcrossing.com
b2bdev.globalcrossing.com
b2b.globalcrossing.com
cwa.globalcrossing.com
share.globalcrossing.com
api-sbe2.globalcrossing.com
api-sb.globalcrossing.com
apidev.globalcrossing.com
enrollment.globalcrossing.com
b2bp.globalcrossing.com
apicert.globalcrossing.com

Certificate

The complete raw certificate details for api-dev.globalcrossing.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgIQIxPHgNOHd2A/fpm1SY5chjANBgkqhkiG9w0BAQUFADA8
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMVGhhd3RlLCBJbmMuMRYwFAYDVQQDEw1U
aGF3dGUgU1NMIENBMB4XDTEzMDQwODAwMDAwMFoXDTE0MDQyNzIzNTk1OVowgZgx
CzAJBgNVBAYTAlVTMREwDwYDVQQIEwhOZXcgWW9yazESMBAGA1UEBxQJUm9jaGVz
dGVyMTAwLgYDVQQKFCdHbG9iYWwgQ3Jvc3NpbmcgVGVsZWNvbW11bmljYXRpb25z
IEluYy4xCzAJBgNVBAsUAklUMSMwIQYDVQQDFBphcGktZGV2Lmdsb2JhbGNyb3Nz
aW5nLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK8C2FAu0GLA
mCUfC7phbwFZeRbgNGigxgBsnI7JTg8GhuhSzTE5STC6VMm7eq4w6qbb6Nl3CKe6
GW6r3lTVWP6Hbr5F4EdT6NwlmM/R6TAO08t4iQPo7xN6dhupnswVLMw/YAyD/tBZ
7DV2vKXO7eKWYwGD0N82XWLENnOHA8MpKXMD+xER2zvk6M09qKArWO0qNuaMxO4u
b7i29bJLbUNcH62URnHdk3TEPuPaA0m2TFiKxGCOhp8nAK0L00GkHzYY/ke4P0Y3
nvoifw1m7jx/+FcpEoQNbBTc9upuGoMargjrMPB2T/kmzpAMTGokHiKmmu7ls1ki
LcMmpimE7TECAwEAAaOCAXEwggFtMCUGA1UdEQQeMByCGmFwaS1kZXYuZ2xvYmFs
Y3Jvc3NpbmcuY29tMAkGA1UdEwQCMAAwQgYDVR0gBDswOTA3BgpghkgBhvhFAQc2
MCkwJwYIKwYBBQUHAgEWG2h0dHBzOi8vd3d3LnRoYXd0ZS5jb20vY3BzLzAOBgNV
HQ8BAf8EBAMCBaAwHwYDVR0jBBgwFoAUp6KDuzRFQD381TBPErk+oQGf9tswOgYD
VR0fBDMwMTAvoC2gK4YpaHR0cDovL3N2ci1vdi1jcmwudGhhd3RlLmNvbS9UaGF3
dGVPVi5jcmwwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMGkGCCsGAQUF
BwEBBF0wWzAiBggrBgEFBQcwAYYWaHR0cDovL29jc3AudGhhd3RlLmNvbTA1Bggr
BgEFBQcwAoYpaHR0cDovL3N2ci1vdi1haWEudGhhd3RlLmNvbS9UaGF3dGVPVi5j
ZXIwDQYJKoZIhvcNAQEFBQADggEBAAHz2baNQrn5Nm6up/K8LKNRtiA/H4tXwRlj
ACIFWkObv98/8AE7HRJ/jEc6lEY3bjo4lTUhlfjPmBA63ixicHmKwt/Hh2Ju2o9z
Zb0XNCvcWn3tjNinKv5JsLpRxUtvToMWOMCtKGK9WtU7mXdl0ohIq9TuSt1Q3nBO
j3HXW624saPxSTRqY2yOeWdmmKQx+KOs2+Gm1HMo+ADzBfGnJnmQEJtNZMkIVy3G
tGyCtXo90OEWuUlGxwKFON4ADIco1J9CwMPyJkDqzSVmNRLyUeDYEb72yl4DQoN1
I6xq0mrfQRWF2SGcKbEgt0t4kq+S1bvkpuebFpEo260oi3KXzQQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwLYUC7QYsCYJR8LumFv
AVl5FuA0aKDGAGycjslODwaG6FLNMTlJMLpUybt6rjDqptvo2XcIp7oZbqveVNVY
/oduvkXgR1Po3CWYz9HpMA7Ty3iJA+jvE3p2G6mezBUszD9gDIP+0FnsNXa8pc7t
4pZjAYPQ3zZdYsQ2c4cDwykpcwP7ERHbO+TozT2ooCtY7So25ozE7i5vuLb1sktt
Q1wfrZRGcd2TdMQ+49oDSbZMWIrEYI6GnycArQvTQaQfNhj+R7g/Rjee+iJ/DWbu
PH/4VykShA1sFNz26m4agxquCOsw8HZP+SbOkAxMaiQeIqaa7uWzWSItwyamKYTt
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 46625679898965251579850844295467523206
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-04-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Rochester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Global Crossing Telecommunications Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'api-dev.globalcrossing.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22093106277777006589514003793481163000177963223892283408370156001287307498872029555553321086247944925037802175645360652043034777023333462251779726995410559667829623285321657065944979393842650932113103220678732327109383853311935949410854508449473669937527456584326412320824348734674812241248897113618305826653232022237007812561560414339846329021994601150176572871668583739199354108380520173467617177902354138036724370951452531243558024921227774852467684979480591611818760439554994457068027953595983231359037033194555078876466778989092784997592528186833459707526813123584386601456629929914245220927537189883287284542769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-dev.globalcrossing.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a7a283bb3445403dfcd5304f12b93ea1019ff6db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-crl.thawte.com/ThawteOV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-aia.thawte.com/ThawteOV.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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