ksclib.keene.edu

- Keene State College -

Issued by Thawte SSL CA

About this certificate

This digital certificate with serial number 4f:7d:83:99:10:9a:66:24:d9:62:82:1d:ed:0c:1c:96 was issued on by Thawte, Inc..

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Keene State College

Organization: Keene State College
Organization unit: Mason Library
State / Province: New Hampshire
Locality: Keene
Country: US

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4f:7d:83:99:10:9a:66:24:d9:62:82:1d:ed:0c:1c:96
Serial Number (int): 105660717897030567558726697574290168982
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: a7:a2:83:bb:34:45:40:3d:fc:d5:30:4f:12:b9:3e:a1:01:9f:f6:db

Fingerprint (sha1): f8:a4:a9:66:02:00:06:ef:b5:7e:b0:5d:38:5d:8d:73:19:33:80:a4
Fingerprint (sha256): 27:e7:1b:d5:b2:11:0a:15:02:86:cc:07:38:35:70:88:8e:04:5f:09:cc:2a:4b:ee:41:9b:59:e1:36:0b:1f:f0

Issuing Certificate URL: http://tb.symcb.com/tb.crt

Revocation information

OCSP Server: http://tb.symcd.com
CRL Distribution Point: http://tb.symcb.com/tb.crl

Check the revocation status for certificate ksclib.keene.edu

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ksclib.keene.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

0-1.next.westlaw.com.ksclib.keene.edu
0-docuseek2.com.ksclib.keene.edu
0-essential.bna.com.ksclib.keene.edu
0-images.webofknowledge.com.ksclib.keene.edu
0-jump.valueline.com.ksclib.keene.edu
0-keene.kanopystreaming.com.ksclib.keene.edu
0-psycnet.apa.org.ksclib.keene.edu
0-research.valueline.com.ksclib.keene.edu
0-site.ebrary.com.ksclib.keene.edu
0-ulrichsweb.serialssolutions.com.ksclib.keene.edu
0-wcs.webofknowledge.com.ksclib.keene.edu
0-www-secure.easybib.com.ksclib.keene.edu
0-www.agronomy.org.ksclib.keene.edu
0-www.jstor.org.ksclib.keene.edu
0-www.soils.org.ksclib.keene.edu
0-www.statista.com.ksclib.keene.edu
0-www.thieme-connect.de.ksclib.keene.edu
0-www.digitaltheatreplus.com.ksclib.keene.edu
0-s3-euwest-1.amazonaws.com.ksclib.keene.edu
ksclib.keene.edu

Other certificates including the domain name keene.edu

(limited to 100 certificates)
ksclib.keene.edu
pw.keene.edu
colleague.keene.edu
commons.keene.edu
online.keene.edu
keene.edu
sectest.keene.edu
stuplantestselfserv.keene.edu
celt.reclaimhosting.com
jade.keene.edu
library.keene.edu
celt.reclaimhosting.com
StuPlan.keene.edu
kscvpn.keene.edu
ksclib.keene.edu
bookstore.keene.edu
giving.keene.edu
keene.edu
ksclib.keene.edu
library.keene.edu
wpdev.keene.edu
ksclib.keene.edu
sci-1.keene.edu
fett.keene.edu
kscap-tmi01.keene.edu
blu-socket.keene.edu
dept.keene.edu
kscap-web02.keene.edu
commons.keene.edu
owa.keene.edu
ksclib.keene.edu
hmsweb.keene.edu
pw.keene.edu
ksclib.keene.edu
celt.reclaimhosting.com
cppm-radsec.unh.edu
dept.keene.edu
BLACK.KEENE.EDU
wpdev.keene.edu
colleague.keene.edu
library.keene.edu
www.keene.edu
kscap-idmsql.keene.edu
hale.keene.edu
ksclib.keene.edu
owl.keene.edu
ksclib.keene.edu
ksclib.keene.edu
library.keene.edu
ksclib.keene.edu
kscap-cwatest.keene.edu
dept.keene.edu
ksclib.keene.edu
mycourses.keene.edu
bookstore.keene.edu
ksclib.keene.edu
bond.keene.edu
HALE.KEENE.EDU
bookstore.keene.edu
www.keene.edu
liberty.keene.edu
bookstore.keene.edu
hale.keene.edu
jade.keene.edu
StuPlan.keene.edu
arms.keene.edu
fett.keene.edu
ksclib.keene.edu
bluecourseevals.keene.edu
minerva.keene.edu
alumni.keene.edu
django.keene.edu
ksclib.keene.edu
pw.keene.edu
vpn.keene.edu
academics.keene.edu
sites.keene.edu
libanswers.keene.edu
print.keene.edu
wpdev.keene.edu
kscap-web01.keene.edu
ksclib.keene.edu
wpdev.keene.edu
celt.reclaimhosting.com
stuplantest.keene.edu
clearpass-web.unh.edu
ksclib.keene.edu
ksclib.keene.edu
owlcardaccess.keene.edu
blu-gw2.keene.edu
jade.keene.edu
bookstore.keene.edu
owl.keene.edu
ksclib.keene.edu
fett.keene.edu
reslife.keene.edu
libanswers.keene.edu
keene.edu
sites.keene.edu
minerva.keene.edu

Certificate

The complete raw certificate details for ksclib.keene.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6QRjWGYOH8LpUcq1xv1j
E4i11Kxtegd6jOSSEM0TFYjSsLw2OFwnKE+VaJCJu9QefizHTVAf8XrBfy6mzIOf
PsmhATiwAD4q1BVv6tC+hXCH20PAF7DJCC0MRlK0ZbrQmIFiFB76goOz47rP1Wjv
SNIH/29SVYTqgNiT4qk6n1Z21bDHaxmT4AC/GckVpt1scyPuA3QitAfzFBPM1gDE
LhfOuR5WCIUqfUfy8ghYP9EHZh1kr90B8GlJhzPurIybllJTU8lp/pvYO9F++ku/
jUv6+5VHq1mwI3XuTWZBSIXGzogRQgWdvV1wUrN/bd512IN8wh/e8C3WZ0rLhYQQ
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 105660717897030567558726697574290168982
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-02-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-07-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Keene'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Keene State College'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Mason Library'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'ksclib.keene.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29415688893875676092782174976806088475370243924735379728260937309607598321776463895790640794174334654072556811648533728490205273518899044893576136474628701390400189191739315955569246587539052912088947674355587160833997278900850277039070727120668780647441223867237132341567490190055089850388344039806059135269530098690235741637362335332232827110179761270647442783640880733775401523183091696303301574656274156318871082959263753092781343951372485526197046760155568041597054952333703043000976847786910956823138235908073829770704846757491100120862879526867099153183128358605344395013483455983426654474617711179590298505337
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (794 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-1.next.westlaw.com.ksclib.keene.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-docuseek2.com.ksclib.keene.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-essential.bna.com.ksclib.keene.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-images.webofknowledge.com.ksclib.keene.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-jump.valueline.com.ksclib.keene.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-keene.kanopystreaming.com.ksclib.keene.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-psycnet.apa.org.ksclib.keene.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-research.valueline.com.ksclib.keene.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-site.ebrary.com.ksclib.keene.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-ulrichsweb.serialssolutions.com.ksclib.keene.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-wcs.webofknowledge.com.ksclib.keene.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-www-secure.easybib.com.ksclib.keene.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-www.agronomy.org.ksclib.keene.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-www.jstor.org.ksclib.keene.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-www.soils.org.ksclib.keene.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-www.statista.com.ksclib.keene.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-www.thieme-connect.de.ksclib.keene.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-www.digitaltheatreplus.com.ksclib.keene.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0-s3-euwest-1.amazonaws.com.ksclib.keene.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ksclib.keene.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a7a283bb3445403dfcd5304f12b93ea1019ff6db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tb.symcb.com/tb.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tb.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tb.symcb.com/tb.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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