pool2.freudenberg.com

- Freudenberg IT GmbH & Co. KG -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 04:4e:81:7c:1e:00:62:43:a2:32:13:a4:ba:4b:90:f0 was issued on by DigiCert Inc.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Freudenberg IT GmbH & Co. KG

Organization: Freudenberg IT GmbH & Co. KG
Locality: Weinheim
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:4e:81:7c:1e:00:62:43:a2:32:13:a4:ba:4b:90:f0
Serial Number (int): 5724537402521417215078109556381552880
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 2a:0b:72:4f:70:5c:44:1f:14:72:67:e7:80:0d:6f:01:15:c5:81:40
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): f5:df:42:1d:f6:09:bf:e8:53:ca:af:24:89:9d:24:fb:d6:b5:ba:58
Fingerprint (sha256): 28:24:95:04:b5:70:b3:93:0b:b2:a6:b3:08:12:4f:05:91:84:1e:0f:0e:31:fe:cd:fc:ee:8f:a4:c9:ed:bc:e0

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate pool2.freudenberg.com

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pool2.freudenberg.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pool2.freudenberg.com
adfc75.fportal.net
pool2013.freudenberg.com
sip.freudenberg-filter.com
sip.freudenberg-nw.com
adfc73.fportal.net
adfc60.fportal.net
sip.freudenberg.com
sip.freudenberg.com.cn
sip.freudenberg.de
sip.fhp-ww.com
sip.freudenberg-pm.com
adfc74.fportal.net
join.freudenberg.com
sip.freudenberg-it.com

Other certificates including the domain name freudenberg.com

(limited to 100 certificates)
otp.freudenberg.com
branding.freudenberg.com
transfer.freudenberg.com
jobs.freudenberg.com
fcwebmail.freudenberg.com
vpn.freudenberg.com
sip.freudenberg.com
shop.freudenberg.com
login.freudenberg.com
sip.freudenberg.com
gtc-test.freudenberg.com
freudenberg.com
webmail.freudenberg.com
conferencing.freudenberg.com
pool2.freudenberg.com
jobs.freudenberg.com
webconf.freudenberg.com
www.freudenberg.com
*.freudenberg.com
webmail.fnt.freudenberg.com
mysite.freudenberg.com
fcwebmail.freudenberg.com
freudenberg.com
ausbildung.freudenberg.com
freudenberg.com
fsvwebmail.freudenberg.com
a-day-with.freudenberg.com
www.tir.freudenberg.com
freudenberg.com
fctsg.freudenberg.com
a-day-with.freudenberg.com
pool2.freudenberg.com
portal.freudenberg.com
sip.freudenberg.com
transfer.freudenberg.com
conferencing.freudenberg.com
freudenberg.com
webmail.fnt.freudenberg.com
Etweb.dev.freudenberg.com
*.apps.freudenberg.com
webmail.fnt.freudenberg.com
webmail.fnt.freudenberg.com
adfc23.fcoads.fxdir.net
*.freudenberg.com
fc1.freudenberg.com
webediservices.freudenberg.com
Gtc-test.freudenberg.com
fsvwebmail.freudenberg.com
secure.freudenberg.com
freudenberg.com
gtc-test.freudenberg.com
fsvwebmail.freudenberg.com
enablenow.freudenberg.com
mail.freudenberg.com
fcts.freudenberg.com
Etweb.dev.freudenberg.com
ediservices.freudenberg.com
fc1.freudenberg.com
secure.freudenberg.com
trm-netting.freudenberg.com
stage.ein-tag-mit.freudenberg.com
gtc.freudenberg.com
*.freudenberg.com
branding.freudenberg.de
fsv.freudenberg.com
esquared.freudenberg.com
ideas.freudenberg.com
jobs.freudenberg.com
streaming.freudenberg.com
fctsg.freudenberg.com
Serviceportal.freudenberg.com
fcwebmail.freudenberg.com
mobile.freudenberg.com
gtc-test.freudenberg.com
ediservices.freudenberg.com
cdb.freudenberg.com
branding.freudenberg.de
login.freudenberg.com
ediservices.freudenberg.com
mysite.freudenberg.com
*.apps.freudenberg.com
webmail.fnt.freudenberg.com
PoolEU1.freudenberg.com
pool1.freudenberg.com
vpn.freudenberg.com
secure.freudenberg.com
www.freudenberg.com
webmail.freudenberg.com
webediservices.freudenberg.com
jobs.freudenberg.com
secure.freudenberg.com
*.freudenberg.com
fracco.freudenberg.com
esquared.freudenberg.com
webmail.fnt.freudenberg.com
sip.freudenberg.com
freudenberg.com
PoolEU1.freudenberg.com
freudenberg.com
fcwebmail.freudenberg.com

Certificate

The complete raw certificate details for pool2.freudenberg.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGJTCCBQ2gAwIBAgIQBE6BfB4AYkOiMhOkukuQ8DANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMRswGQYDVQQDExJUaGF3dGUgUlNBIENBIDIwMTgwHhcN
MTcxMjIxMDAwMDAwWhcNMTkwNTIzMTIwMDAwWjBnMQswCQYDVQQGEwJERTERMA8G
A1UEBxMIV2VpbmhlaW0xJTAjBgNVBAoMHEZyZXVkZW5iZXJnIElUIEdtYkggJiBD
by4gS0cxHjAcBgNVBAMTFXBvb2wyLmZyZXVkZW5iZXJnLmNvbTCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBANxxtHsCelaPksRDJrRLbQRaG+x6hbz/tvUw
lTQ/ELfEpJ++rVHINiajjU5f+DJmQJFEM4/RYLF5fHdLQJGvvvV8fw1uQChnr7aJ
FNSkvS83Q9s2pyxBYUIMvI9QL7IVx2C2RGW14MuQXRWEYExcvWt7f7/rwlgf8Jbw
YbcVrEvIkfXOQZENvRltX8K1Gktzv2i6soOG9xB5IufO5TKRRjZxx8hrdJ6RWkXS
26njq6u7hMmoZeEvAvkdkmn8W82qzY1JsUOTMlXrEcwL5SFkDGRm3CPwSnxi3C6Y
0HbIXv+IAfjeu7bMaWXn3FAjFifyAF3g4Yh4SMkFeMwRzKfQUwkCAwEAAaOCAtYw
ggLSMB8GA1UdIwQYMBaAFKPIXmVU5TB4wQXqBwpqWcy5/t5aMB0GA1UdDgQWBBQq
C3JPcFxEHxRyZ+eADW8BFcWBQDCCAVkGA1UdEQSCAVAwggFMghVwb29sMi5mcmV1
ZGVuYmVyZy5jb22CEmFkZmM3NS5mcG9ydGFsLm5ldIIYcG9vbDIwMTMuZnJldWRl
bmJlcmcuY29tghpzaXAuZnJldWRlbmJlcmctZmlsdGVyLmNvbYIWc2lwLmZyZXVk
ZW5iZXJnLW53LmNvbYISYWRmYzczLmZwb3J0YWwubmV0ghJhZGZjNjAuZnBvcnRh
bC5uZXSCE3NpcC5mcmV1ZGVuYmVyZy5jb22CFnNpcC5mcmV1ZGVuYmVyZy5jb20u
Y26CEnNpcC5mcmV1ZGVuYmVyZy5kZYIOc2lwLmZocC13dy5jb22CFnNpcC5mcmV1
ZGVuYmVyZy1wbS5jb22CEmFkZmM3NC5mcG9ydGFsLm5ldIIUam9pbi5mcmV1ZGVu
YmVyZy5jb22CFnNpcC5mcmV1ZGVuYmVyZy1pdC5jb20wDgYDVR0PAQH/BAQDAgWg
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA6BgNVHR8EMzAxMC+gLaAr
hilodHRwOi8vY2RwLnRoYXd0ZS5jb20vVGhhd3RlUlNBQ0EyMDE4LmNybDBMBgNV
HSAERTBDMDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5k
aWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjBvBggrBgEFBQcBAQRjMGEwJAYIKwYB
BQUHMAGGGGh0dHA6Ly9zdGF0dXMudGhhd3RlLmNvbTA5BggrBgEFBQcwAoYtaHR0
cDovL2NhY2VydHMudGhhd3RlLmNvbS9UaGF3dGVSU0FDQTIwMTguY3J0MAkGA1Ud
EwQCMAAwDQYJKoZIhvcNAQELBQADggEBAJ8Hp3f+6ju1FaCsV6coQeVnywS4/nPf
TH/lxECPMtu4DGb2XR4PGQskZ8dCMG1+ZS9NshKKWIDC+yN5o8FtoEXkrmlYxaQA
ITIjCDV4ZZB5WlGGwxxrqLQ4/87mWm80+CGgQSzw+bn5ShgU1lxcmYXiiLuqCf7X
TQsyzVICNqzv+U9KkwELzllFeTYzTxuEkD/9rju6QTMxafXCtqzUzlfJZMG1c9Nk
/gqSPk4YL7DWrNQFe5ex1F1RUacjWGGqkb+tt1H1EQUIJJP8P1XFtcFl0/jnssoG
znayGy63qAHZ8OI8rem9sOQLX5BM+uJsK3x6pQ2WibBeg0fqWUCVNcA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HG0ewJ6Vo+SxEMmtEtt
BFob7HqFvP+29TCVND8Qt8Skn76tUcg2JqONTl/4MmZAkUQzj9FgsXl8d0tAka++
9Xx/DW5AKGevtokU1KS9LzdD2zanLEFhQgy8j1AvshXHYLZEZbXgy5BdFYRgTFy9
a3t/v+vCWB/wlvBhtxWsS8iR9c5BkQ29GW1fwrUaS3O/aLqyg4b3EHki587lMpFG
NnHHyGt0npFaRdLbqeOrq7uEyahl4S8C+R2SafxbzarNjUmxQ5MyVesRzAvlIWQM
ZGbcI/BKfGLcLpjQdshe/4gB+N67tsxpZefcUCMWJ/IAXeDhiHhIyQV4zBHMp9BT
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5724537402521417215078109556381552880
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-23 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Weinheim'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Freudenberg IT GmbH & Co. KG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pool2.freudenberg.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27828497118767113674234386147995858055743999946412516650853843061736560888791219402233759962075986557542052976181409710622748910904357980485711490012574096231032529551924740082369720888911717026613948308713377465017502631186577267964642010591136271335588025013050943496681732009946998349880889227422864346123553319754941066687588879696816936378287261317640386615883393984854809798935361504133075176439769151324031627332165758395289986105341807051225168937782923435013873490525748573820792571659766250868684438298405339538472976143983580286070229499649180778727471328040376914440166954624047974421650342314620306346761
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2a0b724f705c441f147267e7800d6f0115c58140
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (336 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pool2.freudenberg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adfc75.fportal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pool2013.freudenberg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.freudenberg-filter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.freudenberg-nw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adfc73.fportal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adfc60.fportal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.freudenberg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.freudenberg.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.freudenberg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.fhp-ww.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.freudenberg-pm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adfc74.fportal.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.freudenberg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.freudenberg-it.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009f07a777feea3bb515a0ac57a72841e567cb04b8fe73df4c7fe5c4408f32dbb80c66f65d1e0f190b2467c742306d7e652f4db2128a5880c2fb2379a3c16da045e4ae6958c5a4002132230835786590795a5186c31c6ba8b438ffcee65a6f34f821a0412cf0f9b9f94a1814d65c5c9985e288bbaa09fed74d0b32cd520236aceff94f4a93010bce59457936334f1b84903ffdae3bba41333169f5c2b6acd4ce57c964c1b573d364fe0a923e4e182fb0d6acd4057b97b1d45d5151a7235861aa91bfadb751f51105082493fc3f55c5b5c165d3f8e7b2ca06ce76b21b2eb7a801d9f0e23cade9bdb0e40b5f904cfae26c2b7c7aa50d9689b05e8347ea59409535c0