fs.kernhigh.org

- Kern High School District -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 0c:61:8e:14:43:9f:4b:90:56:03:7e:66:47:2f:d5:3c was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Kern High School District

Organization: Kern High School District
Organization unit: Information Systems and Technology
State / Province: California
Locality: Bakersfield
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:61:8e:14:43:9f:4b:90:56:03:7e:66:47:2f:d5:3c
Serial Number (int): 16457270452351909280664239218703193404
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 66:d0:3b:69:dd:70:2b:33:7e:3f:90:05:8b:a4:53:12:95:3b:00:10
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): ef:20:7c:bc:dc:1f:8b:4d:e6:1b:4b:4e:77:b1:76:1d:d3:93:a6:bf
Fingerprint (sha256): 29:59:2d:29:df:d0:3e:bb:ed:23:ec:81:27:15:bb:f0:8a:58:6f:d3:5d:f6:1f:1b:d4:b5:6b:41:50:25:c7:0c

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate fs.kernhigh.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fs.kernhigh.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fs.kernhigh.org

Other certificates including the domain name kernhigh.org

(limited to 100 certificates)
admin.arvin.kernhigh.org
www.chms.mx
kernhigh.org
kahuluischool.k12.hi.us
www.cerratosd.org
admin.aes.fentressboe.com
admin.annasmithelementary.tooeleschools.org
centralvalley.kernhigh.org
studentsupport.kernhigh.org
mail.kernhigh.org
webmail.kernhigh.org
www.peachtreeridge.org
arvin.kernhigh.org
staffconnect.kernhigh.org
stockdale.kernhigh.org
admin.annasmithelementary.tooeleschools.org
admin.annasmithelementary.tooeleschools.org
fin.kernhigh.org
highland.kernhigh.org
cte.kernhigh.org
vdicb.kernhigh.org
foothill.kernhigh.org
admin.annasmithelementary.tooeleschools.org
gvhshelp.kernhigh.org
fs.kernhigh.org
bakersfield.kernhigh.org
centennial.kernhigh.org
admin.mozart-secondary.vanguardacademy.education
kernhigh.org
nuhshelp.kernhigh.org
vdi.kernhigh.org
webmail.kernhigh.org
fin.kernhigh.org
shafter.kernhigh.org
admin.arvin.kernhigh.org
staffconnect.kernhigh.org
filetransfer.kernhigh.org
filetransfer.kernhigh.org
admin.aes.fentressboe.com
admin.arvin.kernhigh.org
admin.fulton.northbergen.k12.nj.us
liberty.kernhigh.org
www.ps086.com
north.kernhigh.org
staffconnect.kernhigh.org
admin.aes.fentressboe.com
icecube.kernhigh.org
cerratosd.org
goldenvalley.kernhigh.org
admin.ivelem.apluscharterschools.org
admin.cca-denver.org
admin.annasmithelementary.tooeleschools.org
admin.apluscharterschools.org
miramonte.kernhigh.org
vdi.kernhigh.org
fs.kernhigh.org
dohelp.kernhigh.org
admin.annasmithelementary.tooeleschools.org
admin.aes.fentressboe.com
admin.arvin.kernhigh.org
ventureacademy.pylusd.org
filetransfer.kernhigh.org
admin.apluscharterschools.org
bakersfield.kernhigh.org
admin.bas.kernhigh.org
centralvalley.kernhigh.org
admin.akinseagles.org
kvhshelp.kernhigh.org
south.legacyprep.org
admin.cca-denver.org
filetransfer.kernhigh.org
whshelp.kernhigh.org
admin.cca-denver.org
admin.spxtulsa.org
www.sfrschool.org
admin.arvin.kernhigh.org
lib.kernhigh.org
independence.kernhigh.org
airwatchserver.kernhigh.org
kernhigh.org
webhelp.kernhigh.org
*.kernhigh.org
frontier.kernhigh.org
shhshelp.kernhigh.org
shshelp.kernhigh.org
vwhshelp.kernhigh.org
kahuluischool.k12.hi.us
admin.veritasca.org
icecube.kernhigh.org
hcm.kernhigh.org
staffconnect.kernhigh.org
vdicb.kernhigh.org
admin.apluscharterschools.org
filetransfer.kernhigh.org
admin.annasmithelementary.tooeleschools.org
admin.church.spxtulsa.org
filetransfer.kernhigh.org
east.kernhigh.org
roc.kernhigh.org
admin.cca-denver.org

Certificate

The complete raw certificate details for fs.kernhigh.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGKTCCBRGgAwIBAgIQDGGOFEOfS5BWA35mRy/VPDANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMRswGQYDVQQDExJUaGF3dGUgUlNBIENBIDIwMTgwHhcN
MTgwNDIxMDAwMDAwWhcNMTkwMjI0MTIwMDAwWjCBozELMAkGA1UEBhMCVVMxEzAR
BgNVBAgTCkNhbGlmb3JuaWExFDASBgNVBAcTC0Jha2Vyc2ZpZWxkMSIwIAYDVQQK
ExlLZXJuIEhpZ2ggU2Nob29sIERpc3RyaWN0MSswKQYDVQQLEyJJbmZvcm1hdGlv
biBTeXN0ZW1zIGFuZCBUZWNobm9sb2d5MRgwFgYDVQQDEw9mcy5rZXJuaGlnaC5v
cmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwyCgjCRsGt8v/O4Ts
vdA8mBv1r0Y+rqcfTuHJXsncE+xdEKCrkftkHEABPlhwdzK0e8nCf7ju0kiuJ6n6
HmGwzXCbtSHgyCMF64UvDFwJGXYXSill5y23SnsaS7f2bviXGSfFvVvJ4dw98za6
6XyqZC9/BxIuy/6hDgzZJRDvDPBgXY6ZLGU6NiPmfPfqxsBXRBvdWrcWyXJo9fdd
dI+Vi0eKRbv4n/FDTgBEk8ZBQ9z4RKw1wqRgQAt2hODcyVbhkcqAdgjonJdHvmpb
hLNfBL5Yq5nBp9/TMC88G3AwzJmafX1/WoEwwVv8YZ6v58mOaN5GrsXc/mkmvfY3
maexAgMBAAGjggKdMIICmTAfBgNVHSMEGDAWgBSjyF5lVOUweMEF6gcKalnMuf7e
WjAdBgNVHQ4EFgQUZtA7ad1wKzN+P5AFi6RTEpU7ABAwGgYDVR0RBBMwEYIPZnMu
a2VybmhpZ2gub3JnMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwOgYDVR0fBDMwMTAvoC2gK4YpaHR0cDovL2NkcC50aGF3dGUu
Y29tL1RoYXd0ZVJTQUNBMjAxOC5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEw
KjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZn
gQwBAgIwbwYIKwYBBQUHAQEEYzBhMCQGCCsGAQUFBzABhhhodHRwOi8vc3RhdHVz
LnRoYXd0ZS5jb20wOQYIKwYBBQUHMAKGLWh0dHA6Ly9jYWNlcnRzLnRoYXd0ZS5j
b20vVGhhd3RlUlNBQ0EyMDE4LmNydDAJBgNVHRMEAjAAMIIBBAYKKwYBBAHWeQIE
AgSB9QSB8gDwAHYAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YUAAAFi
6fD3wQAABAMARzBFAiEAt2u0i5L/qBA/BGg35gHrhi1z9xHM2uG91hK3joMLSikC
IGpD+z3NyooVXG/ZrgOPFGBSUn4Fdwko+E+yklY1xqvpAHYAb1N2rDHwMRnYmQCk
URX/dxUcEdkCwQApBo2yCJo32RMAAAFi6fD4SgAABAMARzBFAiBiDLBv3M1KMdwI
rqubmgtMAMFt5l6YC6Gmrf+pa+ZkgAIhAM3sqACXCHGtoTV44WcA9pl3sIDNlHtB
nixlwt56qTovMA0GCSqGSIb3DQEBCwUAA4IBAQAI8VZTcaE+VP050I7eDdGwSIvx
R0gcgXurLoqP7yavt4NJacE9Yt4Wk9ypikesIGgE3G8V3HNDU8jgsrSJn9P3xHGk
43CEfBJGJbUqfNcx+i84fpAudBguCamydqjWU1hQOXJZ3TV6bYfso0DwIs3uhjXK
GrlzWPAkmLgRR2lfRA6fFQaQkdg7E9JK45ah4oAAQlsJWS8ThbnJnteHXVdbjbc3
in5e0eXj6MxTs+ChJlfHKCAPt6Z5tE7Fir4JmgeKp4wSqeaMgdmlvXjqS0LYgsUc
ZwwW1E1Z/3usI/lgP6V1iNtacAO8ggz3YvrVJbbTd1bQ9lCNxPakKOEPb0Xi
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMgoIwkbBrfL/zuE7L3Q
PJgb9a9GPq6nH07hyV7J3BPsXRCgq5H7ZBxAAT5YcHcytHvJwn+47tJIriep+h5h
sM1wm7Uh4MgjBeuFLwxcCRl2F0opZectt0p7Gku39m74lxknxb1byeHcPfM2uul8
qmQvfwcSLsv+oQ4M2SUQ7wzwYF2OmSxlOjYj5nz36sbAV0Qb3Vq3FslyaPX3XXSP
lYtHikW7+J/xQ04ARJPGQUPc+ESsNcKkYEALdoTg3MlW4ZHKgHYI6JyXR75qW4Sz
XwS+WKuZwaff0zAvPBtwMMyZmn19f1qBMMFb/GGer+fJjmjeRq7F3P5pJr32N5mn
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16457270452351909280664239218703193404
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-24 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bakersfield'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kern High School District'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Systems and Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fs.kernhigh.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22316642663148992840500668982455575891063702150406158054058484088787980149119617291966252022654988842950714619894929459316193627260426020486339084556666211474507866599192198677811404254791730901107520682563710788600207948593342757698738192944304466023742356827218040685626190176752488890750967923519108484019000681083280764379566213522203833366904039643061807858078687713807380861381349224400288379074440113547869138796240097854808073426328443851924997396691614752129945738863450109330556188093747540900359546481772631405560413151159712717730433311232147687942181015748394433216286167578247769337506532949247462582193
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							66d03b69dd702b337e3f90058ba45312953b0010
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fs.kernhigh.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000162e9f0f7c10000040300473045022100b76bb48b92ffa8103f046837e601eb862d73f711ccdae1bdd612b78e830b4a2902206a43fb3dcdca8a155c6fd9ae038f146052527e05770928f84fb2925635c6abe90076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000162e9f0f84a00000403004730450220620cb06fdccd4a31dc08aeab9b9a0b4c00c16de65e980ba1a6adffa96be66480022100cdeca800970871ada13578e16700f69977b080cd947b419e2c65c2de7aa93a2f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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