*.parenta.com

- Parenta Group Ltd -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 15:ad:f9:89:ec:a9:14:62:a5:70:05:f0:90:ba:3c:2a was issued on by thawte, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Parenta Group Ltd

Organization: Parenta Group Ltd
Organization unit: IT Department
State / Province: Kent
Locality: MAIDSTONE
Country: GB

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 15:ad:f9:89:ec:a9:14:62:a5:70:05:f0:90:ba:3c:2a
Serial Number (int): 28817116515502199279249457222375849002
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 34:18:9f:bc:76:c1:4a:a2:1b:c6:e0:35:7a:59:41:9c:37:cd:31:29
Fingerprint (sha256): 2a:8e:e2:82:99:ca:4f:95:50:16:04:c3:61:f4:ac:8a:9a:6e:ca:5a:42:bd:e0:75:2c:a5:05:2a:5a:6c:45:63

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate *.parenta.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.parenta.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.parenta.com
parenta.com

Other certificates including the domain name parenta.com

(limited to 100 certificates)
careers.rsaweb.co.za
careers.rsaweb.co.za
cyberbarometer.brooklynpartners.nl
support.parenta.com
forms.logiforce.com
help.parenta.com
survey.sheshtech.com
forms.reducemyexcess.co.uk
forms.itechforyou.com
careers.lewenet.com
parenta.com
guias.aerme.com
careers.ukbts.co.uk
helpcenter.moovly.com
careers.ukbts.co.uk
forms.reducemyexcess.co.uk
help.plurico.com
survey.eitep.de
jobform.progebouwadvies.nl
order.eastlabsphoto.com
jobs.42nerds.com
careers.geninvo.com
careers.danecca.com
jobs.bamero.de
surveys.lombardinternational.com
*.parenta.com
my.parenta.com
forms.reducemyexcess.co.uk
informes.ssixto.es
careers.rsaweb.co.za
form.mecalife.com
help.parenta.com
survey.khaoscontrol.com
forms.semigo.gr
careers.rsaweb.co.za
forms.reducemyexcess.co.uk
*.parenta.com
survey.sheshtech.com
encuestas.caetanoretail.es
parenta.com
careers.blueprintsecurity.nl
application.creditdigital.info
webmail.parenta.com
*.parenta.com
survey.eitep.de
careers.ukbts.co.uk
survey.sheshtech.com
subscriptions.profitroom.com
survey.wildling.shoes
*.parenta.com
careers.tecamb.it
survey.sheshtech.com
survey.eitep.de
survey.sheshtech.com
*.parenta.com
careers.rsaweb.co.za
formulaire.groupe-terresdefrance.com
careers.ukbts.co.uk
forms.reducemyexcess.co.uk
careers.ukbts.co.uk
eval.softworld.dk
formularios.imf.com
survey.sweet-move.com
customer-survey.castoredc.com
careers.tecamb.it
parenta.com
jobs.spectrum-dm.de
i6forms.i3clients.co.uk
survey.sheshtech.com
forms.reducemyexcess.co.uk
parenta.com
forms.reducemyexcess.co.uk
survey.sheshtech.com
billing.easynuts.nl
careers.ukbts.co.uk
*.parenta.com
survey.eitep.de
forms.likebility.com
jobs.silverside.com
careers.ukbts.co.uk
staff.parenta.com
survey.sheshtech.com
jobs.aarini.eu
survey.sheshtech.com
zoho.teslanow.de
scenic.guiding-group.com
careers.rsaweb.co.za
survey.sheshtech.com
*.parenta.com
*.parenta.com
elearning.parenta.com
help.parenta.com
jobs.liverestaurant.co.uk
staging3.parenta.com
help.parenta.com
careers.rsaweb.co.za
forms.basevision.ch
survey.eitep.de
survey.eitep.de
careers.tecamb.it

Certificate

The complete raw certificate details for *.parenta.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIExTCCA62gAwIBAgIQFa35ieypFGKlcAXwkLo8KjANBgkqhkiG9w0BAQsFADBB
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMRswGQYDVQQDExJ0
aGF3dGUgU1NMIENBIC0gRzIwHhcNMTYwMTE5MDAwMDAwWhcNMTgwMjE3MjM1OTU5
WjB8MQswCQYDVQQGEwJHQjENMAsGA1UECBMES2VudDESMBAGA1UEBxQJTUFJRFNU
T05FMRowGAYDVQQKFBFQYXJlbnRhIEdyb3VwIEx0ZDEWMBQGA1UECxQNSVQgRGVw
YXJ0bWVudDEWMBQGA1UEAxQNKi5wYXJlbnRhLmNvbTCCASIwDQYJKoZIhvcNAQEB
BQADggEPADCCAQoCggEBAOE4LHGwMp0IlEEy0XPrZwrN8PloV+ybt5T1nKvstGB/
2chPy7NWyG7n6SUMq1u6bcmRl63e65K4BmenRxH9Ue+Lk7wgtoYj6PmRY6vWACKx
BH6/1dPpDVPE5bZjTYstyiabvlGVRRGJZjwiPi94R6HpEyGsDYwtSN0pxrjeD9L0
ZV6+samBp1OkKLX6kfdwgVQncRecarsY/41rXD75K9YitQJYUddQp/GuAmVA5gt3
aWQYJo0/TSgl6JebGyIVJqoUsvxnu6TMJmSIymFsrsTbQ7xNxBxmlX//nEAm5cGp
2uqEjIIXyB7+3Ou9qL4/VS4JLLCyup5r1N1oXH4yaysCAwEAAaOCAXwwggF4MCUG
A1UdEQQeMByCDSoucGFyZW50YS5jb22CC3BhcmVudGEuY29tMAkGA1UdEwQCMAAw
bgYDVR0gBGcwZTBjBgZngQwBAgIwWTAmBggrBgEFBQcCARYaaHR0cHM6Ly93d3cu
dGhhd3RlLmNvbS9jcHMwLwYIKwYBBQUHAgIwIwwhaHR0cHM6Ly93d3cudGhhd3Rl
LmNvbS9yZXBvc2l0b3J5MA4GA1UdDwEB/wQEAwIFoDAfBgNVHSMEGDAWgBTCT0hX
/NFPmsBdOH0OBdvZLrVSYDArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8vdGouc3lt
Y2IuY29tL3RqLmNybDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwVwYI
KwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8vdGouc3ltY2QuY29tMCYG
CCsGAQUFBzAChhpodHRwOi8vdGouc3ltY2IuY29tL3RqLmNydDANBgkqhkiG9w0B
AQsFAAOCAQEAkCmuwIen6osfJis3W24wdONiiqM1NxZmgULhEgA/wzQlnnAMx06Z
DxgJpjD0Ng7su2ruxxKJVYjs3cIOiENwfRNalQ4+7xckGRp1oWPEn7nZV1ZYICWu
Fd9ab07e6BTDgUY5s/gIRtIO+mqPS7zEWs7+qIg4qnh/CtCTJx496sZ5fNYnyxng
1csiKqF51BGh0t7OoRUx3K3foh/Cm18o3zRvLI5qshz1zHXjAY8oOKqXFKPjSrHP
9Cah84XMPr6H7tgUVAwlkcobac0Kaxk8zfp7kL4zE9s5yfIQp+g2UP7YuW0zWneQ
drAcFo1IGclKXUxZ7HNEd4fgYCNujEs9ig==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TgscbAynQiUQTLRc+tn
Cs3w+WhX7Ju3lPWcq+y0YH/ZyE/Ls1bIbufpJQyrW7ptyZGXrd7rkrgGZ6dHEf1R
74uTvCC2hiPo+ZFjq9YAIrEEfr/V0+kNU8TltmNNiy3KJpu+UZVFEYlmPCI+L3hH
oekTIawNjC1I3SnGuN4P0vRlXr6xqYGnU6QotfqR93CBVCdxF5xquxj/jWtcPvkr
1iK1AlhR11Cn8a4CZUDmC3dpZBgmjT9NKCXol5sbIhUmqhSy/Ge7pMwmZIjKYWyu
xNtDvE3EHGaVf/+cQCblwana6oSMghfIHv7c672ovj9VLgkssLK6nmvU3WhcfjJr
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 28817116515502199279249457222375849002
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kent'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'MAIDSTONE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Parenta Group Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'IT Department'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.parenta.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28431318856730689473857409490377056125475497304530429804787740213325424008384292970913765576086608031977929583405891751401374649731774947087371127519560656830785268418603583675442263042139271019921001599727670003032115563133637527011663916035581283915246847132367675209189484683134601066428770698693288797561410701141880471015409308191326534141108106010582886629655328504572903112348746800874542247669988472256763659249420658968626063188254558077805299694966746471762545088950759749208456117746175875939233354384904721031692501188100348862022226590152540064356248427343196475925869715262891606097577095290810616933163
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.parenta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parenta.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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