glencore.com

- Glencore International AG -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 09:e1:6f:9d:86:71:50:6c:9a:8e:c6:e9:89:c6:2e:3f was issued on by DigiCert Inc.

With 62 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Glencore International AG

Organization: Glencore International AG
Locality: Baar
Country: CH

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:e1:6f:9d:86:71:50:6c:9a:8e:c6:e9:89:c6:2e:3f
Serial Number (int): 13133582583130078873852425020876664383
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 1e:75:f7:8d:7f:0e:84:23:33:70:58:05:38:95:bf:cc:90:78:54:bc
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): e4:7f:8f:a9:18:62:0b:5c:bf:9a:d0:5a:d9:7f:cd:1d:c4:d5:18:0a
Fingerprint (sha256): 2a:92:ad:93:2b:ef:95:f9:12:45:ea:bf:3b:31:3b:10:51:75:5f:6b:48:a1:6a:d7:61:14:8b:f1:79:fb:d5:5a

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate glencore.com

62

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for glencore.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

glencore.com
www.glencore.com
elpachon.com.ar
fonderiehorne.ca
azsa.es
cezinc.com
ernesthenrymining.com.au
generalsmelting.ca
glencore.ch
glencore.com.au
glencore.com.br
glencoreagro.ru
glencoreperu.pe
glencorepossible.com.au
glencorerecycling.com
glencoretechnology.com
hvo.com.au
hypersparge.com
isakidd.com
isamill.com
isasmelt.com
jamesoncell.com
kiddoperations.ca
liddellcoal.com.au
mangoolamine.com.au
mcarthurrivermine.com.au
minematagami.ca
mineraglan.ca
mountisamines.com.au
mtowencomplex.com.au
nikkelverk.no
nordenhamer-zinkhuette.de
norfalco.com
portovesme.it
ravensworthoperations.com.au
sudburyino.ca
sukunkaproject.ca
ulancoal.com.au
unitedproject.com.au
wandoanproject.com.au
westwallsendmine.com.au
zipatank.com
minara.com.au
brendamines.ca
bulgacoal.com.au
albionprocess.com
glencore.ca
affinerieccr.ca
www.brunswicksmelter.ca
brunswicksmelter.ca
katangamining.com
hgstorageint.com
csamine.com.au
www.csamine.com.au
aurukunbauxite.com.au
www.aurukunbauxite.com.au
collinsvillecoal.com.au
www.collinsvillecoal.com.au
kamotocoppercompany.com
www.kamotocoppercompany.com
hailcreekcoal.com.au
www.hailcreekcoal.com.au

Other certificates including the domain name glencore.com

(limited to 100 certificates)
UCA.glencore.com
www.glencore.com
ucb-sam.glencore.com
www.glencore.com
www.glencore.com
UCB-AUS.glencore.com
www.glencore.com
ap.bar.ch.glencore.net
www.glencore.com
www.glencore.com
ACB-SAM.glencore.com
UCA-ZA.glencore.com
www.glencore.com
acb-eur.glencore.com
glencore.com
UCA.glencore.co.za
glencore.com
glencore.com
www.glencore.com
UCB-ASA.glencore.com
UCB-EU.glencore.com
www.glencore.com
glencore.com
www.glencore.com
www.glencore.com
www.glencore.com
edms.ch.glencore.com
www.glencore.com
ACB-NAM.glencore.com
sfbext.bar.ch.glencore.net
www.glencore.com
ACA-ZAF.glencore.com
uca-sam.glencore.com
UCB.glencore.com
glencore.com
www-dev.glencore.com
*.glencore.com
hermes.glencore.com
*.glencore.com
UCA-NAM.glencore.com
ap.zrh.ch.glencore.net
www.glencore.com
UCA.glencore.co.za
UCB-ASA.glencore.com
www.glencore.com
UCA.glencore.co.za
mail.eur.glencore.net
www.glencore.com
uma-eur-test.glencore.com
glencore.com
www.glencore.com
UCA-NAM.glencore.com
UCB-ZAF.glencore.com
UCB-EUR.glencore.com
sfbext.zrh.ch.glencore.net
glencore.com
glencore.com
www.glencore.com
UCB-NAM.glencore.com
www.glencore.com
smime.glencore.com
glencore.com
office.glencore.com
sfbext.bar.ch.glencore.net
glencore.com
uca-eur.glencore.com
www.glencore.com
www.glencore.com
ACB-ZAF.glencore.com
UCB.glencore.com
ap.bar.ch.glencore.net
ucb-zaf.glencore.com
glencore.com
www.glencore.com
test-ponton-uk.glencore.com
UCA-NAM.glencore.com
www.glencore.com
www.glencore.com
UCB-NAM.glencore.com
www.glencore.com
www.glencore.com
ms-sbc-test1.glencore.com
sfbext.zrh.ch.glencore.net
glencore.com
UCA-ZAF.glencore.com
ap.bar.ch.glencore.net
edms.ch.glencore.com
www.glencore.com
glencore.com
ap.bar.ch.glencore.net
www.glencore.com
www.glencore.com
www.glencore.com
www.glencore.com
aca-eur.glencore.com
www.glencore.com
UCB-SAM.glencore.com
ucb-nam.glencore.com
glencore.com
UCA.glencore.co.za

Certificate

The complete raw certificate details for glencore.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlzuYCUMWGuBBROWJ/oM
ZuHlTDvofFfSt0xnPSoBUNHPPWgGLAtQyp+I/s3hKUtxSVbACNh5PHDOsLlTNoPN
ue/t2jfGquha64J+1kiGbWkyauwdeesN3Z3qta1BFBdsoD4UCEY0wM/z2vNIz95y
UNtIkp2BwkKfGHCvOf8F2Q4UjiQX7DHJ/OzYGbFI7Wm3Zm/gITv6Hvhj4/yP+/EB
anrowLmko0mw2ZWwYcQJ26frEJHO/Na9DKEyKdBhM3zpIbx4CJ4Ez2QFFdTIipqD
r7vusWrMfyw4um4X6z2ZWCJmLfs5cvbgbeL1DHqJKjT/9srO9aAiG49iDj+xUrVx
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13133582583130078873852425020876664383
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baar'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Glencore International AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'glencore.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26050916883278321611205558586175481409241636738485377395395089128199784928386921960278799545165599971930211112474808146721877347480995355701092956758227345134943543080234110428011745129356545408808178861948833242923547525799451486574720880964144161723788627405805154769951796123661438926580840613601742096755930429428650929871056061959585068937617572952609495500506691180537958654759130686700886624278032613930288925070037716071752556070852371750714542423954366168231832392376572268703717503840124902273516042973211987727516813762323433152497960804096034879577089656523383472925413251501545948203324748317969838600693
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1e75f78d7f0e8423337058053895bfcc907854bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1198 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glencore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glencore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elpachon.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fonderiehorne.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'azsa.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cezinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ernesthenrymining.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'generalsmelting.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glencore.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glencore.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glencore.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glencoreagro.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glencoreperu.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glencorepossible.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glencorerecycling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glencoretechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hvo.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hypersparge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isakidd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isamill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isasmelt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamesoncell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiddoperations.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liddellcoal.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mangoolamine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcarthurrivermine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minematagami.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mineraglan.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountisamines.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtowencomplex.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nikkelverk.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nordenhamer-zinkhuette.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norfalco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portovesme.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ravensworthoperations.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sudburyino.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sukunkaproject.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ulancoal.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitedproject.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wandoanproject.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westwallsendmine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zipatank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minara.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brendamines.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bulgacoal.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albionprocess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glencore.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affinerieccr.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brunswicksmelter.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brunswicksmelter.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katangamining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hgstorageint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csamine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csamine.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurukunbauxite.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aurukunbauxite.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collinsvillecoal.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collinsvillecoal.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kamotocoppercompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kamotocoppercompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hailcreekcoal.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hailcreekcoal.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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