e-bill.kepco.co.kr

- Korea Electric Power Corporation -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 05:23:12:04:3c:95:27:1e:a3:6a:e5:3e:0d:4c:d9:e3 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Korea Electric Power Corporation

Organization: Korea Electric Power Corporation
State / Province: Jeollanam-do
Locality: Naju-si
Country: KR

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:23:12:04:3c:95:27:1e:a3:6a:e5:3e:0d:4c:d9:e3
Serial Number (int): 6828235788008229392516498325978798563
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 2b:3a:d8:4d:06:16:31:b8:73:25:99:c9:54:ab:02:9d:ca:15:d5:b0
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): b5:c9:7e:d4:c8:0e:d3:29:01:99:15:d4:06:de:dc:f9:11:6e:89:41
Fingerprint (sha256): 2a:cd:24:f9:e6:73:ea:21:88:14:8e:4c:45:b1:6c:02:1b:2e:de:c5:63:12:5b:ed:14:b5:01:4e:df:41:12:3c

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate e-bill.kepco.co.kr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for e-bill.kepco.co.kr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

e-bill.kepco.co.kr

Other certificates including the domain name kepco.co.kr

(limited to 100 certificates)
cyber.kepco.co.kr
*.kepco.co.kr
vpn.kepco.co.kr
vpni.kepco.co.kr
bqm.kepco.co.kr
smart.kepco.co.kr
e-bill.kepco.co.kr
evc.kepco.co.kr
isl.kepco.co.kr
bigdata-bi.kepco.co.kr
e-bill.kepco.co.kr
sts.kepco.co.kr
evc.kepco.co.kr
home.kepco.co.kr
evc.kepco.co.kr
hjms.kepco.co.kr
spin.kepco.co.kr
edsm.kepco.co.kr
sso.kepco.co.kr
home.kepco.co.kr
e-bill.kepco.co.kr
e-bill.kepco.co.kr
cis.kepco.co.kr
vpni.kepco.co.kr
edu.kepco.co.kr
es.kepco.co.kr
imail.kepco.co.kr
edu.kepco.co.kr
si-ndis.kepco.co.kr
home.kepco.co.kr
imail.kepco.co.kr
law.kepco.co.kr
edms.kepco.co.kr
cyber.kepco.co.kr
ebiz.kepco.co.kr
e-bill.kepco.co.kr
*.kepco.co.kr
vpni.kepco.co.kr
ebiz.kepco.co.kr
ispam.kepco.co.kr
toms.kepco.co.kr
e-bill.kepco.co.kr
bigdata-bi.kepco.co.kr
vpn.kepco.co.kr
e-bill.kepco.co.kr
es.kepco.co.kr
cyber.kepco.co.kr
si-ndis.kepco.co.kr
pccs.kepco.co.kr
cyber.kepco.co.kr
home.kepco.co.kr
edustrm.kepco.co.kr
eportal.kepco.co.kr
pap.kepco.co.kr
e-bill.kepco.co.kr
ftc.kepco.co.kr
*.kepco.co.kr
*.kepco.co.kr
cis.kepco.co.kr
meter.kepco.co.kr
*.kepco.co.kr
cis.kepco.co.kr
sms-crm.kepco.co.kr
pap.kepco.co.kr
slm.kepco.co.kr
bigdata-bi.kepco.co.kr
home.kepco.co.kr
si-ndis.kepco.co.kr
law.kepco.co.kr
ssl.kepco.co.kr
cyber.kepco.co.kr
bigdata-login.kepco.co.kr
smart.kepco.co.kr
pp.kepco.co.kr
isl.kepco.co.kr
si-ndis.kepco.co.kr
imail.kepco.co.kr
ugsm.kepco.co.kr
sms-crm.kepco.co.kr
tas.kepco.co.kr
ndiscloud.kepco.co.kr
sms-crm.kepco.co.kr
*.kepco.co.kr
lms.kepco.co.kr
e-bill.kepco.co.kr
law.kepco.co.kr
recruit.kepco.co.kr
e-bill.kepco.co.kr
cyber.kepco.co.kr
cis.kepco.co.kr
tas.kepco.co.kr
ssl.kepco.co.kr
iusb.kepco.co.kr
cyber.kepco.co.kr
imail.kepco.co.kr
edu.kepco.co.kr
lms.kepco.co.kr
bigdata-login.kepco.co.kr
pp.kepco.co.kr
imail.kepco.co.kr

Certificate

The complete raw certificate details for e-bill.kepco.co.kr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIQBSMSBDyVJx6jauU+DUzZ4zANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMRswGQYDVQQDExJUaGF3dGUgUlNBIENBIDIwMTgwHhcN
MjAwMjE4MDAwMDAwWhcNMjEwNTE5MTIwMDAwWjB+MQswCQYDVQQGEwJLUjEVMBMG
A1UECBMMSmVvbGxhbmFtLWRvMRAwDgYDVQQHEwdOYWp1LXNpMSkwJwYDVQQKEyBL
b3JlYSBFbGVjdHJpYyBQb3dlciBDb3Jwb3JhdGlvbjEbMBkGA1UEAxMSZS1iaWxs
LmtlcGNvLmNvLmtyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9/a
wWj16AY2bIW/ZSfgIPifhmjqe6PjydAyZRm0HeWJru0wx/+LZGMI6Lhot17mnG33
3ndXoKuLuehQti+x0zViElSGmTml2ymJoCPKhklxXpDrUlgA3EOaQry4pXjzKQJR
ERMUWdgcmepKlXBeSftawnUEUN16dQIHXEeeAcbGi/qFPW8Ot3i+MehKmkFqzanR
Whs4n7f8zp7VCMp5fMx7dm9YJSzoshrLAOrCDaY1ZBFcP2PQszaK/8a3zCBM9hi3
WJRQvxV7BXKjzvICH0fNa3F8gXqA7cOOok9Yui550z9KBLuX3yHp9jqxDBYxjD91
kNW2knbPq0G67dKUXQIDAQABo4IBrTCCAakwHwYDVR0jBBgwFoAUo8heZVTlMHjB
BeoHCmpZzLn+3lowHQYDVR0OBBYEFCs62E0GFjG4cyWZyVSrAp3KFdWwMB0GA1Ud
EQQWMBSCEmUtYmlsbC5rZXBjby5jby5rcjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDoGA1UdHwQzMDEwL6AtoCuGKWh0dHA6
Ly9jZHAudGhhd3RlLmNvbS9UaGF3dGVSU0FDQTIwMTguY3JsMEwGA1UdIARFMEMw
NwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0
LmNvbS9DUFMwCAYGZ4EMAQICMG8GCCsGAQUFBwEBBGMwYTAkBggrBgEFBQcwAYYY
aHR0cDovL3N0YXR1cy50aGF3dGUuY29tMDkGCCsGAQUFBzAChi1odHRwOi8vY2Fj
ZXJ0cy50aGF3dGUuY29tL1RoYXd0ZVJTQUNBMjAxOC5jcnQwCQYDVR0TBAIwADAT
BgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM784NrwCO510
hxtqus7CIw1MHE1t7nDoWYFVqM9LpLAYE+EC9okMSvEL3iUrofxA/HVFNPiOEjCM
7pin9zBt2FfxRwCQIICv3jX0oaE20AT2xw5xwVSqw5ejpUG5mUmhH68kPYHI1gy2
z92+UgJgQKWYgFNMm4EBmtDBHh70c8F+jRUUgfhZPLYJ7Shxu1YABy2KbxmXQs4o
G1Qt+wxlqIGrfmRWpErCOIgG8+CI+P9GR8unOcWOLr15RSdz6inYIls9+JEs9P/o
Av66HDDvzBqsGMm+FQ6+DOC7lmaMQ3QRBNVDMucudwJAkK0Eftui+tFZbCROePv4
GkmQvLiusg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9/awWj16AY2bIW/ZSfg
IPifhmjqe6PjydAyZRm0HeWJru0wx/+LZGMI6Lhot17mnG333ndXoKuLuehQti+x
0zViElSGmTml2ymJoCPKhklxXpDrUlgA3EOaQry4pXjzKQJRERMUWdgcmepKlXBe
SftawnUEUN16dQIHXEeeAcbGi/qFPW8Ot3i+MehKmkFqzanRWhs4n7f8zp7VCMp5
fMx7dm9YJSzoshrLAOrCDaY1ZBFcP2PQszaK/8a3zCBM9hi3WJRQvxV7BXKjzvIC
H0fNa3F8gXqA7cOOok9Yui550z9KBLuX3yHp9jqxDBYxjD91kNW2knbPq0G67dKU
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6828235788008229392516498325978798563
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-19 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jeollanam-do'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Naju-si'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Korea Electric Power Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'e-bill.kepco.co.kr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24221903023395304995018472833491460196879495797731746875712171902294998967749035926195036403449256797185504288803226518032837450748436954913829575573311599470000427028507863986520148765705537295797299189411769753236780094030958523304763928226992757089971346514216974618445635552753851214616406776749315936827937338184791918918630858683985842409111230820510817308747269896344034703547486664086909430409811784855254348234752638759373546694998258484444993864434573311664499953640021492087512754293459529071347623418403255709392870168553145804880382419634224717891818310015347921744134384884233306584749878405301408011357
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2b3ad84d061631b8732599c954ab029dca15d5b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-bill.kepco.co.kr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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