lms.kepco.co.kr

- Korea Electric Power Corporation -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 07:46:34:84:50:81:91:c2:1f:a3:01:d6:ac:07:26:0d was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Korea Electric Power Corporation

Organization: Korea Electric Power Corporation
State / Province: Jeollanam-do
Locality: Naju-si
Country: KR

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:46:34:84:50:81:91:c2:1f:a3:01:d6:ac:07:26:0d
Serial Number (int): 9669121918924131354604318687505098253
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): d6:d2:7c:85:89:eb:2b:ea:d6:dd:77:c2:9a:ad:5c:0a:c2:cb:d8:01
Fingerprint (sha256): 2d:60:63:98:7b:57:6c:88:f7:a5:11:fb:93:f0:93:d2:d4:b6:89:02:da:82:7b:21:df:1b:52:1b:9d:1d:85:c7

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate lms.kepco.co.kr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lms.kepco.co.kr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lms.kepco.co.kr

Other certificates including the domain name kepco.co.kr

(limited to 100 certificates)
cyber.kepco.co.kr
*.kepco.co.kr
vpn.kepco.co.kr
vpni.kepco.co.kr
bqm.kepco.co.kr
smart.kepco.co.kr
e-bill.kepco.co.kr
evc.kepco.co.kr
isl.kepco.co.kr
bigdata-bi.kepco.co.kr
e-bill.kepco.co.kr
sts.kepco.co.kr
evc.kepco.co.kr
home.kepco.co.kr
evc.kepco.co.kr
hjms.kepco.co.kr
spin.kepco.co.kr
edsm.kepco.co.kr
sso.kepco.co.kr
home.kepco.co.kr
e-bill.kepco.co.kr
e-bill.kepco.co.kr
cis.kepco.co.kr
vpni.kepco.co.kr
edu.kepco.co.kr
es.kepco.co.kr
imail.kepco.co.kr
edu.kepco.co.kr
si-ndis.kepco.co.kr
home.kepco.co.kr
imail.kepco.co.kr
law.kepco.co.kr
edms.kepco.co.kr
cyber.kepco.co.kr
ebiz.kepco.co.kr
e-bill.kepco.co.kr
*.kepco.co.kr
vpni.kepco.co.kr
ebiz.kepco.co.kr
ispam.kepco.co.kr
toms.kepco.co.kr
e-bill.kepco.co.kr
bigdata-bi.kepco.co.kr
vpn.kepco.co.kr
e-bill.kepco.co.kr
es.kepco.co.kr
cyber.kepco.co.kr
si-ndis.kepco.co.kr
pccs.kepco.co.kr
cyber.kepco.co.kr
home.kepco.co.kr
edustrm.kepco.co.kr
eportal.kepco.co.kr
pap.kepco.co.kr
e-bill.kepco.co.kr
ftc.kepco.co.kr
*.kepco.co.kr
*.kepco.co.kr
cis.kepco.co.kr
meter.kepco.co.kr
*.kepco.co.kr
cis.kepco.co.kr
sms-crm.kepco.co.kr
pap.kepco.co.kr
slm.kepco.co.kr
bigdata-bi.kepco.co.kr
home.kepco.co.kr
si-ndis.kepco.co.kr
law.kepco.co.kr
ssl.kepco.co.kr
cyber.kepco.co.kr
bigdata-login.kepco.co.kr
smart.kepco.co.kr
pp.kepco.co.kr
isl.kepco.co.kr
si-ndis.kepco.co.kr
imail.kepco.co.kr
ugsm.kepco.co.kr
sms-crm.kepco.co.kr
tas.kepco.co.kr
ndiscloud.kepco.co.kr
sms-crm.kepco.co.kr
*.kepco.co.kr
lms.kepco.co.kr
e-bill.kepco.co.kr
law.kepco.co.kr
recruit.kepco.co.kr
e-bill.kepco.co.kr
cyber.kepco.co.kr
cis.kepco.co.kr
tas.kepco.co.kr
ssl.kepco.co.kr
iusb.kepco.co.kr
cyber.kepco.co.kr
imail.kepco.co.kr
edu.kepco.co.kr
lms.kepco.co.kr
bigdata-login.kepco.co.kr
pp.kepco.co.kr
imail.kepco.co.kr

Certificate

The complete raw certificate details for lms.kepco.co.kr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIQB0Y0hFCBkcIfowHWrAcmDTANBgkqhkiG9w0BAQsFADBB
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMRswGQYDVQQDExJ0
aGF3dGUgU1NMIENBIC0gRzIwHhcNMTYwNTE2MDAwMDAwWhcNMTcwNzE1MjM1OTU5
WjB7MQswCQYDVQQGEwJLUjEVMBMGA1UECAwMSmVvbGxhbmFtLWRvMRAwDgYDVQQH
DAdOYWp1LXNpMSkwJwYDVQQKDCBLb3JlYSBFbGVjdHJpYyBQb3dlciBDb3Jwb3Jh
dGlvbjEYMBYGA1UEAwwPbG1zLmtlcGNvLmNvLmtyMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEA4YvO+ERzlPOjpVUmQuT/BbLmTvgow9BAzRSPXNoxgyfs
5ENwHwJMP9OqQU+xYbFDR70NzJhMbVgHHIucehO+cBbyr6VHmB8ValZ6m9MW34zF
ykzySahGc9U9xMGZ668F8x0q2lXmuhvP1R+lYZa0DkVUT1DWZZPHShbIrJErGWqA
lh9MtVxBaFgm4TI50NxMlG8P5XNKI/cmYxOlIeWEk7utsGfDgED31Uzdn3m8oD1o
wpfQqDWuWQJ+mHtkrRYeI6d7d+wBQ/R6OiL7yIk4QVSW2gwDrliXR0rjs1XPuRPq
osA9VJf4Cyln0b5yvIE/DUE/Zr5GkDW/bsNlQweQBQIDAQABo4ICejCCAnYwGgYD
VR0RBBMwEYIPbG1zLmtlcGNvLmNvLmtyMAkGA1UdEwQCMAAwbgYDVR0gBGcwZTBj
BgZngQwBAgIwWTAmBggrBgEFBQcCARYaaHR0cHM6Ly93d3cudGhhd3RlLmNvbS9j
cHMwLwYIKwYBBQUHAgIwIwwhaHR0cHM6Ly93d3cudGhhd3RlLmNvbS9yZXBvc2l0
b3J5MA4GA1UdDwEB/wQEAwIFoDAfBgNVHSMEGDAWgBTCT0hX/NFPmsBdOH0OBdvZ
LrVSYDArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8vdGouc3ltY2IuY29tL3RqLmNy
bDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwVwYIKwYBBQUHAQEESzBJ
MB8GCCsGAQUFBzABhhNodHRwOi8vdGouc3ltY2QuY29tMCYGCCsGAQUFBzAChhpo
dHRwOi8vdGouc3ltY2IuY29tL3RqLmNydDCCAQUGCisGAQQB1nkCBAIEgfYEgfMA
8QB3AN3rHSt6DU+mIIuBrYFocH4ujp0B1VyIjT0RxM227L7MAAABVLvjILwAAAQD
AEgwRgIhAKKKczDg6QA3G+FQ3DI56Plg+s2xMjr9pEOSB6bZXMj6AiEAqAPo/WeH
sD3cAWeVsmSy3OGR/W3uo6EVbld3e7W3Z6cAdgCkuQmQtBhYFIe7E6LMZ3AKPDWY
BPkb37jjd80OyA3cEAAAAVS74yDlAAAEAwBHMEUCIG6NxQvy05qnQMkcFS4601th
TI3J58fbJYkwimgABkKGAiEA8ZYvGSGMSb5rKpbeLxwF7vvy3po8qSOySCcL82oz
0kgwDQYJKoZIhvcNAQELBQADggEBAFE994Zp4Yuniz3q5PEwFn4pGraqRxAftP2M
iGvwdcqpEukQpgbAdnOnzsnxGbN0LKvaxkhuD63RZwLg2gL8i4tzXDOLlQKs/UWh
Pg/i+kfRgUIiK4xQ8NeMLGR+MpHH2P7G/hgvQTWzWi8AtHI5+6ihWiEgQJ6mpm+a
Hizh1Pus+gsq1qQFBIkRLfLveqnaXfr9HJ/RL+tIvZvH9sZLzVoJ4ZAsEC0BnMcv
6rBHwtJYONFHCOHbSE4qKVLAwUu0tFfErN+r+ucbYqC+ucVI2oCsfZAp6H1WzoQT
3FdKP88rnSOasKCXma8AxRV38MR36dbx+Dfb3cCHnh6fSqerd8U=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4YvO+ERzlPOjpVUmQuT/
BbLmTvgow9BAzRSPXNoxgyfs5ENwHwJMP9OqQU+xYbFDR70NzJhMbVgHHIucehO+
cBbyr6VHmB8ValZ6m9MW34zFykzySahGc9U9xMGZ668F8x0q2lXmuhvP1R+lYZa0
DkVUT1DWZZPHShbIrJErGWqAlh9MtVxBaFgm4TI50NxMlG8P5XNKI/cmYxOlIeWE
k7utsGfDgED31Uzdn3m8oD1owpfQqDWuWQJ+mHtkrRYeI6d7d+wBQ/R6OiL7yIk4
QVSW2gwDrliXR0rjs1XPuRPqosA9VJf4Cyln0b5yvIE/DUE/Zr5GkDW/bsNlQweQ
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9669121918924131354604318687505098253
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Jeollanam-do'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Naju-si'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Korea Electric Power Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'lms.kepco.co.kr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28472560746268637796418451715976892301937977061969165056621254385497339143777936194883656688286990785711095197654458208333232289184909695927315817321711077930132337178849354791455839316215478167437985589176317249704899399868510523886800306981101398177059577714886787203733780930696203374847402569589937544252260618313046615949524236724846496555712783955342758698555471379650080146338904585240847864223711952597873179561028835899209285334699125216820941830815154716452891951403287980544766862637641071720545186122158878529628909559195951440972513630650351378304465145290905901864211287927289481756857544503186120216581
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lms.kepco.co.kr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000154bbe320bc0000040300483046022100a28a7330e0e900371be150dc3239e8f960facdb1323afda4439207a6d95cc8fa022100a803e8fd6787b03ddc016795b264b2dce191fd6deea3a1156e57777bb5b767a7007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000154bbe320e5000004030047304502206e8dc50bf2d39aa740c91c152e3ad35b614c8dc9e7c7db2589308a6800064286022100f1962f19218c49be6b2a96de2f1c05eefbf2de9a3ca923b248270bf36a33d248
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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