www.ticketmaster.ae
- Ticketmaster LLC -
Issued by thawte SHA256 SSL CA
About this certificate
This digital certificate with serial number 33:5d:b8:d2:f0:5c:c2:54:4e:78:80:a0:66:c0:53:45 was issued on by thawte, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Ticketmaster LLC
Organization:
Ticketmaster LLC
Organization unit: Web Systems
Organization unit: Web Systems
State / Province:
California
Locality: Los Angeles
Country: US
Locality: Los Angeles
Country: US
thawte, Inc.
Organization:
thawte, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 33:5d:b8:d2:f0:5c:c2:54:4e:78:80:a0:66:c0:53:45Serial Number (int): 68277260068544189617222349210746114885
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 2b:9a:35:ae:01:18:38:30:e1:70:7a:05:e0:11:76:a3:ce:bd:90:14
Fingerprint (sha1): ed:a0:95:ea:75:24:2d:ac:f8:20:5f:38:cc:d1:f4:1a:7d:a8:a9:63
Fingerprint (sha256): 2f:01:5d:13:fa:a1:6b:e6:55:a5:f6:9e:b2:da:7a:a4:9d:2e:10:d3:7b:0a:d1:b7:6c:1c:81:2c:32:5a:65:e0
Issuing Certificate URL: http://tg.symcb.com/tg.crt
Revocation information
OCSP Server: http://tg.symcd.comCRL Distribution Point: http://tg.symcb.com/tg.crl
Check the revocation status for certificate www.ticketmaster.ae
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.ticketmaster.ae
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.ticketmaster.ae
Other certificates including the domain name ticketmaster.ae
(limited to 100 certificates)
getstarted.ticketmaster.ae
ticketmaster3.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster3.map.fastly.net
help.ticketmaster.ch
ticketmaster3.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster3.map.fastly.net
dns-vetting1d.map.fastly.net
ticketmaster6.map.fastly.net
help.ticketmaster.ch
ticketmaster3.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster.ae
ticketmaster6.map.fastly.net
ticketmaster3.map.fastly.net
help.ticketmaster.ch
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster.dk
ticketmaster6.map.fastly.net
ticketmaster.ae
ticketweb.co.uk
ticketmaster.ae
ticketmaster6.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster.ae
*.admin.ticketweb.ca
getstarted.ticketmaster.ae
ticketmaster6.map.fastly.net
mail.livenation.eu
ticketmaster3.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster.ae
business.ticketmaster.ae
help.ticketmaster.ch
ticketmaster3.map.fastly.net
blog.ticketmaster.ae
ticketmaster.ae
help.ticketmaster.ch
help.ticketmaster.fr
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
mail.livenation.eu
help.ticketmaster.ch
ticketmaster3.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster3.map.fastly.net
help.ticketmaster.ch
ticketmaster3.map.fastly.net
getstarted.ticketmaster.co.uk
help.ticketmaster.ch
ticketmaster.ae
ticketmaster3.map.fastly.net
ticketmaster6.map.fastly.net
*.beta.ticketmaster.ae
*.beta.ticketmaster.co.za
ticketmaster.ae
ticketmaster7.map.fastly.net
www.ticketmaster.ae
ticketmaster3.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster6.map.fastly.net
*.admin.ticketweb.ca
ticketmaster.ae
help.ticketmaster.ch
ticketmaster3.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster.ae
ticketmaster6.map.fastly.net
ticketmaster.ae
ticketmaster3.map.fastly.net
ticketmaster.ae
ticketmaster3.map.fastly.net
*.beta.ticketmaster.co.za
help.ticketmaster.ch
ticketmaster6.map.fastly.net
ticketmaster3.map.fastly.net
help.ticketmaster.ch
ticketmaster3.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster3.map.fastly.net
*.beta.ticketmaster.co.za
ticketmaster6.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster3.map.fastly.net
help.ticketmaster.ch
ticketmaster3.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster3.map.fastly.net
dns-vetting1d.map.fastly.net
ticketmaster6.map.fastly.net
help.ticketmaster.ch
ticketmaster3.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster.ae
ticketmaster6.map.fastly.net
ticketmaster3.map.fastly.net
help.ticketmaster.ch
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster.dk
ticketmaster6.map.fastly.net
ticketmaster.ae
ticketweb.co.uk
ticketmaster.ae
ticketmaster6.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster.ae
*.admin.ticketweb.ca
getstarted.ticketmaster.ae
ticketmaster6.map.fastly.net
mail.livenation.eu
ticketmaster3.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster.ae
business.ticketmaster.ae
help.ticketmaster.ch
ticketmaster3.map.fastly.net
blog.ticketmaster.ae
ticketmaster.ae
help.ticketmaster.ch
help.ticketmaster.fr
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
mail.livenation.eu
help.ticketmaster.ch
ticketmaster3.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster3.map.fastly.net
help.ticketmaster.ch
ticketmaster3.map.fastly.net
getstarted.ticketmaster.co.uk
help.ticketmaster.ch
ticketmaster.ae
ticketmaster3.map.fastly.net
ticketmaster6.map.fastly.net
*.beta.ticketmaster.ae
*.beta.ticketmaster.co.za
ticketmaster.ae
ticketmaster7.map.fastly.net
www.ticketmaster.ae
ticketmaster3.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster6.map.fastly.net
*.admin.ticketweb.ca
ticketmaster.ae
help.ticketmaster.ch
ticketmaster3.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster.ae
ticketmaster6.map.fastly.net
ticketmaster.ae
ticketmaster3.map.fastly.net
ticketmaster.ae
ticketmaster3.map.fastly.net
*.beta.ticketmaster.co.za
help.ticketmaster.ch
ticketmaster6.map.fastly.net
ticketmaster3.map.fastly.net
help.ticketmaster.ch
ticketmaster3.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster3.map.fastly.net
*.beta.ticketmaster.co.za
ticketmaster6.map.fastly.net
ticketmaster3.map.fastly.net
ticketmaster3.map.fastly.net
Certificate
The complete raw certificate details for www.ticketmaster.ae in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE0DCCA7igAwIBAgIQM1240vBcwlROeICgZsBTRTANBgkqhkiG9w0BAQsFADBD MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMR0wGwYDVQQDExR0 aGF3dGUgU0hBMjU2IFNTTCBDQTAeFw0xNTAyMTgwMDAwMDBaFw0xNjAyMTgyMzU5 NTlaMIGHMQswCQYDVQQGEwJVUzETMBEGA1UECAwKQ2FsaWZvcm5pYTEUMBIGA1UE BwwLTG9zIEFuZ2VsZXMxGTAXBgNVBAoMEFRpY2tldG1hc3RlciBMTEMxFDASBgNV BAsMC1dlYiBTeXN0ZW1zMRwwGgYDVQQDDBN3d3cudGlja2V0bWFzdGVyLmFlMIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJBQzPrFuzDCLs/ny0EQYS7n HakpHufGcfD7I+i8JPiAaJBSPh3AXZ6z8Bt0qxr0LwpTaqRaOup+r67dE8RMhCyI Ohc0LHQ5zFYrqXIpIux3Jt37nkpv3GfMTp1TkXPKqL5KfIB8uCq6WqKQB9OzkQdk RARAdaMeCztUU/BzFC5o3dnLd314z5KoAlajQcolaGWmbotTAQJ5mPHdleoBohj1 kxZ6bTUVdTGaVtzhzFosXiYYmP0l3Xy9ge30nf5UQOPVywfPmvruAQgrVTjE66Of OaeDKP1M+fGkVMFyd6v+CaO4w4tv5hoH+3ZQCNj1pbZ6B2Cm6bmGe5Hy11wt5wID AQABo4IBeTCCAXUwHgYDVR0RBBcwFYITd3d3LnRpY2tldG1hc3Rlci5hZTAJBgNV HRMEAjAAMHIGA1UdIARrMGkwZwYKYIZIAYb4RQEHNjBZMCYGCCsGAQUFBwIBFhpo dHRwczovL3d3dy50aGF3dGUuY29tL2NwczAvBggrBgEFBQcCAjAjDCFodHRwczov L3d3dy50aGF3dGUuY29tL3JlcG9zaXRvcnkwDgYDVR0PAQH/BAQDAgWgMB8GA1Ud IwQYMBaAFCuaNa4BGDgw4XB6BeARdqPOvZAUMCsGA1UdHwQkMCIwIKAeoByGGmh0 dHA6Ly90Zy5zeW1jYi5jb20vdGcuY3JsMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjBXBggrBgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly90Zy5z eW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly90Zy5zeW1jYi5jb20vdGcuY3J0 MA0GCSqGSIb3DQEBCwUAA4IBAQAFis+bjYsJRjnok83lW3htTUDJ6IMat6Lu+0OK UZnZHsi/p0QxsRReQ+MksZ5fq5CR8/c2NGgx+eTVy0CBf9yqd+MSD6mCJdYqX0b1 TYni15er/4sqsGk3EM/APWew5EuVyWdmvIfl17gKF87FsLOyH2Mc0b8J6NQE4nT1 I6IUQO50j4eQwu9PjG8erLdloUbyxmZkTceE7Fg54IBOV82AhnOPfIl1rvDoQka1 Mtp1W9PkwouSYGG56n+8Ovc/NwyehxasP1rBROX6HQa04OGBaADEffRlGZ1uM1TH 1c4NRhRk/aj/IMXjY51SH2CUbnP0LgRsGDcYlk1jsEvU6zRD -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJBQzPrFuzDCLs/ny0EQ YS7nHakpHufGcfD7I+i8JPiAaJBSPh3AXZ6z8Bt0qxr0LwpTaqRaOup+r67dE8RM hCyIOhc0LHQ5zFYrqXIpIux3Jt37nkpv3GfMTp1TkXPKqL5KfIB8uCq6WqKQB9Oz kQdkRARAdaMeCztUU/BzFC5o3dnLd314z5KoAlajQcolaGWmbotTAQJ5mPHdleoB ohj1kxZ6bTUVdTGaVtzhzFosXiYYmP0l3Xy9ge30nf5UQOPVywfPmvruAQgrVTjE 66OfOaeDKP1M+fGkVMFyd6v+CaO4w4tv5hoH+3ZQCNj1pbZ6B2Cm6bmGe5Hy11wt 5wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 68277260068544189617222349210746114885 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SHA256 SSL CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-02-18 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-18 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Los Angeles' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ticketmaster LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Web Systems' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.ticketmaster.ae' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25318825681594659984788912565901754958979804113311874983014791159295931018913919702840061099788755772532038111009932665303272555219067778753558335333342001132890385188818402089562016567424556069711970966090362282050013390405686306848761626135710866865074401380132746621835015766154035298583217405481428755108327488933889653610643221555383256041113970619810888610393714725713888485165391813415406080761144992207268636735304616084380669098829265409892417494561212268637015000720566126631894436467727513512850352837531418629800037034693842275767380003137688076996630697083593264896841223320035009031102209769929948540391 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ticketmaster.ae' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2b9a35ae01183830e1707a05e01176a3cebd9014 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcb.com/tg.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcb.com/tg.crt' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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