test-ponton-uk.glencore.com
- Glencore International AG -
Issued by Thawte RSA CA 2018
About this certificate
This digital certificate with serial number 09:20:94:dc:1d:8c:7e:e9:f5:3e:e8:ae:ae:02:7c:4a was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Glencore International AG
Organization:
Glencore International AG
Locality:
Baar
Country: CH
Country: CH
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 09:20:94:dc:1d:8c:7e:e9:f5:3e:e8:ae:ae:02:7c:4aSerial Number (int): 12132224697499365159129337849807273034
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: dd:c3:4c:85:aa:8c:4b:28:01:90:a9:72:07:d4:81:a9:7c:0c:63:93
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a
Fingerprint (sha1): 9a:af:1a:60:13:91:7b:4e:01:1e:07:a0:9c:30:69:0b:82:18:7d:2e
Fingerprint (sha256): 2f:0f:b2:4a:39:f8:b4:00:3d:6e:eb:bb:3d:a0:1a:d5:52:d9:1d:2e:90:00:92:77:79:43:3c:01:0c:d1:1c:0a
Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt
Revocation information
OCSP Server: http://status.thawte.comCRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl
Check the revocation status for certificate test-ponton-uk.glencore.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for test-ponton-uk.glencore.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
test-ponton-uk.glencore.com
Other certificates including the domain name glencore.com
(limited to 100 certificates)
UCA.glencore.com
www.glencore.com
ucb-sam.glencore.com
www.glencore.com
www.glencore.com
UCB-AUS.glencore.com
www.glencore.com
ap.bar.ch.glencore.net
www.glencore.com
www.glencore.com
ACB-SAM.glencore.com
UCA-ZA.glencore.com
www.glencore.com
acb-eur.glencore.com
glencore.com
UCA.glencore.co.za
glencore.com
glencore.com
www.glencore.com
UCB-ASA.glencore.com
UCB-EU.glencore.com
www.glencore.com
glencore.com
www.glencore.com
www.glencore.com
www.glencore.com
edms.ch.glencore.com
www.glencore.com
ACB-NAM.glencore.com
sfbext.bar.ch.glencore.net
www.glencore.com
ACA-ZAF.glencore.com
uca-sam.glencore.com
UCB.glencore.com
glencore.com
www-dev.glencore.com
*.glencore.com
hermes.glencore.com
*.glencore.com
UCA-NAM.glencore.com
ap.zrh.ch.glencore.net
www.glencore.com
UCA.glencore.co.za
UCB-ASA.glencore.com
www.glencore.com
UCA.glencore.co.za
mail.eur.glencore.net
www.glencore.com
uma-eur-test.glencore.com
glencore.com
www.glencore.com
UCA-NAM.glencore.com
UCB-ZAF.glencore.com
UCB-EUR.glencore.com
sfbext.zrh.ch.glencore.net
glencore.com
glencore.com
www.glencore.com
UCB-NAM.glencore.com
www.glencore.com
smime.glencore.com
glencore.com
office.glencore.com
sfbext.bar.ch.glencore.net
glencore.com
uca-eur.glencore.com
www.glencore.com
www.glencore.com
ACB-ZAF.glencore.com
UCB.glencore.com
ap.bar.ch.glencore.net
ucb-zaf.glencore.com
glencore.com
www.glencore.com
test-ponton-uk.glencore.com
UCA-NAM.glencore.com
www.glencore.com
www.glencore.com
UCB-NAM.glencore.com
www.glencore.com
www.glencore.com
ms-sbc-test1.glencore.com
sfbext.zrh.ch.glencore.net
glencore.com
UCA-ZAF.glencore.com
ap.bar.ch.glencore.net
edms.ch.glencore.com
www.glencore.com
glencore.com
ap.bar.ch.glencore.net
www.glencore.com
www.glencore.com
www.glencore.com
www.glencore.com
aca-eur.glencore.com
www.glencore.com
UCB-SAM.glencore.com
ucb-nam.glencore.com
glencore.com
UCA.glencore.co.za
www.glencore.com
ucb-sam.glencore.com
www.glencore.com
www.glencore.com
UCB-AUS.glencore.com
www.glencore.com
ap.bar.ch.glencore.net
www.glencore.com
www.glencore.com
ACB-SAM.glencore.com
UCA-ZA.glencore.com
www.glencore.com
acb-eur.glencore.com
glencore.com
UCA.glencore.co.za
glencore.com
glencore.com
www.glencore.com
UCB-ASA.glencore.com
UCB-EU.glencore.com
www.glencore.com
glencore.com
www.glencore.com
www.glencore.com
www.glencore.com
edms.ch.glencore.com
www.glencore.com
ACB-NAM.glencore.com
sfbext.bar.ch.glencore.net
www.glencore.com
ACA-ZAF.glencore.com
uca-sam.glencore.com
UCB.glencore.com
glencore.com
www-dev.glencore.com
*.glencore.com
hermes.glencore.com
*.glencore.com
UCA-NAM.glencore.com
ap.zrh.ch.glencore.net
www.glencore.com
UCA.glencore.co.za
UCB-ASA.glencore.com
www.glencore.com
UCA.glencore.co.za
mail.eur.glencore.net
www.glencore.com
uma-eur-test.glencore.com
glencore.com
www.glencore.com
UCA-NAM.glencore.com
UCB-ZAF.glencore.com
UCB-EUR.glencore.com
sfbext.zrh.ch.glencore.net
glencore.com
glencore.com
www.glencore.com
UCB-NAM.glencore.com
www.glencore.com
smime.glencore.com
glencore.com
office.glencore.com
sfbext.bar.ch.glencore.net
glencore.com
uca-eur.glencore.com
www.glencore.com
www.glencore.com
ACB-ZAF.glencore.com
UCB.glencore.com
ap.bar.ch.glencore.net
ucb-zaf.glencore.com
glencore.com
www.glencore.com
test-ponton-uk.glencore.com
UCA-NAM.glencore.com
www.glencore.com
www.glencore.com
UCB-NAM.glencore.com
www.glencore.com
www.glencore.com
ms-sbc-test1.glencore.com
sfbext.zrh.ch.glencore.net
glencore.com
UCA-ZAF.glencore.com
ap.bar.ch.glencore.net
edms.ch.glencore.com
www.glencore.com
glencore.com
ap.bar.ch.glencore.net
www.glencore.com
www.glencore.com
www.glencore.com
www.glencore.com
aca-eur.glencore.com
www.glencore.com
UCB-SAM.glencore.com
ucb-nam.glencore.com
glencore.com
UCA.glencore.co.za
Certificate
The complete raw certificate details for test-ponton-uk.glencore.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGZTCCBU2gAwIBAgIQCSCU3B2Mfun1PuiurgJ8SjANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMRswGQYDVQQDExJUaGF3dGUgUlNBIENBIDIwMTgwHhcN MjEwOTE1MDAwMDAwWhcNMjIwOTIyMjM1OTU5WjBmMQswCQYDVQQGEwJDSDENMAsG A1UEBxMEQmFhcjEiMCAGA1UEChMZR2xlbmNvcmUgSW50ZXJuYXRpb25hbCBBRzEk MCIGA1UEAxMbdGVzdC1wb250b24tdWsuZ2xlbmNvcmUuY29tMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd5nBj8sMt+V5nh3UM3DK40OeDj6cx9HamLS le6jpv9gVfG6ChEJojpeyP5HpImp8NLzXnnunqSNLLbzpGTwELPism/m4+YpP6HR GYrOHNzDT/m+CV1IRhSfAVGK0/WH9wBOyqy2ZXIvFTmL+oW5RLgKCoyqkmQE42R5 V4YYuLT+SMQ4DuaDha+lc/8TiGCONNafu2KD6Qd/e2ouQJJ9rzdUFluFicWksbUV c9ZpupPibOUnCu7+jtzR9yNemOw7JLbxoA0YZNy2B75UAbZzy4DZ3kmL2v1fx7XX qeP71GryuUsHZTO5ovO5kzdOj7JhWM4oGqf5hFJn1Jc0TF+6ewIDAQABo4IDFzCC AxMwHwYDVR0jBBgwFoAUo8heZVTlMHjBBeoHCmpZzLn+3lowHQYDVR0OBBYEFN3D TIWqjEsoAZCpcgfUgal8DGOTMCYGA1UdEQQfMB2CG3Rlc3QtcG9udG9uLXVrLmds ZW5jb3JlLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMDoGA1UdHwQzMDEwL6AtoCuGKWh0dHA6Ly9jZHAudGhhd3RlLmNv bS9UaGF3dGVSU0FDQTIwMTguY3JsMD4GA1UdIAQ3MDUwMwYGZ4EMAQICMCkwJwYI KwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzBvBggrBgEFBQcB AQRjMGEwJAYIKwYBBQUHMAGGGGh0dHA6Ly9zdGF0dXMudGhhd3RlLmNvbTA5Bggr BgEFBQcwAoYtaHR0cDovL2NhY2VydHMudGhhd3RlLmNvbS9UaGF3dGVSU0FDQTIw MTguY3J0MAwGA1UdEwEB/wQCMAAwggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB2 ACl5vvCeOTkh8FZzn2Old+W+V32cYAr4+U1dJlwlXceEAAABe+jEn9gAAAQDAEcw RQIhALe1lYl8QS/HA3t73wdSExRJTo+MgvUnOt8SxXuTsAjwAiBsfUjziy4NWimn fU73NdsW9dTMEsadys6FxTyAhEXpIAB2AFGjsPX9AXmcVm24N3iPDKR6zBsny/ee iEKaDf7UiwXlAAABe+jEoE0AAAQDAEcwRQIhAPo3JNEezsjU6sAwARUu55tvqOmz CDRkbw8OPS4g45+WAiA+7xmWLiyqYQeRngdx3N/AKV5W8pwfH2Jhw0H5126sBwB1 AEHIyrHfIkZKEMahOglCh15OMYsbA+vrS8do8JBilgb2AAABe+jEn8sAAAQDAEYw RAIgE7rX/cJ+o3qgK+LaHpiu6O15EUqsoB8UlARS0rP4i7UCID9N8bFNQgSxPRcF nV71EcyPjnaGyxKT+FnDlRoRZYcVMA0GCSqGSIb3DQEBCwUAA4IBAQBdYzvL1I1Z yWY1yZAqjUS/UgghIeHG+LIO7iXRHbE8k5DRuOOj97XwapNlWBlZbJCcFz/jB4au W+s6jhW2dtEFuYsP9v/k3G839dZmka5KbEC1V6CuxlB7O0G60rt+yJgJnN5y31b4 dusHKXUfwRwQFiNE/4ES4i2tImaDK+H3IYF7k9lWSxX3wX8fWIcbYlb1uS5ByV3M HBi+Fo30Nv0mOECOF/l3IKzmgPLbEiSojCKvYdsxCjLoY2pCNpG11vQ/B52WkDkB 0PhYwywIdAQe/3lZjJLPGeJsg77x868pJikMPeOgHKTMNIVGUVO0lNfTAd11k8el N+0np9gJu57m -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd5nBj8sMt+V5nh3UM3D K40OeDj6cx9HamLSle6jpv9gVfG6ChEJojpeyP5HpImp8NLzXnnunqSNLLbzpGTw ELPism/m4+YpP6HRGYrOHNzDT/m+CV1IRhSfAVGK0/WH9wBOyqy2ZXIvFTmL+oW5 RLgKCoyqkmQE42R5V4YYuLT+SMQ4DuaDha+lc/8TiGCONNafu2KD6Qd/e2ouQJJ9 rzdUFluFicWksbUVc9ZpupPibOUnCu7+jtzR9yNemOw7JLbxoA0YZNy2B75UAbZz y4DZ3kmL2v1fx7XXqeP71GryuUsHZTO5ovO5kzdOj7JhWM4oGqf5hFJn1Jc0TF+6 ewIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 12132224697499365159129337849807273034 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-15 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-22 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baar' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Glencore International AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'test-ponton-uk.glencore.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22958803929045190033282791272274087194976056648081883076389274204079877843814595037904279936635935704009999663481315827341733201760068352209117184376007428039255113320352076028990609643241305862221885568236612774092171573900130108418327417189896386030986467955307438899600562080142558377275513936217375606753153952652274613386250557561646396978041035776314723947093643586071410360675325876150117946236030283653451023233774657852754026252751055218287836682360350359477751261028410457772192972174934465772687060751903708288383415666714114291023699703566542551726427207270767832676344167032723211117845711956426836916859 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ddc34c85aa8c4b280190a97207d481a97c0c6393 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-ponton-uk.glencore.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 005d633bcbd48d59c96635c9902a8d44bf52082121e1c6f8b20eee25d11db13c9390d1b8e3a3f7b5f06a93655819596c909c173fe30786ae5beb3a8e15b676d105b98b0ff6ffe4dc6f37f5d66691ae4a6c40b557a0aec6507b3b41bad2bb7ec898099cde72df56f876eb0729751fc11c10162344ff8112e22dad2266832be1f721817b93d9564b15f7c17f1f58871b6256f5b92e41c95dcc1c18be168df436fd2638408e17f97720ace680f2db1224a88c22af61db310a32e8636a423691b5d6f43f079d96903901d0f858c32c0874041eff79598c92cf19e26c83bef1f3af2926290c3de3a01ca4cc3485465153b494d7d301dd7593c7a537ed27a7d809bb9ee6