ilab.acdlabs.com

- Advanced Chemistry Development Inc. -

Issued by thawte Extended Validation SSL CA

About this certificate

This digital certificate with serial number 34:11:e9:d3:91:43:99:86:db:28:2e:9a:9d:4d:a4:0d was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Advanced Chemistry Development Inc.

Company registration number: 001095611
Organization: Advanced Chemistry Development Inc.
Organization unit: Business Development
State / Province: Ontario
Locality: Toronto
Country: CA

thawte, Inc.

Organization: thawte, Inc.
Organization unit: Terms of use at https://www.thawte.com/cps (c)06
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 34:11:e9:d3:91:43:99:86:db:28:2e:9a:9d:4d:a4:0d
Serial Number (int): 69212867390947708273403720907067597837
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: cd:32:e2:f2:5d:25:47:02:aa:8f:79:4b:32:ee:03:99:fd:30:49:d1

Fingerprint (sha1): e3:9e:13:7c:2b:09:e9:bb:88:e7:46:24:ea:a8:0e:1f:7c:45:88:65
Fingerprint (sha256): 2f:66:bd:d0:bd:17:76:2c:37:d5:30:53:8c:bf:0e:3f:97:19:49:84:1a:ce:cd:05:38:c8:3a:5a:3d:7c:20:0e

Issuing Certificate URL: http://crl.thawte.com/ThawteEVCA2006.cer

Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://crl.thawte.com/ThawteEVCA2006.crl

Check the revocation status for certificate ilab.acdlabs.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ilab.acdlabs.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ilab.acdlabs.com

Other certificates including the domain name acdlabs.com

(limited to 100 certificates)
ithelpdesk.endologix.com
gp.acddom.acdlabs.com
slxweb.acdlabs.com
webmail.acdlabs.com
*.acdlabs.com
ilab.acdlabs.com
*.acdlabs.com
*.acdlabs.com
helpdesk.dpsgroupglobal.com
firewall.acdlabs.com
webmail.acdlabs.com
blog.acdlabs.com
ithelpdesk.endologix.com
blog.acdlabs.com
www.acdlabs.com
support.unpri.org
ithelpdesk.endologix.com
*.acdlabs.com
zendto-ext.acdlabs.com
*.acdlabs.com
webmail.acdlabs.com
ithelpdesk.endologix.com
ilab.acdlabs.com
*.acdlabs.com
helpdesk.dpsgroupglobal.com
*.acdlabs.com
blog.acdlabs.com
helpdesk.dpsgroupglobal.com
support.unpri.org
*.acdlabs.com
www.acdlabs.com
owncloud.acdlabs.com
ithelpdesk.endologix.com
webmail.acdlabs.com
exchange.acdlabs.com
support.unpri.org
MAILSRV-01.ACDLABS.COM
ithelpdesk.endologix.com
ithelpdesk.endologix.com
*.acdlabs.com
helpdesk.dpsgroupglobal.com
blog.acdlabs.com
acdlabs.com
acdlabs.com
ilab.acdlabs.com
www.acdlabs.com
support.unpri.org
webmail.acdlabs.com
*.acdlabs.com
predictum.acdlabs.com
*.acdlabs.com
helpdesk.dpsgroupglobal.com
*.acdlabs.com
ithelpdesk.endologix.com
SLXWeb.acdlabs.com
helpdesk.dpsgroupglobal.com
blog.acdlabs.com
www.acdlabs.com
ilab.acdlabs.com
servicedesk.acdlabs.com
syncsrv.acdlabs.com
webmail.acdlabs.com
acdlabs.com
ithelpdesk.endologix.com
owncloud.acdlabs.com
ithelpdesk.endologix.com
acdlabs.com
*.acdlabs.com
ithelpdesk.endologix.com
support.unpri.org
ithelpdesk.endologix.com
*.acdlabs.com
helpdesk.dpsgroupglobal.com
helpdesk.dpsgroupglobal.com
ithelpdesk.endologix.com
*.acdlabs.com
ithelpdesk.endologix.com
tor-ftp-srv.acdlabs.com
servicedesk.acdlabs.com
ithelpdesk.endologix.com
bpservicedesk.bpsoftware.net
blog.acdlabs.com
MAILSRV-01.ACDLABS.COM
helpdesk.dpsgroupglobal.com
ilab.acdlabs.com
ithelpdesk.endologix.com
support.unpri.org
ithelpdesk.endologix.com
webmail.acdlabs.com
ttservicedesk.proman.org
ilab.acdlabs.com
itsupport.acdlabs.com
helpdesk.dpsgroupglobal.com
gitlab.acdlabs.com
zendto.acdlabs.com
ilab.acdlabs.com
gitlab.acdlabs.com
ilab.acdlabs.com
www.acdlabs.com
firewall.acdlabs.com

Certificate

The complete raw certificate details for ilab.acdlabs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgIQNBHp05FDmYbbKC6anU2kDTANBgkqhkiG9w0BAQUFADCB
izELMAkGA1UEBhMCVVMxFTATBgNVBAoTDHRoYXd0ZSwgSW5jLjE5MDcGA1UECxMw
VGVybXMgb2YgdXNlIGF0IGh0dHBzOi8vd3d3LnRoYXd0ZS5jb20vY3BzIChjKTA2
MSowKAYDVQQDEyF0aGF3dGUgRXh0ZW5kZWQgVmFsaWRhdGlvbiBTU0wgQ0EwHhcN
MTMxMDIyMDAwMDAwWhcNMTUxMDI2MjM1OTU5WjCB+zETMBEGCysGAQQBgjc8AgED
EwJDQTEYMBYGCysGAQQBgjc8AgECFAdPbnRhcmlvMR0wGwYDVQQPExRQcml2YXRl
IE9yZ2FuaXphdGlvbjEsMCoGA1UEChQjQWR2YW5jZWQgQ2hlbWlzdHJ5IERldmVs
b3BtZW50IEluYy4xEjAQBgNVBAUTCTAwMTA5NTYxMTELMAkGA1UEBhMCQ0ExEDAO
BgNVBAgTB09udGFyaW8xEDAOBgNVBAcUB1Rvcm9udG8xHTAbBgNVBAsUFEJ1c2lu
ZXNzIERldmVsb3BtZW50MRkwFwYDVQQDFBBpbGFiLmFjZGxhYnMuY29tMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3P7LJR6e2Z8k1lvHjx9Jjgf4/SF
HYr6WucMgGt1jfrdksm/sa80i6gLWrhzrWZxHxb1kKDCQO1lgHrQi36hGuUZwLXE
Oe+DuSgn8djQ0SwV+CpjDLssYzAWk14XzHNZSlScveM10zV8u0fNvNiyQEjW443G
1d7Wm54esknvWpxvQXvAgYMHujcw1QRTCqRomf2Uncx8VeGMA32QHcidO49aFXeZ
2fZMniXx+P6bE/+i2tAu3Y4VeUE8MlUkDcle6Hua3VtjTOayeZH4n5PqRIyDaXq4
LprTSjdfvHLqmp+mS9NbKnodE6go5ufCMznhavy6wIlny//qhsNFVZ7wywIDAQAB
o4IBZTCCAWEwGwYDVR0RBBQwEoIQaWxhYi5hY2RsYWJzLmNvbTAJBgNVHRMEAjAA
MA4GA1UdDwEB/wQEAwIFoDA5BgNVHR8EMjAwMC6gLKAqhihodHRwOi8vY3JsLnRo
YXd0ZS5jb20vVGhhd3RlRVZDQTIwMDYuY3JsMEIGA1UdIAQ7MDkwNwYLYIZIAYb4
RQEHMAEwKDAmBggrBgEFBQcCARYaaHR0cHM6Ly93d3cudGhhd3RlLmNvbS9jcHMw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFM0y4vJd
JUcCqo95SzLuA5n9MEnRMGgGCCsGAQUFBwEBBFwwWjAiBggrBgEFBQcwAYYWaHR0
cDovL29jc3AudGhhd3RlLmNvbTA0BggrBgEFBQcwAoYoaHR0cDovL2NybC50aGF3
dGUuY29tL1RoYXd0ZUVWQ0EyMDA2LmNlcjANBgkqhkiG9w0BAQUFAAOCAQEAeIVa
rjFnkZDq6iRKA3OBd8XHThTFV/0h7ef6LPDwZB8x3MlRA28Gv/uXOdaY3gteRdoE
sBQue9toQnKKrkNU8nERI37XRRFLW5xdw2Hfl8JA0ZdRVn+8mrwO/8a9m2HSGza5
bVDYJxrmw5hJ1qjDiHB99pTamC1F5pJcQpLBRVGhDiPNVg65unug26qPPdMsToxy
FH3hj84cXd7m17uNKu84tvqtjLYMtKY1n+A6sJG3ZNLVJ0AvV56W33VVdolzAxpq
Z1K92c1QPkTp5PM2Phu2vDzdGTAK29iUVn6CnFv6AlrAmyv8/LZ5sX2qlvzvLn4+
maVHncAARwqS/sYReQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3P7LJR6e2Z8k1lvHjx9
Jjgf4/SFHYr6WucMgGt1jfrdksm/sa80i6gLWrhzrWZxHxb1kKDCQO1lgHrQi36h
GuUZwLXEOe+DuSgn8djQ0SwV+CpjDLssYzAWk14XzHNZSlScveM10zV8u0fNvNiy
QEjW443G1d7Wm54esknvWpxvQXvAgYMHujcw1QRTCqRomf2Uncx8VeGMA32QHcid
O49aFXeZ2fZMniXx+P6bE/+i2tAu3Y4VeUE8MlUkDcle6Hua3VtjTOayeZH4n5Pq
RIyDaXq4LprTSjdfvHLqmp+mS9NbKnodE6go5ufCMznhavy6wIlny//qhsNFVZ7w
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 69212867390947708273403720907067597837
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.thawte.com/cps (c)06'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte Extended Validation SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-10-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Advanced Chemistry Development Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '001095611'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Toronto'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Business Development'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'ilab.acdlabs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23158802244945368161710294895010244591072480933493048866840974320533982805695113724860481956606713087682127332871455270912035218124298112822195663173970149266403331012599998469174645391967489417564420239207421878360109401678299353873325506666295698948806893450731633119105550434084453990609056061756836107152810653753388124395326965634920816391784111143216791526499247806823035670102440779746907643811295869005871019837714067475979714998251182952272159968417512623557536776821384918034664318009072067809898223189685031942438680695657186609934931195719228874735143169119416295706112195660128855477520330935432661364939
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilab.acdlabs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.thawte.com/ThawteEVCA2006.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.48.1 (Thawte EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName cd32e2f25d254702aa8f794b32ee0399fd3049d1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.thawte.com/ThawteEVCA2006.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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