mcvpnsw.rsglab.com

- The Rocket Science Group, LLC -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 06:fe:ed:c1:9a:02:5a:4e:38:01:18:6b:a7:5e:c1:93 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Rocket Science Group, LLC

Organization: The Rocket Science Group, LLC
State / Province: Georgia
Locality: Atlanta
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:fe:ed:c1:9a:02:5a:4e:38:01:18:6b:a7:5e:c1:93
Serial Number (int): 9299033646552307973968618932970373523
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 21:09:d1:9e:54:23:64:62:47:88:ba:4b:d6:92:2b:e6:5c:df:68:a6
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 5c:d5:b8:43:df:d2:cc:d0:e2:2d:48:29:0e:6c:87:0e:88:f0:c6:8b
Fingerprint (sha256): 30:26:fb:44:f8:57:2d:be:14:4a:74:85:e3:57:0d:82:5d:76:a2:8a:cd:a5:2e:14:f4:04:14:51:28:78:d5:01

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate mcvpnsw.rsglab.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mcvpnsw.rsglab.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mcvpnsw.rsglab.com

Other certificates including the domain name rsglab.com

(limited to 100 certificates)
bench.rsglab.com
creative-assistant.rsglab.com
link.getup-shoes.com
storybook.rsglab.com
prototypes.rsglab.com
prototypes.rsglab.com
wink.rsglab.com
storefront.rsglab.com
mns-ise.rsglab.com
sitespeed.rsglab.com
mcvpn.rsglab.com
vacation-feed.rsglab.com
creative-assistant.rsglab.com
sitespeed.rsglab.com
router.prod.fabric.rsglab.com
fp.rsglab.com
go-test.rsglab.com
*.platform.rsglab.com
jss.rsglab.com
storybook.rsglab.com
*.rsglab.com
git.rsglab.com
downloads.e-ceos.com.br
www.colornix.biz
omnicache.rsglab.com
incidents.rsglab.com
wink.rsglab.com
go-test.rsglab.com
jss.rsglab.com
rsgmc-az-scs.corp.mailchimp.co
experiments.rsglab.com
staff.rsglab.com
sitespeed.rsglab.com
storefront.rsglab.com
data.rsglab.com
git-stage.rsglab.com
router.prod.fabric.rsglab.com
pcm-ise2.rsglab.com
www.aidhon.com
crashplan-vault.rsglab.com
*.rsglab.com
fp.rsglab.com
vacation-feed.rsglab.com
sitespeed.rsglab.com
*.rsglab.com
vacation-feed.rsglab.com
mergeblocks.rsglab.com
vacation-feed.rsglab.com
router.dev.fabric.rsglab.com
storefront.rsglab.com
mcvpn.rsglab.com
*.rsglab.com
data.rsglab.com
mcvpnsw.rsglab.com
router.dev.fabric.rsglab.com
mcvpn.rsglab.com
mcvpnam.rsglab.com
creative-assistant.rsglab.com
*.platform.rsglab.com
boo.pushstart.com.br
front-end.rsglab.com
creative-assistant.rsglab.com
mergeblocks.rsglab.com
vacation-feed.rsglab.com
sawa-dev-4.rsglab.com
creative-assistant.rsglab.com
storybook.rsglab.com
crashplan-vault.rsglab.com
backpack.rsglab.com
status-stage.rsglab.com
transit.rsglab.com
prototypes.rsglab.com
transit.rsglab.com
vacation-feed.rsglab.com
mcvpnap.rsglab.com
*.platform.rsglab.com
router.prod.fabric.rsglab.com
app01.altimeter.prod.pcm01.rsglab.com
sitespeed.rsglab.com
sitespeed.rsglab.com
thesaurum.thetislive.com
mcvpn.rsglab.com
wink.rsglab.com
www.kyber.space
data.rsglab.com
editing-platform.rsglab.com
fp.rsglab.com
storefront.rsglab.com
experiments.rsglab.com
incidents.rsglab.com
fp.rsglab.com
sitespeed.rsglab.com
router.prod.dsfgcloud.rsglab.com
editing-platform.rsglab.com
bench.rsglab.com
front-end.rsglab.com
app.nomasfilas.cl
es-it.rsglab.com
test-management.mhntools.net
incidents.rsglab.com

Certificate

The complete raw certificate details for mcvpnsw.rsglab.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGCzCCBPOgAwIBAgIQBv7twZoCWk44ARhrp17BkzANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMRswGQYDVQQDExJUaGF3dGUgUlNBIENBIDIwMTgwHhcN
MTkwMTEyMDAwMDAwWhcNMjEwMTA4MTIwMDAwWjB2MQswCQYDVQQGEwJVUzEQMA4G
A1UECBMHR2VvcmdpYTEQMA4GA1UEBxMHQXRsYW50YTEmMCQGA1UEChMdVGhlIFJv
Y2tldCBTY2llbmNlIEdyb3VwLCBMTEMxGzAZBgNVBAMTEm1jdnBuc3cucnNnbGFi
LmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALX+NH9JNzSKFauC
cJVpfos8auCzw83kfCDS/miEhRbBgEclZCOTT3yXoW/j8gbOEzreXmzU3xhGkxMx
Krrct6LUBEaMY0pd6ipYy5/LWj19Q8W/Aa4DAlJnDjKLwGnj8p+A+A6JcGVF91ne
1A6ym2Cm/F/hfSx6V/6kVIzImkTblMhQ+3Vld451RXyZy87GrUa17r84sNBurxj3
vRifTNKwvrXpQH2ndaCj9EUE2ozrd7zaxx9K++ts41OB7eYkegSkmh4gGtela5i8
NfLrjWrJUUYoderE9ynZduubgpGfcQaZ9arue5ZA+Ot1Xwy6f91HBkLt71sHrDq1
v2KY5WOcVtrJQ7q5Qf/0swTRwL9TvmU6VSSMtdiBuuNI7/YwdrLVi43z4RrJ9FC4
hfwCni6XZCn9CLrnZ2qIU6u5Fu1kR0ygjrxmKbiTesPEGIsjsTj5ecHRESN8HOxU
k5MUCAzWddr7nSyGvh1NTGuAD+cdpDeaiymGic/IRWZNhNDYfL6d3JfjmgpQ8xXk
AWVfzYacFxahZN34OUWDHG2DvWAe+O9wwu8YcejVzya3/mKYjwz34hloUIm5/Kap
7iDcAafFZWGjRwLxOSzxpawqq0rOca9sxSCK536s6g0Xn3xgDJyhCG4zVFsmav+F
3/cXL7gadHb3Ymvw/U96AFBtHWHnAgMBAAGjggGtMIIBqTAfBgNVHSMEGDAWgBSj
yF5lVOUweMEF6gcKalnMuf7eWjAdBgNVHQ4EFgQUIQnRnlQjZGJHiLpL1pIr5lzf
aKYwHQYDVR0RBBYwFIISbWN2cG5zdy5yc2dsYWIuY29tMA4GA1UdDwEB/wQEAwIF
oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOgYDVR0fBDMwMTAvoC2g
K4YpaHR0cDovL2NkcC50aGF3dGUuY29tL1RoYXd0ZVJTQUNBMjAxOC5jcmwwTAYD
VR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cu
ZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIwbwYIKwYBBQUHAQEEYzBhMCQGCCsG
AQUFBzABhhhodHRwOi8vc3RhdHVzLnRoYXd0ZS5jb20wOQYIKwYBBQUHMAKGLWh0
dHA6Ly9jYWNlcnRzLnRoYXd0ZS5jb20vVGhhd3RlUlNBQ0EyMDE4LmNydDAJBgNV
HRMEAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCe
ziQSgPmJeXsPS4H5Tp+GMbdq2Z8UL6lLKGIl/GwJhE5gppu6r219IbI+K/NvSafk
qAaIOAHOQfRWGg8sD2RJ9eq3L9/9iGeyJn6Muli9rsdwqYGwxR9ClwicSsSJNgC4
RdYDSy8jY+vIAa7zWoYW4XmbRv05p9IFc0DCc7e7UcDFVM73ODQpI+UvTQ2HF/uf
MWuxWRw4HE6347UHyyv0Cp3u0jrTAZ5uXdMNmc2dl0XLI5EIdsphYoORiJQEcWQX
NzIXrVlMai4OASR0gqRIpRSis6H8wysazOlU3l2nkpgRjVYPXj3xaqKNLf83kftg
148gARI7VPwjvtXrdkIL
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtf40f0k3NIoVq4JwlWl+
izxq4LPDzeR8INL+aISFFsGARyVkI5NPfJehb+PyBs4TOt5ebNTfGEaTEzEquty3
otQERoxjSl3qKljLn8taPX1Dxb8BrgMCUmcOMovAaePyn4D4DolwZUX3Wd7UDrKb
YKb8X+F9LHpX/qRUjMiaRNuUyFD7dWV3jnVFfJnLzsatRrXuvziw0G6vGPe9GJ9M
0rC+telAfad1oKP0RQTajOt3vNrHH0r762zjU4Ht5iR6BKSaHiAa16VrmLw18uuN
aslRRih16sT3Kdl265uCkZ9xBpn1qu57lkD463VfDLp/3UcGQu3vWwesOrW/Ypjl
Y5xW2slDurlB//SzBNHAv1O+ZTpVJIy12IG640jv9jB2stWLjfPhGsn0ULiF/AKe
LpdkKf0IuudnaohTq7kW7WRHTKCOvGYpuJN6w8QYiyOxOPl5wdERI3wc7FSTkxQI
DNZ12vudLIa+HU1Ma4AP5x2kN5qLKYaJz8hFZk2E0Nh8vp3cl+OaClDzFeQBZV/N
hpwXFqFk3fg5RYMcbYO9YB7473DC7xhx6NXPJrf+YpiPDPfiGWhQibn8pqnuINwB
p8VlYaNHAvE5LPGlrCqrSs5xr2zFIIrnfqzqDReffGAMnKEIbjNUWyZq/4Xf9xcv
uBp0dvdia/D9T3oAUG0dYecCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9299033646552307973968618932970373523
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-08 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Georgia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Atlanta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Rocket Science Group, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mcvpnsw.rsglab.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 742466616134245940983679285459155764329400456073384608529512123998713496218538935607248329611325136891318570478986347784645252944399681336689410375838838988185083106103560455461986406164689105187983824550347929023923939957480253828500197491481245738726077097560947097454046736673087517730424291008556360172922610717462641073171944704244613243180963496480452034633321748541604042951051086247771505172923797361851766909844562523758867412240371339818941474478295222361201708637078095276263063802406800159034276634047084393317879426490544219744412598280989943066628899456032384179924493138422468386700393469978670992779065652580103834582479247868237464625569791382419602287085042121115940935672234892918839103541077458900117727885009732828978928802105857092118656461395543238031667101290441398429456589714578953701144434357724792440906219448131474357062712136707701590159062288526767839942817997933844632018997286442868281392450956262416572716528870550147878885703551622431567050095363275027329414656955337253464510237027601993360612408451148399551429678722253778526743110823309415771848219974546687713287868677369016043650593777013041082862440696172494753381041189840891980023588082868291908180175115763363535546243521255596997585232359
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2109d19e542364624788ba4bd6922be65cdf68a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcvpnsw.rsglab.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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