portal.stb-pott-meyer.de
Issued by Thawte TLS RSA CA G1
About this certificate
This digital certificate with serial number 0f:b4:a7:94:dd:16:2c:13:a4:a6:32:23:ed:1e:c2:f6 was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=portal.stb-pott-meyer.de
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0f:b4:a7:94:dd:16:2c:13:a4:a6:32:23:ed:1e:c2:f6Serial Number (int): 20876432327904860691801749372062843638
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 76:56:fe:34:2c:ee:8a:07:ce:36:78:1d:eb:b1:91:2a:70:84:82:98
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7
Fingerprint (sha1): 43:b5:e6:c1:00:bc:db:27:f1:a5:07:b8:8f:01:6a:f2:86:05:d8:0a
Fingerprint (sha256): 31:06:ab:a2:c1:a0:2f:11:25:53:9c:89:2b:fe:4b:2d:a0:83:b4:50:a3:3d:49:a8:d0:58:2f:0c:49:ec:02:9c
Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt
Revocation information
OCSP Server: http://status.thawte.comCRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl
Check the revocation status for certificate portal.stb-pott-meyer.de
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for portal.stb-pott-meyer.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
portal.stb-pott-meyer.de
Other certificates including the domain name stb-pott-meyer.de
(limited to 100 certificates)
stb-pott-meyer.de
artly.world
portal.stb-pott-meyer.de
cheshtagupta.com
dev.ffrk.jp
www.plus.refquest.dev
www.profile-spy.info
stb-pott-meyer.de
staging-links.lucrasports.com
stb-pott-meyer.de
speakers.360idev.com
pocketlearning.de
artly.world
www.60sfire.com
portal.stb-pott-meyer.de
regional-platform-prod.china.thoughtworks.net
www.plus.refquest.dev
www.sawyerwealth.com
barchatdating.com
f7e.dev
blinkistcampaign.tech
stb-pott-meyer.de
app.accurateaccred.com
portal.stb-pott-meyer.de
wallet.merit.me
stb-pott-meyer.de
www.parkncharge4u.com
portal.stb-pott-meyer.de
merchant.antwallet.ca
athlyts.app
www.angelasette.com
api.codexacademy.io
jw-spc.org
robynvshoxboy.com
azadi.de
nextstationmusic.com
stb-pott-meyer.de
www.nowaprawica.pl
dev.getgdpr.eu
opportuno.app
www.shinra.app
www.boto.ninja
portal.stb-pott-meyer.de
parkncharge4u.com
stb-pott-meyer.de
tt2.m.tooldesk.app
staging.fla.zooniversal.com
www.60sfire.com
media.stb-pott-meyer.de
www.canopusholidays.com
stb-pott-meyer.de
www.leanlearning.xyz
www.astrahr.org
stb-pott-meyer.de
stb-pott-meyer.de
aliakbar.me
stb-pott-meyer.de
media.stb-pott-meyer.de
www.relitex.in
derivier.online
stb-pott-meyer.de
www.prahadigitalni.cz
link.doneski.com.au
stb-pott-meyer.de
stb-pott-meyer.de
www.stb-pott-meyer.de
applicationsoap.beezsocialerp.com
artly.world
portal.stb-pott-meyer.de
cheshtagupta.com
dev.ffrk.jp
www.plus.refquest.dev
www.profile-spy.info
stb-pott-meyer.de
staging-links.lucrasports.com
stb-pott-meyer.de
speakers.360idev.com
pocketlearning.de
artly.world
www.60sfire.com
portal.stb-pott-meyer.de
regional-platform-prod.china.thoughtworks.net
www.plus.refquest.dev
www.sawyerwealth.com
barchatdating.com
f7e.dev
blinkistcampaign.tech
stb-pott-meyer.de
app.accurateaccred.com
portal.stb-pott-meyer.de
wallet.merit.me
stb-pott-meyer.de
www.parkncharge4u.com
portal.stb-pott-meyer.de
merchant.antwallet.ca
athlyts.app
www.angelasette.com
api.codexacademy.io
jw-spc.org
robynvshoxboy.com
azadi.de
nextstationmusic.com
stb-pott-meyer.de
www.nowaprawica.pl
dev.getgdpr.eu
opportuno.app
www.shinra.app
www.boto.ninja
portal.stb-pott-meyer.de
parkncharge4u.com
stb-pott-meyer.de
tt2.m.tooldesk.app
staging.fla.zooniversal.com
www.60sfire.com
media.stb-pott-meyer.de
www.canopusholidays.com
stb-pott-meyer.de
www.leanlearning.xyz
www.astrahr.org
stb-pott-meyer.de
stb-pott-meyer.de
aliakbar.me
stb-pott-meyer.de
media.stb-pott-meyer.de
www.relitex.in
derivier.online
stb-pott-meyer.de
www.prahadigitalni.cz
link.doneski.com.au
stb-pott-meyer.de
stb-pott-meyer.de
www.stb-pott-meyer.de
applicationsoap.beezsocialerp.com
Certificate
The complete raw certificate details for portal.stb-pott-meyer.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGLTCCBRWgAwIBAgIQD7SnlN0WLBOkpjIj7R7C9jANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRUaGF3dGUgVExTIFJTQSBDQSBHMTAe Fw0xODAzMjgwMDAwMDBaFw0yMDA0MjYxMjAwMDBaMCMxITAfBgNVBAMTGHBvcnRh bC5zdGItcG90dC1tZXllci5kZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKp4UnGp6lXQ3T4M8ASZbtapBTSiRrvf3bHWWozqm31itR8WyTlykOkG5BaM Xcb8nBAEwMjEEkqeTQ0gi4SLgQMNpIJUTqs7NxIG+Rh63Urh11sugqMjqf8lUdJv qijBFXVnjGsLmHYmHCdOhjuLKPZAfll6DFsHVyVPwMfpQBH1DN/aqccpQkr116tx aGjBUBtAW4xFxp+qXW1e3XGXOhqeMJAnMfaig7z9gQL0XbKe6sKm2EwXtSFT8dHN E9+9HZTVOhsZ3q2iMHXXKWBHL1Uc9GkS4iZ1U3Pl1/qhzdx67CJyPAHeI8k5m9lm NhHoEAqjAJaoE46Fuu0LuEDRCycCAwEAAaOCAyAwggMcMB8GA1UdIwQYMBaAFKWM /jLM6w8s1BnGCLgAJIhdw8W3MB0GA1UdDgQWBBR2Vv40LO6KB842eB3rsZEqcISC mDAjBgNVHREEHDAaghhwb3J0YWwuc3RiLXBvdHQtbWV5ZXIuZGUwDgYDVR0PAQH/ BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAy MDCgLqAshipodHRwOi8vY2RwLnRoYXd0ZS5jb20vVGhhd3RlVExTUlNBQ0FHMS5j cmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQIwKjAoBggrBgEFBQcCARYcaHR0cHM6 Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgEwcAYIKwYBBQUHAQEEZDBi MCQGCCsGAQUFBzABhhhodHRwOi8vc3RhdHVzLnRoYXd0ZS5jb20wOgYIKwYBBQUH MAKGLmh0dHA6Ly9jYWNlcnRzLnRoYXd0ZS5jb20vVGhhd3RlVExTUlNBQ0FHMS5j cnQwCQYDVR0TBAIwADCCAXwGCisGAQQB1nkCBAIEggFsBIIBaAFmAHUApLkJkLQY WBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFia5LyWAAABAMARjBEAiBrAbuI 8QvRY8pSqLu/lFNMUcahHPh7QphVmnwXYKvxBgIgLHxbkhiB1CefmMoxKna0Cxe0 UBrbR3mq8LhPibxrOIkAdQBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZ EwAAAWJrkvN5AAAEAwBGMEQCIBC08XVgkYzlqgD5oiCg3pz7Oc5kPlHCaYgOAl56 zBBnAiBSn8QzNxkfazq8U2mPf0MC996n8exnC+08YbUx5On+EgB2ALvZ37wfinG1 k5Qjl6qSe0c4V5UKq1LoGpCWZDaOHtGFAAABYmuS8ysAAAQDAEcwRQIhANHQ1EKP QKGIbMFnH2VVo9RVTKff8GGIzPjetOjKRW71AiAqniQ+MhzvL4PWwhKFrgUlAReR 8i2x/5qn5zs1NcuAnTANBgkqhkiG9w0BAQsFAAOCAQEAl9i7JVbqas5taWRvsBMv YCAaDkfOYGXtmEiEOanUmYTFSdfY06YwnkrSSp9epOBfSPKPHuJr16HxoxKLI/B/ r55E2bEa+ohLeYmqIF2f2Bsx096FldEYj6qyaBpwjwkG9H9SJv75zlzNzlZHpPVY 2RfOTt8Mz23TsaWaHHTGhhWnhM5iIt75kVjELKX11UrdX8Mt/TNpVE2ViPQ6bXGJ d7HTcYp+z5tu8pYtgaGhc/AENhAQmERaU7qxDox+2uKLvdf7OQD6joawjPVjHlS8 iBFnPh5sinqv6+6cWHs8drs3NnVRWHGkPATuSQ+emT0n+7zUHRGm1O2snCWibvb4 vw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnhScanqVdDdPgzwBJlu 1qkFNKJGu9/dsdZajOqbfWK1HxbJOXKQ6QbkFoxdxvycEATAyMQSSp5NDSCLhIuB Aw2kglROqzs3Egb5GHrdSuHXWy6CoyOp/yVR0m+qKMEVdWeMawuYdiYcJ06GO4so 9kB+WXoMWwdXJU/Ax+lAEfUM39qpxylCSvXXq3FoaMFQG0BbjEXGn6pdbV7dcZc6 Gp4wkCcx9qKDvP2BAvRdsp7qwqbYTBe1IVPx0c0T370dlNU6GxneraIwddcpYEcv VRz0aRLiJnVTc+XX+qHN3HrsInI8Ad4jyTmb2WY2EegQCqMAlqgTjoW67Qu4QNEL JwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 20876432327904860691801749372062843638 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-28 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-26 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portal.stb-pott-meyer.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21519844856913677764686902465535848249483890401005179832151496222034809179326218088250592477079254808776648440486300552733911162770021507816896579004551185315765454257664442751786810882730407727554359328332869532703911857679155103373165118336677131228938566713545173044937228777364250670716488422489671755979405027561132048481301863199320186507492010474648277427346132476544992732216664481686395197855498043157586228675126679237681549953073522649113242022740947116298534179597510442011063535973266573803303775905336608839897733810658772625244023869092795448303221820745888575963661623607516751565827335175345712204583 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7656fe342cee8a07ce36781debb1912a70848298 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.stb-pott-meyer.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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