polling.crisil.com

- CRISIL LTD -

Issued by Thawte TLS RSA CA G1

About this certificate

This digital certificate with serial number 04:09:76:3c:02:04:fb:f6:9b:df:ee:a9:cd:2d:6c:18 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

CRISIL LTD

Organization: CRISIL LTD
State / Province: Maharashtra
Locality: Mumbai
Country: IN

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:09:76:3c:02:04:fb:f6:9b:df:ee:a9:cd:2d:6c:18
Serial Number (int): 5366040733514454279281633572764347416
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 43:fc:f2:2a:bc:f7:4b:07:cd:b7:19:41:15:7a:0e:fc:ad:5f:30:55
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7

Fingerprint (sha1): fc:27:ce:26:d8:49:09:30:b8:14:2a:bf:85:d9:58:57:7d:7d:da:3c
Fingerprint (sha256): 33:0e:02:41:83:75:04:90:ff:e6:3e:ee:52:9c:89:41:44:cc:9f:30:4b:54:55:0c:2d:77:4a:f0:d5:0a:1c:bd

Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl

Check the revocation status for certificate polling.crisil.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for polling.crisil.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

polling.crisil.com
www.polling.crisil.com

Other certificates including the domain name crisil.com

(limited to 100 certificates)
model-infinity.crisil.com
myapps.crisil.com
people.smartapartmentdata.com
intranet.netcontroll.com
www.zwayam.com
people.studiotechau.com
rh.afreecom.com
api.crisil.com
www.zwayam.com
www.zwayam.com
www.zwayam.com
cialpha.crisil.com
qawitimages.crisil.com
www.zwayam.com
www.zwayam.com
esuraksha.crisil.com
hr.gep.com
www.crisil.com
auth-rise.crisil.com
www.crisil.com
www.zwayam.com
www.zwayam.com
polling-uat.crisil.com
intranet.netcontroll.com
www.zwayam.com
meetingcenter.crisil.com
www.zwayam.com
*.crisil.com
www.zwayam.com
hrms.etaxfinance.in
www.zwayam.com
nexbeta.crisil.com
hrms.ricoh.com.vn
www.zwayam.com
buzz.crisil.com
intranet.netcontroll.com
www.zwayam.com
sparc.crisil.com
esuraksha.crisil.com
wittywebevents.crisil.com
rh.afreecom.com
mumchpgp01.ad.crisil.com
www.zwayam.com
nexbeta.crisil.com
people.dxfactor.com
www.zwayam.com
talent.kavasa.in
www.zwayam.com
rh.afreecom.com
rh.afreecom.com
www.crisil.com
intranet.netcontroll.com
intranet.netcontroll.com
model-infinity.crisil.com
*.crisil.com
careers.crisil.com
www.zwayam.com
mumchewe01.ad.crisil.com
smart.crisil.com
www.zwayam.com
www.crisil.com
cspconnect.workrify.com
alphatrax-auth.crisil.com
mumchewe01.ad.crisil.com
mumchewe01.ad.crisil.com
rh.afreecom.com
intranet.netcontroll.com
careers.crisil.com
intranet.netcontroll.com
intranet.netcontroll.com
gurchewe01.ad.crisil.com
www.zwayam.com
www.crisil.com
*.crisil.com
www.zwayam.com
www.crisil.com
polling.crisil.com
www.zwayam.com
intranet.netcontroll.com
my.crisil.com
intranet.netcontroll.com
adfs.crisil.com
hrms.etaxfinance.in
intranet.netcontroll.com
everest-smart.crisil.com
qawitimages.crisil.com
intranet.netcontroll.com
www.zwayam.com
intranet.netcontroll.com
www.zwayam.com
intranet.netcontroll.com
myapps.crisil.com
auth.crisil.com
buzz.crisil.com
mumchewe01.ad.crisil.com
meetingcenter.crisil.com
www.zwayam.com
dr.crisil.com
hr.yajnas.tk
www.zwayam.com

Certificate

The complete raw certificate details for polling.crisil.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGDDCCBPSgAwIBAgIQBAl2PAIE+/ab3+6pzS1sGDANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRUaGF3dGUgVExTIFJTQSBDQSBHMTAe
Fw0yMzEyMTUwMDAwMDBaFw0yNTAxMTQyMzU5NTlaMGYxCzAJBgNVBAYTAklOMRQw
EgYDVQQIEwtNYWhhcmFzaHRyYTEPMA0GA1UEBxMGTXVtYmFpMRMwEQYDVQQKEwpD
UklTSUwgTFREMRswGQYDVQQDExJwb2xsaW5nLmNyaXNpbC5jb20wggIiMA0GCSqG
SIb3DQEBAQUAA4ICDwAwggIKAoICAQC9owpdGWhMIwtXknYwFeLMeIl2xPfayG14
ARVgzfx3sMstKacTDORNaYbWbnr/Ixx2AlHEEsI5LdxSEoj3TjRgVF9VX7JIreJp
NRO6Z+DmW7qTy1rtEIEMKOPWZAJlWQWmcsOAEiRlxdo9BXIJwrHK7BPqc8jHZGN6
1Qv+2clKc95S+Kz7hsnVzWleCR/rtCI0h5oEEE8RTkQUp9QVmTtjOf8gL3TQRL40
xTNaES3DVrdvJWw14MUrHXinVIAiQC486Y+7mdu9n1YIeHyF90g2Pq/BwQjJcHwZ
294UisFUHrXunskfVvtrkxglEpFzxvC5u3NomCBlxoQSK8Y9yjPlRu7ob/rYLIww
dq2B3lm3u+HHgPj21GIpgSWX3/I4tzClzA69KVPLlhwhtiK56H8g6MVVsrq1iZtw
UfNN12wtwyTvOYg2aTZEE6s6X2TyByymHzlNqDw3Z8ugnm8A8ykjO4YerPPZ0uFH
O/1255Gfvhl9GFuXogiO1MbNL8I93ic+qDC9Iw8pzraWTa6cWf9TESZpBSwU443Q
Bp5sCuNwi6z8U6QGugCz9jvuLFvMLl0P91n/FtHKQC8B9D3Rm2N8bdOeV7LR2CoT
SnDOa8EwltTvJW0jHXEIRc/vGHrjBMD7cv7jEAFk2egaxuZqHzGP0sadfTryQKoj
2sB2KikRUQIDAQABo4IBvDCCAbgwHwYDVR0jBBgwFoAUpYz+MszrDyzUGcYIuAAk
iF3DxbcwHQYDVR0OBBYEFEP88iq890sHzbcZQRV6DvytXzBVMDUGA1UdEQQuMCyC
EnBvbGxpbmcuY3Jpc2lsLmNvbYIWd3d3LnBvbGxpbmcuY3Jpc2lsLmNvbTA+BgNV
HSAENzA1MDMGBmeBDAECAjApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2lj
ZXJ0LmNvbS9DUFMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB
BggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY2RwLnRoYXd0ZS5j
b20vVGhhd3RlVExTUlNBQ0FHMS5jcmwwcAYIKwYBBQUHAQEEZDBiMCQGCCsGAQUF
BzABhhhodHRwOi8vc3RhdHVzLnRoYXd0ZS5jb20wOgYIKwYBBQUHMAKGLmh0dHA6
Ly9jYWNlcnRzLnRoYXd0ZS5jb20vVGhhd3RlVExTUlNBQ0FHMS5jcnQwDAYDVR0T
AQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
vUjwJWPSFvpj82Uoh+dB/gcZhRk75/UqgK81nVJh1NI0sHWD5dlkLoHoFyvOCy5d
vr+YOUHo59FlayCGGj+Ug0rdY3YNs270vkbVyFdCvjl8Rwb+FwF3giMuyQBGAHq5
YuODSqXQ9bqc77jzGYXz9Q0y7JnLlUEa0myCLF4ZWnynp+M03kb6kfBEmN/PB7QG
6TsfgflOH/z+NUYltzMY59+Bs79WQcRd2UXYuksuP4PWAvjeXuHRfDs+SP3BziYD
aGO1Zk6mx70URRpX04d8TclXFD2+KE83ufcb3GXLMlbGpDZxFXaE7x32TygN6M8/
C6OW9GMDsbWDrtA5No4jZw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5366040733514454279281633572764347416
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maharashtra'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mumbai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CRISIL LTD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'polling.crisil.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 773650959870068569832123232505855943243395124733848405475844287582725606037638395482761235698636973239392134334510259313297708918974593943006493194264788169131099477549022121650684678156947641153775380389539722960031442910335781118030343339143011503305891623556193667397059062906811680537668779991669506621202905452030886491221418515245405354656665263555217407141822220078426025207890511738216297465024501386078124739170671393331494867429004872023131028923553919984271739757942695493191429690383890284249039908434365225841388942422991481642242938237456962235033321615339563294146581784012307899105942244433280700016659066769732775891098362532871952887863538687784946932712675698839899741838137970020798475968128285925578465651088724452551895856676111989203311066479859726277788737208987732289210848464616373774385577109913468063396340334884828484514664749970312389937506066837652827106708958233451820910709826776097970293331102854458103995537998832495769042349531775115925594920795397661609227763479620820058451154483169927304427460726741276769791478539122217991233147830215014376122712533413368143979838762385973771197209854517300323558072745199853596821370745712895556255630080573555974472709233985968260021154901696024379480674641
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							43fcf22abcf74b07cdb71941157a0efcad5f3055
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polling.crisil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.polling.crisil.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00bd48f02563d216fa63f3652887e741fe071985193be7f52a80af359d5261d4d234b07583e5d9642e81e8172bce0b2e5dbebf983941e8e7d1656b20861a3f94834add63760db36ef4be46d5c85742be397c4706fe17017782232ec90046007ab962e3834aa5d0f5ba9cefb8f31985f3f50d32ec99cb95411ad26c822c5e195a7ca7a7e334de46fa91f04498dfcf07b406e93b1f81f94e1ffcfe354625b73318e7df81b3bf5641c45dd945d8ba4b2e3f83d602f8de5ee1d17c3b3e48fdc1ce26036863b5664ea6c7bd14451a57d3877c4dc957143dbe284f37b9f71bdc65cb3256c6a43671157684ef1df64f280de8cf3f0ba396f46303b1b583aed039368e2367