s.kelkoo.com
- Kelkoo SAS -
Issued by thawte SSL CA - G2
About this certificate
This digital certificate with serial number 03:bd:d2:ec:af:2e:62:19:fa:51:5d:2d:72:96:b1:e7 was issued on by thawte, Inc..
With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Kelkoo SAS
Organization:
Kelkoo SAS
Organization unit: Engineering
Organization unit: Engineering
State / Province:
Isere
Locality: Echiroles
Country: FR
Locality: Echiroles
Country: FR
thawte, Inc.
Organization:
thawte, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:bd:d2:ec:af:2e:62:19:fa:51:5d:2d:72:96:b1:e7Serial Number (int): 4973306151696900835235269455421813223
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60
Fingerprint (sha1): 7a:e5:8c:96:04:32:03:96:ff:a6:94:30:ee:84:8d:b0:09:43:d2:a7
Fingerprint (sha256): 33:dd:c3:ca:90:0f:fb:94:e5:cb:c0:37:45:46:c6:0c:bf:c0:f0:03:46:b2:60:df:06:4a:b2:b7:24:b5:33:c3
Issuing Certificate URL: http://tj.symcb.com/tj.crt
Revocation information
OCSP Server: http://tj.symcd.comCRL Distribution Point: http://tj.symcb.com/tj.crl
Check the revocation status for certificate s.kelkoo.com
19
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for s.kelkoo.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
s.kelkoo.at
s.kelkoo.com.br
s.kelkoo.de
s.kelkoo.dk
s.kelkoo.es
s.kelkoo.fi
s.kelkoo.fr
s.kelkoo.it
s.kelkoo.nl
s.kelkoo.no
s.kelkoo.ru
s.kelkoo.se
s.kelkoo.co.uk
s.kelkoo.ch
s.kelkoo.com.pt
s.kelkoo.pl
s.kelkoo.ie
s.kelkoo.cz
s.kelkoo.com
s.kelkoo.com.br
s.kelkoo.de
s.kelkoo.dk
s.kelkoo.es
s.kelkoo.fi
s.kelkoo.fr
s.kelkoo.it
s.kelkoo.nl
s.kelkoo.no
s.kelkoo.ru
s.kelkoo.se
s.kelkoo.co.uk
s.kelkoo.ch
s.kelkoo.com.pt
s.kelkoo.pl
s.kelkoo.ie
s.kelkoo.cz
s.kelkoo.com
Other certificates including the domain name kelkoo.com
(limited to 100 certificates)
ads.kelkoo.com
secure.ads.kelkoo.com
de.shoppingapis.kelkoo.com
s.kk-resources.com
*.kelkoo.com
*.kelkoo.com
*.kelkoo.com
*.kelkoo.com
s.kk-resources.com
*.kelkoo.com
c.kelkoo.com
adservice.kelkoo.fr
s.kk-resources.com
s.kelkoo.com
ad.kelkoo.com
all-hp.kelkoo.com
s.kk-resources.com
secure.ads.kelkoo.com
ads.kelkoo.com
secure.ads.kelkoo.com
*.kelkoo.com
adservice.kelkoo.fr
*.kelkoo.com
s.kk-resources.com
s.kk-resources.com
*.kelkoo.com
secure.ads.kelkoo.com
*.kelkoo.com
*.kelkoo.com
*.kelkoo.com
*.kelkoo.com
es.shoppingapis.kelkoo.com
*.kelkoo.com
ads.kelkoo.com
adservice.kelkoo.fr
adservice.kelkoo.fr
s.kk-resources.com
profile.kelkoo.com
hpcm.images.kelkoo.com
it.shoppingapis.kelkoo.com
*.kelkoo.com
secure.ads.kelkoo.com
secure.ads.kelkoo.com
*.kelkoo.com
*.kelkoo.co.uk
*.kelkoo.com
adservice.kelkoo.fr
*.kelkoo.com
secure.ads.kelkoo.com
partner.kelkoo.com
*.kelkoo.com
adservice.kelkoo.fr
s.kk-resources.com
login.kelkoo.com
dc1-og2-pub-tomcat-vip.kelkoo.com
*.kelkoo.com
*.kelkoo.com
*.kelkoo.com
secure.ads.kelkoo.com
*.kelkoo.com
aftpnqspcq.cloudimg.io
*.kelkoo.com
partner.kelkoo.com
adservice.kelkoo.fr
adservice.kelkoo.fr
ad.kelkoo.com
admin.kelkoo.fr
ads.kelkoo.com
secure.ads.kelkoo.com
adservice.kelkoo.fr
*.kelkoo.com
adservice.kelkoo.com
*.kelkoo.com
*.kelkoo.com
secure.ads.kelkoo.com
de.shoppingapis.kelkoo.com
s.kk-resources.com
*.kelkoo.com
*.kelkoo.com
*.kelkoo.com
*.kelkoo.com
s.kk-resources.com
*.kelkoo.com
c.kelkoo.com
adservice.kelkoo.fr
s.kk-resources.com
s.kelkoo.com
ad.kelkoo.com
all-hp.kelkoo.com
s.kk-resources.com
secure.ads.kelkoo.com
ads.kelkoo.com
secure.ads.kelkoo.com
*.kelkoo.com
adservice.kelkoo.fr
*.kelkoo.com
s.kk-resources.com
s.kk-resources.com
*.kelkoo.com
secure.ads.kelkoo.com
*.kelkoo.com
*.kelkoo.com
*.kelkoo.com
*.kelkoo.com
es.shoppingapis.kelkoo.com
*.kelkoo.com
ads.kelkoo.com
adservice.kelkoo.fr
adservice.kelkoo.fr
s.kk-resources.com
profile.kelkoo.com
hpcm.images.kelkoo.com
it.shoppingapis.kelkoo.com
*.kelkoo.com
secure.ads.kelkoo.com
secure.ads.kelkoo.com
*.kelkoo.com
*.kelkoo.co.uk
*.kelkoo.com
adservice.kelkoo.fr
*.kelkoo.com
secure.ads.kelkoo.com
partner.kelkoo.com
*.kelkoo.com
adservice.kelkoo.fr
s.kk-resources.com
login.kelkoo.com
dc1-og2-pub-tomcat-vip.kelkoo.com
*.kelkoo.com
*.kelkoo.com
*.kelkoo.com
secure.ads.kelkoo.com
*.kelkoo.com
aftpnqspcq.cloudimg.io
*.kelkoo.com
partner.kelkoo.com
adservice.kelkoo.fr
adservice.kelkoo.fr
ad.kelkoo.com
admin.kelkoo.fr
ads.kelkoo.com
secure.ads.kelkoo.com
adservice.kelkoo.fr
*.kelkoo.com
adservice.kelkoo.com
*.kelkoo.com
*.kelkoo.com
Certificate
The complete raw certificate details for s.kelkoo.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGsjCCBZqgAwIBAgIQA73S7K8uYhn6UV0tcpax5zANBgkqhkiG9w0BAQsFADBB MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMRswGQYDVQQDExJ0 aGF3dGUgU1NMIENBIC0gRzIwHhcNMTYwMzIzMDAwMDAwWhcNMTcwMzIzMjM1OTU5 WjBzMQswCQYDVQQGEwJGUjEOMAwGA1UECAwFSXNlcmUxEjAQBgNVBAcMCUVjaGly b2xlczETMBEGA1UECgwKS2Vsa29vIFNBUzEUMBIGA1UECwwLRW5naW5lZXJpbmcx FTATBgNVBAMMDHMua2Vsa29vLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBAKtp1lxjVZjfsUArWPUTiJARczeDiPpns8S2pkmEQ8odXJpWCZeMfszS i6Btk65zj1sOc2fR/zK1vOTtZ4sd8qymaCyNWZnegD6D1fZTBoUtodeudWF+9+2A rPocmIEeb0uBrFyVOJtTKmxvCxgMJZ3XtkgmjohRsRnTEy6dnVStpNG1d6nEsA7n 2C0uilMEIJPbDRAMJ1XcbniQF627jM1NQSurqu47rf+nO41dyx6NlzIO2e+G50Xu u6TpTTvdsOpsTtEGC+GYAM12t+4N3g2FhURJnM1cxU9dsgDr9/ZMUK2JODT0ckeh H7vkR2KwK9wZDkn9xUHKshZEt85rnssCAwEAAaOCA3IwggNuMIIBEAYDVR0RBIIB BzCCAQOCC3Mua2Vsa29vLmF0gg9zLmtlbGtvby5jb20uYnKCC3Mua2Vsa29vLmRl ggtzLmtlbGtvby5ka4ILcy5rZWxrb28uZXOCC3Mua2Vsa29vLmZpggtzLmtlbGtv by5mcoILcy5rZWxrb28uaXSCC3Mua2Vsa29vLm5sggtzLmtlbGtvby5ub4ILcy5r ZWxrb28ucnWCC3Mua2Vsa29vLnNlgg5zLmtlbGtvby5jby51a4ILcy5rZWxrb28u Y2iCD3Mua2Vsa29vLmNvbS5wdIILcy5rZWxrb28ucGyCC3Mua2Vsa29vLmllggtz LmtlbGtvby5jeoIMcy5rZWxrb28uY29tMAkGA1UdEwQCMAAwbgYDVR0gBGcwZTBj BgZngQwBAgIwWTAmBggrBgEFBQcCARYaaHR0cHM6Ly93d3cudGhhd3RlLmNvbS9j cHMwLwYIKwYBBQUHAgIwIwwhaHR0cHM6Ly93d3cudGhhd3RlLmNvbS9yZXBvc2l0 b3J5MA4GA1UdDwEB/wQEAwIFoDAfBgNVHSMEGDAWgBTCT0hX/NFPmsBdOH0OBdvZ LrVSYDArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8vdGouc3ltY2IuY29tL3RqLmNy bDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwVwYIKwYBBQUHAQEESzBJ MB8GCCsGAQUFBzABhhNodHRwOi8vdGouc3ltY2QuY29tMCYGCCsGAQUFBzAChhpo dHRwOi8vdGouc3ltY2IuY29tL3RqLmNydDCCAQUGCisGAQQB1nkCBAIEgfYEgfMA 8QB2AN3rHSt6DU+mIIuBrYFocH4ujp0B1VyIjT0RxM227L7MAAABU6PmcGAAAAQD AEcwRQIgJwCbQwBz3+xXr2wa0FFlEpQNOajMjNV/ifJXoChbnf4CIQDglbR4HlCd LwZf8uHL+szFRzC308NMN4VMe3LmSodsEwB3AKS5CZC0GFgUh7sTosxncAo8NZgE +RvfuON3zQ7IDdwQAAABU6PmcJkAAAQDAEgwRgIhAO6Flry8gwK8BwCoANPJSHRE Wvex/D0myvZKpbmkQE9kAiEA5kKtU/C+xfmW5Y8tQl0EbaBYiq//Q5lx8v3SRdq8 6pwwDQYJKoZIhvcNAQELBQADggEBAE6ZJk4y20d6ZdOmw2HSqzZzKGA7h3Xz1DYD y+azMdby0CzMuWUilpP/CU/AYaFJtduGlZl4x/MMyX2r01xj/P6RMizvwgaQhYIX r4hTBPm5I2/O97lUY7WD6WUkuH4r1B9d2RYeofgnoJ0bonhFpaBNP4d3T3kM+ZYH A8Snu/pad8rBrIs2vmsFH3WItz2c0BTZP1tt4w9p/HQVAZLQMktYwq0J0AgM59e1 ku1uME+cihTjrQKb/3ptWYvd/j7LSq5hI9oUC60QHhD8JaBaRVSRvbhqNuWEMRxU 7ziB8M/jDrSRpdUy2wweiHlZzcnXJA17cwZ0irGK7sdeEGZuLDg= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2nWXGNVmN+xQCtY9ROI kBFzN4OI+mezxLamSYRDyh1cmlYJl4x+zNKLoG2TrnOPWw5zZ9H/MrW85O1nix3y rKZoLI1Zmd6APoPV9lMGhS2h1651YX737YCs+hyYgR5vS4GsXJU4m1MqbG8LGAwl nde2SCaOiFGxGdMTLp2dVK2k0bV3qcSwDufYLS6KUwQgk9sNEAwnVdxueJAXrbuM zU1BK6uq7jut/6c7jV3LHo2XMg7Z74bnRe67pOlNO92w6mxO0QYL4ZgAzXa37g3e DYWFREmczVzFT12yAOv39kxQrYk4NPRyR6Efu+RHYrAr3BkOSf3FQcqyFkS3zmue ywIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 4973306151696900835235269455421813223 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-23 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-23 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Isere' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Echiroles' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Kelkoo SAS' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Engineering' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 's.kelkoo.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21638940490275483467225474636379481704053769472862995255959099806547027646043045121248268027881450002400923186831924556653533358399716646962962123191006211379549025094230198424278931047308905355649539064719147136887008162576027306613028677862955479410931675730313621015246603839801611939493305999557485807535828883405954956557167397616238532240434988954537879523010201602583019506976286239965003224865752495147402366450400466609788314954797856065248965162291260760790263808060663441500227678294393485580989434783644006770407832623560271397548400464857718686251007570700834322952783578238127115148857761266279367024331 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (263 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.kelkoo.at' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.kelkoo.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.kelkoo.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.kelkoo.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.kelkoo.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.kelkoo.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.kelkoo.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.kelkoo.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.kelkoo.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.kelkoo.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.kelkoo.ru' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.kelkoo.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.kelkoo.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.kelkoo.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.kelkoo.com.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.kelkoo.pl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.kelkoo.ie' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.kelkoo.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.kelkoo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000153a3e670600000040300473045022027009b430073dfec57af6c1ad0516512940d39a8cc8cd57f89f257a0285b9dfe022100e095b4781e509d2f065ff2e1cbfaccc54730b7d3c34c37854c7b72e64a876c13007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000153a3e670990000040300483046022100ee8596bcbc8302bc0700a800d3c94874445af7b1fc3d26caf64aa5b9a4404f64022100e642ad53f0bec5f996e58f2d425d046da0588aafff439971f2fdd245dabcea9c . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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