connect.iwc.com

- IWC Schaffhausen, Branch of Richemont International SA -

Issued by Thawte SSL CA

About this certificate

This digital certificate with serial number 25:49:f9:cf:48:a5:9b:d4:8b:42:48:58:2f:81:d8:bb was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

IWC Schaffhausen, Branch of Richemont International SA

Organization: IWC Schaffhausen, Branch of Richemont International SA
Organization unit: IT
State / Province: Schaffhausen
Locality: Schaffhausen
Country: CH

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 25:49:f9:cf:48:a5:9b:d4:8b:42:48:58:2f:81:d8:bb
Serial Number (int): 49565540257419008787899541838343821499
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: a7:a2:83:bb:34:45:40:3d:fc:d5:30:4f:12:b9:3e:a1:01:9f:f6:db

Fingerprint (sha1): 09:c4:f5:7b:ed:cd:3d:85:98:4b:8e:ef:c7:4f:0d:42:0f:8e:55:f2
Fingerprint (sha256): 37:fd:6c:8f:b1:6c:30:67:d4:86:91:23:75:c9:ed:8d:2b:2b:44:92:d6:d1:ee:0a:e2:ec:de:ba:ea:63:62:de

Issuing Certificate URL: http://svr-ov-aia.thawte.com/ThawteOV.cer

Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-ov-crl.thawte.com/ThawteOV.crl

Check the revocation status for certificate connect.iwc.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for connect.iwc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

connect.iwc.com

Other certificates including the domain name iwc.com

(limited to 100 certificates)
service.alko-garden.it
intranet.richemont.com
intranet.richemont.com
scan.preprod2.cartier.com
intranet.richemont.com
dam.richemont.com
intranet.richemont.com
stores.iwc.com
media.richemont.com
watches.iwc.com
mobile.iwc.com
www.athomearticulation.com
scan.preprod2.cartier.com
san4.yext-cdn.com
*.iwc.com
intranet.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
dam.richemont.com
scan.dev.cartier.com
scan.preprod.jaeger-lecoultre.com
intranet.richemont.com
mobile.iwc.com
san3.yext-cdn.com
www.quality.alange-soehne.com
mobile.iwc.com
san3.yext-cdn.com
mobile.iwc.com
linemedia.preprod.richemont.com
san3.yext-cdn.com
scan.preprod2.cartier.com
iwc.com
san4.yext-cdn.com
api.freetrade.io
intranet.preprod.richemont.com
forum.iwc.com
icanstoptime.iwc.com
cloud.communication.iwc.com
risumat.cl
www.financing.iwc.com
www.quality.alange-soehne.com
media.richemont.com
scan.dev.cartier.com
linemedia.preprod.richemont.com
watches.iwc.com
mobile.iwc.com
stores.footlocker.co.uk
www.quality.alange-soehne.com
san4.yext-cdn.com
cartiercare.preprod2.cartier.com
press.iwc.com
mobile.iwc.com
intranet.staging.richemont.com
mobile.iwc.com
www.quality.alange-soehne.com
spark.dev.piaget.com
scan.dev2.cartier.com
mobile.iwc.com
intranet.quality.richemont.com
san3.yext-cdn.com
answers-embed.campusfederal.org.pagescdn.com
mobile.iwc.com
intranet.dev.richemont.com
scan.cartier.com
mobile.iwc.com
locations.c2crestaurants.com
mobile.iwc.com
intranet.staging.richemont.com
sharp.pixelplumbing.com
scan.preprod.cartier.com
vcs.richemont.com
mobile.quality.iwc.com
mobile.iwc.com
intranet.richemont.com
www.quality.alange-soehne.com
mobile.iwc.com
scan.preprod2.cartier.com
stores.iwc.com
intranet.dev.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
answers.zahnarzt-obernberg.at.pagescdn.com
scan.dev2.cartier.com
dam.richemont.com
scan.dev2.cartier.com
spark.piaget.com
mobile.iwc.com
scan.cartier.com
mobile.iwc.com
press.iwc.com
scan.preprod.cartier.com
auth-admin.iwc.com
*.iwc.com
locations.riteaid.com.yext-cdn.com
test.stores.iwc.com
media.richemont.com
connect.iwc.com
www.quality.alange-soehne.com
www.toe.com.mx

Certificate

The complete raw certificate details for connect.iwc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgIQJUn5z0ilm9SLQkhYL4HYuzANBgkqhkiG9w0BAQUFADA8
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMVGhhd3RlLCBJbmMuMRYwFAYDVQQDEw1U
aGF3dGUgU1NMIENBMB4XDTEzMDUzMTAwMDAwMFoXDTE1MDcwNzIzNTk1OVowgaMx
CzAJBgNVBAYTAkNIMRUwEwYDVQQIEwxTY2hhZmZoYXVzZW4xFTATBgNVBAcUDFNj
aGFmZmhhdXNlbjE/MD0GA1UEChQ2SVdDIFNjaGFmZmhhdXNlbiwgQnJhbmNoIG9m
IFJpY2hlbW9udCBJbnRlcm5hdGlvbmFsIFNBMQswCQYDVQQLFAJJVDEYMBYGA1UE
AxQPY29ubmVjdC5pd2MuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqWwtd4g880foj19CwKkpK3vBZ74eS5LYVm/AbSYEdnzfns0DqW7+6ScLULOY
v2/Ym/s3wxj0hwxjGLG5kXpV4VjZSoLNqQ6t4yiQK4kWO2RyQvmn37Ir96MWYnKX
YcbewPChRhWUck1+xuZNxM4FSnaBioiI7Lz4zhVb79kL2397zg/uCiinTh0CTf2x
A6BDimz1LR50vHvxxGsymCzReIUP2kBstaMsknJOK14FDAhPqfPeQLA2CzuEC/We
y7BlJBDI9K4D9br7efLgG4HTHPwJum/HoeDoDs2IP0IgS2vlmM5EBjPfQnClxdUB
A3AxbiP9n/At51h+JSY1JGL3FwIDAQABo4IBZjCCAWIwGgYDVR0RBBMwEYIPY29u
bmVjdC5pd2MuY29tMAkGA1UdEwQCMAAwQgYDVR0gBDswOTA3BgpghkgBhvhFAQc2
MCkwJwYIKwYBBQUHAgEWG2h0dHBzOi8vd3d3LnRoYXd0ZS5jb20vY3BzLzAOBgNV
HQ8BAf8EBAMCBaAwHwYDVR0jBBgwFoAUp6KDuzRFQD381TBPErk+oQGf9tswOgYD
VR0fBDMwMTAvoC2gK4YpaHR0cDovL3N2ci1vdi1jcmwudGhhd3RlLmNvbS9UaGF3
dGVPVi5jcmwwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMGkGCCsGAQUF
BwEBBF0wWzAiBggrBgEFBQcwAYYWaHR0cDovL29jc3AudGhhd3RlLmNvbTA1Bggr
BgEFBQcwAoYpaHR0cDovL3N2ci1vdi1haWEudGhhd3RlLmNvbS9UaGF3dGVPVi5j
ZXIwDQYJKoZIhvcNAQEFBQADggEBAG4cKiY1HOpvAyZ0hc1wxC2/RFVNeKdOjXTX
PR/cd0bSaZ6x6mvLvdyyYtsNvlO3Z+39yYZuuzAIW2EKTsvrxFBbvxSRQxbKhzeF
Y3Z3qaO/D4boQ3BR75xAnOUWzJgPx+kNKW7ZQs4HAAtTpjq6qFyU3HVDWc8SCP+e
W2gDb7xycPgxFuA0WqtYfFn5WwPPp+KMzN2o+r0+Kk00OeFhhNTX1dzBT5bPMoDA
Ful2eE/MpQ4++zgamy9S7BwjQ1x0TTf6JOWU4YRQJ/LvyXGB6nt6W9TASAGKloaa
vbjDVa+OY999AUAT2Rlqaj1uQ1GKcYzy10YYts9vWsQs9Zh4AAA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWwtd4g880foj19CwKkp
K3vBZ74eS5LYVm/AbSYEdnzfns0DqW7+6ScLULOYv2/Ym/s3wxj0hwxjGLG5kXpV
4VjZSoLNqQ6t4yiQK4kWO2RyQvmn37Ir96MWYnKXYcbewPChRhWUck1+xuZNxM4F
SnaBioiI7Lz4zhVb79kL2397zg/uCiinTh0CTf2xA6BDimz1LR50vHvxxGsymCzR
eIUP2kBstaMsknJOK14FDAhPqfPeQLA2CzuEC/Wey7BlJBDI9K4D9br7efLgG4HT
HPwJum/HoeDoDs2IP0IgS2vlmM5EBjPfQnClxdUBA3AxbiP9n/At51h+JSY1JGL3
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 49565540257419008787899541838343821499
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-05-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-07-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Schaffhausen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Schaffhausen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'IWC Schaffhausen, Branch of Richemont International SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'connect.iwc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21387617904543141296102314895774340357457943962127413608400631095912779326912919254245810011237143464211935506656180649601627258114843663557994357105671369007830616152951741333021804095160011051084384590110871089021008746272426734017936180818734814478519104544819193503843178694623569361973948452791615978668813725012066050746636236102596535909102424930192642855727418846348324253648083571184741465133015166042176194842726600866476984626742725877532926275129338478921032503182648537738198229114644639166983507301793221212273810399015046249573788471745579697752549487916285455453109148123177589856436406078364887217943
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.iwc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a7a283bb3445403dfcd5304f12b93ea1019ff6db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-crl.thawte.com/ThawteOV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-aia.thawte.com/ThawteOV.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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