webstar.myguardiangroup.com
- Guardian Holdings Limited -
Issued by thawte SSL CA - G2
About this certificate
This digital certificate with serial number 77:bf:a1:a3:e8:6e:3e:6f:2a:ba:71:68:c5:5b:93:4b was issued on by thawte, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Guardian Holdings Limited
Organization:
Guardian Holdings Limited
Organization unit: IT
Organization unit: IT
State / Province:
TRINIDAD & TOBAGO
Locality: WESTMOORINGS
Country: TT
Locality: WESTMOORINGS
Country: TT
thawte, Inc.
Organization:
thawte, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 77:bf:a1:a3:e8:6e:3e:6f:2a:ba:71:68:c5:5b:93:4bSerial Number (int): 159173138652455617652726741470556164939
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60
Fingerprint (sha1): fd:f1:82:b0:f2:ac:ee:f3:90:8f:6a:58:1e:9b:62:9f:9b:ef:20:ef
Fingerprint (sha256): 3b:27:6c:5c:a7:d4:9d:fe:59:7c:c7:78:d2:81:ab:75:7b:d9:c9:5d:a5:91:e8:18:5b:ea:e7:c9:cd:d8:19:1d
Issuing Certificate URL: http://tj.symcb.com/tj.crt
Revocation information
OCSP Server: http://tj.symcd.comCRL Distribution Point: http://tj.symcb.com/tj.crl
Check the revocation status for certificate webstar.myguardiangroup.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for webstar.myguardiangroup.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
webstar.myguardiangroup.com
Other certificates including the domain name myguardiangroup.com
(limited to 100 certificates)
mfiles.myguardiangroup.com
servicedesk.massageenvy.com
portal.roomwith.jp
novaforms.myguardiangroup.com
servicedesk.massageenvy.com
www.qrkan.com
reset.myguardiangroup.com
servicedesk.massageenvy.com
www.xtoearnings.com
myguardiangeneral.myguardiangroup.com
www.myguardiangroup.com
novahub.myguardiangroup.com
servicedesk.massageenvy.com
www.roppong.com
novaforms.myguardiangroup.com
employerportal.myguardiangroup.com
ajusdsupport.ajusd.org
easiconnect.myguardiangroup.com
webstar.myguardiangroup.com
ttlyncaccess1.myguardiangroup.com
salesforcerkofy23.framez.sg
servicedesk.massageenvy.com
servicedesk.massageenvy.com
securetransfer.myguardiangroup.com
servicedesk.massageenvy.com
novahub.myguardiangroup.com
oipa.myguardiangroup.com
autodiscover.dc.MyGuardianGroup.com
app.idealenergia.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
novahub.myguardiangroup.com
www.equitablehealthorganization.org
webstar.myguardiangroup.com
autodiscover.myguardiangroup.com
myguardiangroup.com
mfiles.myguardiangroup.com
easiclaim.myguardiangroup.com
helpdesk.mercurymed.com
ttlyncaccess1.myguardiangroup.com
servicedesk.massageenvy.com
tor.community
servicedesk.massageenvy.com
servicedesk.massageenvy.com
www.femtoindia.com
helpdesk.naa.edu
helpdesk.countrypure.com
admin.portal.myguardiangroup.com
servicedesk.massageenvy.com
autodiscover.dc.myguardiangroup.com
autodiscover.dc.myguardiangroup.com
servicedesk.massageenvy.com
servicedesk.mazakcorp.com
servicedesk.massageenvy.com
helpdesk.countrypure.com
dutchcaribbean.myguardiangroup.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
webstar.myguardiangroup.com
myguardiangeneral.myguardiangroup.com
webstar.myguardiangroup.com
servicedesk.massageenvy.com
help.gmfus.org
servicedesk.massageenvy.com
oipa.myguardiangroup.com
servicedesk.massageenvy.com
easiclaim.myguardiangroup.com
*.myguardiangroup.com
rms-api.myguardiangroup.com
leaservicedesk.lea.co.bw
romance.education
pensionsonline.myguardiangroup.com
trinidad.myguardiangroup.com
n-videoservice.com
support.stoh.com
webstar.myguardiangroup.com
ithelpdesk.renaissanceservices.com
helpdesk.sgmc.org
gstcentre.eduswitch.com
jeopardy.mbean.tech
solution.consultingnetwork.com
trinidad.myguardiangroup.com
servicedesk.massageenvy.com
trinidad.myguardiangroup.com
easiclaimdev.myguardiangroup.com
nova.myguardiangroup.com
lskdemo.5loyalty.com
helpdesk.countrypure.com
overseas.myguardiangroup.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
blog.alfhai.ly
servicedesk.massageenvy.com
webstar.myguardiangroup.com
help.sentry-equip.com
servicedesk.massageenvy.com
helpdesk.countrypure.com
servicedesk.massageenvy.com
portal.roomwith.jp
novaforms.myguardiangroup.com
servicedesk.massageenvy.com
www.qrkan.com
reset.myguardiangroup.com
servicedesk.massageenvy.com
www.xtoearnings.com
myguardiangeneral.myguardiangroup.com
www.myguardiangroup.com
novahub.myguardiangroup.com
servicedesk.massageenvy.com
www.roppong.com
novaforms.myguardiangroup.com
employerportal.myguardiangroup.com
ajusdsupport.ajusd.org
easiconnect.myguardiangroup.com
webstar.myguardiangroup.com
ttlyncaccess1.myguardiangroup.com
salesforcerkofy23.framez.sg
servicedesk.massageenvy.com
servicedesk.massageenvy.com
securetransfer.myguardiangroup.com
servicedesk.massageenvy.com
novahub.myguardiangroup.com
oipa.myguardiangroup.com
autodiscover.dc.MyGuardianGroup.com
app.idealenergia.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
novahub.myguardiangroup.com
www.equitablehealthorganization.org
webstar.myguardiangroup.com
autodiscover.myguardiangroup.com
myguardiangroup.com
mfiles.myguardiangroup.com
easiclaim.myguardiangroup.com
helpdesk.mercurymed.com
ttlyncaccess1.myguardiangroup.com
servicedesk.massageenvy.com
tor.community
servicedesk.massageenvy.com
servicedesk.massageenvy.com
www.femtoindia.com
helpdesk.naa.edu
helpdesk.countrypure.com
admin.portal.myguardiangroup.com
servicedesk.massageenvy.com
autodiscover.dc.myguardiangroup.com
autodiscover.dc.myguardiangroup.com
servicedesk.massageenvy.com
servicedesk.mazakcorp.com
servicedesk.massageenvy.com
helpdesk.countrypure.com
dutchcaribbean.myguardiangroup.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
webstar.myguardiangroup.com
myguardiangeneral.myguardiangroup.com
webstar.myguardiangroup.com
servicedesk.massageenvy.com
help.gmfus.org
servicedesk.massageenvy.com
oipa.myguardiangroup.com
servicedesk.massageenvy.com
easiclaim.myguardiangroup.com
*.myguardiangroup.com
rms-api.myguardiangroup.com
leaservicedesk.lea.co.bw
romance.education
pensionsonline.myguardiangroup.com
trinidad.myguardiangroup.com
n-videoservice.com
support.stoh.com
webstar.myguardiangroup.com
ithelpdesk.renaissanceservices.com
helpdesk.sgmc.org
gstcentre.eduswitch.com
jeopardy.mbean.tech
solution.consultingnetwork.com
trinidad.myguardiangroup.com
servicedesk.massageenvy.com
trinidad.myguardiangroup.com
easiclaimdev.myguardiangroup.com
nova.myguardiangroup.com
lskdemo.5loyalty.com
helpdesk.countrypure.com
overseas.myguardiangroup.com
servicedesk.massageenvy.com
servicedesk.massageenvy.com
blog.alfhai.ly
servicedesk.massageenvy.com
webstar.myguardiangroup.com
help.sentry-equip.com
servicedesk.massageenvy.com
helpdesk.countrypure.com
Certificate
The complete raw certificate details for webstar.myguardiangroup.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgIQd7+ho+huPm8qunFoxVuTSzANBgkqhkiG9w0BAQsFADBB MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMRswGQYDVQQDExJ0 aGF3dGUgU1NMIENBIC0gRzIwHhcNMTYwMTIyMDAwMDAwWhcNMTcwMjA5MjM1OTU5 WjCBlzELMAkGA1UEBhMCVFQxGjAYBgNVBAgMEVRSSU5JREFEICYgVE9CQUdPMRUw EwYDVQQHDAxXRVNUTU9PUklOR1MxIjAgBgNVBAoMGUd1YXJkaWFuIEhvbGRpbmdz IExpbWl0ZWQxCzAJBgNVBAsMAklUMSQwIgYDVQQDDBt3ZWJzdGFyLm15Z3VhcmRp YW5ncm91cC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBq/LA rElmLcHGlAdSMh+88iSLrsKAinjIoa4b0hWNG2HB82AMGlehkpvcXdNsiYjH7zdt iTU2Y+DJdAvmfZulbHpw4EPLTjS1TiKxHCAp0KGYnA5pWnmMRbbRMWBbLqGf1Pm+ EdGo4Q1NjJevORl5JKE5b7ZmD5gUvXJV+RPmrZW70YJ2kW17tULIAw8cAT8wxZua gmy19wat7HoyK8NK22DHQMoZuoEHUgt1CUOIZsCMnPT2sD+xHIXVQugyZM4S1iC9 i8h9O5/nt5YFD7M0dvz7pN9V7qxWckopcMUx1cbbWxBmZO0GRP37oR8ReMU8/pWm NfZN1CUHjcZWuYDZAgMBAAGjggGSMIIBjjAmBgNVHREEHzAdght3ZWJzdGFyLm15 Z3VhcmRpYW5ncm91cC5jb20wCQYDVR0TBAIwADBuBgNVHSAEZzBlMGMGBmeBDAEC AjBZMCYGCCsGAQUFBwIBFhpodHRwczovL3d3dy50aGF3dGUuY29tL2NwczAvBggr BgEFBQcCAjAjDCFodHRwczovL3d3dy50aGF3dGUuY29tL3JlcG9zaXRvcnkwDgYD VR0PAQH/BAQDAgWgMB8GA1UdIwQYMBaAFMJPSFf80U+awF04fQ4F29kutVJgMCsG A1UdHwQkMCIwIKAeoByGGmh0dHA6Ly90ai5zeW1jYi5jb20vdGouY3JsMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBXBggrBgEFBQcBAQRLMEkwHwYIKwYB BQUHMAGGE2h0dHA6Ly90ai5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly90 ai5zeW1jYi5jb20vdGouY3J0MBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3 DQEBCwUAA4IBAQCMnb/frDTwXy6SMOFMoEya0ooCA+6TQzTPBNw7yxfBJsblvYzX EIfJZRsFoFUcqUvSNjM9E7dzy27XCYkiMFuOctOADz+KnZkwkBegzZrT7khOsUmr 8i306okDhxyKn6WZxZCY6fy9utenBxEY3hVRMcqZCLriEETgUkf4lpJLB3Cu2yHM yxgfffFIMpS/1uEJF63WjWDcPP8d+cSoNy3RrgCZrURclArSy2O5Arin8B696h7f dDbmXOK/i3cVhDSbE8FKZ1XHWaAqb5q6v30pzkEE+Ba1GwHZUUEmrOWxEj4Ws3Ra nHkW0NNnIj4OnwBUC+DJ8ADn3v7Ugjwtu2TX -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwavywKxJZi3BxpQHUjIf vPIki67CgIp4yKGuG9IVjRthwfNgDBpXoZKb3F3TbImIx+83bYk1NmPgyXQL5n2b pWx6cOBDy040tU4isRwgKdChmJwOaVp5jEW20TFgWy6hn9T5vhHRqOENTYyXrzkZ eSShOW+2Zg+YFL1yVfkT5q2Vu9GCdpFte7VCyAMPHAE/MMWbmoJstfcGrex6MivD Sttgx0DKGbqBB1ILdQlDiGbAjJz09rA/sRyF1ULoMmTOEtYgvYvIfTuf57eWBQ+z NHb8+6TfVe6sVnJKKXDFMdXG21sQZmTtBkT9+6EfEXjFPP6VpjX2TdQlB43GVrmA 2QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 159173138652455617652726741470556164939 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-22 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-09 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TRINIDAD & TOBAGO' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'WESTMOORINGS' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Guardian Holdings Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'webstar.myguardiangroup.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24448783701933672120732324495836779754002614119738888210366365115965603827380936863023876522715061489941450164148490749555740853156988960878955633632690834348536120538174343854642812965634726531682249404238153776568432788168840598322345117288195379184904630420986175096333216867008234410509008612962191457847000435752614011112519378542235396764708030893685170593224941225124179641507876989681352087538339269908726020452344141583116223127009934930365302493857544443394834465324687811307027592288023521213845495557049511315937346634270358861880365648213945975287653245661362777169715485796469653478195604998844799615193 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webstar.myguardiangroup.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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