www.basf.de

- BASF SE -

Issued by Thawte SSL CA

About this certificate

This digital certificate with serial number 5e:fe:1b:8a:8d:b3:7f:86:d2:4c:fa:63:4a:f2:8b:1d was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

BASF SE

Organization: BASF SE
Organization unit: ZOA
State / Province: Rheinland-Pfalz
Locality: Ludwigshafen am Rhein
Country: DE

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5e:fe:1b:8a:8d:b3:7f:86:d2:4c:fa:63:4a:f2:8b:1d
Serial Number (int): 126266833608250050168266110003873745693
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: a7:a2:83:bb:34:45:40:3d:fc:d5:30:4f:12:b9:3e:a1:01:9f:f6:db

Fingerprint (sha1): e5:40:d4:ad:b4:92:26:1b:fa:af:6a:dc:f7:87:7d:5d:c7:ff:8a:4d
Fingerprint (sha256): 3c:16:0d:4c:5f:43:ae:99:e7:0f:2d:2b:3a:67:85:d8:30:28:f4:c2:93:23:ec:d1:e5:e9:4a:41:99:42:32:df

Issuing Certificate URL: http://svr-ov-aia.thawte.com/ThawteOV.cer

Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-ov-crl.thawte.com/ThawteOV.crl

Check the revocation status for certificate www.basf.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.basf.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.basf.de

Other certificates including the domain name basf.de

(limited to 100 certificates)
omega-3.nu
www.omacor.org
www.wirtschaftsbetriebe.basf.de
www.engenia-herbicide.basf.us
master-builders-solutions.basf.pl
bop.basf.de
www.basf-wohnen-und-bauen.com
www.clearfield-profis.agrar.basf.de
www.omacor.org
ausbildung.basf.de
master-builders-solutions.basf.pl
www.agrar.basf.de
www.standort-ludwigshafen.basf.de
abdichtungen.basf.de
www.schuelerlabore.basf.de
basf.sk
omega-3.nu
www.agrar.basf.de
www.wirtschaftsbetriebe.basf.de
baspack.basf.de
www.ornamentals.basf.com
agcelence.lv
www.basfistmehr.basf.de
www.sorted.basf.com
www.wirtschaftsbetriebe.basf.de
www.findadblue.de
ludwigshafen.basf.de
www.anil-in-kollektion.shop.basf.de
baspack.basf.de
www.surfacepolyamide.info
schuelerlabore.basf.de
www.agrar.basf.de
www.basf.de
www.agrishop.basf.de
agcelence.lv
master-builders-solutions.basf.pl
omacor.ch
www.standort-ludwigshafen.basf.de
africa.master-builders-solutions.basf.com
master-builders-solutions.basf.pl
bop.basf.de
ausbildung.basf.de
www.clearfield-profis.agrar.basf.de
www.basf-wohnen-und-bauen.com
basf.sk
www.agrar.basf.de
africa.master-builders-solutions.basf.com
www2.basf.de
www.sorted.basf.com
www.basf-wohnen-und-bauen.com
www.clearfield-profis.agrar.basf.de
bop.basf.de
www.anil-in-kollektion.shop.basf.de
www.surface-polyamide.eu
www.agrar.basf.de
omega-3.nu
www.surface-polyamide.eu
baspack.basf.de
www.standort-ludwigshafen.basf.de
basf-cis.com
agcelence.lv
berichte.basf.de
www.lupraphen.com
ludwigshafen2.basf.de
www.basfistmehr.basf.de
www.anil-in-kollektion.shop.basf.de
www.basf-wohnen-und-bauen.com
basf-cis.com
www.omacor.org
basf-cis.com
www.ornamentals.basf.com
africa.master-builders-solutions.basf.com
www.wirtschaftsbetriebe.basf.de
www.weinkeller.shop-intern.basf.de
*.master-builders-solutions.basf.de
www.basfistmehr.basf.de
corporate.basf.com
berichte.basf.de
www.agrar.basf.de
master-builders-solutions.basf.pl
www.agrar.basf.de
piaservice.basf.de
ausbildung.basf.de
www.basf.de
www.agrar.basf.de
www.schuelerlabore.basf.de
www.weinkeller.shop-intern.basf.de
corporate.basf.com
www.nunhems.ch
africa.master-builders-solutions.basf.com
abdichtungen.basf.de
agrishop.basf.de
omega-3.nu
*.basf.com
www.omacor.org
ausbildung.basf.de
bop.basf.de
www.wirtschaftsbetriebe.basf.de
abdichtungen.basf.de
www.anil-in-kollektion.shop.basf.de

Certificate

The complete raw certificate details for www.basf.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEpzCCA4+gAwIBAgIQXv4bio2zf4bSTPpjSvKLHTANBgkqhkiG9w0BAQUFADA8
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMVGhhd3RlLCBJbmMuMRYwFAYDVQQDEw1U
aGF3dGUgU1NMIENBMB4XDTEzMTIxMzAwMDAwMFoXDTE2MDExMjIzNTk1OVowfTEL
MAkGA1UEBhMCREUxGDAWBgNVBAgTD1JoZWlubGFuZC1QZmFsejEeMBwGA1UEBxQV
THVkd2lnc2hhZmVuIGFtIFJoZWluMRAwDgYDVQQKFAdCQVNGIFNFMQwwCgYDVQQL
FANaT0ExFDASBgNVBAMUC3d3dy5iYXNmLmRlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA1NNSzGP8SkcS8SbG8mArBk1PfLvPjurBEKM6Qk1WSXzq16Q2
fKqPEI+cH+/Rj5DG4SG3BSJwQhzUtY7v7Y5vE/q3SsyJviKS5PoipRRRVlz5QmAg
gw/sIvvqR0uP00WJ8e78NQas7dY+sjqD723d++seO5gNB8PeE+O77rETbWN7aZtC
EMjpuZPBnGPGQOtcjAznv35sLb2zMB08F7h36NaSijcKDzi3wuS59JscbX/FVRk2
ehHBYfqi3rKowQmhocAz/Wc9FG58fAUJpMNT9/88Csh2HJ+F2geFg+GPX4r9q0dK
oY/82d0bXeXEfFvySxomFWK804gA/NNt74AJyQIDAQABo4IBYjCCAV4wFgYDVR0R
BA8wDYILd3d3LmJhc2YuZGUwCQYDVR0TBAIwADBCBgNVHSAEOzA5MDcGCmCGSAGG
+EUBBzYwKTAnBggrBgEFBQcCARYbaHR0cHM6Ly93d3cudGhhd3RlLmNvbS9jcHMv
MA4GA1UdDwEB/wQEAwIFoDAfBgNVHSMEGDAWgBSnooO7NEVAPfzVME8SuT6hAZ/2
2zA6BgNVHR8EMzAxMC+gLaArhilodHRwOi8vc3ZyLW92LWNybC50aGF3dGUuY29t
L1RoYXd0ZU9WLmNybDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwaQYI
KwYBBQUHAQEEXTBbMCIGCCsGAQUFBzABhhZodHRwOi8vb2NzcC50aGF3dGUuY29t
MDUGCCsGAQUFBzAChilodHRwOi8vc3ZyLW92LWFpYS50aGF3dGUuY29tL1RoYXd0
ZU9WLmNlcjANBgkqhkiG9w0BAQUFAAOCAQEABYlE47vZfa0apR4/aFFKHbfYTA+j
Y5v1ianbHgRByThYU1wFBN3cXPOaDRBiyqpynB/bFq4OVtHGolqE9foyMIyNnOCr
gpbKqaWxESY0+/0WUev/tEly1nYz3omkAonZNQWJ9jduh3/2BvXRz6/D00kXKdNN
VswhmYCc1wV0ghA0M09cdJ0gbEQDDl1EyBtpkIf+9KitbSPikuxTI7DG6oDwjA8O
KbqGkhcafebnpR9vcOVR2JAcTnWgT3xz3XdhnCwrNSC6AXJb6M9gLLx0OZMRRfTn
0vPm5yPpikKkC2UQCV6ZZZnUrgbHBYNVf86dFXive61p8Vw68wElxIJ4WQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NNSzGP8SkcS8SbG8mAr
Bk1PfLvPjurBEKM6Qk1WSXzq16Q2fKqPEI+cH+/Rj5DG4SG3BSJwQhzUtY7v7Y5v
E/q3SsyJviKS5PoipRRRVlz5QmAggw/sIvvqR0uP00WJ8e78NQas7dY+sjqD723d
++seO5gNB8PeE+O77rETbWN7aZtCEMjpuZPBnGPGQOtcjAznv35sLb2zMB08F7h3
6NaSijcKDzi3wuS59JscbX/FVRk2ehHBYfqi3rKowQmhocAz/Wc9FG58fAUJpMNT
9/88Csh2HJ+F2geFg+GPX4r9q0dKoY/82d0bXeXEfFvySxomFWK804gA/NNt74AJ
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 126266833608250050168266110003873745693
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-12-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rheinland-Pfalz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Ludwigshafen am Rhein'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'BASF SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'ZOA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'www.basf.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26866728120620583339386243694311790047669243309169254830966638305917402414143960688277571962666779490228650652728266936030157108621944310677278746438232398139969418320372618760747149739606196775943597691718778703264481370524485576287346462004533512068021462941064519787624792966839673477521984916299762809065686499914004444754334162899232242094207028861499765521881177758275774880187823795693948335812538594463373211931336519578591279497137177743647521750822240904139118178287579878145217247585993200389376389599749856320767507721206197043776380165430406229237403207812199554293328264138084981460891024658119035718089
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a7a283bb3445403dfcd5304f12b93ea1019ff6db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-crl.thawte.com/ThawteOV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-aia.thawte.com/ThawteOV.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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