www.thawte.de
- DigiCert, Inc. -
Issued by DigiCert SHA2 Extended Validation Server CA
About this certificate
This digital certificate with serial number 0d:22:cd:7a:ff:37:c1:fb:e2:02:4c:5f:1d:f5:ef:93 was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
DigiCert, Inc.
Company registration number:
5299537-0142
Organization: DigiCert, Inc.
Organization unit: IT
Organization: DigiCert, Inc.
Organization unit: IT
State / Province:
Utah
Locality: Lehi
Country: US
Locality: Lehi
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0d:22:cd:7a:ff:37:c1:fb:e2:02:4c:5f:1d:f5:ef:93Serial Number (int): 17460669677184750307477040903698640787
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: ba:3a:6a:cf:05:dc:46:9e:c4:24:a1:9d:cb:47:0c:77:fe:74:4c:89
AuthorityKeyId: 3d:d3:50:a5:d6:a0:ad:ee:f3:4a:60:0a:65:d3:21:d4:f8:f8:d6:0f
Fingerprint (sha1): b9:ad:cf:61:00:ba:57:2d:a1:34:ee:19:4d:8e:74:24:c3:2c:37:0e
Fingerprint (sha256): 3c:3e:c2:d9:77:8f:aa:7c:33:29:66:a0:fd:51:45:c2:fb:08:11:db:1b:7a:b5:67:31:bd:a5:42:b4:f1:79:68
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/sha2-ev-server-g2.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ev-server-g2.crl
Check the revocation status for certificate www.thawte.de
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.thawte.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.thawte.de
Other certificates including the domain name thawte.de
(limited to 100 certificates)
kb-thawte-de.symantec.com
pilot-ssl-certificate-center-enterprise.thawte.de
pilot-ssl-certificate-center-enterprise.thawte.de
thawte.de
ssl-certificate-center.thawte.de
www.thawte.de
ssl-certificate-center.thawte.de
ssl-certificate-center-enterprise.thawte.de
ssl-certificate-center.thawte.de
digicert.com
www.thawte.de
search.thawte.de
search.thawte.de
www.thawte.de
ssl-certificate-center.thawte.de
ssl-certificate-center.thawte.de
pilot-ssl-certificate-center-enterprise.thawte.de
www.thawte.de
www.thawte.de
SSL-CERTIFICATE-CENTER.THAWTE.DE
thawte.com
www.thawte.de
pilot-ssl-certificate-center.thawte.de
digicert.com
www.thawte.de
pilot-ssl-certificate-center.thawte.de
kb-thawte-de.symantec.com
ssl-certificate-center-enterprise-thawte-de-ilg.verisign.net
search-thawte-de.symantec.com
pilot-ssl-certificate-center-enterprise.thawte.de
kb-thawte-de.symantec.com
pilot-ssl-certificate-center-enterprise.thawte.de
search.thawte.de
ssl-certificate-center.thawte.de
ssl-certificate-center.thawte.de
SSL-CERTIFICATE-CENTER.THAWTE.DE
digicert.com
ssl-certificate-center.thawte.de
www.thawte.de
ssl-certificate-center-enterprise.thawte.de
digicert.com
pilot-ssl-certificate-center.thawte.de
digicert.com
pilot-ssl-certificate-center.thawte.de
thawte.de
www.thawte.de
pilot-ssl-certificate-center.thawte.de
digicert.com
pilot-ssl-certificate-center.thawte.de
pilot-ssl-certificate-center-enterprise.thawte.de
pilot-ssl-certificate-center-enterprise.thawte.de
SSL-CERTIFICATE-CENTER-ENTERPRISE.THAWTE.DE
pilot-ssl-certificate-center.thawte.de
search-thawte-de.symantec.com
ssl-certificate-center.thawte.de
thawte.com
search.thawte.de
pilot-ssl-certificate-center-enterprise.thawte.de
pilot-ssl-certificate-center-enterprise.thawte.de
thawte.de
ssl-certificate-center.thawte.de
www.thawte.de
ssl-certificate-center.thawte.de
ssl-certificate-center-enterprise.thawte.de
ssl-certificate-center.thawte.de
digicert.com
www.thawte.de
search.thawte.de
search.thawte.de
www.thawte.de
ssl-certificate-center.thawte.de
ssl-certificate-center.thawte.de
pilot-ssl-certificate-center-enterprise.thawte.de
www.thawte.de
www.thawte.de
SSL-CERTIFICATE-CENTER.THAWTE.DE
thawte.com
www.thawte.de
pilot-ssl-certificate-center.thawte.de
digicert.com
www.thawte.de
pilot-ssl-certificate-center.thawte.de
kb-thawte-de.symantec.com
ssl-certificate-center-enterprise-thawte-de-ilg.verisign.net
search-thawte-de.symantec.com
pilot-ssl-certificate-center-enterprise.thawte.de
kb-thawte-de.symantec.com
pilot-ssl-certificate-center-enterprise.thawte.de
search.thawte.de
ssl-certificate-center.thawte.de
ssl-certificate-center.thawte.de
SSL-CERTIFICATE-CENTER.THAWTE.DE
digicert.com
ssl-certificate-center.thawte.de
www.thawte.de
ssl-certificate-center-enterprise.thawte.de
digicert.com
pilot-ssl-certificate-center.thawte.de
digicert.com
pilot-ssl-certificate-center.thawte.de
thawte.de
www.thawte.de
pilot-ssl-certificate-center.thawte.de
digicert.com
pilot-ssl-certificate-center.thawte.de
pilot-ssl-certificate-center-enterprise.thawte.de
pilot-ssl-certificate-center-enterprise.thawte.de
SSL-CERTIFICATE-CENTER-ENTERPRISE.THAWTE.DE
pilot-ssl-certificate-center.thawte.de
search-thawte-de.symantec.com
ssl-certificate-center.thawte.de
thawte.com
search.thawte.de
Certificate
The complete raw certificate details for www.thawte.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGvjCCBaagAwIBAgIQDSLNev83wfviAkxfHfXvkzANBgkqhkiG9w0BAQsFADB1 MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMTQwMgYDVQQDEytEaWdpQ2VydCBTSEEyIEV4dGVuZGVk IFZhbGlkYXRpb24gU2VydmVyIENBMB4XDTE4MDQxNzAwMDAwMFoXDTE5MDQxODEy MDAwMFowgcsxHTAbBgNVBA8MFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYB BAGCNzwCAQMTAlVTMRUwEwYLKwYBBAGCNzwCAQITBFV0YWgxFTATBgNVBAUTDDUy OTk1MzctMDE0MjELMAkGA1UEBhMCVVMxDTALBgNVBAgTBFV0YWgxDTALBgNVBAcT BExlaGkxFzAVBgNVBAoTDkRpZ2lDZXJ0LCBJbmMuMQswCQYDVQQLEwJJVDEWMBQG A1UEAxMNd3d3LnRoYXd0ZS5kZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALmCK7SWHYHnqZykrw4YvzEAukv5WO8tUq+MzB60BlAng49kJDtNNQhwEV0W Dl3VucQcehpYMkPlJOeyPXYRtsYsCqJ3KTsOr9PGX9jDS3e+ZO/+s0xwXlT97dbp e3n2jW1ANYwoO4Xi/d8OGcx8b+hm9U57ARvi18mIW3aAhpaLOSwgkBl/7vgemSif BF/u23SK89/i4aRcs/qSQN2r5YHpv2oIG2T5MqUNSM7uwmpCuu4dvwPsFk+y+8KL txMB47atJZXyHzRr44b3NtK+sv9Cl1+6WnclLlAsP7NiSVtTrZnQDdH1huOvbcLi enA2omYqpUjTkSg6OGj+LZg4sbcCAwEAAaOCAvEwggLtMB8GA1UdIwQYMBaAFD3T UKXWoK3u80pgCmXTIdT4+NYPMB0GA1UdDgQWBBS6OmrPBdxGnsQkoZ3LRwx3/nRM iTAYBgNVHREEETAPgg13d3cudGhhd3RlLmRlMA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwdQYDVR0fBG4wbDA0oDKgMIYuaHR0 cDovL2NybDMuZGlnaWNlcnQuY29tL3NoYTItZXYtc2VydmVyLWcyLmNybDA0oDKg MIYuaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL3NoYTItZXYtc2VydmVyLWcyLmNy bDBLBgNVHSAERDBCMDcGCWCGSAGG/WwCATAqMCgGCCsGAQUFBwIBFhxodHRwczov L3d3dy5kaWdpY2VydC5jb20vQ1BTMAcGBWeBDAEBMIGIBggrBgEFBQcBAQR8MHow JAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBSBggrBgEFBQcw AoZGaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hBMkV4dGVu ZGVkVmFsaWRhdGlvblNlcnZlckNBLmNydDAJBgNVHRMEAjAAMIIBBgYKKwYBBAHW eQIEAgSB9wSB9ADyAHcAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YUA AAFi1cb53wAABAMASDBGAiEAxPqfjtJl69M9Cr6sV6zBMn0CNk73/1sikJEm9PMu SwwCIQD7h1giC47VwCM6zaOUOfCRjETeD93S/Kbz2Dz+L5Qv3wB3AFYUBpov18Ls 0/XhvUSyPsdGdrm8mRFcwO+UmFXWidDdAAABYtXG+VEAAAQDAEgwRgIhAM6L8qIH K41sl4Rim4EkANFWy0zaFuHm3NXGZ/lek4uFAiEAh/kEH3NB6aX/4Z1z6k1VgD4B KD3RaTEjP0lgCMX1TZgwDQYJKoZIhvcNAQELBQADggEBACIRcK6MBmmia08O3VKJ f1SZvZO6sXkcITbrvsOPH+aZq+YeE1FI+egy7ndX3vY6pt+LAzBSIHrsr17bUCSs 3LrIqn28yTsc6yzAwpimhMLdhoElSv9P4dx44NCnHdpIf7Y9OZkMZ37+iGdLtbjZ jj9O62385NUq7vBR6UTwoeajAJhEAwXUAAe93uQD8bNFxg6E141prVuuSXeShVjK YzZ6s/6iamLO6KHuy63gG/pxaa/ztC1JXxaHN2Hhrum3iql6r6/zYE3BUHJ/fVsr rpdtRwxeefF4YipiVpEQLYB6Q/wIobgYhLA+vV9myecneuMh+F115N93FBjSF9qE UlA= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYIrtJYdgeepnKSvDhi/ MQC6S/lY7y1Sr4zMHrQGUCeDj2QkO001CHARXRYOXdW5xBx6GlgyQ+Uk57I9dhG2 xiwKoncpOw6v08Zf2MNLd75k7/6zTHBeVP3t1ul7efaNbUA1jCg7heL93w4ZzHxv 6Gb1TnsBG+LXyYhbdoCGlos5LCCQGX/u+B6ZKJ8EX+7bdIrz3+LhpFyz+pJA3avl gem/aggbZPkypQ1Izu7CakK67h2/A+wWT7L7wou3EwHjtq0llfIfNGvjhvc20r6y /0KXX7padyUuUCw/s2JJW1OtmdAN0fWG469twuJ6cDaiZiqlSNORKDo4aP4tmDix twIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 17460669677184750307477040903698640787 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Extended Validation Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-17 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-18 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Utah' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5299537-0142' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Utah' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lehi' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.thawte.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23418275995241394531699815142957573287535547668566788772390293071735497151117512209710336562740340793923425891397492001244479874296047883132137874750192620575385428435221731334670205293984295466242823415173279453167222699460599378828495650232011423838758928462873932463208011903381923195836319409819463793088609954632908960830200156431284571197977744295123221950562989894807034771722942483219349491002976024402621087731564908558784037635898597059211178961758009285542528170517496690370841525055160693041792934095381172273798902150696486623474797108114099624515888008020582581226820141023787115310086690266173566136759 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3dd350a5d6a0adeef34a600a65d321d4f8f8d60f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ba3a6acf05dc469ec424a19dcb470c77fe744c89 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thawte.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ev-server-g2.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ev-server-g2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000162d5c6f9df0000040300483046022100c4fa9f8ed265ebd33d0abeac57acc1327d02364ef7ff5b22909126f4f32e4b0c022100fb8758220b8ed5c0233acda39439f0918c44de0fddd2fca6f3d83cfe2f942fdf0077005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd00000162d5c6f9510000040300483046022100ce8bf2a2072b8d6c9784629b812400d156cb4cda16e1e6dcd5c667f95e938b8502210087f9041f7341e9a5ffe19d73ea4d55803e01283dd16931233f496008c5f54d98 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00221170ae8c0669a26b4f0edd52897f5499bd93bab1791c2136ebbec38f1fe699abe61e135148f9e832ee7757def63aa6df8b033052207aecaf5edb5024acdcbac8aa7dbcc93b1ceb2cc0c298a684c2dd8681254aff4fe1dc78e0d0a71dda487fb63d39990c677efe88674bb5b8d98e3f4eeb6dfce4d52aeef051e944f0a1e6a30098440305d40007bddee403f1b345c60e84d78d69ad5bae4977928558ca63367ab3fea26a62cee8a1eecbade01bfa7169aff3b42d495f16873761e1aee9b78aa97aafaff3604dc150727f7d5b2bae976d470c5e79f178622a625691102d807a43fc08a1b81884b03ebd5f66c9e7277ae321f85d75e4df771418d217da845250