getcert.thawte.com
- DigiCert, Inc. -
Issued by DigiCert SHA2 Extended Validation Server CA
About this certificate
This digital certificate with serial number 08:1d:2f:0c:59:92:c6:b0:68:04:fd:b2:77:65:c7:fd was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
DigiCert, Inc.
Company registration number:
5299537-0142
Organization: DigiCert, Inc.
Organization unit: Infrastructure Operations
Organization: DigiCert, Inc.
Organization unit: Infrastructure Operations
State / Province:
Utah
Locality: Lehi
Country: US
Locality: Lehi
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 08:1d:2f:0c:59:92:c6:b0:68:04:fd:b2:77:65:c7:fdSerial Number (int): 10785354826887766110589224280574511101
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: e3:87:86:2b:79:40:37:ed:98:56:db:34:c8:3f:b4:8d:de:7d:7f:dc
AuthorityKeyId: 3d:d3:50:a5:d6:a0:ad:ee:f3:4a:60:0a:65:d3:21:d4:f8:f8:d6:0f
Fingerprint (sha1): 25:01:cc:6f:01:7e:2d:b2:b8:83:39:96:19:c4:db:24:0d:16:45:4f
Fingerprint (sha256): 3d:67:32:ef:b8:c3:0e:8f:2b:8e:db:ce:cf:d6:61:d9:e0:7c:83:4d:1a:61:3c:51:7c:ec:7d:7b:08:67:c3:86
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/sha2-ev-server-g2.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ev-server-g2.crl
Check the revocation status for certificate getcert.thawte.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for getcert.thawte.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
getcert.thawte.com
Other certificates including the domain name thawte.com
(limited to 100 certificates)
kb-thawte.symantec.com
seal.thawte.com
community.thawte.com
www.thawte.com
seal.thawte.com
test-api.thawte.com
cryptoreport.thawte.com
ssl-certificate-center.thawte.com
sslpartner.thawte.com
static.thawte.com
revoked-root7.thawte.com
sealinfo.thawte.com
dcv.rapidssl.com
pilot-ssl-certificate-center-enterprise.thawte.com
pilot-ssl-certificate-center-enterprise.thawte.com
siteseal.thawte.com
origin-seal.symauth.com
pilot-ssl-certificate-center.thawte.com
search.thawte.com
cryptoreport.thawte.com
test-api.thawte.com
api.thawte.com
getcert.thawte.com
pilot-ssl-certificate-center-enterprise.thawte.com
seal.thawte.com
getcert.thawte.com
pilot-docs.thawte.com
valid-root8.thawte.com
products.thawte.com
thawte.com
digicert.com
pilot-verify.thawte.com
eol-redirect-thawte.verisign.net
pilot-ssl-certificate-center.thawte.com
api.thawte.com
revoked-root9.thawte.com
test-api.thawte.com
sealinfo.thawte.com
ssl-certificate-center.thawte.com
verify.thawte.com
thawte.com
seal.thawte.com
api.thawte.com
maintenance.verisign.net
www.thawte.com
valid-root9.thawte.com
test-sslwsev.thawte.com
siteseal.thawte.com
test-api.thawte.com
website-security.thawte.com
sealinfo.thawte.com
getcert.thawte.com
website-security.thawte.com
pilot-getcert.thawte.com
blogs.thawte.com
kb-thawte.symantec.com
ssl-certificate-center-enterprise.thawte.com
search.thawte.com
verify.thawte.com
test-sslwsev.thawte.com
pilot-verify.thawte.com
test-products.thawte.com
search.thawte.com
website-security.thawte.com
www.thawte.com
SSL-CERTIFICATE-CENTER.THAWTE.DE
sealinfo.thawte.com
dcv.rapidssl.com
thawte.com
forms.thawte.com
query.thawte.com
website-security.thawte.com
verify.thawte.com
pilot-ssl-certificate-center-enterprise.thawte.com
pilot-verify.thawte.com
digicert.com
getcert.thawte.com
pilot-docs.thawte.com
pilot-verify.thawte.com
forms.thawte.com
pilot-ssl-certificate-center-enterprise.thawte.com
pilot-ssl-certificate-center.thawte.com
seal.thawte.com
dcv.rapidssl.com
website-security.thawte.com
seal.thawte.com
siteseal.thawte.com
products.thawte.com
tbs-certificats.com
extended-validation-ssl.thawte.com
extended-validation-ssl.thawte.com
expired-root9.thawte.com
www.thawte.com
pilot-ssl-certificate-center.thawte.com
pilot-getcert.thawte.com
api.thawte.com
pilot-verify.thawte.com
test-api.thawte.com
ssl-certificate-center-enterprise.thawte.com
api.thawte.com
seal.thawte.com
community.thawte.com
www.thawte.com
seal.thawte.com
test-api.thawte.com
cryptoreport.thawte.com
ssl-certificate-center.thawte.com
sslpartner.thawte.com
static.thawte.com
revoked-root7.thawte.com
sealinfo.thawte.com
dcv.rapidssl.com
pilot-ssl-certificate-center-enterprise.thawte.com
pilot-ssl-certificate-center-enterprise.thawte.com
siteseal.thawte.com
origin-seal.symauth.com
pilot-ssl-certificate-center.thawte.com
search.thawte.com
cryptoreport.thawte.com
test-api.thawte.com
api.thawte.com
getcert.thawte.com
pilot-ssl-certificate-center-enterprise.thawte.com
seal.thawte.com
getcert.thawte.com
pilot-docs.thawte.com
valid-root8.thawte.com
products.thawte.com
thawte.com
digicert.com
pilot-verify.thawte.com
eol-redirect-thawte.verisign.net
pilot-ssl-certificate-center.thawte.com
api.thawte.com
revoked-root9.thawte.com
test-api.thawte.com
sealinfo.thawte.com
ssl-certificate-center.thawte.com
verify.thawte.com
thawte.com
seal.thawte.com
api.thawte.com
maintenance.verisign.net
www.thawte.com
valid-root9.thawte.com
test-sslwsev.thawte.com
siteseal.thawte.com
test-api.thawte.com
website-security.thawte.com
sealinfo.thawte.com
getcert.thawte.com
website-security.thawte.com
pilot-getcert.thawte.com
blogs.thawte.com
kb-thawte.symantec.com
ssl-certificate-center-enterprise.thawte.com
search.thawte.com
verify.thawte.com
test-sslwsev.thawte.com
pilot-verify.thawte.com
test-products.thawte.com
search.thawte.com
website-security.thawte.com
www.thawte.com
SSL-CERTIFICATE-CENTER.THAWTE.DE
sealinfo.thawte.com
dcv.rapidssl.com
thawte.com
forms.thawte.com
query.thawte.com
website-security.thawte.com
verify.thawte.com
pilot-ssl-certificate-center-enterprise.thawte.com
pilot-verify.thawte.com
digicert.com
getcert.thawte.com
pilot-docs.thawte.com
pilot-verify.thawte.com
forms.thawte.com
pilot-ssl-certificate-center-enterprise.thawte.com
pilot-ssl-certificate-center.thawte.com
seal.thawte.com
dcv.rapidssl.com
website-security.thawte.com
seal.thawte.com
siteseal.thawte.com
products.thawte.com
tbs-certificats.com
extended-validation-ssl.thawte.com
extended-validation-ssl.thawte.com
expired-root9.thawte.com
www.thawte.com
pilot-ssl-certificate-center.thawte.com
pilot-getcert.thawte.com
api.thawte.com
pilot-verify.thawte.com
test-api.thawte.com
ssl-certificate-center-enterprise.thawte.com
api.thawte.com
Certificate
The complete raw certificate details for getcert.thawte.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF6jCCBNKgAwIBAgIQCB0vDFmSxrBoBP2yd2XH/TANBgkqhkiG9w0BAQsFADB1 MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMTQwMgYDVQQDEytEaWdpQ2VydCBTSEEyIEV4dGVuZGVk IFZhbGlkYXRpb24gU2VydmVyIENBMB4XDTE4MDUxNTAwMDAwMFoXDTIwMDUxNTEy MDAwMFowgecxHTAbBgNVBA8MFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYB BAGCNzwCAQMTAlVTMRUwEwYLKwYBBAGCNzwCAQITBFV0YWgxFTATBgNVBAUTDDUy OTk1MzctMDE0MjELMAkGA1UEBhMCVVMxDTALBgNVBAgTBFV0YWgxDTALBgNVBAcT BExlaGkxFzAVBgNVBAoTDkRpZ2lDZXJ0LCBJbmMuMSIwIAYDVQQLExlJbmZyYXN0 cnVjdHVyZSBPcGVyYXRpb25zMRswGQYDVQQDExJnZXRjZXJ0LnRoYXd0ZS5jb20w ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn9YYQS2WNgKKiPWVwG+kO Oy+1jIWhEaYFLa0XXaVBAHZEdMADstBlrSFh3Bezja4H1nWycovb3fjKB3tbeiA0 ocZx5R79Q6DjkK/8K0EX3x0w0Q6y5Ak+sIgSnXM2d/xTIUEQaSfwrpFl/yZDoqIS rldH4j+9LQShm8urePcWqQoL174tosvr+XTNjpQbN6cURXFW7Kl+zvdRzHwBZIEe VGJ5PL/3RXFs+hIC4zcwZfYhDhFKH6M9JZX0jed7xvIbbznjxK8C6GdEpFs3+I0f KFq1FZc+2FYK7S1cJ4LHEZ62NpwEwM5CFtVmdH+77mQvoGLOI80RCNoY6kiMqDXr AgMBAAGjggIBMIIB/TAfBgNVHSMEGDAWgBQ901Cl1qCt7vNKYApl0yHU+PjWDzAd BgNVHQ4EFgQU44eGK3lAN+2YVts0yD+0jd59f9wwHQYDVR0RBBYwFIISZ2V0Y2Vy dC50aGF3dGUuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwdQYDVR0fBG4wbDA0oDKgMIYuaHR0cDovL2NybDMuZGlnaWNl cnQuY29tL3NoYTItZXYtc2VydmVyLWcyLmNybDA0oDKgMIYuaHR0cDovL2NybDQu ZGlnaWNlcnQuY29tL3NoYTItZXYtc2VydmVyLWcyLmNybDBLBgNVHSAERDBCMDcG CWCGSAGG/WwCATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5j b20vQ1BTMAcGBWeBDAEBMIGIBggrBgEFBQcBAQR8MHowJAYIKwYBBQUHMAGGGGh0 dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBSBggrBgEFBQcwAoZGaHR0cDovL2NhY2Vy dHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hBMkV4dGVuZGVkVmFsaWRhdGlvblNl cnZlckNBLmNydDAJBgNVHRMEAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQA79AHudiNheW6qklHUhJCSa81Cw54yj7n5bK592TXpzdJR rzoneZmilfFawo8I3D0S9alCWPZUBtR7vu2VMKz1XJIAumzmQWB7jpPNatl1Ixjz wl2J4lY7k6KNQuHPgeKlVfgBanv9tlVflVIRP06+UyPkCqNfe06g3XXqROf6qlcU tB+GllcTDTfreLY8lauKovEAuqvtzRRakazwOo5LC6HpQVogA9kwzO4r8zhQfFyi SCFSr6Fh+arvIxXnkzVOldB4BG4szPLt331vXSs/tLKoC9OsueJ8mVf59f+E1g1T EFZaaV4RuaXvzjk+hPECxdFaOeFeWh5Pgduj3PEs -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/WGEEtljYCioj1lcBvp DjsvtYyFoRGmBS2tF12lQQB2RHTAA7LQZa0hYdwXs42uB9Z1snKL2934ygd7W3og NKHGceUe/UOg45Cv/CtBF98dMNEOsuQJPrCIEp1zNnf8UyFBEGkn8K6RZf8mQ6Ki Eq5XR+I/vS0EoZvLq3j3FqkKC9e+LaLL6/l0zY6UGzenFEVxVuypfs73Ucx8AWSB HlRieTy/90VxbPoSAuM3MGX2IQ4RSh+jPSWV9I3ne8byG28548SvAuhnRKRbN/iN HyhatRWXPthWCu0tXCeCxxGetjacBMDOQhbVZnR/u+5kL6BiziPNEQjaGOpIjKg1 6wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10785354826887766110589224280574511101 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Extended Validation Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-15 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-15 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Utah' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5299537-0142' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Utah' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lehi' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Infrastructure Operations' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'getcert.thawte.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21202869171389027260705298450967572928784324003141924115656827238471690381877566257664413691320609452311976056337035160594608707703665107388818713178665765582331487159468704085583112130892393311560293304074977649873721030891535850066645345217173252426856926916728351366521071579771704500192360911224940838308147449822348644863042636881145499634618160397383495080671992820733511064687871257220332603845443201642008063048889808578556406200114206568999255238295278717928561538738000793848061599567569432570218268438450750966493452032311863885618771367254029127061243095124397214890228833574261826080175177884265550984683 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3dd350a5d6a0adeef34a600a65d321d4f8f8d60f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e387862b794037ed9856db34c83fb48dde7d7fdc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getcert.thawte.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ev-server-g2.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ev-server-g2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 003bf401ee762361796eaa9251d48490926bcd42c39e328fb9f96cae7dd935e9cdd251af3a277999a295f15ac28f08dc3d12f5a94258f65406d47bbeed9530acf55c9200ba6ce641607b8e93cd6ad9752318f3c25d89e2563b93a28d42e1cf81e2a555f8016a7bfdb6555f9552113f4ebe5323e40aa35f7b4ea0dd75ea44e7faaa5714b41f869657130d37eb78b63c95ab8aa2f100baabedcd145a91acf03a8e4b0ba1e9415a2003d930ccee2bf338507c5ca2482152afa161f9aaef2315e793354e95d078046e2cccf2eddf7d6f5d2b3fb4b2a80bd3acb9e27c9957f9f5ff84d60d5310565a695e11b9a5efce393e84f102c5d15a39e15e5a1e4f81dba3dcf12c