ucb-nam.glencore.com

- Glencore International AG -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 01:60:38:5e:b0:7f:86:31:7c:a3:b9:7b:2f:42:8a:99 was issued on by DigiCert Inc.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Glencore International AG

Organization: Glencore International AG
Locality: Baar
Country: CH

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:60:38:5e:b0:7f:86:31:7c:a3:b9:7b:2f:42:8a:99
Serial Number (int): 1828831811212869177262389712696543897
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 59:18:e5:99:45:f6:a3:cb:87:ea:d8:48:60:1c:88:42:df:ea:ed:97
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): c2:26:d5:8a:95:b9:88:29:0b:b5:14:cd:89:8d:9d:7b:79:b8:6d:b3
Fingerprint (sha256): 3e:2b:29:4d:24:7e:e0:aa:71:33:25:47:80:6f:b0:b4:c4:59:93:ae:39:3f:ed:e9:42:d0:9a:33:a9:ee:fb:77

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate ucb-nam.glencore.com

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ucb-nam.glencore.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ucb-nam.glencore.com
UCA-NAM.glencore.com
camtldmz7cewep2.anyaccess.net
ciscolb1.glencore.com
ciscolb2.glencore.com
conf.glencore.com
glencore.com

Other certificates including the domain name glencore.com

(limited to 100 certificates)
UCA.glencore.com
www.glencore.com
ucb-sam.glencore.com
www.glencore.com
www.glencore.com
UCB-AUS.glencore.com
www.glencore.com
ap.bar.ch.glencore.net
www.glencore.com
www.glencore.com
ACB-SAM.glencore.com
UCA-ZA.glencore.com
www.glencore.com
acb-eur.glencore.com
glencore.com
UCA.glencore.co.za
glencore.com
glencore.com
www.glencore.com
UCB-ASA.glencore.com
UCB-EU.glencore.com
www.glencore.com
glencore.com
www.glencore.com
www.glencore.com
www.glencore.com
edms.ch.glencore.com
www.glencore.com
ACB-NAM.glencore.com
sfbext.bar.ch.glencore.net
www.glencore.com
ACA-ZAF.glencore.com
uca-sam.glencore.com
UCB.glencore.com
glencore.com
www-dev.glencore.com
*.glencore.com
hermes.glencore.com
*.glencore.com
UCA-NAM.glencore.com
ap.zrh.ch.glencore.net
www.glencore.com
UCA.glencore.co.za
UCB-ASA.glencore.com
www.glencore.com
UCA.glencore.co.za
mail.eur.glencore.net
www.glencore.com
uma-eur-test.glencore.com
glencore.com
www.glencore.com
UCA-NAM.glencore.com
UCB-ZAF.glencore.com
UCB-EUR.glencore.com
sfbext.zrh.ch.glencore.net
glencore.com
glencore.com
www.glencore.com
UCB-NAM.glencore.com
www.glencore.com
smime.glencore.com
glencore.com
office.glencore.com
sfbext.bar.ch.glencore.net
glencore.com
uca-eur.glencore.com
www.glencore.com
www.glencore.com
ACB-ZAF.glencore.com
UCB.glencore.com
ap.bar.ch.glencore.net
ucb-zaf.glencore.com
glencore.com
www.glencore.com
test-ponton-uk.glencore.com
UCA-NAM.glencore.com
www.glencore.com
www.glencore.com
UCB-NAM.glencore.com
www.glencore.com
www.glencore.com
ms-sbc-test1.glencore.com
sfbext.zrh.ch.glencore.net
glencore.com
UCA-ZAF.glencore.com
ap.bar.ch.glencore.net
edms.ch.glencore.com
www.glencore.com
glencore.com
ap.bar.ch.glencore.net
www.glencore.com
www.glencore.com
www.glencore.com
www.glencore.com
aca-eur.glencore.com
www.glencore.com
UCB-SAM.glencore.com
ucb-nam.glencore.com
glencore.com
UCA.glencore.co.za

Certificate

The complete raw certificate details for ucb-nam.glencore.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGcjCCBVqgAwIBAgIQAWA4XrB/hjF8o7l7L0KKmTANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMRswGQYDVQQDExJUaGF3dGUgUlNBIENBIDIwMTgwHhcN
MjEwOTIxMDAwMDAwWhcNMjIxMDAxMjM1OTU5WjBfMQswCQYDVQQGEwJDSDENMAsG
A1UEBxMEQmFhcjEiMCAGA1UEChMZR2xlbmNvcmUgSW50ZXJuYXRpb25hbCBBRzEd
MBsGA1UEAxMUdWNiLW5hbS5nbGVuY29yZS5jb20wggIiMA0GCSqGSIb3DQEBAQUA
A4ICDwAwggIKAoICAQDFtyUHdsoMal8CUGmhCb/CXPFG37aVFy2SjrVm4ED9zlBn
CgC6VaMK+L1ST7C1xr6fPVcuNjCJUm68VDPh7bAYOPXNJ4Y6pQztx/0xNkMm7REh
eWQHNrMKbxvQD/StFQOGAXOViVMlBVQMmRPOq+BPSkNL7H+JJCOFZwzeXf14xXMH
1LqJrXB/5Z2HKwnRzo72KEXbpVS8qSXqLhOG4ZbVQx5x9q37Dqw6BH16mYQOtC0H
OWPv9GecO7RA3ZDkkuTqv2JPTyIwOTCzbkF7E8vafd2DvJluTgzT3uJAfhMim6fx
fnupkvgv1QXLQ82LNv2mHBvITJWmu3EBKaTjkvLDAIiJbVAe//mHK3EiYAmV7V5J
ShuEWo3sVsjibvYIhI2zrqUjWwL/P2xTXYV5oUaeg11SVkEGc7fLNrmJUKl7okES
CAf1ymkErQvkqGSjsgyj0mBmAyiQGg4ZGbLfsT251FbMwBIDcGPh+c2oJzNY2AZM
QpVWrQxmFxB3uPuz3v2SU2S8DazBTDmfgKRJybo1OqafBjvIz4tBeVmzhaH1Ngyi
EchKqqhgpv5qTgwj0tc/e36tByQIoKcL9rK3wroVn2XwOrbpzCWlTpPNSMQZoYVx
YIjkbO825805tw+JQFGWShK/lqaAbzDjoCiS2VidNNnx5KLjEgDL2LthXod8RwID
AQABo4ICKzCCAicwHwYDVR0jBBgwFoAUo8heZVTlMHjBBeoHCmpZzLn+3lowHQYD
VR0OBBYEFFkY5ZlF9qPLh+rYSGAciELf6u2XMIGlBgNVHREEgZ0wgZqCFHVjYi1u
YW0uZ2xlbmNvcmUuY29tghRVQ0EtTkFNLmdsZW5jb3JlLmNvbYIdY2FtdGxkbXo3
Y2V3ZXAyLmFueWFjY2Vzcy5uZXSCFWNpc2NvbGIxLmdsZW5jb3JlLmNvbYIVY2lz
Y29sYjIuZ2xlbmNvcmUuY29tghFjb25mLmdsZW5jb3JlLmNvbYIMZ2xlbmNvcmUu
Y29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH
AwIwOgYDVR0fBDMwMTAvoC2gK4YpaHR0cDovL2NkcC50aGF3dGUuY29tL1RoYXd0
ZVJTQUNBMjAxOC5jcmwwPgYDVR0gBDcwNTAzBgZngQwBAgIwKTAnBggrBgEFBQcC
ARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMG8GCCsGAQUFBwEBBGMwYTAk
BggrBgEFBQcwAYYYaHR0cDovL3N0YXR1cy50aGF3dGUuY29tMDkGCCsGAQUFBzAC
hi1odHRwOi8vY2FjZXJ0cy50aGF3dGUuY29tL1RoYXd0ZVJTQUNBMjAxOC5jcnQw
DAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAUhkuhHAFjFVH/v1mzedPIBjuwNSRsdYw5oc9oWhwC7KiIseuasdTK7zB
LRfy1jc+/0jD83xObREb0+Gk3OZwZZ9KiqOC3Dq4gI+xc3aoFe2cKqlxLkLc1rCU
mLzIbL7BTqAKzB3hjI8oNK2WR1PA4X7UDjnYbMGaQbVAExD3t1rFPD0L/B3oEIJT
/fHALbKXH6oe65tD/ffHsNWaQw/93+CrVVjFRNrn2TBQzzfm37uEaf9IIRGTdw07
ZIHUEW6diPxy5kImaiYdetH1dhRNXf7SbNN+sDb15e5ZmUIxLafg4SEs+bbQmsBA
BcTBudiuy6rTOtrYzTUw/ShWNOjZ8w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1828831811212869177262389712696543897
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Baar'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Glencore International AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ucb-nam.glencore.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 806608494545054323806475208342185017975825114364333589346352257256705237068343693475069723333881474154044754808958041891873717308535541221018724446202009311199990250693098743769970472564117674552380289456833855273660048401038458363369116908291785879752312721997621187880789320278140984783432157798512852234756080419167506305129252060319048943289967196343531570221586139300288335600811207879584038835736261182583720715171968175894895098143525729505380707301235015411290894004052059703394368786319074459725043128335148291495326658870605845137616240752916461753345086913210932136074820451792631207448376347085134518143308851590933943900483943841631377561471350062368875242115947511880227439663069886742490237299533205343113673193633538572168696609850167390460383200153053052013838430490786855109053586695172270869152586375095073500243966891158275359008536282602058735460622075476105189897855730136180808175337968489684326278275806515229398186175551917541883585216701336306392170050129693330045034733092522239705795918448599451128775897063804787149065733869436031366291337436127310433454665386207772382100678750408982960927048890672112609938917151120760009780228894202462265785825625554461611402869309226785914598887774034975612046113863
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5918e59945f6a3cb87ead848601c8842dfeaed97
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucb-nam.glencore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'UCA-NAM.glencore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camtldmz7cewep2.anyaccess.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciscolb1.glencore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciscolb2.glencore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conf.glencore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glencore.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0052192e8470058c5547fefd66cde74f2018eec0d491b1d630e6873da168700bb2a222c7ae6ac7532bbcc12d17f2d6373eff48c3f37c4e6d111bd3e1a4dce670659f4a8aa382dc3ab8808fb17376a815ed9c2aa9712e42dcd6b09498bcc86cbec14ea00acc1de18c8f2834ad964753c0e17ed40e39d86cc19a41b5401310f7b75ac53c3d0bfc1de8108253fdf1c02db2971faa1eeb9b43fdf7c7b0d59a430ffddfe0ab5558c544dae7d93050cf37e6dfbb8469ff48211193770d3b6481d4116e9d88fc72e642266a261d7ad1f576144d5dfed26cd37eb036f5e5ee599942312da7e0e1212cf9b6d09ac04005c4c1b9d8aecbaad33adad8cd3530fd285634e8d9f3