pfsso.tyco.com
- Tyco International Ltd. -
Issued by thawte SSL CA - G2
About this certificate
This digital certificate with serial number 12:ab:4a:53:35:36:c3:67:e8:d1:d0:30:84:3b:ca:52 was issued on by thawte, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Tyco International Ltd.
Organization:
Tyco International Ltd.
Organization unit: Tyco
Organization unit: Tyco
State / Province:
New Jersey
Locality: Princeton
Country: US
Locality: Princeton
Country: US
thawte, Inc.
Organization:
thawte, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 12:ab:4a:53:35:36:c3:67:e8:d1:d0:30:84:3b:ca:52Serial Number (int): 24815494177655010437344331102561225298
Serial Number lenght: 125 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60
Fingerprint (sha1): a9:0d:3c:94:62:2d:85:b7:ee:93:d9:34:96:05:63:3c:27:4b:99:26
Fingerprint (sha256): 46:1b:70:bc:34:93:c0:97:5e:49:63:d3:27:3c:5c:37:d5:5e:a3:a0:64:58:56:7a:be:ef:07:14:39:91:2f:d8
Issuing Certificate URL: http://tj.symcb.com/tj.crt
Revocation information
OCSP Server: http://tj.symcd.comCRL Distribution Point: http://tj.symcb.com/tj.crl
Check the revocation status for certificate pfsso.tyco.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for pfsso.tyco.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
pfsso.tyco.com
Other certificates including the domain name tyco.com
(limited to 100 certificates)
imperva.com
imperva.com
incapsula.com
incapsula.com
policy.tyco.com
imperva.com
sts.tyco.com
incapsula.com
ift.tyco.com
incapsula.com
imperva.com
imperva.com
Tyco.com
incapsula.com
mail.tyco.com
MyTyco.Tyco.Com
myaccess.tyco.com
imperva.com
corprcts.tyco.com
prodinsight.tyco.com
dcm.tyco.com
incapsula.com
incapsula.com
campaignmanagerstg.tyco.com
Tycotax.tyco.com
tyin.tyco.com
incapsula.com
sdw-t.tyco.com
incapsula.com
devsxa.tyco.com
sdw.tyco.com
imperva.com
sogstg.tyco.com
misentry.tycois.com
TycoLeaders.Tyco.Com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
imperva.com
imperva.com
imperva.com
Globaltreasury.tyco.com
incapsula.com
mymedia.tyco.com
incapsula.com
corprcts.tyco.com
incapsula.com
tyin.tyco.com
imperva.com
ihb.tyco.com
sdw.tyco.com
imperva.com
imperva.com
campaignmanagerstg.tyco.com
ift.tyco.com
imperva.com
taxstreamweb.tyco.com
securemail.tyco.com
TycoITSeparation.Tyco.Com
incapsula.com
mymedia.tyco.com
imperva.com
imperva.com
ecc.tyco.com
incapsula.com
incapsula.com
incapsula.com
prodinsight.tyco.com
incapsula.com
Logistics.Tyco.com
policy.tyco.com
imperva.com
GlobalFinance.tyco.com
pfsso.tyco.com
securemail.tyco.com
imperva.com
globalfinance.tyco.com
incapsula.com
tfshyperion2.tyco.com
incapsula.com
imperva.com
tax.tyco.com
globalfinance.tyco.com
tycofinance.tyco.com
tax.tyco.com
imperva.com
pfsso.tyco.com
policy.tyco.com
incapsula.com
incapsula.com
incapsula.com
tyin.tyco.com
mail.tyco.com
MIVSP.tyco.com
incapsula.com
mymail.tyco.com
imperva.com
identitymanager.tyco.com
imperva.com
imperva.com
incapsula.com
incapsula.com
policy.tyco.com
imperva.com
sts.tyco.com
incapsula.com
ift.tyco.com
incapsula.com
imperva.com
imperva.com
Tyco.com
incapsula.com
mail.tyco.com
MyTyco.Tyco.Com
myaccess.tyco.com
imperva.com
corprcts.tyco.com
prodinsight.tyco.com
dcm.tyco.com
incapsula.com
incapsula.com
campaignmanagerstg.tyco.com
Tycotax.tyco.com
tyin.tyco.com
incapsula.com
sdw-t.tyco.com
incapsula.com
devsxa.tyco.com
sdw.tyco.com
imperva.com
sogstg.tyco.com
misentry.tycois.com
TycoLeaders.Tyco.Com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
imperva.com
imperva.com
imperva.com
Globaltreasury.tyco.com
incapsula.com
mymedia.tyco.com
incapsula.com
corprcts.tyco.com
incapsula.com
tyin.tyco.com
imperva.com
ihb.tyco.com
sdw.tyco.com
imperva.com
imperva.com
campaignmanagerstg.tyco.com
ift.tyco.com
imperva.com
taxstreamweb.tyco.com
securemail.tyco.com
TycoITSeparation.Tyco.Com
incapsula.com
mymedia.tyco.com
imperva.com
imperva.com
ecc.tyco.com
incapsula.com
incapsula.com
incapsula.com
prodinsight.tyco.com
incapsula.com
Logistics.Tyco.com
policy.tyco.com
imperva.com
GlobalFinance.tyco.com
pfsso.tyco.com
securemail.tyco.com
imperva.com
globalfinance.tyco.com
incapsula.com
tfshyperion2.tyco.com
incapsula.com
imperva.com
tax.tyco.com
globalfinance.tyco.com
tycofinance.tyco.com
tax.tyco.com
imperva.com
pfsso.tyco.com
policy.tyco.com
incapsula.com
incapsula.com
incapsula.com
tyin.tyco.com
mail.tyco.com
MIVSP.tyco.com
incapsula.com
mymail.tyco.com
imperva.com
identitymanager.tyco.com
imperva.com
Certificate
The complete raw certificate details for pfsso.tyco.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEvjCCA6agAwIBAgIQEqtKUzU2w2fo0dAwhDvKUjANBgkqhkiG9w0BAQsFADBB MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMRswGQYDVQQDExJ0 aGF3dGUgU1NMIENBIC0gRzIwHhcNMTUwOTA4MDAwMDAwWhcNMTYwOTA5MjM1OTU5 WjCBgDELMAkGA1UEBhMCVVMxEzARBgNVBAgMCk5ldyBKZXJzZXkxEjAQBgNVBAcM CVByaW5jZXRvbjEgMB4GA1UECgwXVHljbyBJbnRlcm5hdGlvbmFsIEx0ZC4xDTAL BgNVBAsMBFR5Y28xFzAVBgNVBAMMDnBmc3NvLnR5Y28uY29tMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmG5Esn5oikcDEmCaXQM4R5BD57IcYEzY2PFo 0fCcEZWANHrhEqKqTB1q5A1xz9NPepDJobcj6isOdeG46jxpjzhlYz6OgQyBOzJE FxFJX97FPInSttusGdkjdWiva0r7dN9bUBqY6IELA5/nxAnSbtcgCbGC5V9XZV4/ x3Yg2tSf/sIhr8k/zlMQHQXZbU0qClKneXCMBbPt4SoaOWU5mKd0YkYr8KutjwX4 XP8i3vAyLPzoKnm2dlfDKSKLDc3hr4+nvE6sgdBRP/CnZ51rxsp65uWJZZJbgF30 0R+mHU4m1bmPazcEpUjrVmK31mwXQ/0PXD1VW+BSe87FtA9enwIDAQABo4IBcDCC AWwwGQYDVR0RBBIwEIIOcGZzc28udHljby5jb20wCQYDVR0TBAIwADBuBgNVHSAE ZzBlMGMGBmeBDAECAjBZMCYGCCsGAQUFBwIBFhpodHRwczovL3d3dy50aGF3dGUu Y29tL2NwczAvBggrBgEFBQcCAjAjDCFodHRwczovL3d3dy50aGF3dGUuY29tL3Jl cG9zaXRvcnkwDgYDVR0PAQH/BAQDAgWgMB8GA1UdIwQYMBaAFMJPSFf80U+awF04 fQ4F29kutVJgMCsGA1UdHwQkMCIwIKAeoByGGmh0dHA6Ly90ai5zeW1jYi5jb20v dGouY3JsMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBXBggrBgEFBQcB AQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly90ai5zeW1jZC5jb20wJgYIKwYBBQUH MAKGGmh0dHA6Ly90ai5zeW1jYi5jb20vdGouY3J0MA0GCSqGSIb3DQEBCwUAA4IB AQAQbf+xUm8ffIsmxMcpskNoXeOUrHINxPXd8suPnO8RfBev7EYbTwCSx5rBWQVD vOdtQKi0qpsOadJIZWDSBGzfO1UvhFL2c1ropZfDUI/15/KTbjhR/wD/j/n509MS DdVc6LsxlUAS0eoYqgeC+sDL273HpZmTg/XPcPTIfrSMEfBZK5zi+wiTFnhjCOPL /GpHQCUaZ+VMcWEzdANg/ZAFCRH1EGGVu4yLWlrK9PmNJEzSe8HBZgMIaS4Zq9r0 93DOQVckiuYLHRS+f5UWhYujz5h+/gLtzvuuwhek83XpleSSvk0fhovs5zDEhU0z iWdGncAM12FpTxC/CSCIrHzb -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmG5Esn5oikcDEmCaXQM4 R5BD57IcYEzY2PFo0fCcEZWANHrhEqKqTB1q5A1xz9NPepDJobcj6isOdeG46jxp jzhlYz6OgQyBOzJEFxFJX97FPInSttusGdkjdWiva0r7dN9bUBqY6IELA5/nxAnS btcgCbGC5V9XZV4/x3Yg2tSf/sIhr8k/zlMQHQXZbU0qClKneXCMBbPt4SoaOWU5 mKd0YkYr8KutjwX4XP8i3vAyLPzoKnm2dlfDKSKLDc3hr4+nvE6sgdBRP/CnZ51r xsp65uWJZZJbgF300R+mHU4m1bmPazcEpUjrVmK31mwXQ/0PXD1VW+BSe87FtA9e nwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 24815494177655010437344331102561225298 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-08 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-09 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New Jersey' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Princeton' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Tyco International Ltd.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Tyco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'pfsso.tyco.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19242597704132088369737074874594298294006508497715357055972703103273924068106215624002871770151287238230587308542148696484851256808974739044815093278208636019056462400133624815175758046208621206235442913147205682867574334965305250680772351506939118346051165951299043944319772646415318514936897403603700755602105634740851384600598811238157919492522338797048889831732556300917914283279699439528696879958548391489035904609834348390766992391377883511080156583505293124220454346173568009245619939058807149455779069023651372690445541193736205738902252901261539764920392204374599303445254682896182956733716556800560649428639 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfsso.tyco.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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