*.duckma.me
Issued by Thawte RSA CA 2018
About this certificate
This digital certificate with serial number 08:a7:68:16:39:31:ee:27:86:27:80:75:88:ee:5e:9c was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.duckma.me
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 08:a7:68:16:39:31:ee:27:86:27:80:75:88:ee:5e:9cSerial Number (int): 11503048672974005862025130905900572316
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: e0:19:82:ca:65:fb:4f:2f:6d:b3:c4:8f:ae:5b:bb:b4:cb:cd:35:f2
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a
Fingerprint (sha1): a3:f8:03:04:14:85:5e:fb:49:b3:44:32:60:62:6d:94:d0:df:6a:a6
Fingerprint (sha256): 46:a3:ab:06:cd:24:ba:4a:4d:8e:58:57:df:2d:f9:41:f2:46:4b:74:4b:31:66:60:47:be:57:bd:67:e2:06:63
Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt
Revocation information
OCSP Server: http://status.thawte.comCRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl
Check the revocation status for certificate *.duckma.me
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.duckma.me
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.duckma.me
duckma.me
duckma.me
Other certificates including the domain name duckma.me
(limited to 100 certificates)
pme-sandbox.luizalabs.com
appleiphone.page
www.funaccuracy.com
app.getvidon.com
gcpdemo.gridcell.io
avaritia.hr
vishalsikka.com
imcasey.com
mysaga.com.au
www.fiasp-udine.it
www.horseriding.app
www.cirrcl.com
webmarketer-admin.webmarketer-staging.me
loodesign.eu
demo.happybuilding.app
staging-3diq.3diq.com
sni.cloudflaressl.com
staging.paperless.ironsight.ca
admin.redriver911.com
sni.cloudflaressl.com
www.chessface.com
*.duckma.me
rapidhotelsystem.com
sni.cloudflaressl.com
dev-api.populi.ai
www.nilshein.com
votorantim.hml.sigaonline.com.br
duckma.me
*.duckma.me
chancecalculators.com
social.mytr.in
lfnandoc.net
insane-mag.com
tanja-johannes.app
www.bitecrunch.co.uk
info.hayabusa.io
www.atominvention.com
crisodevelop.tech
karantradingcompany.com
www.oudon.xyz
is.aleasa.dev
share.ideotracker.ru
www.kjb.co.uk
sassom.hml.guiasaudemais.com
www.servify.xyz
mysecretary-payments.duckma.me
houkai3rd.epictools.net
www.carpaccioetterem.hu
panl.co
devlinks.gintaa.com
eventstogo.app
app.chroniclebot.com
web-dev.prendamas.com.bo
votations.24heures.ch
pakinternational.com.pk
www.thewirednomad.com
apseng.com.au
www.servify.xyz
admin.ehspook.com
www.opinionperu.com.pe
sni.cloudflaressl.com
www.monumente-moldova.com
www.auxileolabs.com
dev-api.populi.ai
rimaimobiliaria.com.br
www.thangasamy.xyz
duckma.me
*.duckma.me
apollustech.com
jomann.org.ng
www.buy-like.com
artists.dybuss.com
submissions.icsg.world
is.aleasa.dev
www.edim.app
csaenlimited.com
www.cloudgineers.com
demo.messehero.de
www.besmitten.com.my
www.wroclawstudio.com
www.nordisch.ch
re.slipapp.io
scen.studion.co
stanfoot.co.jp
votations.24heures.ch
www.app.powtorkazpolskiego.pl
mysecretary-payments.duckma.me
laforja.com.ar
share.bigteamchallenge.com
www.follis.ie
www.weunite.in
efoh.xyz
scanydrive.com.br
clocks.sipofcode.com
web.togethe.re
hkmassage.com.au
stylexplore.com
futurefox.co.in
360concrete.app
web.seasonshare.com
appleiphone.page
www.funaccuracy.com
app.getvidon.com
gcpdemo.gridcell.io
avaritia.hr
vishalsikka.com
imcasey.com
mysaga.com.au
www.fiasp-udine.it
www.horseriding.app
www.cirrcl.com
webmarketer-admin.webmarketer-staging.me
loodesign.eu
demo.happybuilding.app
staging-3diq.3diq.com
sni.cloudflaressl.com
staging.paperless.ironsight.ca
admin.redriver911.com
sni.cloudflaressl.com
www.chessface.com
*.duckma.me
rapidhotelsystem.com
sni.cloudflaressl.com
dev-api.populi.ai
www.nilshein.com
votorantim.hml.sigaonline.com.br
duckma.me
*.duckma.me
chancecalculators.com
social.mytr.in
lfnandoc.net
insane-mag.com
tanja-johannes.app
www.bitecrunch.co.uk
info.hayabusa.io
www.atominvention.com
crisodevelop.tech
karantradingcompany.com
www.oudon.xyz
is.aleasa.dev
share.ideotracker.ru
www.kjb.co.uk
sassom.hml.guiasaudemais.com
www.servify.xyz
mysecretary-payments.duckma.me
houkai3rd.epictools.net
www.carpaccioetterem.hu
panl.co
devlinks.gintaa.com
eventstogo.app
app.chroniclebot.com
web-dev.prendamas.com.bo
votations.24heures.ch
pakinternational.com.pk
www.thewirednomad.com
apseng.com.au
www.servify.xyz
admin.ehspook.com
www.opinionperu.com.pe
sni.cloudflaressl.com
www.monumente-moldova.com
www.auxileolabs.com
dev-api.populi.ai
rimaimobiliaria.com.br
www.thangasamy.xyz
duckma.me
*.duckma.me
apollustech.com
jomann.org.ng
www.buy-like.com
artists.dybuss.com
submissions.icsg.world
is.aleasa.dev
www.edim.app
csaenlimited.com
www.cloudgineers.com
demo.messehero.de
www.besmitten.com.my
www.wroclawstudio.com
www.nordisch.ch
re.slipapp.io
scen.studion.co
stanfoot.co.jp
votations.24heures.ch
www.app.powtorkazpolskiego.pl
mysecretary-payments.duckma.me
laforja.com.ar
share.bigteamchallenge.com
www.follis.ie
www.weunite.in
efoh.xyz
scanydrive.com.br
clocks.sipofcode.com
web.togethe.re
hkmassage.com.au
stylexplore.com
futurefox.co.in
360concrete.app
web.seasonshare.com
Certificate
The complete raw certificate details for *.duckma.me in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEoTCCA4mgAwIBAgIQCKdoFjkx7ieGJ4B1iO5enDANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMRswGQYDVQQDExJUaGF3dGUgUlNBIENBIDIwMTgwHhcN MjExMjA2MDAwMDAwWhcNMjMwMTA2MjM1OTU5WjAWMRQwEgYDVQQDDAsqLmR1Y2tt YS5tZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANXM7TCr66qaJbVJ hRb8NLLDAYH4MvT0LDEvyESCQ1MyeHQktfbC/L4lR61l+c3ysMrJi5orwc+Hg8u/ IQes4GipTKc+Um+/Ilaf205Jisj1J1y4zRYiKqI4R5gxDZaqX67kKviOUAdR1Ja0 263txR98ariVTs3dZLBh9uoSN/R7z1IpCHRfNrWndBxDqV/9p+3NXZB0M3gCzS2/ GQDVtCxdOKZMelbTK6s02K7isGRsqQr6lkaIuIsaD1MIyE6QqnL4EfZJU9EqwPEh mB1WAxxzBwte3CJPA0pyXMAzc1+qrrR0z30je68IclNxgdBEElNW4gLqRt4yezTM j85LA4kCAwEAAaOCAaMwggGfMB8GA1UdIwQYMBaAFKPIXmVU5TB4wQXqBwpqWcy5 /t5aMB0GA1UdDgQWBBTgGYLKZftPL22zxI+uW7u0y8018jAhBgNVHREEGjAYggsq LmR1Y2ttYS5tZYIJZHVja21hLm1lMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwOgYDVR0fBDMwMTAvoC2gK4YpaHR0cDovL2Nk cC50aGF3dGUuY29tL1RoYXd0ZVJTQUNBMjAxOC5jcmwwPgYDVR0gBDcwNTAzBgZn gQwBAgEwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BT MG8GCCsGAQUFBwEBBGMwYTAkBggrBgEFBQcwAYYYaHR0cDovL3N0YXR1cy50aGF3 dGUuY29tMDkGCCsGAQUFBzAChi1odHRwOi8vY2FjZXJ0cy50aGF3dGUuY29tL1Ro YXd0ZVJTQUNBMjAxOC5jcnQwCQYDVR0TBAIwADATBgorBgEEAdZ5AgQDAQH/BAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAeCoRIuIipcfyfqj3i1DG8Tt2w5CxuQcMUIzc N/cIvKd4F5UC8kb08PVpQtFgkfNuWxh1n31w4v462XYWK7Nn5fodxJ2tcoljR2BT j+f/TI/wWtPGkBQlrP9pefrXXTJ7LeaGeQrUY8W1DarN4c3H1bq6UUTFKdNiuTEx 0ilFOAiBpxHOWuL+YA16yN2tg7rDpa3F5KmlerxPB+cvYyoNNJ5vZ9o3MC4Fq5bi lB6TjRjMeGiSIW2JPeU4jrYaqMzat38dvJGT91V7Mx0hcdnqHRvu+VoAdK761iPW Dr291JKdZ1Bd0G6jgm6OK2oVAe2DzaYjZPDV5OMPTe4mxC1Shg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cztMKvrqpoltUmFFvw0 ssMBgfgy9PQsMS/IRIJDUzJ4dCS19sL8viVHrWX5zfKwysmLmivBz4eDy78hB6zg aKlMpz5Sb78iVp/bTkmKyPUnXLjNFiIqojhHmDENlqpfruQq+I5QB1HUlrTbre3F H3xquJVOzd1ksGH26hI39HvPUikIdF82tad0HEOpX/2n7c1dkHQzeALNLb8ZANW0 LF04pkx6VtMrqzTYruKwZGypCvqWRoi4ixoPUwjITpCqcvgR9klT0SrA8SGYHVYD HHMHC17cIk8DSnJcwDNzX6qutHTPfSN7rwhyU3GB0EQSU1biAupG3jJ7NMyPzksD iQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 11503048672974005862025130905900572316 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-06 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.duckma.me' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26989811993013215660672726069310729330006152424484804701948677662450071045823271795873054166351256599837077965852156734471193418169357358868821866149611456421706818018754388500717111413197512909539380114463325478427154043991428754034860271752547191178150333119595151929484458307791007158493765495617445670385716068226839933251659455740133244175540702995448389522894186602559684840962023120421270306101670958401981263454725869815335031915082197981707777978410945384473048305235247372045580589466901804588158511260597250875067832008225412586359070688177231626859195376493210967017834077077407584533048747879994661471113 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e01982ca65fb4f2f6db3c48fae5bbbb4cbcd35f2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.duckma.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duckma.me' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00782a1122e222a5c7f27ea8f78b50c6f13b76c390b1b9070c508cdc37f708bca778179502f246f4f0f56942d16091f36e5b18759f7d70e2fe3ad976162bb367e5fa1dc49dad7289634760538fe7ff4c8ff05ad3c6901425acff6979fad75d327b2de686790ad463c5b50daacde1cdc7d5baba5144c529d362b93131d22945380881a711ce5ae2fe600d7ac8ddad83bac3a5adc5e4a9a57abc4f07e72f632a0d349e6f67da37302e05ab96e2941e938d18cc786892216d893de5388eb61aa8ccdab77f1dbc9193f7557b331d2171d9ea1d1beef95a0074aefad623d60ebdbdd4929d67505dd06ea3826e8e2b6a1501ed83cda62364f0d5e4e30f4dee26c42d5286