*.zgt.de
- FUNKE Corporate IT GmbH -
Issued by thawte SSL CA - G2
About this certificate
This digital certificate with serial number 5e:50:d4:74:09:6d:24:bb:ac:a8:01:07:8d:03:ac:57 was issued on by thawte, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
FUNKE Corporate IT GmbH
Organization:
FUNKE Corporate IT GmbH
Organization unit: Netzwerk und Sicherheit
Organization unit: Netzwerk und Sicherheit
State / Province:
Nordrhein-Westfalen
Locality: Essen
Country: DE
Locality: Essen
Country: DE
thawte, Inc.
Organization:
thawte, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 5e:50:d4:74:09:6d:24:bb:ac:a8:01:07:8d:03:ac:57Serial Number (int): 125367124416685015541939161433093942359
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60
Fingerprint (sha1): 01:42:b8:4f:e2:2f:ef:70:bf:9d:b1:90:6a:e5:e1:69:7b:90:53:0b
Fingerprint (sha256): 4d:1a:50:4c:aa:15:2e:36:63:bc:70:5d:63:61:78:50:85:37:46:a0:90:ad:16:59:44:71:35:0e:13:a6:08:c7
Issuing Certificate URL: http://tj.symcb.com/tj.crt
Revocation information
OCSP Server: http://tj.symcd.comCRL Distribution Point: http://tj.symcb.com/tj.crl
Check the revocation status for certificate *.zgt.de
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.zgt.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.zgt.de
zgt.de
zgt.de
Other certificates including the domain name zgt.de
(limited to 100 certificates)
sso.zgt.de
secure.zgt.de
mediaservice.zgt.de
*.zgt.de
sso.zgt.de
anzeigen.thueringer-allgemeine.de
anzeigen.thueringer-allgemeine.de
*.services.extern.zgt.de
lesershop.zgt.de
media101.zgt.de
extranet.zgt.de
*.zgt.de
mediaservice.zgt.de
secure.zgt.de
sso.zgt.de
*.zgt.de
sso.zgt.de
lesershop.zgt.de
anzeigen.thueringer-allgemeine.de
extranet.zgt.de
*.services.extern.zgt.de
sso.zgt.de
*.zgt.de
anzeigen.thueringer-allgemeine.de
secure.zgt.de
selligentdata.services.extern.zgt.de
sso.zgt.de
extranet.zgt.de
bestatter.zgt.de
*.zgt.de
sso.funkemedien.de
mediaservice.zgt.de
bestatter.zgt.de
sso.zgt.de
*.services.extern.zgt.de
sso.funkemedien.de
*.zgt.de
anzeigen.thueringer-allgemeine.de
newsapp.services.extern.zgt.de
extranet.zgt.de
*.zgt.de
sso.funkemedien.de
*.zgt.de
media101.zgt.de
anzeigen.thueringer-allgemeine.de
media101.zgt.de
anzeigen.thueringer-allgemeine.de
*.services.extern.zgt.de
secure.zgt.de
mediaservice.zgt.de
*.zgt.de
sso.zgt.de
anzeigen.thueringer-allgemeine.de
anzeigen.thueringer-allgemeine.de
*.services.extern.zgt.de
lesershop.zgt.de
media101.zgt.de
extranet.zgt.de
*.zgt.de
mediaservice.zgt.de
secure.zgt.de
sso.zgt.de
*.zgt.de
sso.zgt.de
lesershop.zgt.de
anzeigen.thueringer-allgemeine.de
extranet.zgt.de
*.services.extern.zgt.de
sso.zgt.de
*.zgt.de
anzeigen.thueringer-allgemeine.de
secure.zgt.de
selligentdata.services.extern.zgt.de
sso.zgt.de
extranet.zgt.de
bestatter.zgt.de
*.zgt.de
sso.funkemedien.de
mediaservice.zgt.de
bestatter.zgt.de
sso.zgt.de
*.services.extern.zgt.de
sso.funkemedien.de
*.zgt.de
anzeigen.thueringer-allgemeine.de
newsapp.services.extern.zgt.de
extranet.zgt.de
*.zgt.de
sso.funkemedien.de
*.zgt.de
media101.zgt.de
anzeigen.thueringer-allgemeine.de
media101.zgt.de
anzeigen.thueringer-allgemeine.de
*.services.extern.zgt.de
Certificate
The complete raw certificate details for *.zgt.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGzDCCBbSgAwIBAgIQXlDUdAltJLusqAEHjQOsVzANBgkqhkiG9w0BAQsFADBB MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMRswGQYDVQQDExJ0 aGF3dGUgU1NMIENBIC0gRzIwHhcNMTYwODIyMDAwMDAwWhcNMTkwODIyMjM1OTU5 WjCBkjELMAkGA1UEBhMCREUxHDAaBgNVBAgME05vcmRyaGVpbi1XZXN0ZmFsZW4x DjAMBgNVBAcMBUVzc2VuMSAwHgYDVQQKDBdGVU5LRSBDb3Jwb3JhdGUgSVQgR21i SDEgMB4GA1UECwwXTmV0endlcmsgdW5kIFNpY2hlcmhlaXQxETAPBgNVBAMMCCou emd0LmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyj7T8/BV9lzi rgM+6XCrsUioabdXx2jObFW2SjYe6Pk5+bqRjkXn64zonTPfgYV3SqDMmYFwgzh5 sdXV/yYpYaNIYFBNoIbiJglRBXf8wf4GVAWbqfo6neTl5811vpsN0Ar7n3+Scc7y 1GYzeLk2MVP/epAcH7ibc0diqAh95pHqw5N1HtU1s3yKGbCLwWpqMbrVNuX7SaXF Kwb7PLd9eoDcJkRYqxsIh0PDIaB+x6u9Xa8DArFWG6dv/PL9kNtnz/VFGz8C72gX 40HgWeTfLVebUsLM82ug/gm1C3KnCJNiLa6tvnDaQ/ZPs5tps1GESenSf61JGysk SqSAKGDj1wIDAQABo4IDbDCCA2gwGwYDVR0RBBQwEoIIKi56Z3QuZGWCBnpndC5k ZTAJBgNVHRMEAjAAMG4GA1UdIARnMGUwYwYGZ4EMAQICMFkwJgYIKwYBBQUHAgEW Gmh0dHBzOi8vd3d3LnRoYXd0ZS5jb20vY3BzMC8GCCsGAQUFBwICMCMMIWh0dHBz Oi8vd3d3LnRoYXd0ZS5jb20vcmVwb3NpdG9yeTAOBgNVHQ8BAf8EBAMCBaAwHwYD VR0jBBgwFoAUwk9IV/zRT5rAXTh9DgXb2S61UmAwKwYDVR0fBCQwIjAgoB6gHIYa aHR0cDovL3RqLnN5bWNiLmNvbS90ai5jcmwwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDovL3Rq LnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL3RqLnN5bWNiLmNvbS90ai5j cnQwggH2BgorBgEEAdZ5AgQCBIIB5gSCAeIB4AB1AN3rHSt6DU+mIIuBrYFocH4u jp0B1VyIjT0RxM227L7MAAABVrGDgn8AAAQDAEYwRAIgSipDLniwLA9GLX/KytwO p1GC8DxAhJK/iVcAuQzhq+wCIGEh4ObSfqa9hBtVuUGkn19gVSpQ/WE0l+JhkrNS 7AbtAHUApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFWsYODvwAA BAMARjBEAiAw/XBhpOwl1A6VuLWjuPbRig2RyWbGBRLfzsKyvsucywIgebypNL2e mFbX/zDz0sZksjJcVsq2gdB20mksHnZEpDEAdwBo9pj4H2SCvjqM7rkoHUz8cVFd Z5PURNEKZ6y7T0/7xAAAAVaxg4PDAAAEAwBIMEYCIQDKoGtciz9BWjyZNfKjAiuT ECeLrAUMlcWvK6MjRgIWQQIhAO72AC9Ig3Aj/R1QD0lySho4WMvdm87w282baAn6 ZvPpAHcA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo/csAAAFWsYOFigAA BAMASDBGAiEA2exYWwe910wZfRDJIs+li9321PZdqfREO++ICATLEVwCIQDb+8xx 49Ii8qXHTIBK2XMVbh2l6CFY7GPlTjDqBGpBmTANBgkqhkiG9w0BAQsFAAOCAQEA Xyq76iu0N53IN6NramLkJOMCGqVeKRF4q7+98lfevfgfMIfzJtgA1D6xEpDjZUuC 1CS15RraCqR9KzEEGQOMf3YgtB/pZLEaaH0DSp6f6XaERGr80P8FqjwUg7Km3Kng IJ+Qk+zBPzqZrADsplaTwWiy8zgMFSmtv32jdGzRyam/lMfHJotqWtkK9ddQaVBx v2Wjp6psI9kjhVE9Php4uw616GNk9i3xxPPncvxvssk6F1ro+H5PmpBvXlLUSgLa JkXYUtsmcBk/XbY7FqOJ4ep0Ia0An8KM3StJQ1Zqp89sy6D1MF9YksyMxCuH+N7i uXu8ehASgxKJ4rQi6C+J2g== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyj7T8/BV9lzirgM+6XCr sUioabdXx2jObFW2SjYe6Pk5+bqRjkXn64zonTPfgYV3SqDMmYFwgzh5sdXV/yYp YaNIYFBNoIbiJglRBXf8wf4GVAWbqfo6neTl5811vpsN0Ar7n3+Scc7y1GYzeLk2 MVP/epAcH7ibc0diqAh95pHqw5N1HtU1s3yKGbCLwWpqMbrVNuX7SaXFKwb7PLd9 eoDcJkRYqxsIh0PDIaB+x6u9Xa8DArFWG6dv/PL9kNtnz/VFGz8C72gX40HgWeTf LVebUsLM82ug/gm1C3KnCJNiLa6tvnDaQ/ZPs5tps1GESenSf61JGyskSqSAKGDj 1wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 125367124416685015541939161433093942359 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-22 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-22 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein-Westfalen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Essen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'FUNKE Corporate IT GmbH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Netzwerk und Sicherheit' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.zgt.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25531119215532154337809749962481644176499226771601335292660483997373668692244665711192469721623143021358195166371878047355371244753133293854258380655922820434545418385332260161005991281083975547099714724874115813445916842149410669589092135322511163165861167462228852318704794629388988059411021725896574821243085120613330845491585191756177881844681817694027513528490157712632668055838899527825891013094092042352685625414847603459965758532915362222179755604259951347439362919886311293212366297636887763510233150944926506678097153041743944608318062280865382259912118035225399924764525955835567373358418666928729399288791 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zgt.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zgt.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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