c.kelkoo.fr
- Kelkoo SAS -
Issued by Thawte RSA CA 2018
About this certificate
This digital certificate with serial number 02:15:ab:7d:e3:51:42:97:f8:e3:81:27:5e:66:39:4c was issued on by DigiCert Inc.
With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Kelkoo SAS
Organization:
Kelkoo SAS
Organization unit: Engineering
Organization unit: Engineering
Locality:
Echirolles
Country: FR
Country: FR
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 02:15:ab:7d:e3:51:42:97:f8:e3:81:27:5e:66:39:4cSerial Number (int): 2770972491512936545106108954047822156
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 49:50:43:fb:d3:60:3e:d0:04:31:21:74:3a:7f:45:f0:55:ed:77:a5
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a
Fingerprint (sha1): e9:b9:6c:02:89:03:be:79:83:ef:58:db:89:5c:5d:de:d9:9d:45:f1
Fingerprint (sha256): 51:e8:99:05:44:26:ee:82:af:a0:d8:f6:37:ab:1c:a7:48:df:cc:5b:7f:88:a1:19:95:6a:e5:8b:de:55:3a:8b
Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt
Revocation information
OCSP Server: http://status.thawte.comCRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl
Check the revocation status for certificate c.kelkoo.fr
21
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for c.kelkoo.fr
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
c.kelkoo.fr
c.kelkoo.at
c.kelkoo.be
c.kelkoo.ch
c.kelkoo.co.uk
c.kelkoo.com.br
c.kelkoo.cz
c.kelkoo.de
c.kelkoo.dk
c.kelkoo.es
c.kelkoo.fi
c.kelkoo.ie
c.kelkoo.it
c.kelkoo.nl
c.kelkoo.no
c.kelkoo.pl
c.kelkoo.pt
c.kelkoo.ru
c.kelkoo.se
c.kelkoo.us.com
c.kelkoo.mx
c.kelkoo.at
c.kelkoo.be
c.kelkoo.ch
c.kelkoo.co.uk
c.kelkoo.com.br
c.kelkoo.cz
c.kelkoo.de
c.kelkoo.dk
c.kelkoo.es
c.kelkoo.fi
c.kelkoo.ie
c.kelkoo.it
c.kelkoo.nl
c.kelkoo.no
c.kelkoo.pl
c.kelkoo.pt
c.kelkoo.ru
c.kelkoo.se
c.kelkoo.us.com
c.kelkoo.mx
Other certificates including the domain name kelkoo.fr
(limited to 100 certificates)
s.kelkoo.fr
s.kelkoo.fr
adservice.kelkoo.fr
s.kelkoo.com
s.kelkoo.fr
adservice.kelkoo.fr
*.kelkoo.fr
*.kelkoo.fr
c.kelkoo.fr
s.kelkoo.fr
cashback.kelkoo.fr
s.kelkoo.fr
*.kelkoo.fr
adservice.kelkoo.fr
adservice.kelkoo.fr
*.kelkoo.fr
nuxt.kelkoo.fr
s.kelkoo.fr
adservice.kelkoo.fr
demo.kelkoo.fr
c.kelkoo.fr
adservice.kelkoo.fr
*.kelkoo.fr
*.kelkoo.fr
c.kelkoo.fr
s.kelkoo.fr
c.kelkoo.fr
adservice.kelkoo.fr
adservice.kelkoo.fr
admin.kelkoo.fr
adservice.kelkoo.fr
hotel.kelkoo.fr
*.kelkoo.fr
s.kelkoo.fr
adservice.kelkoo.fr
s.kelkoo.com
s.kelkoo.fr
adservice.kelkoo.fr
*.kelkoo.fr
*.kelkoo.fr
c.kelkoo.fr
s.kelkoo.fr
cashback.kelkoo.fr
s.kelkoo.fr
*.kelkoo.fr
adservice.kelkoo.fr
adservice.kelkoo.fr
*.kelkoo.fr
nuxt.kelkoo.fr
s.kelkoo.fr
adservice.kelkoo.fr
demo.kelkoo.fr
c.kelkoo.fr
adservice.kelkoo.fr
*.kelkoo.fr
*.kelkoo.fr
c.kelkoo.fr
s.kelkoo.fr
c.kelkoo.fr
adservice.kelkoo.fr
adservice.kelkoo.fr
admin.kelkoo.fr
adservice.kelkoo.fr
hotel.kelkoo.fr
*.kelkoo.fr
Certificate
The complete raw certificate details for c.kelkoo.fr in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGBjCCBO6gAwIBAgIQAhWrfeNRQpf444EnXmY5TDANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMRswGQYDVQQDExJUaGF3dGUgUlNBIENBIDIwMTgwHhcN MTgwNDIwMDAwMDAwWhcNMTkwNjIxMTIwMDAwWjBjMQswCQYDVQQGEwJGUjETMBEG A1UEBxMKRWNoaXJvbGxlczETMBEGA1UEChMKS2Vsa29vIFNBUzEUMBIGA1UECxML RW5naW5lZXJpbmcxFDASBgNVBAMTC2Mua2Vsa29vLmZyMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAmc/TW2xh6EQ7u3SSBjDO65A6Q5yK2TJVZEjbmQKm 9UriUn3DXoI3A3MOPcFi96CmPbl1V5JLcdEnBhZE/YRivioLCrU2Q06ZpmkwGz7Z 0rc+z9zLC6AoJ/fEn9f4HWVlnW4h7jPmcgnvX02oBqw/l3UrAG/XMIqXohiItfrr Jw/5OIyGKJ4UD8hPQj72AUERAmBpWK7kk/Lwg3K1E6i/EO5pyE/HicpsyHC703rQ YckvyACdCxFaizZHCFYg6y8c0W8i0oojeh654zE38md0dNplAdYV7cTFoa5Jql3O ES2q0YAOZxiOTRrfGk24R5VkZrziaOrUHEnELT5+n+AjpwIDAQABo4ICuzCCArcw HwYDVR0jBBgwFoAUo8heZVTlMHjBBeoHCmpZzLn+3lowHQYDVR0OBBYEFElQQ/vT YD7QBDEhdDp/RfBV7XelMIIBKQYDVR0RBIIBIDCCARyCC2Mua2Vsa29vLmZyggtj LmtlbGtvby5hdIILYy5rZWxrb28uYmWCC2Mua2Vsa29vLmNogg5jLmtlbGtvby5j by51a4IPYy5rZWxrb28uY29tLmJyggtjLmtlbGtvby5jeoILYy5rZWxrb28uZGWC C2Mua2Vsa29vLmRrggtjLmtlbGtvby5lc4ILYy5rZWxrb28uZmmCC2Mua2Vsa29v LmllggtjLmtlbGtvby5pdIILYy5rZWxrb28ubmyCC2Mua2Vsa29vLm5vggtjLmtl bGtvby5wbIILYy5rZWxrb28ucHSCC2Mua2Vsa29vLnJ1ggtjLmtlbGtvby5zZYIP Yy5rZWxrb28udXMuY29tggtjLmtlbGtvby5teDAOBgNVHQ8BAf8EBAMCBaAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDoGA1UdHwQzMDEwL6AtoCuGKWh0 dHA6Ly9jZHAudGhhd3RlLmNvbS9UaGF3dGVSU0FDQTIwMTguY3JsMEwGA1UdIARF MEMwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2lj ZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMG8GCCsGAQUFBwEBBGMwYTAkBggrBgEFBQcw AYYYaHR0cDovL3N0YXR1cy50aGF3dGUuY29tMDkGCCsGAQUFBzAChi1odHRwOi8v Y2FjZXJ0cy50aGF3dGUuY29tL1RoYXd0ZVJTQUNBMjAxOC5jcnQwCQYDVR0TBAIw ADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEACL6aOYra Fi259MePDTBngwgY3eoZ4ZWhWLXzcCY/2rjRPRTDlfQYA36MdU5DdBLAqzsxbyDS 81S0PC+PevMxsl144gBUKVBOQvZEGwK8CwhZs1vcp9ScI6t96I3pFn6zrLIs9K9Q s3rnXe++THa+O1MeR8NlclcEe5glRcI+icQTD6zn2VAZOOppxqW25JkX9KMod/DT FRnBsNjWNxZE5jRy+CL/Jx8crO9pxYStFw3wygSCu4loC2nwRc/pHquw3zbWjjz5 amWBORbz7fcg91t6MGe9VJ/4K4JyxuWB9rDqtCdZ7FinEOuUYa5T9cSUpZ1mI1ey 9ZZW/tuRc5bMyw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmc/TW2xh6EQ7u3SSBjDO 65A6Q5yK2TJVZEjbmQKm9UriUn3DXoI3A3MOPcFi96CmPbl1V5JLcdEnBhZE/YRi vioLCrU2Q06ZpmkwGz7Z0rc+z9zLC6AoJ/fEn9f4HWVlnW4h7jPmcgnvX02oBqw/ l3UrAG/XMIqXohiItfrrJw/5OIyGKJ4UD8hPQj72AUERAmBpWK7kk/Lwg3K1E6i/ EO5pyE/HicpsyHC703rQYckvyACdCxFaizZHCFYg6y8c0W8i0oojeh654zE38md0 dNplAdYV7cTFoa5Jql3OES2q0YAOZxiOTRrfGk24R5VkZrziaOrUHEnELT5+n+Aj pwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2770972491512936545106108954047822156 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-20 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-21 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Echirolles' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kelkoo SAS' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Engineering' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'c.kelkoo.fr' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19416943289531894346010176991926877641593108102235559866480611550914165784189303596461179799813149488652727914225019842961137485131548019392578643368573131074670733258222404960234264119332058584645035003639959451363994710173820245728860011803689042571840498398309249526992995584416111693227058879796033424815515336676460808116907663960808699810973015911364862810399282665311412621930156127460055430641456541814549925430292139480917264156217291324425772535630132595484165170405961883359888493175079178598824237764906573042086141893445808047957941940704568481588661968938501375396109765118919996560953010688381568426919 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 495043fbd3603ed0043121743a7f45f055ed77a5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (288 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.kelkoo.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.kelkoo.at' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.kelkoo.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.kelkoo.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.kelkoo.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.kelkoo.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.kelkoo.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.kelkoo.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.kelkoo.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.kelkoo.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.kelkoo.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.kelkoo.ie' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.kelkoo.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.kelkoo.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.kelkoo.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.kelkoo.pl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.kelkoo.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.kelkoo.ru' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.kelkoo.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.kelkoo.us.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.kelkoo.mx' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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