*.waz.de

- FUNKE Corporate IT GmbH -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 05:83:ef:c9:7a:ed:1f:f3:9e:11:8c:fd:ff:87:33:01 was issued on by thawte, Inc..

With 29 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

FUNKE Corporate IT GmbH

Organization: FUNKE Corporate IT GmbH
Organization unit: Netzwerk und Sicherheit
State / Province: Nordrhein-Westfalen
Locality: Essen
Country: DE

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:83:ef:c9:7a:ed:1f:f3:9e:11:8c:fd:ff:87:33:01
Serial Number (int): 7331194326192417404982294340310610689
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 5c:bb:d5:be:f7:0c:19:37:20:24:b3:8a:94:67:37:c3:bf:93:43:87
Fingerprint (sha256): 52:4d:45:29:ed:8a:88:3a:8a:56:23:d4:da:50:66:b5:6f:f1:ca:14:77:50:42:c8:37:be:61:09:d9:3d:1e:e2

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate *.waz.de

29

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.waz.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.braunschweiger-zeitung.de
*.wr.de
*.wp.de
*.wolfsburger-nachrichten.de
*.wolfenbuetteler-zeitung.de
*.westfalenpost.de
*.westfaelische-rundschau.de
*.thueringen24.de
*.salzgitter-zeitung.de
*.peiner-nachrichten.de
*.nrz.de
*.news38.de
*.morgenpost.de
*.ikz-online.de
*.helmstedter-nachrichten.de
*.harzkurier.de
*.goldene-kamera.de
*.gifhorner-rundschau.de
*.funkemediennrw.de
*.funkemedien.de
*.funkedigital.de
*.derwesten.de
*.braunschweigerzeitung.de
*.bildderfrau.de
*.bergedorfer-zeitung.de
*.abendblatt.de
*.zentral-redaktion.de
*.waz.de
waz.de

Other certificates including the domain name waz.de

(limited to 100 certificates)
www.derwesten.de
www.weltsport.net
70jahre.waz.de
origin-interaktiv.fnki.de
70jahre.waz.de
jobs.waz.de
emag.waz.de
*.funkemedien.de
dev3.aws.funkedigital.de
www.weltsport.net
funkedigital.de
www.waz.de
*.waz.de
dev2.aws.funkedigital.de
www.weltsport.net
*.fabo-live.funkemedien.de
www.derwesten.de
jobs.waz.de
*.waz.de
tv.morgenpost.de
www.weltfussball.de
www.weltsport.net
www.weltsport.net
70jahre.waz.de
waz.de
cps.waz.de
jobs.waz.de
www.weltsport.net
www.weltsport.net
www.weltsport.net
leserladen.waz.de
www.derwesten.de
www.derwesten.de
www.weltsport.net
kundenservice.waz.de
www.weltsport.net
www.weltsport.net
www.weltsport.net
www.weltsport.net
www.derwesten.de
www.weltsport.net
www.derwesten.de
angebote.derwesten.de
www.weltsport.net
jobs.waz.de
dev1.aws.funkedigital.de
bochum70.waz.de
stories.waz.de
bochum70.waz.de
agnes.waz.de
data-fdf4690b14.waz.de
www.derwesten.de
www.derwesten.de
origin-interaktiv.fnki.de
www.weltsport.net
*.funkemedien.de
70jahre.waz.de
www.weltfussball.de
www.derwesten.de
www.weltsport.net
www.weltfussball.de
www.waz.de
cp.waz.de
www.derwesten.de
*.waz.de
www.weltsport.net
www.derwesten.de
www.weltsport.net
*.waz.de
anzeigenbuchung-in-thueringen.de
www.weltsport.net
*.fabo-live.funkemedien.de
www.derwesten.de
70jahre.waz.de
*.funkemedien.de
*.waz.de
70jahre.waz.de
70jahre.waz.de
*.waz.de
dev2.aws.funkedigital.de
origin-interaktiv.fnki.de
uat.aws.bildderfrau.de
www.weltsport.net
*.funkemedien.de
funkedigital.de
reader.waz.de
uat.aws.bildderfrau.de
www.waz.de
dev5.aws.funkedigital.de
www.weltfussball.de
dev2.aws.funkedigital.de
www.weltsport.net
*.waz.de
www.weltfussball.de
www.derwesten.de
uat.aws.bildderfrau.de
www.weltfussball.de
funkedigital.de
70jahre.waz.de
*.waz.de

Certificate

The complete raw certificate details for *.waz.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyERl18BARBXsqFGEcG2t
RN4I1WN0r/DhA41EmbdCz3eifJqLfxeGjLXVLbvh+raj2zUSvUf8qPEXKBNRhsCI
NtW5d1Q0a4tjxTZb9TMDq5dPrG38mfzVWBLcHQHeMaaIqiJr+oFDPBZ+4cWICTli
RrxH0+HrILPTNXrzPAXpeGT5fcUCHzjoRrwwkwfUWp/m9aphqIxI/nXCcVeeCVu2
3vh7ldLIzMNBWQdWbQ8jQ82P+gwVPfwVctD9Uwvc9jmDBH6kujHzhXX5KPlF6w9I
qOTFb+dv+3wCht/6AoCeyJBwepu2n4R2WQTsAnCOWl3DFETxFX82fAPoOSUzH3Hi
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7331194326192417404982294340310610689
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Essen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'FUNKE Corporate IT GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Netzwerk und Sicherheit'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.waz.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25281389216973084666936393021098646402307239858419690716503032384010124470976954041409720522380691814747129287588178822512594359669047739916789435500531954130310071500485055697973323594920577728816114686110025571271362808115946806041109543225002736939228855653992175837717698653661140268893786301429845994239060240566977854983886368380124600819217842491142706494828256475003453171967660435552918951097112716267213975551769563093028454502684121289227667384348790659072273435101761804865503103002689854240716354045196116392451232067106368247620177783812593146446904196214839162538030806247362510581073134772635976196779
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (586 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.braunschweiger-zeitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wp.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wolfsburger-nachrichten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wolfenbuetteler-zeitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.westfalenpost.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.westfaelische-rundschau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thueringen24.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.salzgitter-zeitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peiner-nachrichten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nrz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.news38.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.morgenpost.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ikz-online.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.helmstedter-nachrichten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.harzkurier.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.goldene-kamera.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gifhorner-rundschau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funkemediennrw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funkemedien.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.funkedigital.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.derwesten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.braunschweigerzeitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bildderfrau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bergedorfer-zeitung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abendblatt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zentral-redaktion.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.waz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waz.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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