www.simplicitycrm.com
Issued by Thawte DV SSL CA
About this certificate
This digital certificate with serial number 67:9d:58:ed:28:96:b4:90:09:13:a7:46:8d:46:1b:81 was issued on by Thawte, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Certificate Subject
CN=www.simplicitycrm.com,OU=Go to https://www.thawte.com/repository/index.html+OU=Thawte SSL123 certificate+OU=Domain Validated
Thawte, Inc.
Organization:
Thawte, Inc.
Organization unit: Domain Validated SSL
Organization unit: Domain Validated SSL
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 67:9d:58:ed:28:96:b4:90:09:13:a7:46:8d:46:1b:81Serial Number (int): 137727477814317532023164842728462097281
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: ab:44:e4:5d:ec:83:c7:d9:c0:85:9f:f7:e1:c6:97:90:b0:8c:3f:98
Fingerprint (sha1): 05:8d:2a:37:89:67:70:b6:13:27:8c:ba:9d:c4:69:2c:31:e2:78:69
Fingerprint (sha256): 55:e5:af:b4:d6:bc:41:a7:8f:07:84:ec:b1:d0:cb:cd:8b:fd:28:29:9d:c9:1c:69:2d:fb:5a:6c:93:13:17:f7
Issuing Certificate URL: http://svr-dv-aia.thawte.com/ThawteDV.cer
Revocation information
OCSP Server: http://ocsp.thawte.comCRL Distribution Point: http://svr-dv-crl.thawte.com/ThawteDV.crl
Check the revocation status for certificate www.simplicitycrm.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.simplicitycrm.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.simplicitycrm.com
Other certificates including the domain name simplicitycrm.com
(limited to 100 certificates)
mta.simplicitycrm.com
rightaddress-us1.simplicitycrm.com
test.friendgetfriend.simplicitycrm.com
test.subway.nz.simplicitycrm.com
sentinel.simplicitycrm.com
test.nestle.au.simplicitycrm.com
test.nestle.nz.simplicitycrm.com
test.nestle.nz.simplicitycrm.com
www.subway.nz.simplicitycrm.com
www.nestle.au.simplicitycrm.com
www.nestle.au.simplicitycrm.com
outlook.simplicitycrm.com
sareports12.simplicitycrm.com
test.subway.nz.simplicitycrm.com
www.nestle.au.simplicitycrm.com
services.simplicitycrm.com
*.simplicitycrm.com
www.subway.nz.simplicitycrm.com
legacy.simplicitycrm.com
www.nestle.professional.simplicitycrm.com
test.friendgetfriend.simplicitycrm.com
test.placemakersloyalty.simplicitycrm.com
rightaddress-us1.simplicitycrm.com
dev.cis.simplicitycrm.com
autodiscover.simplicitycrm.com
www.nectar.au.simplicitycrm.com
www.holden.au.simplicitycrm.com
test.subway.nz.simplicitycrm.com
staging.rightaddress.simplicitycrm.com
ipfx.simplicitycrm.com
outlook.simplicitycrm.com
autodiscover.simplicitycrm.com
www.subway.nz.simplicitycrm.com
www.nestle.au.simplicitycrm.com
www.subway.nz.simplicitycrm.com
test.nestle.nz.simplicitycrm.com
test.nestle.au.simplicitycrm.com
test.nestle.casemanagement.simplicitycrm.com
www.holden.au.simplicitycrm.com
test.nestle.nz.simplicitycrm.com
test.services.simplicitycrm.com
www.nectar.au.simplicitycrm.com
www.simplicitycrm.com
www.nestle.professional.simplicitycrm.com
sentinel.simplicitycrm.com
www.mcm.simplicitycrm.com
rightaddress.simplicitycrm.com
www.nestle.ninhcp.simplicitycrm.com
beacon.simplicitycrm.com
test.placemakersloyalty.simplicitycrm.com
test.placemakersloyalty.simplicitycrm.com
sentinel.simplicitycrm.com
*.simplicitycrm.com
rightaddress.simplicitycrm.com
dev.cis.simplicitycrm.com
test.subway.nz.simplicitycrm.com
sentinel.simplicitycrm.com
www.simplicitycrm.com
test.subway.nz.simplicitycrm.com
test.subway.nz.simplicitycrm.com
www.nestle.nz.simplicitycrm.com
rightaddress.simplicitycrm.com
www.jrdutyfree.simplicitycrm.com
outlook.simplicitycrm.com
test.friendgetfriend.simplicitycrm.com
www.nectar.au.simplicitycrm.com
test.nestle.au.simplicitycrm.com
test.jrdutyfree.simplicitycrm.com
www.subway.nz.simplicitycrm.com
test.placemakersloyalty.simplicitycrm.com
dev.cis.simplicitycrm.com
www.holden.au.simplicitycrm.com
www.nestle.au.simplicitycrm.com
www.nestle.nz.simplicitycrm.com
insights.simplicitycrm.com
www.holden.au.simplicitycrm.com
test.friendgetfriend.simplicitycrm.com
beacon.simplicitycrm.com
www.subway.nz.simplicitycrm.com
test.nestle.au.simplicitycrm.com
autodiscover.simplicitycrm.com
test.nestle.nz.simplicitycrm.com
www.nectar.au.simplicitycrm.com
www.nectar.au.simplicitycrm.com
www.nestle.professional.simplicitycrm.com
*.simplicitycrm.com
test.subway.nz.simplicitycrm.com
*.simplicitycrm.com
test.rightaddress.simplicitycrm.com
rightaddress.simplicitycrm.com
ipfx.simplicitycrm.com
demo.simplicitycrm.com
www.holden.au.simplicitycrm.com
rightaddress.simplicitycrm.com
test.placemakersloyalty.simplicitycrm.com
www.nestle.au.simplicitycrm.com
beacon.simplicitycrm.com
www.nectar.au.simplicitycrm.com
test.nestle.au.simplicitycrm.com
reports.simplicitycrm.com
rightaddress-us1.simplicitycrm.com
test.friendgetfriend.simplicitycrm.com
test.subway.nz.simplicitycrm.com
sentinel.simplicitycrm.com
test.nestle.au.simplicitycrm.com
test.nestle.nz.simplicitycrm.com
test.nestle.nz.simplicitycrm.com
www.subway.nz.simplicitycrm.com
www.nestle.au.simplicitycrm.com
www.nestle.au.simplicitycrm.com
outlook.simplicitycrm.com
sareports12.simplicitycrm.com
test.subway.nz.simplicitycrm.com
www.nestle.au.simplicitycrm.com
services.simplicitycrm.com
*.simplicitycrm.com
www.subway.nz.simplicitycrm.com
legacy.simplicitycrm.com
www.nestle.professional.simplicitycrm.com
test.friendgetfriend.simplicitycrm.com
test.placemakersloyalty.simplicitycrm.com
rightaddress-us1.simplicitycrm.com
dev.cis.simplicitycrm.com
autodiscover.simplicitycrm.com
www.nectar.au.simplicitycrm.com
www.holden.au.simplicitycrm.com
test.subway.nz.simplicitycrm.com
staging.rightaddress.simplicitycrm.com
ipfx.simplicitycrm.com
outlook.simplicitycrm.com
autodiscover.simplicitycrm.com
www.subway.nz.simplicitycrm.com
www.nestle.au.simplicitycrm.com
www.subway.nz.simplicitycrm.com
test.nestle.nz.simplicitycrm.com
test.nestle.au.simplicitycrm.com
test.nestle.casemanagement.simplicitycrm.com
www.holden.au.simplicitycrm.com
test.nestle.nz.simplicitycrm.com
test.services.simplicitycrm.com
www.nectar.au.simplicitycrm.com
www.simplicitycrm.com
www.nestle.professional.simplicitycrm.com
sentinel.simplicitycrm.com
www.mcm.simplicitycrm.com
rightaddress.simplicitycrm.com
www.nestle.ninhcp.simplicitycrm.com
beacon.simplicitycrm.com
test.placemakersloyalty.simplicitycrm.com
test.placemakersloyalty.simplicitycrm.com
sentinel.simplicitycrm.com
*.simplicitycrm.com
rightaddress.simplicitycrm.com
dev.cis.simplicitycrm.com
test.subway.nz.simplicitycrm.com
sentinel.simplicitycrm.com
www.simplicitycrm.com
test.subway.nz.simplicitycrm.com
test.subway.nz.simplicitycrm.com
www.nestle.nz.simplicitycrm.com
rightaddress.simplicitycrm.com
www.jrdutyfree.simplicitycrm.com
outlook.simplicitycrm.com
test.friendgetfriend.simplicitycrm.com
www.nectar.au.simplicitycrm.com
test.nestle.au.simplicitycrm.com
test.jrdutyfree.simplicitycrm.com
www.subway.nz.simplicitycrm.com
test.placemakersloyalty.simplicitycrm.com
dev.cis.simplicitycrm.com
www.holden.au.simplicitycrm.com
www.nestle.au.simplicitycrm.com
www.nestle.nz.simplicitycrm.com
insights.simplicitycrm.com
www.holden.au.simplicitycrm.com
test.friendgetfriend.simplicitycrm.com
beacon.simplicitycrm.com
www.subway.nz.simplicitycrm.com
test.nestle.au.simplicitycrm.com
autodiscover.simplicitycrm.com
test.nestle.nz.simplicitycrm.com
www.nectar.au.simplicitycrm.com
www.nectar.au.simplicitycrm.com
www.nestle.professional.simplicitycrm.com
*.simplicitycrm.com
test.subway.nz.simplicitycrm.com
*.simplicitycrm.com
test.rightaddress.simplicitycrm.com
rightaddress.simplicitycrm.com
ipfx.simplicitycrm.com
demo.simplicitycrm.com
www.holden.au.simplicitycrm.com
rightaddress.simplicitycrm.com
test.placemakersloyalty.simplicitycrm.com
www.nestle.au.simplicitycrm.com
beacon.simplicitycrm.com
www.nectar.au.simplicitycrm.com
test.nestle.au.simplicitycrm.com
reports.simplicitycrm.com
Certificate
The complete raw certificate details for www.simplicitycrm.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE8jCCA9qgAwIBAgIQZ51Y7SiWtJAJE6dGjUYbgTANBgkqhkiG9w0BAQUFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMVGhhd3RlLCBJbmMuMR0wGwYDVQQLExRE b21haW4gVmFsaWRhdGVkIFNTTDEZMBcGA1UEAxMQVGhhd3RlIERWIFNTTCBDQTAe Fw0xMzExMTMwMDAwMDBaFw0xNDEyMTMyMzU5NTlaMIGcMTswOQYDVQQLEzJHbyB0 byBodHRwczovL3d3dy50aGF3dGUuY29tL3JlcG9zaXRvcnkvaW5kZXguaHRtbDEi MCAGA1UECxMZVGhhd3RlIFNTTDEyMyBjZXJ0aWZpY2F0ZTEZMBcGA1UECxMQRG9t YWluIFZhbGlkYXRlZDEeMBwGA1UEAxQVd3d3LnNpbXBsaWNpdHljcm0uY29tMIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjAYEcehPAFToSYZPFBNle+4 jQNb2Ig5VGdThtK3pCNy0eTk0+zKa0N0ox3NZ8rdWlfpVuJtb5Fj6x2HJS7eGBSF mlNMRjZuXK52xVK6mq0WzNFb8K3Zitc/TJvP1mLOKqqXlrVOPyPAxixwOx2SFvvX dLrpdgo2PkJdKhmVOHg731mN1vK/OFbx+Og4TmFdQZ7lpJlZ8uJcbO0HkoWkTROz CdrKixip6X1stcn61iuBHw1OFO/Rzvg/yK2LIgtjR0sGEtUpqtG6ZyDz/ZAfUhdz +gtewS7e5IaLlt5V8i4Ax2mugaHxaaFs6OY0KUO5wF5v2rNM/esIWMChLX7cxQID AQABo4IBazCCAWcwIAYDVR0RBBkwF4IVd3d3LnNpbXBsaWNpdHljcm0uY29tMAkG A1UdEwQCMAAwOgYDVR0fBDMwMTAvoC2gK4YpaHR0cDovL3N2ci1kdi1jcmwudGhh d3RlLmNvbS9UaGF3dGVEVi5jcmwwQQYDVR0gBDowODA2BgpghkgBhvhFAQc2MCgw JgYIKwYBBQUHAgEWGmh0dHBzOi8vd3d3LnRoYXd0ZS5jb20vY3BzMB8GA1UdIwQY MBaAFKtE5F3sg8fZwIWf9+HGl5CwjD+YMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwaQYIKwYBBQUHAQEEXTBbMCIGCCsGAQUF BzABhhZodHRwOi8vb2NzcC50aGF3dGUuY29tMDUGCCsGAQUFBzAChilodHRwOi8v c3ZyLWR2LWFpYS50aGF3dGUuY29tL1RoYXd0ZURWLmNlcjANBgkqhkiG9w0BAQUF AAOCAQEAJ2Rf5fczAS8JTtmnnUUKfqeUF47rhDCxTpEhdxC6QpkziFfrB0dJDJOo ehK9Th7X/OHeEGfVax29LY2NNh2sWWppFBXoXSibcVKRczAvubLPwQt0b9j/OMkM UqbFnecPPweSeI7So+1KhTGFr5qSq1b3QCUE1K0WKUA0Ln+0zsAdZmxII5PAOkyX bbOFOHJoKFiwVOPNnOCnJLr4UX+CRTsqlFpS1Xd+5Gg/A1xWpbh0P/DbAzifrgFD 44VgG7hgpltIyp9PcThciqRScr8A0LY8GM3EOfXE1KLJR5JK74RZXyAlitnDFECW di8MDw/fqTDnX1/5f3GarTXZamhrWw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjAYEcehPAFToSYZPFBN le+4jQNb2Ig5VGdThtK3pCNy0eTk0+zKa0N0ox3NZ8rdWlfpVuJtb5Fj6x2HJS7e GBSFmlNMRjZuXK52xVK6mq0WzNFb8K3Zitc/TJvP1mLOKqqXlrVOPyPAxixwOx2S FvvXdLrpdgo2PkJdKhmVOHg731mN1vK/OFbx+Og4TmFdQZ7lpJlZ8uJcbO0HkoWk TROzCdrKixip6X1stcn61iuBHw1OFO/Rzvg/yK2LIgtjR0sGEtUpqtG6ZyDz/ZAf Uhdz+gtewS7e5IaLlt5V8i4Ax2mugaHxaaFs6OY0KUO5wF5v2rNM/esIWMChLX7c xQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 137727477814317532023164842728462097281 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte DV SSL CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-11-13 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-12-13 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go to https://www.thawte.com/repository/index.html' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL123 certificate' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'www.simplicitycrm.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26028806868819389557378563171082751182500011135237447239203431665736652006732250940855974629472169781522573051180518619477558531353355101668253390671315977630064485620411787386716591380294228370665153534430798403684120091338471286253381939314459305981006109899117876856726113730710765736206440241161720425125842367755073318164424027853000301315740394293603042877843901112971033130133202499764665357406922065253867987563627676708843511859270496847287295564983540859790400545717369638935027294096064962616912336260465523335965504072811030731136431637163972326865223877160668163772350202301303034735010072377187859619013 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simplicitycrm.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-dv-crl.thawte.com/ThawteDV.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ab44e45dec83c7d9c0859ff7e1c69790b08c3f98 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-dv-aia.thawte.com/ThawteDV.cer' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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