tpm-feedback.bilfinger.com
- Bilfinger SE -
Issued by thawte SSL CA - G2
About this certificate
This digital certificate with serial number 4d:7a:3e:07:e7:8b:89:9e:c8:b7:82:a4:de:1d:6e:7f was issued on by thawte, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Bilfinger SE
Organization:
Bilfinger SE
State / Province:
Baden-Wuerttemberg
Locality: Mannheim
Country: DE
Locality: Mannheim
Country: DE
thawte, Inc.
Organization:
thawte, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 4d:7a:3e:07:e7:8b:89:9e:c8:b7:82:a4:de:1d:6e:7fSerial Number (int): 102985274027832063038604545569287138943
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60
Fingerprint (sha1): 86:ed:6a:38:23:de:a0:aa:f5:c9:3c:b4:b6:3e:3f:56:2d:34:b4:82
Fingerprint (sha256): 58:8a:52:f9:61:63:03:bd:2c:2a:4f:a7:9c:8b:51:74:b8:96:cd:62:16:d7:75:f9:8a:6d:79:3a:6b:de:5a:b9
Issuing Certificate URL: http://tj.symcb.com/tj.crt
Revocation information
OCSP Server: http://tj.symcd.comCRL Distribution Point: http://tj.symcb.com/tj.crl
Check the revocation status for certificate tpm-feedback.bilfinger.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for tpm-feedback.bilfinger.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
tpm-feedback.bilfinger.com
Other certificates including the domain name bilfinger.com
(limited to 100 certificates)
www.cusa-is.bilfinger.com
www.procurement.bilfinger.com
r2c.bis.bilfinger.com
pm.bng.bilfinger.com
auth.bilfinger.net
slmobiletest.bilfinger.com
login.karriere.bilfinger.com
medialibrary.bilfinger.net
sv02111.res1.rlaone.net
world.tebodin.bilfinger.com
world.tebodin.bilfinger.com
ps.bis.bilfinger.com
ts.bng.bilfinger.com
portal.bng.bilfinger.com
fwms.facilitymanagement.bilfinger.com
oos.bilfinger.net
bnextwss.bng.bilfinger.com
lync.bilfinger.net
download.bng.bilfinger.com
pm.bng.bilfinger.com
reports.facilitymanagement.bilfinger.com
now.bilfinger.com
www.geraete.bilfinger.com
download.bng.bilfinger.com
*.bilfinger.com
portal.bng.bilfinger.com
westcon.bilfinger.com
www.geraete.bilfinger.com
autodiscover.bilfinger.net
ts.bng.bilfinger.com
www.qualprocurement.bilfinger.com
*.bilfinger.com
world.tebodin.bilfinger.com
bnextwss.bng.bilfinger.com
medialibrary.bilfinger.net
portal.bng.bilfinger.com
login.karriere.bilfinger.com
vpn.realestate.bilfinger.com
slmobileservice.bilfinger.com
nachunternehmerportal.arnholdt.bilfinger.com
download.bng.bilfinger.com
dms.nig.bilfinger.com
spamdigest.bilfinger.com
nachunternehmerportal.arnholdt.bilfinger.com
bnextwss.bng.bilfinger.com
login.karriere.bilfinger.com
profimiet-shop.bilfinger.com
tpm-feedback-qs.bilfinger.com
bis-vpnmuc.bilfinger.com
login.karriere.bilfinger.com
www.procurement.bilfinger.com
login.career.bilfinger.com
*.mmo.bilfinger.com
bnextwss.bng.bilfinger.com
www.download.power.bilfinger.com
portal.bng.bilfinger.com
tpm-feedback.bilfinger.com
csrreport.bilfinger.com
www.testprocurement.bilfinger.com
www.testprocurement.bilfinger.com
slmobileservice.bilfinger.com
login.career.bilfinger.com
www.identify-fs.bilfinger.com
fwms.facilitymanagement.bilfinger.com
www.qualprocurement.bilfinger.com
*.industrier.bilfinger.com
portal.bng.bilfinger.com
download.bng.bilfinger.com
www.piwik.bilfinger.com
bnextwss.bng.bilfinger.com
www.rbpoint-fs.bilfinger.com
pm.bng.bilfinger.com
www.sp-it.bilfinger.com
portal.bng.bilfinger.com
vpn-na.bilfinger.com
webmail.bilfinger.net
lync.bilfinger.net
portal.piping.bilfinger.com
www.testprocurement.bilfinger.com
transmission.bilfinger.com
norge.vcs.bilfinger.com
ts.bng.bilfinger.com
mail.ddm.bilfinger.com
vpn-na.bilfinger.com
login.karriere.bilfinger.com
*.mmo.bilfinger.com
www.procurement.bilfinger.com
world.tebodin.bilfinger.com
coz.infocenter.ch-fm.bilfinger.com
www.intranet-de-ch-fm.bilfinger.com
mis.bis.bilfinger.com
bbpsportal.bilfinger.com
www.btalent.civil.bilfinger.com
vo.bbs.bilfinger.com
jobs.bilfinger.com
www.procurement.bilfinger.com
bbpsportal.bilfinger.com
world.tebodin.bilfinger.com
fs-cloud.bilfinger.com
www.download.power.bilfinger.com
www.procurement.bilfinger.com
r2c.bis.bilfinger.com
pm.bng.bilfinger.com
auth.bilfinger.net
slmobiletest.bilfinger.com
login.karriere.bilfinger.com
medialibrary.bilfinger.net
sv02111.res1.rlaone.net
world.tebodin.bilfinger.com
world.tebodin.bilfinger.com
ps.bis.bilfinger.com
ts.bng.bilfinger.com
portal.bng.bilfinger.com
fwms.facilitymanagement.bilfinger.com
oos.bilfinger.net
bnextwss.bng.bilfinger.com
lync.bilfinger.net
download.bng.bilfinger.com
pm.bng.bilfinger.com
reports.facilitymanagement.bilfinger.com
now.bilfinger.com
www.geraete.bilfinger.com
download.bng.bilfinger.com
*.bilfinger.com
portal.bng.bilfinger.com
westcon.bilfinger.com
www.geraete.bilfinger.com
autodiscover.bilfinger.net
ts.bng.bilfinger.com
www.qualprocurement.bilfinger.com
*.bilfinger.com
world.tebodin.bilfinger.com
bnextwss.bng.bilfinger.com
medialibrary.bilfinger.net
portal.bng.bilfinger.com
login.karriere.bilfinger.com
vpn.realestate.bilfinger.com
slmobileservice.bilfinger.com
nachunternehmerportal.arnholdt.bilfinger.com
download.bng.bilfinger.com
dms.nig.bilfinger.com
spamdigest.bilfinger.com
nachunternehmerportal.arnholdt.bilfinger.com
bnextwss.bng.bilfinger.com
login.karriere.bilfinger.com
profimiet-shop.bilfinger.com
tpm-feedback-qs.bilfinger.com
bis-vpnmuc.bilfinger.com
login.karriere.bilfinger.com
www.procurement.bilfinger.com
login.career.bilfinger.com
*.mmo.bilfinger.com
bnextwss.bng.bilfinger.com
www.download.power.bilfinger.com
portal.bng.bilfinger.com
tpm-feedback.bilfinger.com
csrreport.bilfinger.com
www.testprocurement.bilfinger.com
www.testprocurement.bilfinger.com
slmobileservice.bilfinger.com
login.career.bilfinger.com
www.identify-fs.bilfinger.com
fwms.facilitymanagement.bilfinger.com
www.qualprocurement.bilfinger.com
*.industrier.bilfinger.com
portal.bng.bilfinger.com
download.bng.bilfinger.com
www.piwik.bilfinger.com
bnextwss.bng.bilfinger.com
www.rbpoint-fs.bilfinger.com
pm.bng.bilfinger.com
www.sp-it.bilfinger.com
portal.bng.bilfinger.com
vpn-na.bilfinger.com
webmail.bilfinger.net
lync.bilfinger.net
portal.piping.bilfinger.com
www.testprocurement.bilfinger.com
transmission.bilfinger.com
norge.vcs.bilfinger.com
ts.bng.bilfinger.com
mail.ddm.bilfinger.com
vpn-na.bilfinger.com
login.karriere.bilfinger.com
*.mmo.bilfinger.com
www.procurement.bilfinger.com
world.tebodin.bilfinger.com
coz.infocenter.ch-fm.bilfinger.com
www.intranet-de-ch-fm.bilfinger.com
mis.bis.bilfinger.com
bbpsportal.bilfinger.com
www.btalent.civil.bilfinger.com
vo.bbs.bilfinger.com
jobs.bilfinger.com
www.procurement.bilfinger.com
bbpsportal.bilfinger.com
world.tebodin.bilfinger.com
fs-cloud.bilfinger.com
www.download.power.bilfinger.com
Certificate
The complete raw certificate details for tpm-feedback.bilfinger.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgIQTXo+B+eLiZ7It4Kk3h1ufzANBgkqhkiG9w0BAQsFADBB MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMRswGQYDVQQDExJ0 aGF3dGUgU1NMIENBIC0gRzIwHhcNMTcwMjA4MDAwMDAwWhcNMjAwMjA4MjM1OTU5 WjB5MQswCQYDVQQGEwJERTEbMBkGA1UECAwSQmFkZW4tV3VlcnR0ZW1iZXJnMREw DwYDVQQHDAhNYW5uaGVpbTEVMBMGA1UECgwMQmlsZmluZ2VyIFNFMSMwIQYDVQQD DBp0cG0tZmVlZGJhY2suYmlsZmluZ2VyLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAMc/QoFQrVdZs6ah8BoB9Rl5yV8f3tAvEAu87Ur5lOs/DG+C LJyWVOvhhIxlgKTlS6p9q46kJqkGegSy9C6bUwiyPZ7w0ub5hzVFIBHhILtZrqDT cMUCgFBcMlIPHIno24eXX5Nw68ANcEYHfOW6/xwTl0UcBvdJJ3jvFuwNZntIuMEB Kskg6tXrVuRKfRv4KjS66D7yn8sCXsKzHU6uuT1kDQyi/NIBA0jSc4+XLVXeTIh3 C+6Q5cjiKGv9H+tos+XPJrTun6khJ2m0RmD6FQzf/SzQxu78bsKTmcqsM/xe+DQZ dwCHlxZw2vKbcIjxQEvC9YHuw0ea2ubXd1vjPoUCAwEAAaOCAZEwggGNMCUGA1Ud EQQeMByCGnRwbS1mZWVkYmFjay5iaWxmaW5nZXIuY29tMAkGA1UdEwQCMAAwbgYD VR0gBGcwZTBjBgZngQwBAgIwWTAmBggrBgEFBQcCARYaaHR0cHM6Ly93d3cudGhh d3RlLmNvbS9jcHMwLwYIKwYBBQUHAgIwIwwhaHR0cHM6Ly93d3cudGhhd3RlLmNv bS9yZXBvc2l0b3J5MA4GA1UdDwEB/wQEAwIFoDAfBgNVHSMEGDAWgBTCT0hX/NFP msBdOH0OBdvZLrVSYDArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8vdGouc3ltY2Iu Y29tL3RqLmNybDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwVwYIKwYB BQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8vdGouc3ltY2QuY29tMCYGCCsG AQUFBzAChhpodHRwOi8vdGouc3ltY2IuY29tL3RqLmNydDATBgorBgEEAdZ5AgQD AQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOzHUWbdSLm/K+LY2LTIvFJHe1s+h ozv9q7sZtKhWjVfIrFTXu+SmszxfDx+goNJ+VY9V/gENXyh5iiO4h92NUiifv2oH UHfJsAP+w5zf8lY3PRo0s87MjPp2kelIZZLhTXh7BGCpp5umTZObbB/ePZaXRUrs /Vzy3NXaNlEa3PJkxz32W48A7Ui0DqVoQ4eBDqrYOjKu9DaFtWaJVatPv8KxqmSv 1WQDTCg62JvK3IFQW3bFj3upoz5xUKtLfmNJt7djseDtLtlxfPaz4w937KYeYqKO qZF2KfkrnlCtHiNc5MgxFuBYPjrqmStkf0GGHw5xTnvYdUFXoLNw3X9f1A== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxz9CgVCtV1mzpqHwGgH1 GXnJXx/e0C8QC7ztSvmU6z8Mb4IsnJZU6+GEjGWApOVLqn2rjqQmqQZ6BLL0LptT CLI9nvDS5vmHNUUgEeEgu1muoNNwxQKAUFwyUg8ciejbh5dfk3DrwA1wRgd85br/ HBOXRRwG90kneO8W7A1me0i4wQEqySDq1etW5Ep9G/gqNLroPvKfywJewrMdTq65 PWQNDKL80gEDSNJzj5ctVd5MiHcL7pDlyOIoa/0f62iz5c8mtO6fqSEnabRGYPoV DN/9LNDG7vxuwpOZyqwz/F74NBl3AIeXFnDa8ptwiPFAS8L1ge7DR5ra5td3W+M+ hQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 102985274027832063038604545569287138943 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-08 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-08 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Wuerttemberg' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Mannheim' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bilfinger SE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'tpm-feedback.bilfinger.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25152617251207930773851744910181980912189068313747036372983677287320925915180489483275346111884052887141583960493976599729514182412818800851426082171874936167970729781885031400419852634366734727772974946206108381889107719671384886997544547916169405544183062366872093967250747376087801259139061649463308752860630038626576510173197650533842860171328418813428034482457521769889120120792424835486863439168968880010467420515144013061625404057999657612515452762884361966066993064896294187596851308603792398341384944994897749939689934038522778411139312572425114808170162557550043868977439343248893997496449289920128533872261 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tpm-feedback.bilfinger.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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