e.targetoptical.com
- Luxottica Group Spa -
Issued by Thawte RSA CA 2018
About this certificate
This digital certificate with serial number 01:99:4a:57:e1:19:db:48:18:cf:f4:0a:fe:05:02:fb was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Luxottica Group Spa
Organization:
Luxottica Group Spa
Organization unit: IT Digital
Organization unit: IT Digital
State / Province:
Milano
Locality: Milano
Country: IT
Locality: Milano
Country: IT
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 01:99:4a:57:e1:19:db:48:18:cf:f4:0a:fe:05:02:fbSerial Number (int): 2125157275966939348183959590540739323
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: 68:1f:20:1a:9b:ae:dd:b3:b6:37:57:d0:d6:fe:8f:39:96:1a:ee:d1
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a
Fingerprint (sha1): b1:b7:c2:3e:75:1e:63:a3:3d:d2:bf:dd:5d:38:d5:41:ca:dc:0f:2a
Fingerprint (sha256): 5a:c3:a2:95:7f:81:8e:80:2d:e6:c2:7a:2f:15:c8:e9:7e:9b:27:7b:de:18:ef:4b:83:cf:32:bb:30:00:21:94
Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt
Revocation information
OCSP Server: http://status.thawte.comCRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl
Check the revocation status for certificate e.targetoptical.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for e.targetoptical.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
e.targetoptical.com
Other certificates including the domain name targetoptical.com
(limited to 100 certificates)
www.luxottica.com
uat-ecomm.luxottica.com
www.luxottica.com
www.luxottica.com
www.luxottica.com
www.luxottica.com
uat-ecomm.luxottica.com
www.luxottica.com
www.luxottica.com
customercare.targetoptical.com
www.luxottica.com
www.luxottica.com
san1.yext-cdn.com
local.targetoptical.com
local.targetoptical.com
www.luxottica.com
targetoptical.com
e.targetoptical.com
locations.corelifeeatery.com
www.luxottica.com
www.lenscrafters.com
smetrics.targetoptical.com
www.luxottica.com
local.targetoptical.com
www.luxottica.com
www.luxottica.com
img-b2c.luxottica.com
www.luxottica.com
smetrics.targetoptical.com
www.luxottica.com
uat-ecomm.luxottica.com
www.luxottica.com
img-b2c.luxottica.com
www.luxottica.com
www.luxottica.com
www.targetoptical.com
rona.luxottica.com
www.luxottica.com
events.mkdleaguecity.com
local.targetoptical.com
targetoptical.com
www.luxottica.com
www.luxottica.com
www.luxottica.com
san1.yext-cdn.com
uat2.lenscrafters.com
img-b2c.luxottica.com
www.targetoptical.com
targetoptical.com
san1.yext-cdn.com
uat-ecomm.luxottica.com
uat.targetoptical.com
v7stage.targetoptical.com
smetrics.targetoptical.com
smetrics.targetoptical.com
www.luxottica.com
local.targetoptical.com
san1.yext-cdn.com
smetrics.targetoptical.com
local.targetoptical.com
www.lenscrafters.com
www.luxottica.com
www.luxottica.com
rona.luxottica.com
locations.snbconnect.com
www.luxottica.com
www.lenscrafters.com
www.luxottica.com
uat-ecomm.luxottica.com
uat-ecomm.luxottica.com
uat-ecomm.luxottica.com
www.luxottica.com
www.luxottica.com
www.luxottica.com
www.luxottica.com
www.luxottica.com
uat-ecomm.luxottica.com
www.luxottica.com
uat-ecomm.luxottica.com
san1.yext-cdn.com
uat-ecomm.luxottica.com
www.lenscrafters.com
local.targetoptical.com
uat-ecomm.luxottica.com
uat.lenscrafters.com
www.luxottica.com
customercare.targetoptical.com
www.luxottica.com
www.luxottica.com
events.constitutiondentalgroup.com
san1.yext-cdn.com
perf.targetoptical.com
uat-ecomm.luxottica.com
www.luxottica.com
v7stage.targetoptical.com
www.luxottica.com
smetrics.targetoptical.com
www.targetoptical.com
e.targetoptical.com
www.targetoptical.com
uat-ecomm.luxottica.com
www.luxottica.com
www.luxottica.com
www.luxottica.com
www.luxottica.com
uat-ecomm.luxottica.com
www.luxottica.com
www.luxottica.com
customercare.targetoptical.com
www.luxottica.com
www.luxottica.com
san1.yext-cdn.com
local.targetoptical.com
local.targetoptical.com
www.luxottica.com
targetoptical.com
e.targetoptical.com
locations.corelifeeatery.com
www.luxottica.com
www.lenscrafters.com
smetrics.targetoptical.com
www.luxottica.com
local.targetoptical.com
www.luxottica.com
www.luxottica.com
img-b2c.luxottica.com
www.luxottica.com
smetrics.targetoptical.com
www.luxottica.com
uat-ecomm.luxottica.com
www.luxottica.com
img-b2c.luxottica.com
www.luxottica.com
www.luxottica.com
www.targetoptical.com
rona.luxottica.com
www.luxottica.com
events.mkdleaguecity.com
local.targetoptical.com
targetoptical.com
www.luxottica.com
www.luxottica.com
www.luxottica.com
san1.yext-cdn.com
uat2.lenscrafters.com
img-b2c.luxottica.com
www.targetoptical.com
targetoptical.com
san1.yext-cdn.com
uat-ecomm.luxottica.com
uat.targetoptical.com
v7stage.targetoptical.com
smetrics.targetoptical.com
smetrics.targetoptical.com
www.luxottica.com
local.targetoptical.com
san1.yext-cdn.com
smetrics.targetoptical.com
local.targetoptical.com
www.lenscrafters.com
www.luxottica.com
www.luxottica.com
rona.luxottica.com
locations.snbconnect.com
www.luxottica.com
www.lenscrafters.com
www.luxottica.com
uat-ecomm.luxottica.com
uat-ecomm.luxottica.com
uat-ecomm.luxottica.com
www.luxottica.com
www.luxottica.com
www.luxottica.com
www.luxottica.com
www.luxottica.com
uat-ecomm.luxottica.com
www.luxottica.com
uat-ecomm.luxottica.com
san1.yext-cdn.com
uat-ecomm.luxottica.com
www.lenscrafters.com
local.targetoptical.com
uat-ecomm.luxottica.com
uat.lenscrafters.com
www.luxottica.com
customercare.targetoptical.com
www.luxottica.com
www.luxottica.com
events.constitutiondentalgroup.com
san1.yext-cdn.com
perf.targetoptical.com
uat-ecomm.luxottica.com
www.luxottica.com
v7stage.targetoptical.com
www.luxottica.com
smetrics.targetoptical.com
www.targetoptical.com
e.targetoptical.com
www.targetoptical.com
Certificate
The complete raw certificate details for e.targetoptical.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgIQAZlKV+EZ20gYz/QK/gUC+zANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMRswGQYDVQQDExJUaGF3dGUgUlNBIENBIDIwMTgwHhcN MTgwODA5MDAwMDAwWhcNMTkwODA5MTIwMDAwWjCBgDELMAkGA1UEBhMCSVQxDzAN BgNVBAgTBk1pbGFubzEPMA0GA1UEBxMGTWlsYW5vMRwwGgYDVQQKExNMdXhvdHRp Y2EgR3JvdXAgU3BhMRMwEQYDVQQLEwpJVCBEaWdpdGFsMRwwGgYDVQQDExNlLnRh cmdldG9wdGljYWwuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA lJ9XedKReuXjiLK96BdRUJCG3CFLJhIBz8Ke8v0ftB4Uklc1NdKgQFkck0qxdPns L7PxrtQr2sz1wYVWL5ob7wYR3qzEcPZ6iO0B8+eDsbkFPAHvDlfWUAIFPVtVBImJ 1uXOTFTuwxKG1xcv7UIq5fe7gphcdFcer47g0vgbGgF1Zfm09hhLPX8tPLsVj7Tc Je4w5FpEtE3clqnsvYqzhuqn5BOO1HLX3CdOk4GLlYmA5pdWqlm/ZhIMSDTY3d6f l4UGEXma5GbaXPZX6CIe/mfBEJq74P8GNy5BhTqVf5y+uijhNt6diYb8E8Zf+cv2 6S23JMIje6o+RuivGHGVOwIDAQABo4IBrjCCAaowHwYDVR0jBBgwFoAUo8heZVTl MHjBBeoHCmpZzLn+3lowHQYDVR0OBBYEFGgfIBqbrt2ztjdX0Nb+jzmWGu7RMB4G A1UdEQQXMBWCE2UudGFyZ2V0b3B0aWNhbC5jb20wDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA6BgNVHR8EMzAxMC+gLaArhilo dHRwOi8vY2RwLnRoYXd0ZS5jb20vVGhhd3RlUlNBQ0EyMDE4LmNybDBMBgNVHSAE RTBDMDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdp Y2VydC5jb20vQ1BTMAgGBmeBDAECAjBvBggrBgEFBQcBAQRjMGEwJAYIKwYBBQUH MAGGGGh0dHA6Ly9zdGF0dXMudGhhd3RlLmNvbTA5BggrBgEFBQcwAoYtaHR0cDov L2NhY2VydHMudGhhd3RlLmNvbS9UaGF3dGVSU0FDQTIwMTguY3J0MAkGA1UdEwQC MAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAKlwNtGo xeNJcgEL121czwErN//CiCVkq+wnXuGzaU7YlD0H71TmhghQC37ifu/2r65vG4SL oSt/xXB9ZC8dr1HWl52OkOYE9kyGz4kxVJmPUOmecr9q+F7gR0F6vbOVIYrz+6HY BkhmiHDKb1ZpHeRqQ76jXQq50Zbb9nCnQIAiZHI0vroS63l4dZ0m3gtCcl7iF7I7 xiFKlG85100OuFlUiPQcycU842Rwo9u7cD6e7a3gy63gDKiGMNd9Q4Sq/KlzlJEA 9lowXmm033TTDeJtNNxfrMvtpO6fuY2LnB8isf/mbx7qo45yBHdxneSxgi5mZo8V YYuAh7mk9si4P2Y= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJ9XedKReuXjiLK96BdR UJCG3CFLJhIBz8Ke8v0ftB4Uklc1NdKgQFkck0qxdPnsL7PxrtQr2sz1wYVWL5ob 7wYR3qzEcPZ6iO0B8+eDsbkFPAHvDlfWUAIFPVtVBImJ1uXOTFTuwxKG1xcv7UIq 5fe7gphcdFcer47g0vgbGgF1Zfm09hhLPX8tPLsVj7TcJe4w5FpEtE3clqnsvYqz huqn5BOO1HLX3CdOk4GLlYmA5pdWqlm/ZhIMSDTY3d6fl4UGEXma5GbaXPZX6CIe /mfBEJq74P8GNy5BhTqVf5y+uijhNt6diYb8E8Zf+cv26S23JMIje6o+RuivGHGV OwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2125157275966939348183959590540739323 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-09 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-09 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Milano' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Milano' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxottica Group Spa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Digital' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'e.targetoptical.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18761843457040887333067957846848954496904889203356735033276218340915348118112800114971355123139386650289603573322660775075691528430685825774187314605257086355163093446619143366982672145926156677922915604879090086183091762315848560429728934342158355096756660918275080895592913085265128787732305044643782703566288893130356696846031482862572892878529135729265849124549350897605194317034326979286044306579147115606760203427875523012840001992070140296935613112340604212160311529017133867476152867698299752165381342965703308353530066110824583918019999723308095998410946797929149788080539220270743708643319990453840659977531 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 681f201a9baeddb3b63757d0d6fe8f39961aeed1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.targetoptical.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00a97036d1a8c5e34972010bd76d5ccf012b37ffc2882564abec275ee1b3694ed8943d07ef54e68608500b7ee27eeff6afae6f1b848ba12b7fc5707d642f1daf51d6979d8e90e604f64c86cf893154998f50e99e72bf6af85ee047417abdb395218af3fba1d80648668870ca6f56691de46a43bea35d0ab9d196dbf670a7408022647234beba12eb7978759d26de0b42725ee217b23bc6214a946f39d74d0eb8595488f41cc9c53ce36470a3dbbb703e9eedade0cbade00ca88630d77d4384aafca973949100f65a305e69b4df74d30de26d34dc5faccbeda4ee9fb98d8b9c1f22b1ffe66f1eeaa38e720477719de4b1822e66668f15618b8087b9a4f6c8b83f66