api.homecredit.cz
- Home Credit a.s. -
Issued by Thawte TLS RSA CA G1
About this certificate
This digital certificate with serial number 03:28:4f:16:a0:1b:1d:aa:b5:8f:cf:2c:43:fc:e7:30 was issued on by DigiCert Inc.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Home Credit a.s.
Organization:
Home Credit a.s.
Locality:
Brno
Country: CZ
Country: CZ
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:28:4f:16:a0:1b:1d:aa:b5:8f:cf:2c:43:fc:e7:30Serial Number (int): 4196979964624787185833764890406086448
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 84:46:b0:0f:b2:ef:a7:aa:48:dd:3a:36:f7:e0:be:c3:cd:75:98:74
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7
Fingerprint (sha1): 0b:c3:be:37:3a:5b:00:2b:db:7a:a3:4a:80:bd:3a:5b:35:6b:1f:2b
Fingerprint (sha256): 5a:fa:75:bb:1a:e9:24:9b:4e:4c:fe:25:ca:5a:1b:78:a0:20:a0:b3:15:12:b3:86:20:05:b5:40:b4:9e:da:4e
Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt
Revocation information
OCSP Server: http://status.thawte.comCRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl
Check the revocation status for certificate api.homecredit.cz
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for api.homecredit.cz
Public Key Algorithm
RSA
Key Size
3072
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
api.homecredit.cz
Other certificates including the domain name homecredit.cz
(limited to 100 certificates)
smtp1-ext.homecredit.cz
m.homecredit.cz
blog.homecredit.cz
callme.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
mails.homecredit.cz
blog.homecredit.cz
callme.homecredit.cz
www.homecredit.cz
partneri.homecredit.cz
nasplatky.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
zabezpeceni.homecredit.cz
mails.homecredit.cz
blog.homecredit.cz
www.homecredit.cz
m.homecredit.cz
partneri.homecredit.cz
mdm-mail1.homecredit.cz
chat.homecredit.cz
callme2.homecredit.cz
www.drycodetechnology.com
posta.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
*.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
posta.homecredit.cz
nasplatky.homecredit.cz
posta.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
callme.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
vpn.homecredit.cz
partner.homecredit.cz
signalr.homecredit.cz
nasplatky.homecredit.cz
www.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
old.homecredit.cz
t.mailkit.com
zaplaceno.homecredit.cz
vpn.homecredit.cz
www.homecredit.cz
partneri.homecredit.cz
kariera.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
old.homecredit.cz
smtp2-ext.homecredit.cz
t.mailkit.com
callme.homecredit.cz
callme.homecredit.cz
wiki.finance.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
t.mailkit.com
kalkulacka.homecredit.cz
pujcka.homecredit.cz
zabezpeceni.homecredit.cz
posta.homecredit.cz
callme.homecredit.cz
nasplatky.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
prodejna.homecredit.cz
www.homecredit.cz
ns3.homecredit.cz
api.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
api.homecredit.cz
konfigurace.homecredit.cz
vypisy.homecredit.cz
blog.homecredit.cz
confluence.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
www.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
droidquiz.medpeer.co.jp
vypisy.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
api.homecredit.cz
autoklient.homecredit.cz
sip.embedit.cz
ns3.homecredit.cz
www.img.homecredit.cz
prodejna.homecredit.cz
o.homecredit.cz
posta.homecredit.cz
partneri.homecredit.cz
callme2.homecredit.cz
blog.homecredit.cz
blog.homecredit.cz
liveshop.homecredit.cz
blog.homecredit.cz
u.mailkit.com
mdm1.homecredit.cz
api.homecredit.cz
api.homecredit.cz
kalkulacka.homecredit.cz
smtp2-ext.homecredit.cz
old.homecredit.cz
konfigurace.homecredit.cz
m.homecredit.cz
blog.homecredit.cz
callme.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
mails.homecredit.cz
blog.homecredit.cz
callme.homecredit.cz
www.homecredit.cz
partneri.homecredit.cz
nasplatky.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
ci-euw1.ireland.delivery.aimatch.net
zabezpeceni.homecredit.cz
mails.homecredit.cz
blog.homecredit.cz
www.homecredit.cz
m.homecredit.cz
partneri.homecredit.cz
mdm-mail1.homecredit.cz
chat.homecredit.cz
callme2.homecredit.cz
www.drycodetechnology.com
posta.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
*.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
posta.homecredit.cz
nasplatky.homecredit.cz
posta.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
callme.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
vpn.homecredit.cz
partner.homecredit.cz
signalr.homecredit.cz
nasplatky.homecredit.cz
www.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
old.homecredit.cz
t.mailkit.com
zaplaceno.homecredit.cz
vpn.homecredit.cz
www.homecredit.cz
partneri.homecredit.cz
kariera.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
old.homecredit.cz
smtp2-ext.homecredit.cz
t.mailkit.com
callme.homecredit.cz
callme.homecredit.cz
wiki.finance.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
t.mailkit.com
kalkulacka.homecredit.cz
pujcka.homecredit.cz
zabezpeceni.homecredit.cz
posta.homecredit.cz
callme.homecredit.cz
nasplatky.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
prodejna.homecredit.cz
www.homecredit.cz
ns3.homecredit.cz
api.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
api.homecredit.cz
konfigurace.homecredit.cz
vypisy.homecredit.cz
blog.homecredit.cz
confluence.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
www.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
droidquiz.medpeer.co.jp
vypisy.homecredit.cz
ci-euw1.ireland.delivery.aimatch.net
api.homecredit.cz
autoklient.homecredit.cz
sip.embedit.cz
ns3.homecredit.cz
www.img.homecredit.cz
prodejna.homecredit.cz
o.homecredit.cz
posta.homecredit.cz
partneri.homecredit.cz
callme2.homecredit.cz
blog.homecredit.cz
blog.homecredit.cz
liveshop.homecredit.cz
blog.homecredit.cz
u.mailkit.com
mdm1.homecredit.cz
api.homecredit.cz
api.homecredit.cz
kalkulacka.homecredit.cz
smtp2-ext.homecredit.cz
old.homecredit.cz
konfigurace.homecredit.cz
Certificate
The complete raw certificate details for api.homecredit.cz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGyzCCBbOgAwIBAgIQAyhPFqAbHaq1j88sQ/znMDANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRUaGF3dGUgVExTIFJTQSBDQSBHMTAe Fw0yMzExMTMwMDAwMDBaFw0yNDEyMDkyMzU5NTlaMFMxCzAJBgNVBAYTAkNaMQ0w CwYDVQQHEwRCcm5vMRkwFwYDVQQKExBIb21lIENyZWRpdCBhLnMuMRowGAYDVQQD ExFhcGkuaG9tZWNyZWRpdC5jejCCAaIwDQYJKoZIhvcNAQEBBQADggGPADCCAYoC ggGBANTF5Aag/G1BhQEvKDDIzCWQiT5rRR4d1xZApVkc5YLJPYiLgDyFAFPLR0PO MeJdEVSX7QeeMUWbTS6sfbYYiWzXFF6HE+sNDr9uBsSVlY5xZhgdsmAQlRHJg0Gi LIheMCrK8e26amq3/CSGdk4pYrwk9C+CdpByP1nUBW5raaRTigj/y9pfMegYtlAF v5nwvG/bt/4mQndkGHQ/PJPPknR1bZSkaLcAMRyUt3p8aewfgRmlCdZmSr82dRt0 Pjm1IP3WniXwF2Jb+8AppuTuyCupQsqj5CwVy6wnaWSO6FTXfSHqLSk8sgtECyD8 gbvE0YhEfsme6zahqSJ0q+OSLe1bWKNTzMKW1Pu6aITzcSSn3YinBpKMb82wkF8a kwZFnIkJJcGkEucMGivrkcs2sYoVyYkLJGBA336/htAYE3u/Z/ctJoXyNjD1xp2X gWd1nz4BYtTMzZGLVoHCB0MYOTwDH9A6a4+zHLtk/M4mbfCoYT4/kkGXWRipfK/I c2aTUwIDAQABo4IDDjCCAwowHwYDVR0jBBgwFoAUpYz+MszrDyzUGcYIuAAkiF3D xbcwHQYDVR0OBBYEFIRGsA+y76eqSN06NvfgvsPNdZh0MBwGA1UdEQQVMBOCEWFw aS5ob21lY3JlZGl0LmN6MD4GA1UdIAQ3MDUwMwYGZ4EMAQICMCkwJwYIKwYBBQUH AgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAOBgNVHQ8BAf8EBAMCBaAw HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyG Kmh0dHA6Ly9jZHAudGhhd3RlLmNvbS9UaGF3dGVUTFNSU0FDQUcxLmNybDBwBggr BgEFBQcBAQRkMGIwJAYIKwYBBQUHMAGGGGh0dHA6Ly9zdGF0dXMudGhhd3RlLmNv bTA6BggrBgEFBQcwAoYuaHR0cDovL2NhY2VydHMudGhhd3RlLmNvbS9UaGF3dGVU TFNSU0FDQUcxLmNydDAMBgNVHRMBAf8EAjAAMIIBfAYKKwYBBAHWeQIEAgSCAWwE ggFoAWYAdgDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYvI+cNM AAAEAwBHMEUCIDV6Jh+TcKRtE3SdWjt0dqa7NK9VMqlRzydUV6m0FjfuAiEAhBuS HPBb4dHROMcalcl4eXuSOvIi59jpf3INOGVQPQgAdQBIsONr2qZHNA/lagL6nTDr HFIBy1bdLIHZu7+rOdiEcwAAAYvI+cN7AAAEAwBGMEQCICsqIE6CRUw7ldOlCfjx QST8UAhGkxecngbJr44y6m5RAiB/0243ubtGKCIfvoaiICZ3E/SBRuv95sXqfe75 cnPqLwB1AD8XS0/XIkdYlB1lHIS+DRLtkDd/H4Vq68G/KIXs+GRuAAABi8j5w7cA AAQDAEYwRAIgYotlLorXtt5Nxq93Kq6V7YWzIGivs5ONO/8IhVXu4wcCIEuFIIV6 xCph33VXCU6eUr3xEl2ru6nMnJQr1jJuUQS5MA0GCSqGSIb3DQEBCwUAA4IBAQAc mNkXG7nvcQxVnJvZHkLN1aOtOFwARzpuuUrAWGXG8r11XukhaUeCmHgyPFVhjuyb xddKtv1TN7593v7d9F6t6dAQkiTVKUJdZudxcO4MBPo407Q8Zpc+1tmfMlK8sgnc Rb4quSxkymh7xwbdWA7bfz+CeT6irow4qcK8ZCaYibsYsWRbrM1r33j9d/PGb3/I PwAVEUxuEXZe4rcvfgH+FsgKmlaDf0hDqN94F9CfN54a7wP2sv71B+I7lCwaUu33 AAKGYxwTpWNhhjjUE2LW48tc4GKlEdivENcm3/QdSfUHNeaI2NmLrngrNn2ZtVWy zJZirNuA9f2zHjKMDsJK -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEA1MXkBqD8bUGFAS8oMMjM JZCJPmtFHh3XFkClWRzlgsk9iIuAPIUAU8tHQ84x4l0RVJftB54xRZtNLqx9thiJ bNcUXocT6w0Ov24GxJWVjnFmGB2yYBCVEcmDQaIsiF4wKsrx7bpqarf8JIZ2Tili vCT0L4J2kHI/WdQFbmtppFOKCP/L2l8x6Bi2UAW/mfC8b9u3/iZCd2QYdD88k8+S dHVtlKRotwAxHJS3enxp7B+BGaUJ1mZKvzZ1G3Q+ObUg/daeJfAXYlv7wCmm5O7I K6lCyqPkLBXLrCdpZI7oVNd9IeotKTyyC0QLIPyBu8TRiER+yZ7rNqGpInSr45It 7VtYo1PMwpbU+7pohPNxJKfdiKcGkoxvzbCQXxqTBkWciQklwaQS5wwaK+uRyzax ihXJiQskYEDffr+G0BgTe79n9y0mhfI2MPXGnZeBZ3WfPgFi1MzNkYtWgcIHQxg5 PAMf0Dprj7Mcu2T8ziZt8KhhPj+SQZdZGKl8r8hzZpNTAgMBAAE= -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 4196979964624787185833764890406086448 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-13 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-09 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CZ' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brno' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Home Credit a.s.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.homecredit.cz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4828622493435323380220473007089347327271333739411378992425576500073448968781899949649350576224734496750693044683089519038493635944413968228547396380873409007148296180478830077827350841840823206432994611870560562794667885511407120496636694862995530030457054814366191748781844375073898507908994377187809185603369131395605328056205697647014966537615082657257726749645004041334767550642922071598209131779816424959958990098312324128845105052507989677215697898899897135700301282572455258496265721067765603348779465244145800558785525481041549879378129341472186063990566999177787193769543125784038773666898567269469023086281541999732890161893215974569146722192677793006837065291159346755799310200320249685230133590973756377690532696260689533667499661092255210813438066783211423241395445267370927594416865048832412435237032174230911042771226977657061698285889209393839489334747689739000662033457681058286074937677655641039968955437907 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8446b00fb2efa7aa48dd3a36f7e0bec3cd759874 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.homecredit.cz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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