online.allianzsp.sk

- Allianz - Slovenska poistovna, a.s. -

Issued by Thawte EV RSA CA 2018

About this certificate

This digital certificate with serial number 09:82:9d:5f:08:0a:dd:bf:89:ad:72:64:9e:0e:af:93 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Allianz - Slovenska poistovna, a.s.

Company registration number: 00 151 700
Organization: Allianz - Slovenska poistovna, a.s.
Organization unit: IT Division
Locality: Bratislava
Country: SK

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:82:9d:5f:08:0a:dd:bf:89:ad:72:64:9e:0e:af:93
Serial Number (int): 12641242421145999128220309612751925139
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c8:e6:4b:16:1b:b0:56:76:31:ee:e8:45:38:5b:5c:91:bb:02:eb:bd
AuthorityKeyId: e7:01:fc:0c:16:18:ca:7d:b2:8c:ec:87:27:a3:6f:61:81:3b:84:39

Fingerprint (sha1): e5:73:f9:35:98:4b:49:e7:a1:e5:1f:28:fc:d5:0a:aa:61:61:73:ee
Fingerprint (sha256): 5b:30:e0:67:2c:a1:9c:cf:51:91:4d:9f:a7:6a:e1:99:f9:06:43:4e:93:c7:30:9c:2e:af:0e:7e:11:e9:9e:3c

Issuing Certificate URL: http://cacerts.thawte.com/ThawteEVRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteEVRSACA2018.crl

Check the revocation status for certificate online.allianzsp.sk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for online.allianzsp.sk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

online.allianzsp.sk

Other certificates including the domain name allianzsp.sk

(limited to 100 certificates)
aspws.allianzsp.sk
online.allianzsp.sk
auth1.allianzsp.sk
oauth.allianzsp.sk
cnsx.allianzsp.sk
oauth.allianzsp.sk
mdm.allianzsp.sk
online.allianzsp.sk
webmail.allianzsp.sk
online.allianzsp.sk
www.allianzsp.sk
auth1.allianzsp.sk
club.allianzsp.sk
obchod.allianzsp.sk
b2b.allianzsp.sk
webmail.allianzsp.sk
auth.allianzsp.sk
www.allianzsp.sk
int.allianzsp.sk
portaltest.allianzsp.sk
www.allianzsp.sk
www.allianzsp.sk
accounttest.allianzsp.sk
int.allianzsp.sk
auth.allianzsp.sk
airw.allianzsp.sk
f1.allianzsp.sk
online.allianzsp.sk
airw.allianzsp.sk
traveler.allianzsp.sk
obmo.allianzsp.sk
club.allianzsp.sk
int.allianzsp.sk
dss.allianzsp.sk
skolenie.allianzsp.sk
partnerstva.allianzsp.sk
www.allianzsp.sk
obchod.allianzsp.sk
int.allianzsp.sk
online.allianzsp.sk
obmot.allianzsp.sk
accounttest.allianzsp.sk
status.allianzsp.sk
account.allianzsp.sk
online.allianzsp.sk
online.allianzsp.sk
email.allianzsp.sk
portal.allianzsp.sk
www.allianzsp.sk
sso.allianzsp.sk
cag.allianzsp.sk
oauth.allianzsp.sk
webmail.allianzsp.sk
account.allianzsp.sk
accounttest.allianzsp.sk
mobile.allianzsp.sk
portaltest.allianzsp.sk
mailshield.allianzsp.sk
account.allianzsp.sk
portal.allianzsp.sk
online.allianzsp.sk
b2b.allianzsp.sk
mobile.allianzsp.sk
portaltest.allianzsp.sk
auth.allianzsp.sk
autodiscover.allianzsp.sk
t00046970.allianzsp.sk
airw.allianzsp.sk
www.allianzsp.sk
f1.allianzsp.sk
rsa.allianzsp.sk
aspws.allianzsp.sk
aspws.allianzsp.sk
www.allianzsp.sk
www.allianzsp.sk
obmo.allianzsp.sk
mdm.allianzsp.sk
cag.allianzsp.sk
t00046970.allianzsp.sk
obmo.allianzsp.sk
online.allianzsp.sk
obmot.allianzsp.sk
p00046970.allianzsp.sk
aspws-test.allianzsp.sk
f1.allianzsp.sk
aspws-test.allianzsp.sk
partnerstva.allianzsp.sk
autodiscover.allianzsp.sk
rsa.allianzsp.sk
auth1.allianzsp.sk
f1.allianzsp.sk
cag.allianzsp.sk
www.allianzsp.sk
apro.allianzsp.sk
accounttest.allianzsp.sk
email2.allianzsp.sk
portaltest.allianzsp.sk
online.allianzsp.sk
obmot.allianzsp.sk
obchod.allianzsp.sk

Certificate

The complete raw certificate details for online.allianzsp.sk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFajCCBFKgAwIBAgIQCYKdXwgK3b+JrXJkng6vkzANBgkqhkiG9w0BAQsFADBf
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR4wHAYDVQQDExVUaGF3dGUgRVYgUlNBIENBIDIwMTgw
HhcNMTgwMjIwMDAwMDAwWhcNMjAwMjIwMTIwMDAwWjCBzTEdMBsGA1UEDwwUUHJp
dmF0ZSBPcmdhbml6YXRpb24xEzARBgsrBgEEAYI3PAIBAxMCU0sxEzARBgNVBAUT
CjAwIDE1MSA3MDAxCzAJBgNVBAYTAlNLMRMwEQYDVQQHEwpCcmF0aXNsYXZhMSww
KgYDVQQKEyNBbGxpYW56IC0gU2xvdmVuc2thIHBvaXN0b3ZuYSwgYS5zLjEUMBIG
A1UECxMLSVQgRGl2aXNpb24xHDAaBgNVBAMTE29ubGluZS5hbGxpYW56c3Auc2sw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2+2ASGkl4l7vN0JSmkU8C
PjXd//vQvitH28D0cFll7PS2L31Fp4lmjV3qX8ngAfk7bMErZQNWyiMEAsrwXrfg
1Fvdg2C4FfYKpuUOBXYMos+kfWM0ueCF7PWxUcATdGnS6UJFfzvRVI/65NTXd+R1
4naHS7m+7XFsyGr5Q1sWIc7DrYgSgWZKZX36COcb0NsVg+NJFSn5cPVYmvQich21
v9QbeNyCd60HN1DweX+afoopYGZdpT38XFES1AmJDZeve+JGnDfyhcmGXTZYgVai
6BQBvz1gU9m2+DEobUcEPAk5+z4ZJ57jaNdft4dwRYfXmMcFFkdFCUB2s9cIQzTN
AgMBAAGjggGxMIIBrTAfBgNVHSMEGDAWgBTnAfwMFhjKfbKM7Icno29hgTuEOTAd
BgNVHQ4EFgQUyOZLFhuwVnYx7uhFOFtckbsC670wHgYDVR0RBBcwFYITb25saW5l
LmFsbGlhbnpzcC5zazAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH
AwEGCCsGAQUFBwMCMDwGA1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9jZHAudGhhd3Rl
LmNvbS9UaGF3dGVFVlJTQUNBMjAxOC5jcmwwSwYDVR0gBEQwQjA3BglghkgBhv1s
AgEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAH
BgVngQwBATBxBggrBgEFBQcBAQRlMGMwJAYIKwYBBQUHMAGGGGh0dHA6Ly9zdGF0
dXMudGhhd3RlLmNvbTA7BggrBgEFBQcwAoYvaHR0cDovL2NhY2VydHMudGhhd3Rl
LmNvbS9UaGF3dGVFVlJTQUNBMjAxOC5jcnQwCQYDVR0TBAIwADATBgorBgEEAdZ5
AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEASlMfRiUbzZOgLKGJHRXx5St4
kTqaXLKOuBUrpJC9uZK7IStjD/nVyN3y2EFy/gDlk+hPjXjt9SH3alCYqhBxnfix
rZ4aaCBxjosxwAMgiLB0+vtU+oNQ60bkL4M9t3yAvyUdTVyOml6t/c73yo/uMjHK
w0VKoPFPe59Vkbbr3FgBmyI47xvjSx9NQW2fz3YmVE/SVOMmrDbvGls4rSWfHach
wyraevibowGk0coIECJLwi5Kymjb2De88DducQNq4hk2FQOLdO4iM31RtfQ+FM3R
xBNciSllvHlVzJvbynRMGFxU5iXRbhMJniWfUz7p3GUNhSAm8ZynlGLnuyFVTA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvtgEhpJeJe7zdCUppFP
Aj413f/70L4rR9vA9HBZZez0ti99RaeJZo1d6l/J4AH5O2zBK2UDVsojBALK8F63
4NRb3YNguBX2CqblDgV2DKLPpH1jNLnghez1sVHAE3Rp0ulCRX870VSP+uTU13fk
deJ2h0u5vu1xbMhq+UNbFiHOw62IEoFmSmV9+gjnG9DbFYPjSRUp+XD1WJr0InId
tb/UG3jcgnetBzdQ8Hl/mn6KKWBmXaU9/FxREtQJiQ2Xr3viRpw38oXJhl02WIFW
ougUAb89YFPZtvgxKG1HBDwJOfs+GSee42jXX7eHcEWH15jHBRZHRQlAdrPXCEM0
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12641242421145999128220309612751925139
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte EV RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00 151 700'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bratislava'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Allianz - Slovenska poistovna, a.s.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Division'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'online.allianzsp.sk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23099329272498538738777336583009837670721381768656923175081667184781990007066736410458062328174836155045577098182414776307924976672243070421152220421274709771019083841671641824511149009438682550281306595867021095022274034227306043500791310993608836945578558299293471316964412902827655227382289532795390565112818389633619485943345875682896550953792710786451969164475134179770197425122120570863361880316773047596963028301975989185269949993712345548288972862085448607093414591791370190756652142775712951028364036492911089516283593962065454220351449773707531015149585454644074271924076970538217986330005965500361119839437
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e701fc0c1618ca7db28cec8727a36f61813b8439
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c8e64b161bb0567631eee845385b5c91bb02ebbd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.allianzsp.sk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteEVRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteEVRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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