supplierlink.nemours.org
Issued by Thawte TLS RSA CA G1
About this certificate
This digital certificate with serial number 0e:c6:f5:0a:e6:41:d7:1c:24:6f:2c:f5:44:f7:b5:b9 was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=supplierlink.nemours.org
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0e:c6:f5:0a:e6:41:d7:1c:24:6f:2c:f5:44:f7:b5:b9Serial Number (int): 19642236772874386158111914409474897337
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: fd:4c:25:8b:fd:09:39:a1:1e:37:75:17:8f:81:f0:74:0f:2e:43:e1
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7
Fingerprint (sha1): 91:87:07:d2:45:c7:2f:7c:8c:27:7d:eb:15:ce:2e:f5:59:86:63:43
Fingerprint (sha256): 5b:85:26:33:be:e7:24:52:b5:fe:97:4f:bc:1a:19:a5:52:f0:af:8f:b9:8f:d3:a6:5a:75:ac:ed:2e:07:b1:42
Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt
Revocation information
OCSP Server: http://status.thawte.comCRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl
Check the revocation status for certificate supplierlink.nemours.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for supplierlink.nemours.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
supplierlink.nemours.org
Other certificates including the domain name nemours.org
(limited to 100 certificates)
fts.nemours.org
voalte3.ai.nemours.org
nhj.nemours.org
adfs.nemours.org
findaprovider.nemours.org
findaprovider.nemours.org
nemsecdmz001.nemours.org
findaprovider.nemours.org
flguestwifi.nemours.org
*.nemours.org
ereferral.nemours.org
findaprovider.nemours.org
eprescriptiontest.nemours.org
voalte3.nemours.org
healthykidshealthyfuture.nemours.org
givenow.nemours.org
voalte3.nemours.org
findaprovider.nemours.org
adfs.nemours.org
ww2.nemours.org
mobile.nemours.org
webmail.nemours.org
ww2.nemours.org
supplierlink.nemours.org
fts.nemours.org
findaprovider.nemours.org
blog.nemours.org
lawapprove.nemours.org
healthykidshealthyfuture.nemours.org
eprescriptiontest.nemours.org
findaprovider.nemours.org
deguestwifi.nemours.org
findaprovider.nemours.org
timetracker.nemours.org
blog.nemours.org
survey.nemours.org
givenow.nemours.org
nembtatest.nemours.org
credentialing.nemours.org
blog.nemours.org
fts.nemours.org
findaprovider.nemours.org
nemours.org
nemsecdmz001.nemours.org
supplierlink.nemours.org
*.nemours.org
kronosaccess.nemours.org
directory-mobile.nemours.org
eprescriptiontest.nemours.org
iconnect.nemours.org
www.nemours.org
findaprovider.nemours.org
*.nemours.org
nemourslink.nemours.org
careeverywhere.nemours.org
kronosaccess.nemours.org
mynemours.nemours.org
blog.nemours.org
voalte3sb.nemours.org
webmail.nemours.org
flguestwifi.nemours.org
atstaff.nemours.org
careeverywhere.nemours.org
findaprovider.nemours.org
findaprovider.nemours.org
findaprovider.nemours.org
atstaffdev.nemours.org
sipfed.nemours.org
deguestwifi.nemours.org
nembtaprod.nemours.org
portal.nemours.org
careeverywhere.nemours.org
fts.nemours.org
amc.nemours.org
findaprovider.nemours.org
connect2.nemours.org
*.nemours.org
nembtaprod.nemours.org
lawmobile.nemours.org
nembtatest.nemours.org
vidyoportal.nemours.org
supplierlink.nemours.org
*.nemours.org
survey.nemours.org
findaprovider.nemours.org
nemours.org
kronos.nemours.org
www.nemours.org
*.nemours.org
findaprovider.nemours.org
kronosaccess.nemours.org
*.nemours.org
voalte3.ai.nemours.org
airstrip.nemours.org
HIDApproveTest.nemours.org
www.nemours.org
*.nemours.org
adfs.nemours.org
findaprovider.nemours.org
givenow.nemours.org
voalte3.ai.nemours.org
nhj.nemours.org
adfs.nemours.org
findaprovider.nemours.org
findaprovider.nemours.org
nemsecdmz001.nemours.org
findaprovider.nemours.org
flguestwifi.nemours.org
*.nemours.org
ereferral.nemours.org
findaprovider.nemours.org
eprescriptiontest.nemours.org
voalte3.nemours.org
healthykidshealthyfuture.nemours.org
givenow.nemours.org
voalte3.nemours.org
findaprovider.nemours.org
adfs.nemours.org
ww2.nemours.org
mobile.nemours.org
webmail.nemours.org
ww2.nemours.org
supplierlink.nemours.org
fts.nemours.org
findaprovider.nemours.org
blog.nemours.org
lawapprove.nemours.org
healthykidshealthyfuture.nemours.org
eprescriptiontest.nemours.org
findaprovider.nemours.org
deguestwifi.nemours.org
findaprovider.nemours.org
timetracker.nemours.org
blog.nemours.org
survey.nemours.org
givenow.nemours.org
nembtatest.nemours.org
credentialing.nemours.org
blog.nemours.org
fts.nemours.org
findaprovider.nemours.org
nemours.org
nemsecdmz001.nemours.org
supplierlink.nemours.org
*.nemours.org
kronosaccess.nemours.org
directory-mobile.nemours.org
eprescriptiontest.nemours.org
iconnect.nemours.org
www.nemours.org
findaprovider.nemours.org
*.nemours.org
nemourslink.nemours.org
careeverywhere.nemours.org
kronosaccess.nemours.org
mynemours.nemours.org
blog.nemours.org
voalte3sb.nemours.org
webmail.nemours.org
flguestwifi.nemours.org
atstaff.nemours.org
careeverywhere.nemours.org
findaprovider.nemours.org
findaprovider.nemours.org
findaprovider.nemours.org
atstaffdev.nemours.org
sipfed.nemours.org
deguestwifi.nemours.org
nembtaprod.nemours.org
portal.nemours.org
careeverywhere.nemours.org
fts.nemours.org
amc.nemours.org
findaprovider.nemours.org
connect2.nemours.org
*.nemours.org
nembtaprod.nemours.org
lawmobile.nemours.org
nembtatest.nemours.org
vidyoportal.nemours.org
supplierlink.nemours.org
*.nemours.org
survey.nemours.org
findaprovider.nemours.org
nemours.org
kronos.nemours.org
www.nemours.org
*.nemours.org
findaprovider.nemours.org
kronosaccess.nemours.org
*.nemours.org
voalte3.ai.nemours.org
airstrip.nemours.org
HIDApproveTest.nemours.org
www.nemours.org
*.nemours.org
adfs.nemours.org
findaprovider.nemours.org
givenow.nemours.org
Certificate
The complete raw certificate details for supplierlink.nemours.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEwjCCA6qgAwIBAgIQDsb1CuZB1xwkbyz1RPe1uTANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRUaGF3dGUgVExTIFJTQSBDQSBHMTAe Fw0xNzEyMDgwMDAwMDBaFw0xOTEyMDgxMjAwMDBaMCMxITAfBgNVBAMTGHN1cHBs aWVybGluay5uZW1vdXJzLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIRnaID1O3tMRGKmyuUPRCOCKbOBsh3MNYesYVrrvhgrsmW2sVYrobKfYXw6 8sjta6/GtDyNAbu8/rVir+vS1gpyj3eBlL4KoYoa7skFogprmwiF/XTKg9f5m1BQ lqLutE3IbahcUb1AvjfoN2+Ooqwn9FF1OgNfHswE4XJWrvkm5aeCgr9UDTYHLaYU kWf5beKLGnlGGJW0Si21QNHmk8jq0WjBOJQ4S6tSDqkaninxqNphrwPouCSD+CqD VUBNG4m/UqdK9LYH+ZyE4sbM4a+yGOcI+nyz97JMIYAP8g1KrUkwkIW+T6aJ9dDM C8KPx5t85+RVGhmY1QQ9Ih4g3l0CAwEAAaOCAbUwggGxMB8GA1UdIwQYMBaAFKWM /jLM6w8s1BnGCLgAJIhdw8W3MB0GA1UdDgQWBBT9TCWL/Qk5oR43dRePgfB0Dy5D 4TAjBgNVHREEHDAaghhzdXBwbGllcmxpbmsubmVtb3Vycy5vcmcwDgYDVR0PAQH/ BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAy MDCgLqAshipodHRwOi8vY2RwLnRoYXd0ZS5jb20vVGhhd3RlVExTUlNBQ0FHMS5j cmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQIwKjAoBggrBgEFBQcCARYcaHR0cHM6 Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgEwcAYIKwYBBQUHAQEEZDBi MCQGCCsGAQUFBzABhhhodHRwOi8vc3RhdHVzLnRoYXd0ZS5jb20wOgYIKwYBBQUH MAKGLmh0dHA6Ly9jYWNlcnRzLnRoYXd0ZS5jb20vVGhhd3RlVExTUlNBQ0FHMS5j cnQwCQYDVR0TBAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsF AAOCAQEAgBcQY/q7rF3KluKyfZ7eYLjBaWtUdP1Cy+6joY6SDFOT0ClySQBHI9h8 GeatqxljBHYj8Gzs5XXrAg14wMpIcm/GtRYprXWaluoiRzVH36uClCjV6xlP1yCe esomJxJwT4OxiDQCUSd1xBcjfGfdfEISG9MN4ZO6QZXTpXshCKfbep7YA+YNdsl4 7NWFiGe0WDkNxkJ0l9+ghnTnJJFSwSVN94tfF/hU6goaXcG9uIXh/fwEOw03bKr9 ZOcRbX4yemLdyQI9zbGaDTXzclnW4nSevczMf8m013y0qJjr7p3fa0frqxo8KJqA 70342oIpjsRBo6rvlM6mT9ksK2dkCQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGdogPU7e0xEYqbK5Q9E I4Ips4GyHcw1h6xhWuu+GCuyZbaxViuhsp9hfDryyO1rr8a0PI0Bu7z+tWKv69LW CnKPd4GUvgqhihruyQWiCmubCIX9dMqD1/mbUFCWou60TchtqFxRvUC+N+g3b46i rCf0UXU6A18ezAThclau+Sblp4KCv1QNNgctphSRZ/lt4osaeUYYlbRKLbVA0eaT yOrRaME4lDhLq1IOqRqeKfGo2mGvA+i4JIP4KoNVQE0bib9Sp0r0tgf5nITixszh r7IY5wj6fLP3skwhgA/yDUqtSTCQhb5Ppon10MwLwo/Hm3zn5FUaGZjVBD0iHiDe XQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 19642236772874386158111914409474897337 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-08 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-08 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'supplierlink.nemours.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16714448748204541122131932551703153581272598391739350029725240083911607531027837628652784931377716931713818190548610643766664216765713810351076646723876721206020228424322106747418046552194966904915461618580788327807029287074407719940217644314204268679082587491958375816457942552070117745904072121706906235668860612374665936784176243802665552327846153593507907513434487643132116879882212514905128606892237299226990457079634828274038301185914735163821139053607604380201399658868446950176961995603126230885196377776124964674686705002086115308752576194878892785121641068102074315005074097539047805587139922886458467212893 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) fd4c258bfd0939a11e3775178f81f0740f2e43e1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supplierlink.nemours.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0080171063fabbac5dca96e2b27d9ede60b8c1696b5474fd42cbeea3a18e920c5393d0297249004723d87c19e6adab1963047623f06cece575eb020d78c0ca48726fc6b51629ad759a96ea22473547dfab829428d5eb194fd7209e7aca262712704f83b1883402512775c417237c67dd7c42121bd30de193ba4195d3a57b2108a7db7a9ed803e60d76c978ecd5858867b458390dc6427497dfa08674e7249152c1254df78b5f17f854ea0a1a5dc1bdb885e1fdfc043b0d376caafd64e7116d7e327a62ddc9023dcdb19a0d35f37259d6e2749ebdcccc7fc9b4d77cb4a898ebee9ddf6b47ebab1a3c289a80ef4df8da82298ec441a3aaef94cea64fd92c2b676409