www.nordenta.dk

- Dansk Nordenta a/s -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 09:cb:b9:43:37:e4:ce:23:ac:0c:e1:14:cb:20:a3:f4 was issued on by DigiCert Inc.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Dansk Nordenta a/s

Organization: Dansk Nordenta a/s
Locality: Hørning
Country: DK

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:cb:b9:43:37:e4:ce:23:ac:0c:e1:14:cb:20:a3:f4
Serial Number (int): 13020845795708660972040162618399302644
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7b:54:2e:ba:65:ef:65:31:54:29:f5:90:3c:fa:27:e6:22:20:92:e8
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 41:c7:b5:5e:cb:c6:65:b7:b1:ba:60:8e:6d:e4:f0:98:b7:fe:3c:4a
Fingerprint (sha256): 5d:d8:28:58:c5:b0:25:69:a1:33:4f:fa:83:84:02:ed:12:7f:11:d1:38:70:fd:97:22:8d:63:be:78:6c:8e:c9

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate www.nordenta.dk

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nordenta.dk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.nordenta.dk
nordenta.dk
autodiscover.aldente.dk
autodiscover.nordenta.dk
mail.nordenta.dk
crm.nordenta.dk
as01.nordenta.dk
exch01.nordenta.dk
exch02.nordenta.dk
exch03.nordenta.dk

Other certificates including the domain name nordenta.dk

(limited to 100 certificates)
www.nordenta.dk
vpn.nordenta.dk
www.licscadenta.no
www.nordenta.dk
*.nordenta.dk
*.nordenta.dk
vpn.nordenta.dk
*.nordenta.dk
www.nordenta.dk
www.licscadenta.no
vpn.nordenta.dk
www.nordenta.dk
*.nordenta.dk
vpn.nordenta.dk
www.licscadenta.no
www.licscadenta.no
*.nordenta.dk
*.nordenta.dk
www.nordenta.dk
edge.nordenta.dk
www.nordenta.dk
www.licscadenta.no
edge.nordenta.dk
citrix.nordenta.dk
www.nordenta.dk
edge.nordenta.dk
www.licscadenta.no
www.licscadenta.no

Certificate

The complete raw certificate details for www.nordenta.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGkjCCBXqgAwIBAgIQCcu5QzfkziOsDOEUyyCj9DANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMRswGQYDVQQDExJUaGF3dGUgUlNBIENBIDIwMTgwHhcN
MjAxMDIyMDAwMDAwWhcNMjExMTE3MjM1OTU5WjBXMQswCQYDVQQGEwJESzERMA8G
A1UEBwwISMO4cm5pbmcxGzAZBgNVBAoTEkRhbnNrIE5vcmRlbnRhIGEvczEYMBYG
A1UEAxMPd3d3Lm5vcmRlbnRhLmRrMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArDjF1ihtRE9IsiBa8U5qZiSBsBUd5QA8xX2BoQ0TWzneoA1QprGTh5fT
NtrfZVwTWUUuRwQQPnvfuQ95qLZLArilLSeqBHgup8ATg0S0WocYFf3VjLWZpwrv
sg+Eaz3kNVcEKXpuYf39+DIe8TYWXBfdv546XxRhyH2NfQU7kfQduNqS972B41q5
U2//7VLu70KSlqi3dUa6ShbaKgqPbzz9K4/qHIMSDNscBqJ/DWgs5fde9GrKRv63
Ye983w27Mr4FoDgYnQ7rVGOQAptIzdUqiBkYm62stpp1Ae4tIx9Ema2EIRYAQQr6
Z4FuqBhYIR73OCgQlijZtn0UEHp4SwIDAQABo4IDUzCCA08wHwYDVR0jBBgwFoAU
o8heZVTlMHjBBeoHCmpZzLn+3lowHQYDVR0OBBYEFHtULrpl72UxVCn1kDz6J+Yi
IJLoMIHNBgNVHREEgcUwgcKCD3d3dy5ub3JkZW50YS5ka4ILbm9yZGVudGEuZGuC
F2F1dG9kaXNjb3Zlci5hbGRlbnRlLmRrghhhdXRvZGlzY292ZXIubm9yZGVudGEu
ZGuCEG1haWwubm9yZGVudGEuZGuCD2NybS5ub3JkZW50YS5ka4IQYXMwMS5ub3Jk
ZW50YS5ka4ISZXhjaDAxLm5vcmRlbnRhLmRrghJleGNoMDIubm9yZGVudGEuZGuC
EmV4Y2gwMy5ub3JkZW50YS5kazAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMDoGA1UdHwQzMDEwL6AtoCuGKWh0dHA6Ly9jZHAu
dGhhd3RlLmNvbS9UaGF3dGVSU0FDQTIwMTguY3JsMEwGA1UdIARFMEMwNwYJYIZI
AYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9D
UFMwCAYGZ4EMAQICMG8GCCsGAQUFBwEBBGMwYTAkBggrBgEFBQcwAYYYaHR0cDov
L3N0YXR1cy50aGF3dGUuY29tMDkGCCsGAQUFBzAChi1odHRwOi8vY2FjZXJ0cy50
aGF3dGUuY29tL1RoYXd0ZVJTQUNBMjAxOC5jcnQwDAYDVR0TAQH/BAIwADCCAQMG
CisGAQQB1nkCBAIEgfQEgfEA7wB1APZclC/RdzAiFFQYCDCUVo7jTRMZM7/fDC8g
C8xO8WTjAAABdVCaUuoAAAQDAEYwRAIgAiX3eMhzbXde1LFynUUE3tTQ0uc0XcFZ
lMaQ1BwqQBwCIC2yuJ8FJ+AQFwCQnuLFL9cqZnA8idaXZV7y6swEXporAHYAXNxD
kv7mq0VEsV6a1FbmEDf71fpH3KFzlLJe5vbHDsoAAAF1UJpTLwAABAMARzBFAiBk
Ay1AHc96iOLTatOeRzh5j50LRcCzjAX7nbZkmL0ilAIhAPdZQouZDq44HihmRYsS
/J9fQbeZTjtxzsQQGggU5tFBMA0GCSqGSIb3DQEBCwUAA4IBAQBeTdaXf/ICKu2d
sDU+oGUQoqfQW2IuMVvuNVBbRah+7Yxs1hMYU3NIMNwuFm0lqQaC2r3a0GiTh73M
uaDaHBMocCme7myQtYUI/C6lZfHU7QNG1LeH84UYW+dl6NcN8EAoYUFFvbRMYgLq
a3T6sZcFBcI2T4I018Z7R/dMmgD/pbYoZdY8sbox0H89MKrApMNvIqCywxXfb1Ts
bRTJKPiIhENTS41aPA2J9bFUkSKtoPAVGSqR87eNzL44YglWvV9OS0Aj81nTt+T9
j5Nb4s1ngimOceCtenjaHUUasJwdztjNDEpjH3zEZ978wF53Np7Ky53zXBObrJwM
BbhF98kp
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDjF1ihtRE9IsiBa8U5q
ZiSBsBUd5QA8xX2BoQ0TWzneoA1QprGTh5fTNtrfZVwTWUUuRwQQPnvfuQ95qLZL
ArilLSeqBHgup8ATg0S0WocYFf3VjLWZpwrvsg+Eaz3kNVcEKXpuYf39+DIe8TYW
XBfdv546XxRhyH2NfQU7kfQduNqS972B41q5U2//7VLu70KSlqi3dUa6ShbaKgqP
bzz9K4/qHIMSDNscBqJ/DWgs5fde9GrKRv63Ye983w27Mr4FoDgYnQ7rVGOQAptI
zdUqiBkYm62stpp1Ae4tIx9Ema2EIRYAQQr6Z4FuqBhYIR73OCgQlijZtn0UEHp4
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13020845795708660972040162618399302644
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hørning'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dansk Nordenta a/s'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nordenta.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21740984164783370573053668921103736644452755880175333266960153629548625376619704719897840149605701742423658737952871748420742497823635175191440638602330903743709255276229094223347076860468511851570196856174992647927614838176428770265388137388773261328155043986068011727481256821439921052036359181881475229307065634474522315427894746865182695808799520155717378218508384452184598073443124672743988853846563225674890504990398435126387008304333282207958800197860104177316031522123987929150550250026491137291706469162023644187926372802811816550386259308232731145547456648943395253324669866005857553663725331319595835488331
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7b542eba65ef65315429f5903cfa27e6222092e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (197 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nordenta.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nordenta.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.aldente.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.nordenta.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.nordenta.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.nordenta.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'as01.nordenta.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exch01.nordenta.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exch02.nordenta.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exch03.nordenta.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000175509a52ea000004030046304402200225f778c8736d775ed4b1729d4504ded4d0d2e7345dc15994c690d41c2a401c02202db2b89f0527e0101700909ee2c52fd72a66703c89d697655ef2eacc045e9a2b0076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca00000175509a532f0000040300473045022064032d401dcf7a88e2d36ad39e4738798f9d0b45c0b38c05fb9db66498bd2294022100f759428b990eae381e2866458b12fc9f5f41b7994e3b71cec4101a0814e6d141
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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