www.zest-haccp.com
- Hello Software -
Issued by thawte SSL CA - G2
About this certificate
This digital certificate with serial number 74:0c:dc:1a:81:2a:09:b3:9a:b2:1c:cd:78:e0:b1:45 was issued on by thawte, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Hello Software
Organization:
Hello Software
State / Province:
Gironde
Locality: Bordeaux
Country: FR
Locality: Bordeaux
Country: FR
thawte, Inc.
Organization:
thawte, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 74:0c:dc:1a:81:2a:09:b3:9a:b2:1c:cd:78:e0:b1:45Serial Number (int): 154257219303372074892539897784064586053
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60
Fingerprint (sha1): 36:2f:47:a9:b3:e2:3c:07:37:d0:fe:0a:f0:91:77:00:91:be:36:21
Fingerprint (sha256): 5d:e9:4c:ef:5e:dd:15:c8:7c:5d:2c:94:c9:b8:02:5e:f1:44:c4:31:e2:be:df:5e:84:a5:80:7f:6e:c7:bd:cc
Issuing Certificate URL: http://tj.symcb.com/tj.crt
Revocation information
OCSP Server: http://tj.symcd.comCRL Distribution Point: http://tj.symcb.com/tj.crl
Check the revocation status for certificate www.zest-haccp.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.zest-haccp.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.zest-haccp.com
zest-haccp.com
zest-haccp.com
Other certificates including the domain name zest-haccp.com
(limited to 100 certificates)
admin-help.blackpearlmail.com
www.zest-haccp.com
help.getnexx.com
www.zest-haccp.com
support.mladen-svraka.hr
www.zest-haccp.com
support.swvweb.nl
help.getnexx.com
support.zest-haccp.com
connect.echodevelopment.org
login.texttrixy.com
connect.echodevelopment.org
www.zest-haccp.com
support.inspirenw.com
www.zest-haccp.com
support.clickinon.com
260dc.gestionhb.com
admin-help.blackpearlmail.com
www.zest-haccp.com
admin-help.blackpearlmail.com
www.zest-haccp.com
help.getnexx.com
admin-help.blackpearlmail.com
www.zest-haccp.com
facilities.metasource.com
www.zest-haccp.com
admin-help.blackpearlmail.com
northshore.allthingsvault.com
www.zest-haccp.com
support.subpod.com
www.zest-haccp.com
kb.fishwise.org
www.zest-haccp.com
www.zest-haccp.com
www.zest-haccp.com
support.waterfordtechnologies.com
www.zest-haccp.com
www.zest-haccp.com
www.zest-haccp.com
admin-help.blackpearlmail.com
supportcenter.burgosconsult.com
www.zest-haccp.com
www.zest-haccp.com
usuarios.canarydoctor.com
admin-help.blackpearlmail.com
success.1stavenuecrm.com
helpdesk.universalit.co.za
www.zest-haccp.com
admin-help.blackpearlmail.com
support.voicebootcamp.com
connect.echodevelopment.org
help.getnexx.com
admin-help.blackpearlmail.com
www.zest-haccp.com
help.getnexx.com
www.zest-haccp.com
support.mladen-svraka.hr
www.zest-haccp.com
support.swvweb.nl
help.getnexx.com
support.zest-haccp.com
connect.echodevelopment.org
login.texttrixy.com
connect.echodevelopment.org
www.zest-haccp.com
support.inspirenw.com
www.zest-haccp.com
support.clickinon.com
260dc.gestionhb.com
admin-help.blackpearlmail.com
www.zest-haccp.com
admin-help.blackpearlmail.com
www.zest-haccp.com
help.getnexx.com
admin-help.blackpearlmail.com
www.zest-haccp.com
facilities.metasource.com
www.zest-haccp.com
admin-help.blackpearlmail.com
northshore.allthingsvault.com
www.zest-haccp.com
support.subpod.com
www.zest-haccp.com
kb.fishwise.org
www.zest-haccp.com
www.zest-haccp.com
www.zest-haccp.com
support.waterfordtechnologies.com
www.zest-haccp.com
www.zest-haccp.com
www.zest-haccp.com
admin-help.blackpearlmail.com
supportcenter.burgosconsult.com
www.zest-haccp.com
www.zest-haccp.com
usuarios.canarydoctor.com
admin-help.blackpearlmail.com
success.1stavenuecrm.com
helpdesk.universalit.co.za
www.zest-haccp.com
admin-help.blackpearlmail.com
support.voicebootcamp.com
connect.echodevelopment.org
help.getnexx.com
admin-help.blackpearlmail.com
Certificate
The complete raw certificate details for www.zest-haccp.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIQdAzcGoEqCbOashzNeOCxRTANBgkqhkiG9w0BAQsFADBB MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMRswGQYDVQQDExJ0 aGF3dGUgU1NMIENBIC0gRzIwHhcNMTcwOTIwMDAwMDAwWhcNMTgxMDIwMjM1OTU5 WjBoMQswCQYDVQQGEwJGUjEQMA4GA1UECAwHR2lyb25kZTERMA8GA1UEBwwIQm9y ZGVhdXgxFzAVBgNVBAoMDkhlbGxvIFNvZnR3YXJlMRswGQYDVQQDDBJ3d3cuemVz dC1oYWNjcC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3zMfj I7DXFwG86DitUkVaOe1EMoeBgZXnn94gMiRLGikLUleep0PojofTph5pJJoKup3Z uOYK4BoGamck3J7KNKDYxWoFmqqa0Z2yOGSTo1rvaQkGYiWW3pfnyejsBj/vUXiL jwAizme47xC0pdl9foWGEa4VVZJrZHsl9vIFDRTN7AGtUak61oi/f3C9kA4ulttX iUJ7DG0rpvL2cD154oNLCyYY48jshZZytwrvsv08EqnaiC8HFtyNZOVlkzkFJhgb zh/tyQKvZ2gh3m0mNT7aBOwmqntYbM9F6mrPl7eKxDAoIejhGE92p+KXgz27sfvB JuN7hw9zgdLZVY/NAgMBAAGjggKLMIIChzAtBgNVHREEJjAkghJ3d3cuemVzdC1o YWNjcC5jb22CDnplc3QtaGFjY3AuY29tMAkGA1UdEwQCMAAwbgYDVR0gBGcwZTBj BgZngQwBAgIwWTAmBggrBgEFBQcCARYaaHR0cHM6Ly93d3cudGhhd3RlLmNvbS9j cHMwLwYIKwYBBQUHAgIwIwwhaHR0cHM6Ly93d3cudGhhd3RlLmNvbS9yZXBvc2l0 b3J5MA4GA1UdDwEB/wQEAwIFoDAfBgNVHSMEGDAWgBTCT0hX/NFPmsBdOH0OBdvZ LrVSYDArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8vdGouc3ltY2IuY29tL3RqLmNy bDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwVwYIKwYBBQUHAQEESzBJ MB8GCCsGAQUFBzABhhNodHRwOi8vdGouc3ltY2QuY29tMCYGCCsGAQUFBzAChhpo dHRwOi8vdGouc3ltY2IuY29tL3RqLmNydDCCAQMGCisGAQQB1nkCBAIEgfQEgfEA 7wB2AN3rHSt6DU+mIIuBrYFocH4ujp0B1VyIjT0RxM227L7MAAABXp665IQAAAQD AEcwRQIhAPNSQr/aBKUOfVQsInng20qcnGbGbYnFsm3UuNwfDKKhAiAlNxIdtdWK A02YmXxmXyG7nyP63nelaIM71Wb9vNDW7wB1AKS5CZC0GFgUh7sTosxncAo8NZgE +RvfuON3zQ7IDdwQAAABXp665LUAAAQDAEYwRAIgaKDx+1gZllMjCeUaPBg0UOYr DlGTtr2hlU9DCsyrNmMCIFnhE6GXAXjuofVS1lndbtpkpOAMUbTgIS1iU9KWdtto MA0GCSqGSIb3DQEBCwUAA4IBAQBBF6qcY5v1Xaa7knPmO5g/TenxNEAYyTNGlOjO 2FsXH6h0DyVO//SwaO9eJAHzWqVp3YvolxFgZgUkof72aSKTEE1UxEzCciMdMjbA QEWro0wowILDIVL5fdmCYVpSCRQbpD6tGi94MdEsu3iJhBm4fJJhltditbbd69rM k1Aw8zWLbC10BIsZywBAPURi+vrWy2SYBPwnksCuJSDJZ7NtKNa+4E0dzgWVTNAW IXOaGe9yz8sU/2GuSNnWHquWTWsY7BiZEM4xPFoyz2dIerIGDULS0xXlLr1N5MfO hrwF6/BwL1Na7NqACfvUZmphFL/gYLTQuziOx1EoPTXBXIJG -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8zH4yOw1xcBvOg4rVJF WjntRDKHgYGV55/eIDIkSxopC1JXnqdD6I6H06YeaSSaCrqd2bjmCuAaBmpnJNye yjSg2MVqBZqqmtGdsjhkk6Na72kJBmIllt6X58no7AY/71F4i48AIs5nuO8QtKXZ fX6FhhGuFVWSa2R7JfbyBQ0UzewBrVGpOtaIv39wvZAOLpbbV4lCewxtK6by9nA9 eeKDSwsmGOPI7IWWcrcK77L9PBKp2ogvBxbcjWTlZZM5BSYYG84f7ckCr2doId5t JjU+2gTsJqp7WGzPRepqz5e3isQwKCHo4RhPdqfil4M9u7H7wSbje4cPc4HS2VWP zQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 154257219303372074892539897784064586053 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-20 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-20 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Gironde' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bordeaux' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hello Software' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.zest-haccp.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23202590989633711023304313430900016549833778956843568674369603783043047224448018072765550499961760564150107963910026107515345507173080371767489452560153631481666667044724468879201940809597418603156972997667415775901030766471199306723446866878300560332130746652525401465536103102338828938141458791539661207660093731692705189022089548338658732519377048163900457045752851826810658731465361557012113898300381335768194306335952032598669985277819575150385031692611251397264891554954774596415150790186735562311140850758002468726564432256516887555087094128906440149608743994289734123565790057221200814308901615838629257908173 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zest-haccp.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zest-haccp.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015e9ebae4840000040300473045022100f35242bfda04a50e7d542c2279e0db4a9c9c66c66d89c5b26dd4b8dc1f0ca2a102202537121db5d58a034d98997c665f21bb9f23fade77a568833bd566fdbcd0d6ef007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015e9ebae4b50000040300463044022068a0f1fb581996532309e51a3c183450e62b0e5193b6bda1954f430accab3663022059e113a1970178eea1f552d659dd6eda64a4e00c51b4e0212d6253d29676db68 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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