*.vericlaim.co.za
- Medicharge -
Issued by Thawte RSA CA 2018
About this certificate
This digital certificate with serial number 0c:48:ce:55:39:2a:03:27:81:2a:9a:35:58:3d:22:78 was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Medicharge
Organization:
Medicharge
State / Province:
Gauteng
Locality: Centurion
Country: ZA
Locality: Centurion
Country: ZA
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0c:48:ce:55:39:2a:03:27:81:2a:9a:35:58:3d:22:78Serial Number (int): 16328766251697099360746281004145910392
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: b0:b1:e3:d5:55:20:6a:45:a7:f0:c3:b2:5b:1c:89:f2:71:9d:95:d0
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a
Fingerprint (sha1): 1b:b4:d2:56:83:8f:1c:6b:31:7d:5c:af:dd:89:d6:d8:d7:26:2e:38
Fingerprint (sha256): 5e:af:3f:f5:59:29:19:d1:40:df:2d:9c:68:6b:cc:3b:fc:8a:e3:04:ad:7e:38:2b:6d:99:7d:cf:27:84:5c:37
Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt
Revocation information
OCSP Server: http://status.thawte.comCRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl
Check the revocation status for certificate *.vericlaim.co.za
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.vericlaim.co.za
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.vericlaim.co.za
vericlaim.co.za
vericlaim.co.za
Other certificates including the domain name vericlaim.co.za
(limited to 100 certificates)
www4.vericlaim.co.za
*.vericlaim.co.za
www.vericlaim.co.za
uat.vericlaim.co.za
training.vericlaim.co.za
*.vericlaim.co.za
www3.vericlaim.co.za
www2.vericlaim.co.za
prod.vericlaim.co.za
www2.vericlaim.co.za
*.vericlaim.co.za
*.vericlaim.co.za
www.vericlaim.co.za
www.vericlaim.co.za
www1.vericlaim.co.za
www1.vericlaim.co.za
www2.vericlaim.co.za
www3.vericlaim.co.za
www3.vericlaim.co.za
*.vericlaim.co.za
*.vericlaim.co.za
www3.vericlaim.co.za
www3.vericlaim.co.za
*.vericlaim.co.za
*.vericlaim.co.za
stage.vericlaim.co.za
*.vericlaim.co.za
www1.vericlaim.co.za
stage.vericlaim.co.za
stage.vericlaim.co.za
training.vericlaim.co.za
uat.vericlaim.co.za
*.vericlaim.co.za
www.vericlaim.co.za
uat.vericlaim.co.za
training.vericlaim.co.za
*.vericlaim.co.za
www3.vericlaim.co.za
www2.vericlaim.co.za
prod.vericlaim.co.za
www2.vericlaim.co.za
*.vericlaim.co.za
*.vericlaim.co.za
www.vericlaim.co.za
www.vericlaim.co.za
www1.vericlaim.co.za
www1.vericlaim.co.za
www2.vericlaim.co.za
www3.vericlaim.co.za
www3.vericlaim.co.za
*.vericlaim.co.za
*.vericlaim.co.za
www3.vericlaim.co.za
www3.vericlaim.co.za
*.vericlaim.co.za
*.vericlaim.co.za
stage.vericlaim.co.za
*.vericlaim.co.za
www1.vericlaim.co.za
stage.vericlaim.co.za
stage.vericlaim.co.za
training.vericlaim.co.za
uat.vericlaim.co.za
Certificate
The complete raw certificate details for *.vericlaim.co.za in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgIQDEjOVTkqAyeBKpo1WD0ieDANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMRswGQYDVQQDExJUaGF3dGUgUlNBIENBIDIwMTgwHhcN MjAxMTEzMDAwMDAwWhcNMjExMjE0MjM1OTU5WjBkMQswCQYDVQQGEwJaQTEQMA4G A1UECBMHR2F1dGVuZzESMBAGA1UEBxMJQ2VudHVyaW9uMRMwEQYDVQQKEwpNZWRp Y2hhcmdlMRowGAYDVQQDDBEqLnZlcmljbGFpbS5jby56YTCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAKn08GztqZi37T9sG84BNGId10LV0jncX1vRzDaL jHHvm6PlrvRPmiSGxL+hmCFwtMqoTnw7/C0r89srXLJtqQVZjfaI4GIjoR2isE7N PD0xWjZY8cHB+Tc5cwyFwpzEkGIGdDHBshBfj8jjSbSvUibrLMUEyK2cUtBsYKG+ nEJnCdV3e9sISA60+s9fYE0SgLN3VrkEVQn58s0R26w82C1GmTESbEGksFYxt+up QHxWWqIR+GXz0Som6Rb/qdBP9zLhOKVE7h494CcUPk4gKypq58MQK0/Of6obEHZa EtH0z/y2G1jw6JZ8E+CyhsU9KrIsyrZiEkkaX+f95nrZ3OkCAwEAAaOCArIwggKu MB8GA1UdIwQYMBaAFKPIXmVU5TB4wQXqBwpqWcy5/t5aMB0GA1UdDgQWBBSwsePV VSBqRafww7JbHInycZ2V0DAtBgNVHREEJjAkghEqLnZlcmljbGFpbS5jby56YYIP dmVyaWNsYWltLmNvLnphMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwOgYDVR0fBDMwMTAvoC2gK4YpaHR0cDovL2NkcC50aGF3 dGUuY29tL1RoYXd0ZVJTQUNBMjAxOC5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1s AQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAI BgZngQwBAgIwbwYIKwYBBQUHAQEEYzBhMCQGCCsGAQUFBzABhhhodHRwOi8vc3Rh dHVzLnRoYXd0ZS5jb20wOQYIKwYBBQUHMAKGLWh0dHA6Ly9jYWNlcnRzLnRoYXd0 ZS5jb20vVGhhd3RlUlNBQ0EyMDE4LmNydDAMBgNVHRMBAf8EAjAAMIIBAwYKKwYB BAHWeQIEAgSB9ASB8QDvAHYA9lyUL9F3MCIUVBgIMJRWjuNNExkzv98MLyALzE7x ZOMAAAF1wROLGQAABAMARzBFAiAg30isTGXuN6Ic5TDoFJvp68Stq8tusv/ZJQdh LRONJwIhAI0XuyQ9Pq6yuJHZsl5K9qIyAh/fqeivww8W7CHR8ypaAHUARJRlLrDu zq/EQAfYqP4owNrmgr7YyzG1P9MzlrW2gagAAAF1wROLGwAABAMARjBEAiAdgQ+d LUctOlqa+uKwBIyKusu4QOlT6szj/tetr+Ad/QIgdNTNpUPjO6HpsgRMmquqTa2V mFYKJP7GntixRaeVCQYwDQYJKoZIhvcNAQELBQADggEBACyf7APoG/LYw+KQm0sk O9PFYzm5UDRYgHB14qvvbS5UCtWo1tOLA268gtIc/KpBYc3igHiHTVK6rPYpg3A1 rRqQHWkv4bETiuxcHLFtmw1clVxIs72ItL1kID+5qfJXPI7aPEwD4CDWkSr5128W mH6tM6ya5eZ0PguROz5//CxIqCpKckrCVck550/pHVL1pKV5bQpnlica5Zw2HF+8 HGw+n8/Mt/bFtOs44Bn+K0D8WbkCSaSr11sFwvGg5g1+Q/oo8iARcIWP21lS+JEh GLFn3DjaUABQLqfYVIHHUjzmBLDWQuTePGTlbF+XiEw7rj8y0OkzwnvrarjvPQ3+ i14= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfTwbO2pmLftP2wbzgE0 Yh3XQtXSOdxfW9HMNouMce+bo+Wu9E+aJIbEv6GYIXC0yqhOfDv8LSvz2ytcsm2p BVmN9ojgYiOhHaKwTs08PTFaNljxwcH5NzlzDIXCnMSQYgZ0McGyEF+PyONJtK9S JussxQTIrZxS0Gxgob6cQmcJ1Xd72whIDrT6z19gTRKAs3dWuQRVCfnyzRHbrDzY LUaZMRJsQaSwVjG366lAfFZaohH4ZfPRKibpFv+p0E/3MuE4pUTuHj3gJxQ+TiAr KmrnwxArT85/qhsQdloS0fTP/LYbWPDolnwT4LKGxT0qsizKtmISSRpf5/3metnc 6QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16328766251697099360746281004145910392 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-13 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-14 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gauteng' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Centurion' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Medicharge' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.vericlaim.co.za' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21455057541784239606980772255406329375266144905403847099653950852196413452590186563478248096759388012115544047826360021039639140041544658123186643518888438975616454027720176354978547794328163235037177780277878055790523419542316550800330982547382378622907246757099457485987676017640789910228023475460879321454687583419163142923785269651306686431606577988191938646334067461824173099123583508865389254114680033506633980706614683347714238224361864059590838067109027297384689121540845093128674077828884583819385419094521113353205710212698046814410906725938162100078056350048460540923723039845453510114875687150940151471337 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b0b1e3d555206a45a7f0c3b25b1c89f2719d95d0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vericlaim.co.za' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vericlaim.co.za' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000175c1138b190000040300473045022020df48ac4c65ee37a21ce530e8149be9ebc4adabcb6eb2ffd92507612d138d270221008d17bb243d3eaeb2b891d9b25e4af6a232021fdfa9e8afc30f16ec21d1f32a5a0075004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a800000175c1138b1b000004030046304402201d810f9d2d472d3a5a9afae2b0048c8abacbb840e953eacce3fed7adafe01dfd022074d4cda543e33ba1e9b2044c9aabaa4dad9598560a24fec69ed8b145a7950906 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 002c9fec03e81bf2d8c3e2909b4b243bd3c56339b9503458807075e2abef6d2e540ad5a8d6d38b036ebc82d21cfcaa4161cde28078874d52baacf629837035ad1a901d692fe1b1138aec5c1cb16d9b0d5c955c48b3bd88b4bd64203fb9a9f2573c8eda3c4c03e020d6912af9d76f16987ead33ac9ae5e6743e0b913b3e7ffc2c48a82a4a724ac255c939e74fe91d52f5a4a5796d0a6796271ae59c361c5fbc1c6c3e9fcfccb7f6c5b4eb38e019fe2b40fc59b90249a4abd75b05c2f1a0e60d7e43fa28f2201170858fdb5952f8912118b167dc38da5000502ea7d85481c7523ce604b0d642e4de3c64e56c5f97884c3bae3f32d0e933c27beb6ab8ef3d0dfe8b5e