*.overtureshops.com
Issued by Thawte RSA CA 2018
About this certificate
This digital certificate with serial number 03:8d:7c:a6:b8:51:96:c3:58:b7:23:0d:09:c4:78:7e was issued on by DigiCert Inc.
With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.overtureshops.com
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:8d:7c:a6:b8:51:96:c3:58:b7:23:0d:09:c4:78:7eSerial Number (int): 4722326072117865246343250314352949374
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: af:b3:60:a1:42:3c:8d:04:5e:bd:c0:23:af:64:f7:a1:a1:eb:9e:a5
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a
Fingerprint (sha1): 1b:de:e5:13:25:40:5a:f2:06:26:17:6c:5f:b1:fa:ea:8b:d8:91:8f
Fingerprint (sha256): 5e:d8:14:9c:db:25:54:df:cc:a4:9f:e3:3d:a8:9c:b6:0c:96:21:32:90:31:e2:19:a8:1b:12:27:ea:ee:f5:42
Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt
Revocation information
OCSP Server: http://status.thawte.comCRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl
Check the revocation status for certificate *.overtureshops.com
18
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.overtureshops.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.overtureshops.com
thefrontierstore.com
www.thefrontierstore.com
wowmarketplace.wowinc.com
sso.thefrontierstore.com
mywackerneuson.com
www.mywackerneuson.com
shop.sunnyd.com
shop.funfetti.com
www.mccafefamilygames.com
mccafefamilygames.com
shopdevrystore.com
www.shopdevrystore.com
brandstore.faro.com
www.responsiblysourcedcoffee.com
responsiblysourcedcoffee.com
shop.delivery.com
na.osf.store
thefrontierstore.com
www.thefrontierstore.com
wowmarketplace.wowinc.com
sso.thefrontierstore.com
mywackerneuson.com
www.mywackerneuson.com
shop.sunnyd.com
shop.funfetti.com
www.mccafefamilygames.com
mccafefamilygames.com
shopdevrystore.com
www.shopdevrystore.com
brandstore.faro.com
www.responsiblysourcedcoffee.com
responsiblysourcedcoffee.com
shop.delivery.com
na.osf.store
Other certificates including the domain name overtureshops.com
(limited to 100 certificates)
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
*.overtureshops.com
Certificate
The complete raw certificate details for *.overtureshops.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgIQA418prhRlsNYtyMNCcR4fjANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMRswGQYDVQQDExJUaGF3dGUgUlNBIENBIDIwMTgwHhcN MjIxMTI0MDAwMDAwWhcNMjMwMjExMjM1OTU5WjAeMRwwGgYDVQQDDBMqLm92ZXJ0 dXJlc2hvcHMuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXXI BXHoHVKpdI6DTo5/cwiy4IjZVBxMeojhnm6w+kAV+ISx24gqu8wNmkCWhjEyeZD5 XZT49wP/CmtZ+IQyzrhZ7ablVtNjwCSgTMPo8HONr1LeBdO0WZwlxbcUXH3g75ZK hvaVagX2xYE4gnzrGWUsRgnlSbocq7jOmkPuhq1lBwMnCmvg4wSV+uK8HxvUmhLs QJWq7ygUctv4ZMen+tqxy1K3hiJa+WZUm76XNRZ2lGjDurmknbS8oFho2ZmX6h6b nFuIMHpWWU9c57zL/WyaxAry2FDBvx/Mf0x4+LUR2KrWdco0yVOdVpiaa6s7QkgA Vb+Q59AvouPH9ey73QIDAQABo4IDLzCCAyswHwYDVR0jBBgwFoAUo8heZVTlMHjB BeoHCmpZzLn+3lowHQYDVR0OBBYEFK+zYKFCPI0EXr3AI69k96Gh656lMIIBqwYD VR0RBIIBojCCAZ6CEyoub3ZlcnR1cmVzaG9wcy5jb22CFHRoZWZyb250aWVyc3Rv cmUuY29tghh3d3cudGhlZnJvbnRpZXJzdG9yZS5jb22CGXdvd21hcmtldHBsYWNl Lndvd2luYy5jb22CGHNzby50aGVmcm9udGllcnN0b3JlLmNvbYISbXl3YWNrZXJu ZXVzb24uY29tghZ3d3cubXl3YWNrZXJuZXVzb24uY29tgg9zaG9wLnN1bm55ZC5j b22CEXNob3AuZnVuZmV0dGkuY29tghl3d3cubWNjYWZlZmFtaWx5Z2FtZXMuY29t ghVtY2NhZmVmYW1pbHlnYW1lcy5jb22CEnNob3BkZXZyeXN0b3JlLmNvbYIWd3d3 LnNob3BkZXZyeXN0b3JlLmNvbYITYnJhbmRzdG9yZS5mYXJvLmNvbYIgd3d3LnJl c3BvbnNpYmx5c291cmNlZGNvZmZlZS5jb22CHHJlc3BvbnNpYmx5c291cmNlZGNv ZmZlZS5jb22CEXNob3AuZGVsaXZlcnkuY29tggxuYS5vc2Yuc3RvcmUwDgYDVR0P AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA6BgNVHR8E MzAxMC+gLaArhilodHRwOi8vY2RwLnRoYXd0ZS5jb20vVGhhd3RlUlNBQ0EyMDE4 LmNybDA+BgNVHSAENzA1MDMGBmeBDAECATApMCcGCCsGAQUFBwIBFhtodHRwOi8v d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwbwYIKwYBBQUHAQEEYzBhMCQGCCsGAQUFBzAB hhhodHRwOi8vc3RhdHVzLnRoYXd0ZS5jb20wOQYIKwYBBQUHMAKGLWh0dHA6Ly9j YWNlcnRzLnRoYXd0ZS5jb20vVGhhd3RlUlNBQ0EyMDE4LmNydDAJBgNVHRMEAjAA MBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBHFMMEg2B2 0ZMo52iVnm6ad+c3EVLocEc2Wen/t2MTPFI+T3t9iZU8rPENh/l5F+McrID4TcXJ t874PnNavsmFLXFSZmwqRtgxS60V0RhMRUTu2JcoxfmQZ13D74QoQrAZq4yL1Xkw iZJyrgXXIw51/2yJG0bgG4V9HbEoMefBsjtWZXfgzp0TNRGFTck8imrk5lrnhRwz p4nSLQYAwck0h75IcW3kZBLlxkt32oUHGBRhxwfbIwLzQbfW7CkvJ7Yuaxy9+1ql NNWThndSmkApOP6yQt5LBpv8FyQHU4OnY6D8GIpt3Ji+74HQBExel7R8EkL82E1c CTwOJS1FdEIg -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXXIBXHoHVKpdI6DTo5/ cwiy4IjZVBxMeojhnm6w+kAV+ISx24gqu8wNmkCWhjEyeZD5XZT49wP/CmtZ+IQy zrhZ7ablVtNjwCSgTMPo8HONr1LeBdO0WZwlxbcUXH3g75ZKhvaVagX2xYE4gnzr GWUsRgnlSbocq7jOmkPuhq1lBwMnCmvg4wSV+uK8HxvUmhLsQJWq7ygUctv4ZMen +tqxy1K3hiJa+WZUm76XNRZ2lGjDurmknbS8oFho2ZmX6h6bnFuIMHpWWU9c57zL /WyaxAry2FDBvx/Mf0x4+LUR2KrWdco0yVOdVpiaa6s7QkgAVb+Q59AvouPH9ey7 3QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 4722326072117865246343250314352949374 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-24 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-11 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.overtureshops.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21897306899147986440243348079424248391547242673476454695852164285833328551665099116090739512627518741412893069673534830551813809054307643433648432201768404808214966395666483906458213033070025052636781669028196640787990359827218050334054808285415326171442294123999473900731505030412795281559490307979046121536805864040955161145114676223640330464297352336546403682450416939417734788742878762590208495886923175381600986466705430817627122261466743477200655812737424171436425678594260259580733244004542517885026954290952918529668339559876106579468102052263524528371256530679641529271080614163875565079998758726887814249437 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) afb360a1423c8d045ebdc023af64f7a1a1eb9ea5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (418 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.overtureshops.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thefrontierstore.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thefrontierstore.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wowmarketplace.wowinc.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.thefrontierstore.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mywackerneuson.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mywackerneuson.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.sunnyd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.funfetti.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mccafefamilygames.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mccafefamilygames.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopdevrystore.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shopdevrystore.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandstore.faro.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.responsiblysourcedcoffee.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'responsiblysourcedcoffee.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.delivery.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'na.osf.store' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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