becure.bertelsmann.com
- Bertelsmann SE & Co. KGaA -
Issued by thawte SSL CA - G2
About this certificate
This digital certificate with serial number 6b:20:87:e3:17:49:62:51:2d:a4:f3:1a:48:18:4b:9e was issued on by thawte, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Bertelsmann SE & Co. KGaA
Organization:
Bertelsmann SE & Co. KGaA
State / Province:
Nordrhein-Westfalen
Locality: Guetersloh
Country: DE
Locality: Guetersloh
Country: DE
thawte, Inc.
Organization:
thawte, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 6b:20:87:e3:17:49:62:51:2d:a4:f3:1a:48:18:4b:9eSerial Number (int): 142396305165755367698445614574151945118
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60
Fingerprint (sha1): b6:d2:15:77:e4:81:fe:ec:42:a5:b2:48:21:1e:bb:fa:e7:ea:60:52
Fingerprint (sha256): 62:cf:d8:07:e8:89:9b:e3:63:de:60:32:95:16:c9:96:73:fc:b7:18:90:6f:73:d7:10:2c:fb:83:cf:32:5d:45
Issuing Certificate URL: http://tj.symcb.com/tj.crt
Revocation information
OCSP Server: http://tj.symcd.comCRL Distribution Point: http://tj.symcb.com/tj.crl
Check the revocation status for certificate becure.bertelsmann.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for becure.bertelsmann.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
becure.bertelsmann.com
Other certificates including the domain name bertelsmann.com
(limited to 100 certificates)
www.invoice.bertelsmann.com
benet.bertelsmann.com
www.benet.bertelsmann.com
www.benet.bertelsmann.com
bwise-test.bertelsmann.com
forward.bertelsmann.com
invoice-admin.bertelsmann.com
becash.bertelsmann.com
*.benet.bertelsmann.com
alumni.bertelsmann.com
www.bertelsmann.com
www.im.bertelsmann.com
deac.bertelsmann.de
benet.bertelsmann.com
BECASH.BERTELSMANN.COM
becure-web.bertelsmann.com
globaldoc.bertelsmann.com
skypetmg.bertelsmann.de
www.benet.bertelsmann.com
api.bertelsmann.com
deac.bertelsmann.de
divisionalreportingserver.bertelsmann.de
skypetmg.bertelsmann.de
invoice.bertelsmann.com
becure-web.bertelsmann.com
socialcloud.bertelsmann.com
globaldoc-qa.bertelsmann.com
fund.bertelsmann.com
www.bertelsmann.com
forward.bertelsmann.com
aci.training.bertelsmann.com
www.bertelsmann.com
benet.bertelsmann.com
csacde.bertelsmann.de
dev.carl.bertelsmann.com
bertelsmann.de
becash.bertelsmann.com
peoplenet.bertelsmann.de
invoice.bertelsmann.com
bertelsmann.de
bertelsmann.de
gtlbml3lf0200.bagmail.net
alumni.bertelsmann.com
becure.bertelsmann.com
fund.bertelsmann.com
becash.bertelsmann.com
becash.bertelsmann.com
skypetmg.bertelsmann.de
becash.bertelsmann.com
sni13332gl.wpc.edgecastcdn.net
bertelsmann.de
bertelsmann.de
becure.bertelsmann.com
bwise-reporting.bertelsmann.com
alumni.bertelsmann.com
www.benet.bertelsmann.com
bertelsmann.de
becure.bertelsmann.com
skypetmg.bertelsmann.de
becure.bertelsmann.com
alumni.bertelsmann.com
gtlbml3lf0200.bagmail.net
www.benet.bertelsmann.com
peoplenet.bertelsmann.de
sni2872fgl.wpc.edgecastcdn.net
*.benet.bertelsmann.com
becure-web.bertelsmann.com
csacde.bertelsmann.de
www.bertelsmann.com
www.benet.bertelsmann.com
becure.bertelsmann.com
becash.bertelsmann.com
www.benet.bertelsmann.com
becash-test.bertelsmann.com
becure-web.bertelsmann.com
benet.bertelsmann.com
becure.bertelsmann.com
www.bertelsmann.com
www.benet.bertelsmann.com
forward.bertelsmann.com
skypetmg.bertelsmann.de
sni1a676gl.wpc.edgecastcdn.net
becash.bertelsmann.com
*.bertelsmann.com
*.bertelsmann.com
benet.bertelsmann.com
bebc.bertelsmann.com
benet.bertelsmann.com
becure.bertelsmann.com
api.bertelsmann.com
benet.bertelsmann.com
benet-ticker.bertelsmann.com
alumni.bertelsmann.com
bwise.bertelsmann.com
becash.bertelsmann.com
bwise-test.bertelsmann.com
sf-becure.mag.bertelsmann.com
benet.bertelsmann.de
gtlbml3lf0200.bagmail.net
api.bertelsmann.com
benet.bertelsmann.com
www.benet.bertelsmann.com
www.benet.bertelsmann.com
bwise-test.bertelsmann.com
forward.bertelsmann.com
invoice-admin.bertelsmann.com
becash.bertelsmann.com
*.benet.bertelsmann.com
alumni.bertelsmann.com
www.bertelsmann.com
www.im.bertelsmann.com
deac.bertelsmann.de
benet.bertelsmann.com
BECASH.BERTELSMANN.COM
becure-web.bertelsmann.com
globaldoc.bertelsmann.com
skypetmg.bertelsmann.de
www.benet.bertelsmann.com
api.bertelsmann.com
deac.bertelsmann.de
divisionalreportingserver.bertelsmann.de
skypetmg.bertelsmann.de
invoice.bertelsmann.com
becure-web.bertelsmann.com
socialcloud.bertelsmann.com
globaldoc-qa.bertelsmann.com
fund.bertelsmann.com
www.bertelsmann.com
forward.bertelsmann.com
aci.training.bertelsmann.com
www.bertelsmann.com
benet.bertelsmann.com
csacde.bertelsmann.de
dev.carl.bertelsmann.com
bertelsmann.de
becash.bertelsmann.com
peoplenet.bertelsmann.de
invoice.bertelsmann.com
bertelsmann.de
bertelsmann.de
gtlbml3lf0200.bagmail.net
alumni.bertelsmann.com
becure.bertelsmann.com
fund.bertelsmann.com
becash.bertelsmann.com
becash.bertelsmann.com
skypetmg.bertelsmann.de
becash.bertelsmann.com
sni13332gl.wpc.edgecastcdn.net
bertelsmann.de
bertelsmann.de
becure.bertelsmann.com
bwise-reporting.bertelsmann.com
alumni.bertelsmann.com
www.benet.bertelsmann.com
bertelsmann.de
becure.bertelsmann.com
skypetmg.bertelsmann.de
becure.bertelsmann.com
alumni.bertelsmann.com
gtlbml3lf0200.bagmail.net
www.benet.bertelsmann.com
peoplenet.bertelsmann.de
sni2872fgl.wpc.edgecastcdn.net
*.benet.bertelsmann.com
becure-web.bertelsmann.com
csacde.bertelsmann.de
www.bertelsmann.com
www.benet.bertelsmann.com
becure.bertelsmann.com
becash.bertelsmann.com
www.benet.bertelsmann.com
becash-test.bertelsmann.com
becure-web.bertelsmann.com
benet.bertelsmann.com
becure.bertelsmann.com
www.bertelsmann.com
www.benet.bertelsmann.com
forward.bertelsmann.com
skypetmg.bertelsmann.de
sni1a676gl.wpc.edgecastcdn.net
becash.bertelsmann.com
*.bertelsmann.com
*.bertelsmann.com
benet.bertelsmann.com
bebc.bertelsmann.com
benet.bertelsmann.com
becure.bertelsmann.com
api.bertelsmann.com
benet.bertelsmann.com
benet-ticker.bertelsmann.com
alumni.bertelsmann.com
bwise.bertelsmann.com
becash.bertelsmann.com
bwise-test.bertelsmann.com
sf-becure.mag.bertelsmann.com
benet.bertelsmann.de
gtlbml3lf0200.bagmail.net
api.bertelsmann.com
Certificate
The complete raw certificate details for becure.bertelsmann.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE4DCCA8igAwIBAgIQayCH4xdJYlEtpPMaSBhLnjANBgkqhkiG9w0BAQsFADBB MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMRswGQYDVQQDExJ0 aGF3dGUgU1NMIENBIC0gRzIwHhcNMTYwMzA5MDAwMDAwWhcNMTcwMjE2MjM1OTU5 WjCBhTELMAkGA1UEBhMCREUxHDAaBgNVBAgTE05vcmRyaGVpbi1XZXN0ZmFsZW4x EzARBgNVBAcUCkd1ZXRlcnNsb2gxIjAgBgNVBAoUGUJlcnRlbHNtYW5uIFNFICYg Q28uIEtHYUExHzAdBgNVBAMUFmJlY3VyZS5iZXJ0ZWxzbWFubi5jb20wggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr0bfCE2l+L+FW7FV479CfkKfldHlX Cqd1jFkqlJBKNe872t2PUyW3abDDprs3j63cjEoIdALI0e+SfcsmFqp/4Pj+gDTD ussUkTAXzVAEWb812X1agqGuTM5euh9AH9QxZH/cSUBo8lTTEJuJ3D7VOhPjOf3I PVFaQACheARegLhcV6B9UBp7/6/uKwg0K8tgd7Mrv/2LGBwJac98Cn4KnyEu+9UC ozdQ9DrxrsmeJQnYYVnqbDbV6XzuxGDPjzGyciM4EYmyjcMxfnCwnlzzF5hFZNNx dxvCFojTEjMRFgmLnZJ3TzKjOYf02L5Ea4fjqx3YBkPaIZKgsojVsIGrAgMBAAGj ggGNMIIBiTAhBgNVHREEGjAYghZiZWN1cmUuYmVydGVsc21hbm4uY29tMAkGA1Ud EwQCMAAwbgYDVR0gBGcwZTBjBgZngQwBAgIwWTAmBggrBgEFBQcCARYaaHR0cHM6 Ly93d3cudGhhd3RlLmNvbS9jcHMwLwYIKwYBBQUHAgIwIwwhaHR0cHM6Ly93d3cu dGhhd3RlLmNvbS9yZXBvc2l0b3J5MA4GA1UdDwEB/wQEAwIFoDAfBgNVHSMEGDAW gBTCT0hX/NFPmsBdOH0OBdvZLrVSYDArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8v dGouc3ltY2IuY29tL3RqLmNybDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8vdGouc3ltY2Qu Y29tMCYGCCsGAQUFBzAChhpodHRwOi8vdGouc3ltY2IuY29tL3RqLmNydDATBgor BgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKputhzItgu35HvnQ 9/lPY01RhJRYpBwuUbPvVmONJiSGwo866t+NZ+J06nU2rp3USfqdGZ6iKEPIJdUv Pf3wsM653lizCd57GbGgr7hv2Nmj1eU+TrZM/eepUg5TsrLX0RewxYpyiHAtk2yp 1up45dbzK44lyTOa1wFcqzxPN0W0b9fnFoiZPtxXCJnWDP+OS/fxnfgLRVEvF0s3 87ql3GNCNBkfM8zlNVIcIPN48xGQMGVGVW/BB6xfZHfIoaok+Vlg2blY9D7xFIeD htqcGNedNHOMostO83Xsez/bkjiNlEN4GK8RQ1VSgphN4bLFRzt8kqmtYhUY6mX6 JCz9nQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9G3whNpfi/hVuxVeO/Q n5Cn5XR5VwqndYxZKpSQSjXvO9rdj1Mlt2mww6a7N4+t3IxKCHQCyNHvkn3LJhaq f+D4/oA0w7rLFJEwF81QBFm/Ndl9WoKhrkzOXrofQB/UMWR/3ElAaPJU0xCbidw+ 1ToT4zn9yD1RWkAAoXgEXoC4XFegfVAae/+v7isINCvLYHezK7/9ixgcCWnPfAp+ Cp8hLvvVAqM3UPQ68a7JniUJ2GFZ6mw21el87sRgz48xsnIjOBGJso3DMX5wsJ5c 8xeYRWTTcXcbwhaI0xIzERYJi52Sd08yozmH9Ni+RGuH46sd2AZD2iGSoLKI1bCB qwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 142396305165755367698445614574151945118 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-09 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-16 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Guetersloh' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Bertelsmann SE & Co. KGaA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'becure.bertelsmann.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21690165853252888891638970212720961431522243882408955673375191490321492382480054405824559789763935466803568336064084727384981027982017499205342945014493644553318222387249528181651769155316804842434187154093177654997925888641589138418731914259881194325248277249132826412292903971818566978483666008347604995483394647317708793600620512012969900323903283922946246232343674895066812912996744304356752814829379992122392334425257840074549214613966497527756485134208221764969467943944099189981237264821293618855784577991256133620362492663849659567095134503251746829210315781067077482895150304411022577024803914602141702980011 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'becure.bertelsmann.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 002a9bad87322d82edf91ef9d0f7f94f634d51849458a41c2e51b3ef56638d262486c28f3aeadf8d67e274ea7536ae9dd449fa9d199ea22843c825d52f3dfdf0b0ceb9de58b309de7b19b1a0afb86fd8d9a3d5e53e4eb64cfde7a9520e53b2b2d7d117b0c58a7288702d936ca9d6ea78e5d6f32b8e25c9339ad7015cab3c4f3745b46fd7e71688993edc570899d60cff8e4bf7f19df80b45512f174b37f3baa5dc634234191f33cce535521c20f378f31190306546556fc107ac5f6477c8a1aa24f95960d9b958f43ef114878386da9c18d79d34738ca2cb4ef375ec7b3fdb92388d94437818af1143555282984de1b2c5473b7c92a9ad621518ea65fa242cfd9d