ssl-certificate-center-enterprise-thawte-de-ilg.verisign.net

- Symantec Corporation -

Issued by thawte Extended Validation SSL CA

About this certificate

This digital certificate with serial number 14:fd:ad:2a:b4:91:bb:73:c1:ba:4b:fa:7b:9e:16:49 was issued on by thawte, Inc..

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Symantec Corporation

Company registration number: 2158113
Organization: Symantec Corporation
Organization unit: Infrastructure Operations
State / Province: California
Locality: Mountain View
Country: US

thawte, Inc.

Organization: thawte, Inc.
Organization unit: Terms of use at https://www.thawte.com/cps (c)06
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 14:fd:ad:2a:b4:91:bb:73:c1:ba:4b:fa:7b:9e:16:49
Serial Number (int): 27901723261235367415733530815440492105
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: cd:32:e2:f2:5d:25:47:02:aa:8f:79:4b:32:ee:03:99:fd:30:49:d1

Fingerprint (sha1): dc:40:78:47:bd:d1:4d:6d:e3:f7:b3:b9:67:e9:d9:a5:98:0d:7a:ac
Fingerprint (sha256): 63:59:83:35:d7:01:31:8e:fd:8f:0d:9f:d0:1f:fb:66:e8:de:f2:28:48:b3:67:bf:c9:fb:0a:0e:4b:36:03:b5

Issuing Certificate URL: http://crl.thawte.com/ThawteEVCA2006.cer

Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://crl.thawte.com/ThawteEVCA2006.crl

Check the revocation status for certificate ssl-certificate-center-enterprise-thawte-de-ilg.verisign.net

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl-certificate-center-enterprise-thawte-de-ilg.verisign.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ssl-certificate-center-enterprise-thawte-de.verisign.net
ssl-certificate-center-enterprise.thawte.de
ssl-certificate-center-enterprise-thawte-de-ilg.verisign.net

Other certificates including the domain name verisign.net

(limited to 100 certificates)
www.verisign.com
ssl-certificate-center-emea-ilg.verisign.net
ssl-certificate-center-enterprise-ncsa-ilg.verisign.net
query-emea-ilg.verisign.net
pilot-ssl-certificate-center-enterprise-apac-ilg.verisign.net
pilot-ssl-certificate-center-enterprise-apac.verisign.net
pkiservices.verisign.com
SSL-CERTIFICATE-CENTER.THAWTE.FR
eol-redirect.verisign.net
ssl-certificate-center-ncsa-ilg.verisign.net
ssl-certificate-center.thawte.com
www.verisign.com
www.verisign.com
pilot-ssl-certificate-center-enterprise-emea-ilg.verisign.net
pilot-ssl-certificate-center-enterprise-apac-ilg.verisign.net
ssl-certificate-center-ncsa.verisign.net
trustseal.verisign.com
pilot-ssl-certificate-center-enterprise-ncsa-ilg.verisign.net
ssl-certificate-center-ncsa-ilg.verisign.net
pilot-ssl-certificate-center.thawte.com
pilot-verify-ilg.verisign.net
query-ncsa.verisign.net
ssl-certificate-center-enterprise-emea.verisign.net
ssl-certificate-center-ncsa-ilg.verisign.net
www.verisign.com
ssl-certificate-center-emea-ilg.verisign.net
pilot-ssl-certificate-center-ncsa-ilg.verisign.net
pilot-ssl-certificate-center-emea-ilg.verisign.net
eol-redirect-thawte.verisign.net
vipuserservices.verisign.com
ssl-certificate-center-enterprise.thawte.fr
pilot-ssl-certificate-center-apac-ilg.verisign.net
pilot-ssl-certificate-center-emea-ilg.verisign.net
maintenance.verisign.net
www.verisign.com
www.verisign.com
pilot-ssl-certificate-center-enterprise-apac.verisign.net
blogs.thawte.com
pilot-ssl-certificate-center-enterprise-emea-ilg.verisign.net
pilot-ssl-certificate-center-ncsa-ilg.verisign.net
ssl-certificate-center-enterprise-apac-ilg.verisign.net
ssl-certificate-center-ncsa-ilg.verisign.net
ssl-certificate-center.thawte.de
pilot-verify.thawte.com
SSL-CERTIFICATE-CENTER.THAWTE.DE
www.verisign.com
ssl-certificate-center-enterprise.thawte.fr
pilot-pkiservices.verisign.com
ssl-certificate-center-apac-ilg.verisign.net
pilot-ssl-certificate-center.thawte.de
pilot-ssl-certificate-center-emea-ilg.verisign.net
pilot-ssl-certificate-center-enterprise-ncsa-ilg.verisign.net
ssl-certificate-center-enterprise-ncsa-ilg.verisign.net
test-products.verisign.com
pilot-ssl-certificate-center-enterprise-apac-ilg.verisign.net
ssl-certificate-center-enterprise-thawte-de-ilg.verisign.net
verify-ilg.verisign.net
pilot-ssl-certificate-center-enterprise.thawte.de
eol-redirect-thawte.verisign.net
maintenance.verisign.net
pilot-ssl-certificate-center-apac.verisign.net
ssl-certificate-center-emea.verisign.net
www.verisign.com
pilot-ssl-certificate-center-enterprise.thawte.de
trustseal.verisign.com
www.verisign.com
blogs.geotrust.com
pilot-verify.thawte.com
pilot-ssl-certificate-center-enterprise-ncsa-ilg.verisign.net
query-apac.verisign.net
SSL-CERTIFICATE-CENTER.THAWTE.DE
ssl-certificate-center-enterprise-emea.verisign.net
ssl-certificate-center-enterprise-thawte-ilg.verisign.net
pkiservices.verisign.com
query-emea-ilg.verisign.net
PILOT-SSL-CERTIFICATE-CENTER-ENTERPRISE.THAWTE.FR
pilot-adms.verisign.com
ssl-certificate-center.thawte.fr
knowledge-intl.verisign.net
pilot-verify-ilg.verisign.net
ssl-certificate-center-enterprise-emea-ilg.verisign.net
pilot-ssl-certificate-center-ncsa.verisign.net
pilot-ssl-certificate-center.thawte.com
pilot-ssl-certificate-center-enterprise.thawte.com
ssl-certificate-center-ncsa-ilg.verisign.net
www.verisign.com
ssl-certificate-center-enterprise-ncsa-ilg.verisign.net
pilot-ssl-certificate-center-enterprise-ncsa-ilg.verisign.net
query-ncsa.verisign.net
adms.verisign.com
authconnect-mtv.verisign.com
verify-ilg.verisign.net
pilot-ssl-certificate-center-enterprise-emea-ilg.verisign.net
pilot-ssl-certificate-center.thawte.fr
ssl-certificate-center-ncsa.verisign.net
www.verisign.com
ssl-certificate-center-emea.verisign.net
www.verisign.com
eol-redirect-thawte.verisign.net
pilot-ssl-certificate-center-ncsa-ilg.verisign.net

Certificate

The complete raw certificate details for ssl-certificate-center-enterprise-thawte-de-ilg.verisign.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGOzCCBSOgAwIBAgIQFP2tKrSRu3PBukv6e54WSTANBgkqhkiG9w0BAQUFADCB
izELMAkGA1UEBhMCVVMxFTATBgNVBAoTDHRoYXd0ZSwgSW5jLjE5MDcGA1UECxMw
VGVybXMgb2YgdXNlIGF0IGh0dHBzOi8vd3d3LnRoYXd0ZS5jb20vY3BzIChjKTA2
MSowKAYDVQQDEyF0aGF3dGUgRXh0ZW5kZWQgVmFsaWRhdGlvbiBTU0wgQ0EwHhcN
MTQwNDA5MDAwMDAwWhcNMTYwNDA4MjM1OTU5WjCCASYxEzARBgsrBgEEAYI3PAIB
AxMCVVMxGTAXBgsrBgEEAYI3PAIBAhQIRGVsYXdhcmUxHTAbBgNVBA8TFFByaXZh
dGUgT3JnYW5pemF0aW9uMR0wGwYDVQQKFBRTeW1hbnRlYyBDb3Jwb3JhdGlvbjEQ
MA4GA1UEBRMHMjE1ODExMzELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3Ju
aWExFjAUBgNVBAcUDU1vdW50YWluIFZpZXcxIzAhBgNVBAsUGkluZnJhc3RydWN0
dXJlICBPcGVyYXRpb25zMUUwQwYDVQQDFDxzc2wtY2VydGlmaWNhdGUtY2VudGVy
LWVudGVycHJpc2UtdGhhd3RlLWRlLWlsZy52ZXJpc2lnbi5uZXQwggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxtGWksROJvrR4Q937I+tY/sZyGuY6jwtV
qHN13RWjVDYCsjaryWIvB5z0siw6R3aZHnOt72AYjMKtXqXbGyqOidlrgkoAcjLi
kqwxJ0DTVwl9VoI0R0LXNt4S7ceB/aCWsGXerEFr7OjgwVoAKER89e+8gpLw5thu
O0pM2Vm6WmrzbTX9UxRmqc+sQXsgPvtkOfV8DfdPxlg0WGiL1zTKJpmKj50ngUAW
8cIiGM15me1ATkZAtgHNysLo6JcA1NWImGJM7jziR95+EOFvlNK9zxPnAvJTsaxw
LJHYm3aapVLtUgguJMHuZdLvc+CUUZjeX/pHa2unqz4+xy98Ts87AgMBAAGjggH7
MIIB9zAJBgNVHRMEAjAAMA4GA1UdDwEB/wQEAwIFoDA5BgNVHR8EMjAwMC6gLKAq
hihodHRwOi8vY3JsLnRoYXd0ZS5jb20vVGhhd3RlRVZDQTIwMDYuY3JsMEIGA1Ud
IAQ7MDkwNwYLYIZIAYb4RQEHMAEwKDAmBggrBgEFBQcCARYaaHR0cHM6Ly93d3cu
dGhhd3RlLmNvbS9jcHMwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB8G
A1UdIwQYMBaAFM0y4vJdJUcCqo95SzLuA5n9MEnRMGgGCCsGAQUFBwEBBFwwWjAi
BggrBgEFBQcwAYYWaHR0cDovL29jc3AudGhhd3RlLmNvbTA0BggrBgEFBQcwAoYo
aHR0cDovL2NybC50aGF3dGUuY29tL1RoYXd0ZUVWQ0EyMDA2LmNlcjCBsAYDVR0R
BIGoMIGlgjhzc2wtY2VydGlmaWNhdGUtY2VudGVyLWVudGVycHJpc2UtdGhhd3Rl
LWRlLnZlcmlzaWduLm5ldIIrc3NsLWNlcnRpZmljYXRlLWNlbnRlci1lbnRlcnBy
aXNlLnRoYXd0ZS5kZYI8c3NsLWNlcnRpZmljYXRlLWNlbnRlci1lbnRlcnByaXNl
LXRoYXd0ZS1kZS1pbGcudmVyaXNpZ24ubmV0MA0GCSqGSIb3DQEBBQUAA4IBAQCe
Wl/fsg+JgZK5x1Lp5jGcaOD9T7CgO3JhS0tLhuDeZ85VjKZTP+n90Na5WLszXeQc
/a8O2fxhcbFBKEMpJXLmC68iS0ASz5IRJNL3XyA0dUw1W4kvLq5lFEVsIYKDXPBd
RVwcYzJjKQ4Es/i/LL8WIU6tV+repPx4HoihDXbVeL0HW3PMHpEiWr8S0HHmxbDk
dfOOT79UpngVnoYkJpj72B9DQgDQG+DhLckVmB5IPOLM2zZ4rFcEsl7nr587Xc/9
2s2QDVyP2fWtnrJr79DAH1ZwaCjtu55v4epJjDtOy6rMdPdBFZJy+OZ0mSoTKU2n
7gadu6D9335EP5m8skJn
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbRlpLETib60eEPd+yPr
WP7GchrmOo8LVahzdd0Vo1Q2ArI2q8liLwec9LIsOkd2mR5zre9gGIzCrV6l2xsq
jonZa4JKAHIy4pKsMSdA01cJfVaCNEdC1zbeEu3Hgf2glrBl3qxBa+zo4MFaAChE
fPXvvIKS8ObYbjtKTNlZulpq8201/VMUZqnPrEF7ID77ZDn1fA33T8ZYNFhoi9c0
yiaZio+dJ4FAFvHCIhjNeZntQE5GQLYBzcrC6OiXANTViJhiTO484kfefhDhb5TS
vc8T5wLyU7GscCyR2Jt2mqVS7VIILiTB7mXS73PglFGY3l/6R2trp6s+PscvfE7P
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 27901723261235367415733530815440492105
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.thawte.com/cps (c)06'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte Extended Validation SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2158113'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Mountain View'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Infrastructure  Operations'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'ssl-certificate-center-enterprise-thawte-de-ilg.verisign.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22433137076986513916272251385556361079377431949623885470159227445624131293891771458718227330183655017861117745432692322759461610328348761324721568895254082683586164526244827297849838684317591008715775059601993432936561245811671431474637988713467878201331120690783581549605380998624991939083495095397022414004407911108849374830644334599274227766269268286127691745345433895829834289266325775813878052229542742505809368602346171477204658132160894510945201928074017816416316987484623613267345377503134588051678436780256274648354332261739864000591668947278100067623862340374523959776535815604967063118827623712389724032827
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.thawte.com/ThawteEVCA2006.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.48.1 (Thawte EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName cd32e2f25d254702aa8f794b32ee0399fd3049d1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.thawte.com/ThawteEVCA2006.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (168 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl-certificate-center-enterprise-thawte-de.verisign.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl-certificate-center-enterprise.thawte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl-certificate-center-enterprise-thawte-de-ilg.verisign.net'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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