search-thawte-de.symantec.com

- Thawte, Inc. -

Issued by thawte EV SSL CA - G3

About this certificate

This digital certificate with serial number 4b:1d:bc:10:a9:5a:32:7f:29:2e:d0:b8:74:95:78:a1 was issued on by thawte, Inc..

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Thawte, Inc.

Company registration number: 3898261
Organization: Thawte, Inc.
Organization unit: IT Security
State / Province: California
Locality: Mountain View
Country: US

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4b:1d:bc:10:a9:5a:32:7f:29:2e:d0:b8:74:95:78:a1
Serial Number (int): 99846490705834295658882830273235744929
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: f0:70:51:da:d3:2a:91:4f:52:77:d7:86:77:74:0f:ce:71:1a:6c:22

Fingerprint (sha1): 81:ec:10:3c:1b:94:23:b9:aa:1e:a3:ca:0b:f2:c2:3c:0e:66:fd:72
Fingerprint (sha256): 66:2d:fd:7f:df:c6:a2:23:c8:f4:5c:55:f1:35:94:81:8c:67:52:53:65:8c:6d:e5:e3:22:22:be:39:b9:61:6f

Issuing Certificate URL: http://ti.symcb.com/ti.crt

Revocation information

OCSP Server: http://ti.symcd.com
CRL Distribution Point: http://ti.symcb.com/ti.crl

Check the revocation status for certificate search-thawte-de.symantec.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for search-thawte-de.symantec.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

search.thawte.de
search-thawte-de-web-asb.symantec.com
search-thawte-de-web-tus.symantec.com
search-thawte-de.symantec.com

Other certificates including the domain name symantec.com

(limited to 100 certificates)
787.Symantec.com
www.verisign.com
dub2comgwypin01.symc.symantec.com
amtrust.kinnser.com
statuspage.io
msl.ges.symantec.com
revprouat.symc.symantec.com
shasta-anti-spam-stats.symantec.com
tools.symc.symantec.com
cloudmarketplace.status.symantec.com
UAT-OIDU1.GES.SYMANTEC.COM
statuspage.io
symantec.com
kb-thawte.symantec.com
d78de818-a0eb-4260-806a-d56c49087402.ds.dlp.protect.symantec.com
cwp.status.symantec.com
IMWS-SYMWISE-QA.SYMC.SYMANTEC.COM
CPESLB1.GES.SYMANTEC.COM
statuspage.io
mssvpn.symantec.com
c6aea99a-29b8-4e5c-8305-294aeddce88d.ds.dlp.protect.symantec.com
status.accelitas.io
packages-mountainview.symc.symantec.com
cnniptccmpin13.net.symantec.com
asb1-mpi-ise-2.net.symantec.com
firewallendpoint.vip.symantec.com
AEMOKMANALYTICS-UAT.SYMC.SYMANTEC.COM
QLIKSENSEUAT.SYMANTEC.COM
statuspage.io
statuspage.io
cwp.status.symantec.com
ica.symantec.com
MVC1IPTEGWPIN01.NET.SYMANTEC.COM
eloqua-trustservices.symantec.com
statuspage.io
ssl-certificate-center-enterprise-ncsa-ilg.verisign.net
licensing.dmas.symantec.com
pgp.symantec.com
su1-staging.nbu.symantec.com
help.gitlinq.com
usea1.r3.securitycloud.symantec.com
statuspage.io
cons-support-jp1.symantec.com
vip.symantec.com
DEEPSIGHTADMIN.SYMANTEC.COM
mftint-nam.ges.symantec.com
content-symwise-app-west.symc.symantec.com
tus3tmsappdin01.symc.symantec.com
shasta-rrs-test.symantec.com
www-uat-west.symantec.com
swi-inv-admin-uat.symc.symantec.com
rundeck-tus3.ges.symantec.com
fusestatus.com
scmnet50qa.symc.symantec.com
www.symantec.com
telemetry.veritas.com
PARTNERNET-DEV.NBU.SYMANTEC.COM
ssltest-evsgc.jp.websecurity.symantec.com
94b36575-cdd1-4708-8061-e12bf9a11ad1.ds.dlp.protect.symantec.com
INTMPG-QA.SYMC.SYMANTEC.COM
cebealt-int2.norton.com
EMS-UAT-LICENSING.SYMANTEC.COM
sice.stage.enc.protect.symantec.com
contentauthor-uat1.symc.Symantec.com
loggeruat.cclab.symantec.com
ssltest-sha2fc.jp.websecurity.symantec.com
icdm.status.symantec.com
kb-thawte-de.symantec.com
csas.norton.com
dmshealth.dealertrack.com
SPR1IPTCUCPIN01.symc.symantec.com
analyzer.symantec.com
IMWS-SYMWISE-DEV-APP-TUS3.SYMC.SYMANTEC.COM
jira.ges.symantec.com
tus1csswebpin01.symc.symantec.com
appisolation.status.symantec.com
jenkins-stage-tus3.ges.symantec.com
tenant0-p01-smtp.na.dlp.protect.symantec.com
statuspage.io
ASB1VVCVCCPIN01.symc.symantec.com
shelladdin.symantec.com
userservices.vip.symantec.com
statuspage.io
products.websecurity.symantec.com
symdl.symc.symantec.com
6h60rqz7vjhj.stspg-customer.com.como3.pl
TUSVC-09.SYMC.SYMANTEC.COM
SYMPAY-QA22.GES.SYMANTEC.COM
SUPPORTPORTAL-WEST-STAGE.SYMANTEC.COM
maintenance.blackbaud.com
exftpp.symantec.com
tusvipapplpi01.symc.symantec.com
statuspage.io
tools-review.engba.symantec.com
ev1-0121.ev12311.Symantec.com
MFTBC.SYMANTEC.COM
statuspage.io
avs-avpg.crsi.symantec.com
haystatus.mambu.com
CUL1RFPSEPQIN23.symc.symantec.com

Certificate

The complete raw certificate details for search-thawte-de.symantec.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13BrVMKsEhiRNqgegl9T
Ab5jv7cYCMPB0E0uAifpkBMlJnpW3dy5/2H/huKLBSxKoZItifkcNPAxN4R/XkHM
eUjsGQeLae+vHP+3wztTPuFJCBVxZ2DGIOGo3i4TA9UUh0QGwSutGA2IFLkg7mD6
25vJIJnW/rxL8vb7pLx07jq6IKOknKibhwRw6/W08iEZAq6bqOLWvFmjqksu8B3M
ZV38a2APcbmDh4Ph7BinFPnmi+YZNiIU9f4zWUtcHxx5dNOjZiHMbmivdNd7QnXH
dq221LMZpfa/dFEcraMT9KibyiPjfR1+L8JzYDk01y/8VLcDY4N+FsPT5T04ccEG
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 99846490705834295658882830273235744929
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte EV SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '3898261'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Mountain View'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT Security'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'search-thawte-de.symantec.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27196671571968168001817341686343968695230762315128473105165946067354902002584557758429330397491706014152538469117338627364687300540404322532092313303930692928824795261574934084667503138655912313222249855602452330135911166510121252193784013241254978051687563025267783505424264827029177784365736205489254432113657088464105735270466243544925653614878000136607001743721694701972027071998484394251041375473302329292167908544938266275906155035735864561491893530585267328114353392922530656170791321161177986400174656851650590126600201411362525278820916334125639816905833621473860009247860447662252706760591498395745446332007
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.thawte.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search-thawte-de-web-asb.symantec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search-thawte-de-web-tus.symantec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search-thawte-de.symantec.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ti.symcb.com/ti.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (117 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.48.1 (Thawte EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f07051dad32a914f5277d78677740fce711a6c22
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ti.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ti.symcb.com/ti.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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