www.pase.panasonic.de

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 06:0a:51:26:5a:e9:fb:97:34:84:08:fb:d9:88:c1:e7 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.pase.panasonic.de

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:0a:51:26:5a:e9:fb:97:34:84:08:fb:d9:88:c1:e7
Serial Number (int): 8028936857279433544178295265703805415
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 2e:46:2f:a2:f4:89:69:ec:ff:ce:68:5b:48:1d:ab:f6:07:f1:75:33
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): a8:fc:c5:20:53:d9:25:4e:e2:81:77:ea:8f:a2:8e:d7:d3:61:f7:09
Fingerprint (sha256): 66:6a:c5:a5:89:03:e6:b9:75:a6:cf:83:95:4f:74:f4:60:c8:9d:a8:33:45:ae:27:fd:0d:4e:4e:e9:6d:9f:fa

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate www.pase.panasonic.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.pase.panasonic.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.pase.panasonic.de

Other certificates including the domain name panasonic.de

(limited to 100 certificates)
uat-partner.panasonic.de
seccas.panasonic.de
www.lumixgexperience.panasonic.de
www.experience.panasonic.de
panasonic.de
experience.panasonic.de
partner.panasonic.de
as.prdcg.panasonic.de
showroom.eu.panasonic.com
www.pase.panasonic.de
sni.cloudflaressl.com
partner2.panasonic.de
showroom.eu.panasonic.com
showroom.eu.panasonic.com
100-jahre.panasonic.de
panasonic.eu
partner.panasonic.de
100-jahre.panasonic.de
www.lumixgexperience.panasonic.de
business.panasonic.de
aircon.panasonic.de
pideu.panasonic.de
shop.panasonic.de
panasonic.de
shop.panasonic.de
jira.pase.panasonic.de
partner.panasonic.de
shop.panasonic.de
aircon.panasonic.de
shop.panasonic.de
lumixgexperience.panasonic.de
aircon.panasonic.de
unavailable.panasonic.eu
unavailable.panasonic.eu
lumixexperience.panasonic.co.uk
panasonicpartnerportal.com
experience.panasonic.de
partner.panasonic.de
sps.pase.panasonic.de
pideu.panasonic.de
lumixgexperience.panasonic.de
www.lumixgexperience.panasonic.de
aircon.panasonic.de
shop.panasonic.de
panasonic.de
pideu.panasonic.de
aircon.panasonic.de
experience.panasonic.de
partner2.panasonic.de
pideu.panasonic.de
panasonic.de
jira.pase.panasonic.de
pideu.panasonic.de
panasonic.de
partner.panasonic.de
aircon.panasonic.de
aircon.panasonic.de
*.panasonic.de
shop.panasonic.de
seccas.panasonic.de
unavailable.panasonic.eu
aircon.panasonic.de
www.experience.panasonic.de
unavailable.panasonic.eu
jira.pase.panasonic.de
shop.panasonic.de
shop.panasonic.de
www.experience.panasonic.de
www.lumixgexperience.panasonic.de
panasonic.de
www.generation-freedom.com
partner.panasonic.de
www.lumixgexperience.panasonic.de
jira.pase.panasonic.de
aircon.panasonic.de
panasonic.de
shop.panasonic.de
pideu.panasonic.de
shop.panasonic.de
aircon.panasonic.de
www.pase.panasonic.de
partner.panasonic.de
www.pase.panasonic.de
panasonic.de
business.panasonic.eu
www.lumixgexperience.panasonic.de
shop.panasonic.de
panasonic.de
showroom.eu.panasonic.com
*.panasonic.de
partner.panasonic.de
partner2.panasonic.de
panasonic.de
www.generation-freedom.com
partner2.panasonic.de
business.panasonic.ie
shop.panasonic.de
business.panasonic.ie
sm.panasonic.de
aircon.panasonic.de

Certificate

The complete raw certificate details for www.pase.panasonic.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGmjCCBYKgAwIBAgIQBgpRJlrp+5c0hAj72YjB5zANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMRswGQYDVQQDExJUaGF3dGUgUlNBIENBIDIwMTgwHhcN
MTgwMjE2MDAwMDAwWhcNMjEwMjE1MTIwMDAwWjAgMR4wHAYDVQQDExV3d3cucGFz
ZS5wYW5hc29uaWMuZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO
p3Q+bMuNKog4qyj4rX3xd9pHSczc0knts77ftwbOlb3kOOtsEaYDFCHWYHSGOIVQ
XQsSyDbFWYk9V/QfvzYJTk4Y/iq3f8qqci+XTjF7bhM6VFhIptNp/bpkSjACTkTS
yWzLnGuXWN4HaQXlxVK8Q5O5ViS/vLJKpwZcK6/Qr0FmID0gD2MjrhM3Tem3aJ0m
r6uAtBhBrnH5kO9euf6vMN0pn9O4uQYFaR85ybxpOx5k2TkzDtfsttr6CRtkPdWu
miwxZMZZhENs+T8YWKnFEoxPDJ2TVFzSx/CGC59SGhGv17OwqGp6gV9qB/Dwwgkz
wHB8xKcjqiGD+24edoOHAgMBAAGjggOSMIIDjjAfBgNVHSMEGDAWgBSjyF5lVOUw
eMEF6gcKalnMuf7eWjAdBgNVHQ4EFgQULkYvovSJaez/zmhbSB2r9gfxdTMwIAYD
VR0RBBkwF4IVd3d3LnBhc2UucGFuYXNvbmljLmRlMA4GA1UdDwEB/wQEAwIFoDAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOgYDVR0fBDMwMTAvoC2gK4Yp
aHR0cDovL2NkcC50aGF3dGUuY29tL1RoYXd0ZVJTQUNBMjAxOC5jcmwwTAYDVR0g
BEUwQzA3BglghkgBhv1sAQIwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGln
aWNlcnQuY29tL0NQUzAIBgZngQwBAgEwbwYIKwYBBQUHAQEEYzBhMCQGCCsGAQUF
BzABhhhodHRwOi8vc3RhdHVzLnRoYXd0ZS5jb20wOQYIKwYBBQUHMAKGLWh0dHA6
Ly9jYWNlcnRzLnRoYXd0ZS5jb20vVGhhd3RlUlNBQ0EyMDE4LmNydDAJBgNVHRME
AjAAMIIB8wYKKwYBBAHWeQIEAgSCAeMEggHfAd0AdQCkuQmQtBhYFIe7E6LMZ3AK
PDWYBPkb37jjd80OyA3cEAAAAWGeyAUkAAAEAwBGMEQCIFm85aiEl4hRLmUXHjMO
D2Fd4ZP1va3lABufnwNnhgCvAiA15ArXHDC195uab0Drktr3/qKB1HK819OhM4fW
wS6oNwB1AId1v+dZfPiMQ5lfvfNu/1aNR1Y2/0q1YMG06v9eoIMPAAABYZ7IBagA
AAQDAEYwRAIgF7Pc+5M4NR2bIw0l8jzPMPOGnU3u0lMMSFH15AgAR8QCIFrQumFs
D3bPDAemfUXcIryin5UjYdZEg2/hCh0unr+OAHUAu9nfvB+KcbWTlCOXqpJ7RzhX
lQqrUugakJZkNo4e0YUAAAFhnsgF/gAABAMARjBEAiAQ2BdF1SHguvHdMVRC4bMk
TzYJIj2dVIbj2J66Kh+22wIgGcoI0Kcu5/4IgiSJpswtIWeWNGzvRDR5XkLdSLFG
368AdgBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAWGeyAezAAAE
AwBHMEUCIEm4pHumf97Y6sbTwDLjXK40yTPKKTMOE7ps9+1U4p0hAiEAtz3ahgc3
XAC8gQAftP/q3+7V7mvnltoN44MHjeF4DHUwDQYJKoZIhvcNAQELBQADggEBAKfw
Ag7UudlzlAE09YHX5PGG9J57Z8IRkkd4F4F7svmVitHO7DVgBVeP+ur8kK6XbQFp
tQm0KOGB78McjssoxnNyS3RVtHrwkw1c0DCgxregmsvya/DxODSgktWfiaHtxPnW
6dF0M4UTQ99oxegGGKT6qfZf18H2OCKpdm7wLQp1ypkYKehd4ET4RnaiWvG1LWXa
lazmCs6Jy2o6Pg5wPeUWFdcovC1HMM6teC+mXFTFaK6yNi59vubBrNL3NyZwbwY7
U3bdR5lTLg3D56L/zsWg4PTvLXXEvWrg7ZGVBdaDDr8KLq7DESyJZKRRZMSOND6Q
92LJyTD+DQQqJ/+m/7A=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqd0PmzLjSqIOKso+K19
8XfaR0nM3NJJ7bO+37cGzpW95DjrbBGmAxQh1mB0hjiFUF0LEsg2xVmJPVf0H782
CU5OGP4qt3/KqnIvl04xe24TOlRYSKbTaf26ZEowAk5E0slsy5xrl1jeB2kF5cVS
vEOTuVYkv7yySqcGXCuv0K9BZiA9IA9jI64TN03pt2idJq+rgLQYQa5x+ZDvXrn+
rzDdKZ/TuLkGBWkfOcm8aTseZNk5Mw7X7Lba+gkbZD3VrposMWTGWYRDbPk/GFip
xRKMTwydk1Rc0sfwhgufUhoRr9ezsKhqeoFfagfw8MIJM8BwfMSnI6ohg/tuHnaD
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8028936857279433544178295265703805415
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.pase.panasonic.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18008413988410768716982065934988197463972045113294174577238250045062532190841978766934699022033475735195317542628576075248596512467592353821547276787256556236213553532140870276922860014245914897271137535835428965522786791497174597057455901981573182356707575808842843909648177018529528534972072877725458070178529854144088582438570323565941146722913158194451853548043518193485004529300636910260179356413546247807375077701165672847270846184284435155322026799274889459799845854145189583193554502541646140868404275261303611313731011748388135754946689973748689713955642699243087255334483970510748841922580324796180626572167
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2e462fa2f48969ecffce685b481dabf607f17533
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pase.panasonic.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (479 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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