www.piwik.bilfinger.com
Issued by thawte DV SSL CA - G2
About this certificate
This digital certificate with serial number 7d:6d:32:17:0b:a5:d3:17:d5:97:7a:77:16:95:ff:f0 was issued on by thawte, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Certificate Subject
CN=www.piwik.bilfinger.com
thawte, Inc.
Organization:
thawte, Inc.
Organization unit: Domain Validated SSL
Organization unit: Domain Validated SSL
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 7d:6d:32:17:0b:a5:d3:17:d5:97:7a:77:16:95:ff:f0Serial Number (int): 166720475777027505463351782312722694128
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 9f:b8:c1:a9:6c:f2:f5:c0:22:2a:94:ed:5c:99:ac:d4:ec:d7:c6:07
Fingerprint (sha1): c6:62:c1:5d:d9:fa:72:6a:83:2d:b6:3f:2a:2b:1a:af:87:76:76:01
Fingerprint (sha256): 6d:bc:51:19:73:86:be:3d:b6:aa:b2:dd:af:57:d1:b6:99:6f:50:2e:b8:9d:02:52:37:6e:f7:43:e7:34:0c:a5
Issuing Certificate URL: http://tn.symcb.com/tn.crt
Revocation information
OCSP Server: http://tn.symcd.comCRL Distribution Point: http://tn.symcb.com/tn.crl
Check the revocation status for certificate www.piwik.bilfinger.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.piwik.bilfinger.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.piwik.bilfinger.com
Other certificates including the domain name bilfinger.com
(limited to 100 certificates)
www.cusa-is.bilfinger.com
www.procurement.bilfinger.com
r2c.bis.bilfinger.com
pm.bng.bilfinger.com
auth.bilfinger.net
slmobiletest.bilfinger.com
login.karriere.bilfinger.com
medialibrary.bilfinger.net
sv02111.res1.rlaone.net
world.tebodin.bilfinger.com
world.tebodin.bilfinger.com
ps.bis.bilfinger.com
ts.bng.bilfinger.com
portal.bng.bilfinger.com
fwms.facilitymanagement.bilfinger.com
oos.bilfinger.net
bnextwss.bng.bilfinger.com
lync.bilfinger.net
download.bng.bilfinger.com
pm.bng.bilfinger.com
reports.facilitymanagement.bilfinger.com
now.bilfinger.com
www.geraete.bilfinger.com
download.bng.bilfinger.com
*.bilfinger.com
portal.bng.bilfinger.com
westcon.bilfinger.com
www.geraete.bilfinger.com
autodiscover.bilfinger.net
ts.bng.bilfinger.com
www.qualprocurement.bilfinger.com
*.bilfinger.com
world.tebodin.bilfinger.com
bnextwss.bng.bilfinger.com
medialibrary.bilfinger.net
portal.bng.bilfinger.com
login.karriere.bilfinger.com
vpn.realestate.bilfinger.com
slmobileservice.bilfinger.com
nachunternehmerportal.arnholdt.bilfinger.com
download.bng.bilfinger.com
dms.nig.bilfinger.com
spamdigest.bilfinger.com
nachunternehmerportal.arnholdt.bilfinger.com
bnextwss.bng.bilfinger.com
login.karriere.bilfinger.com
profimiet-shop.bilfinger.com
tpm-feedback-qs.bilfinger.com
bis-vpnmuc.bilfinger.com
login.karriere.bilfinger.com
www.procurement.bilfinger.com
login.career.bilfinger.com
*.mmo.bilfinger.com
bnextwss.bng.bilfinger.com
www.download.power.bilfinger.com
portal.bng.bilfinger.com
tpm-feedback.bilfinger.com
csrreport.bilfinger.com
www.testprocurement.bilfinger.com
www.testprocurement.bilfinger.com
slmobileservice.bilfinger.com
login.career.bilfinger.com
www.identify-fs.bilfinger.com
fwms.facilitymanagement.bilfinger.com
www.qualprocurement.bilfinger.com
*.industrier.bilfinger.com
portal.bng.bilfinger.com
download.bng.bilfinger.com
www.piwik.bilfinger.com
bnextwss.bng.bilfinger.com
www.rbpoint-fs.bilfinger.com
pm.bng.bilfinger.com
www.sp-it.bilfinger.com
portal.bng.bilfinger.com
vpn-na.bilfinger.com
webmail.bilfinger.net
lync.bilfinger.net
portal.piping.bilfinger.com
www.testprocurement.bilfinger.com
transmission.bilfinger.com
norge.vcs.bilfinger.com
ts.bng.bilfinger.com
mail.ddm.bilfinger.com
vpn-na.bilfinger.com
login.karriere.bilfinger.com
*.mmo.bilfinger.com
www.procurement.bilfinger.com
world.tebodin.bilfinger.com
coz.infocenter.ch-fm.bilfinger.com
www.intranet-de-ch-fm.bilfinger.com
mis.bis.bilfinger.com
bbpsportal.bilfinger.com
www.btalent.civil.bilfinger.com
vo.bbs.bilfinger.com
jobs.bilfinger.com
www.procurement.bilfinger.com
bbpsportal.bilfinger.com
world.tebodin.bilfinger.com
fs-cloud.bilfinger.com
www.download.power.bilfinger.com
www.procurement.bilfinger.com
r2c.bis.bilfinger.com
pm.bng.bilfinger.com
auth.bilfinger.net
slmobiletest.bilfinger.com
login.karriere.bilfinger.com
medialibrary.bilfinger.net
sv02111.res1.rlaone.net
world.tebodin.bilfinger.com
world.tebodin.bilfinger.com
ps.bis.bilfinger.com
ts.bng.bilfinger.com
portal.bng.bilfinger.com
fwms.facilitymanagement.bilfinger.com
oos.bilfinger.net
bnextwss.bng.bilfinger.com
lync.bilfinger.net
download.bng.bilfinger.com
pm.bng.bilfinger.com
reports.facilitymanagement.bilfinger.com
now.bilfinger.com
www.geraete.bilfinger.com
download.bng.bilfinger.com
*.bilfinger.com
portal.bng.bilfinger.com
westcon.bilfinger.com
www.geraete.bilfinger.com
autodiscover.bilfinger.net
ts.bng.bilfinger.com
www.qualprocurement.bilfinger.com
*.bilfinger.com
world.tebodin.bilfinger.com
bnextwss.bng.bilfinger.com
medialibrary.bilfinger.net
portal.bng.bilfinger.com
login.karriere.bilfinger.com
vpn.realestate.bilfinger.com
slmobileservice.bilfinger.com
nachunternehmerportal.arnholdt.bilfinger.com
download.bng.bilfinger.com
dms.nig.bilfinger.com
spamdigest.bilfinger.com
nachunternehmerportal.arnholdt.bilfinger.com
bnextwss.bng.bilfinger.com
login.karriere.bilfinger.com
profimiet-shop.bilfinger.com
tpm-feedback-qs.bilfinger.com
bis-vpnmuc.bilfinger.com
login.karriere.bilfinger.com
www.procurement.bilfinger.com
login.career.bilfinger.com
*.mmo.bilfinger.com
bnextwss.bng.bilfinger.com
www.download.power.bilfinger.com
portal.bng.bilfinger.com
tpm-feedback.bilfinger.com
csrreport.bilfinger.com
www.testprocurement.bilfinger.com
www.testprocurement.bilfinger.com
slmobileservice.bilfinger.com
login.career.bilfinger.com
www.identify-fs.bilfinger.com
fwms.facilitymanagement.bilfinger.com
www.qualprocurement.bilfinger.com
*.industrier.bilfinger.com
portal.bng.bilfinger.com
download.bng.bilfinger.com
www.piwik.bilfinger.com
bnextwss.bng.bilfinger.com
www.rbpoint-fs.bilfinger.com
pm.bng.bilfinger.com
www.sp-it.bilfinger.com
portal.bng.bilfinger.com
vpn-na.bilfinger.com
webmail.bilfinger.net
lync.bilfinger.net
portal.piping.bilfinger.com
www.testprocurement.bilfinger.com
transmission.bilfinger.com
norge.vcs.bilfinger.com
ts.bng.bilfinger.com
mail.ddm.bilfinger.com
vpn-na.bilfinger.com
login.karriere.bilfinger.com
*.mmo.bilfinger.com
www.procurement.bilfinger.com
world.tebodin.bilfinger.com
coz.infocenter.ch-fm.bilfinger.com
www.intranet-de-ch-fm.bilfinger.com
mis.bis.bilfinger.com
bbpsportal.bilfinger.com
www.btalent.civil.bilfinger.com
vo.bbs.bilfinger.com
jobs.bilfinger.com
www.procurement.bilfinger.com
bbpsportal.bilfinger.com
world.tebodin.bilfinger.com
fs-cloud.bilfinger.com
www.download.power.bilfinger.com
Certificate
The complete raw certificate details for www.piwik.bilfinger.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEnzCCA4egAwIBAgIQfW0yFwul0xfVl3p3FpX/8DANBgkqhkiG9w0BAQsFADBj MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMR0wGwYDVQQLExRE b21haW4gVmFsaWRhdGVkIFNTTDEeMBwGA1UEAxMVdGhhd3RlIERWIFNTTCBDQSAt IEcyMB4XDTE2MDMzMTAwMDAwMFoXDTE5MDMzMTIzNTk1OVowIjEgMB4GA1UEAwwX d3d3LnBpd2lrLmJpbGZpbmdlci5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQC8uracfg3XMggoIO+hkV/u9DdA7Vd671NkFI7QwjTRsevB6+xsc6xJ LOKhZzs9GvVDUwJKWcN2N51y1SzvN3GXOuqb7xs+uiCZdCVnC20SMOgUzQ9hus9d /NW1THzWD3hlyIsC5NBUSDSF/3AmOBTJxVp1MFUYE8rhbb7gtMKPnrFefZbQlfmW VhBfCJ57Td2BOr+oucQ6UMVMF+ifah03cafq0DjJA57QMEFgz5HJ578IoxPqJavm 4V56dZ61Nz6+u6M4YUWmSbNl3qy5+m25SV3Yj52P5z8LiGB8qGr7LSko2qOU4YDT U1AGrcStwKiE9D9jaCp1KaXWMDUA77BRAgMBAAGjggGOMIIBijAiBgNVHREEGzAZ ghd3d3cucGl3aWsuYmlsZmluZ2VyLmNvbTAJBgNVHRMEAjAAMCsGA1UdHwQkMCIw IKAeoByGGmh0dHA6Ly90bi5zeW1jYi5jb20vdG4uY3JsMG4GA1UdIARnMGUwYwYG Z4EMAQIBMFkwJgYIKwYBBQUHAgEWGmh0dHBzOi8vd3d3LnRoYXd0ZS5jb20vY3Bz MC8GCCsGAQUFBwICMCMMIWh0dHBzOi8vd3d3LnRoYXd0ZS5jb20vcmVwb3NpdG9y eTAfBgNVHSMEGDAWgBSfuMGpbPL1wCIqlO1cmazU7NfGBzAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMFcGCCsGAQUFBwEBBEsw STAfBggrBgEFBQcwAYYTaHR0cDovL3RuLnN5bWNkLmNvbTAmBggrBgEFBQcwAoYa aHR0cDovL3RuLnN5bWNiLmNvbS90bi5jcnQwEwYKKwYBBAHWeQIEAwEB/wQCBQAw DQYJKoZIhvcNAQELBQADggEBAFZqaD76N3IqdNtSbfE/24F4KajNrF8putObG9pE n6YkyXQBAWT48x8P4YHswkaxNeEPA8QDiz6SFdXCsrSWpSahkE0FhzUk1Cy9DHie EqLE5OQhZGIUE8DJzkXV0zOlkpyMKaknpq24xfeEwKNqyoSUVpbMyLzf5DW9R5OZ pLttk0jYuFJM3YkP/SkZvkONA7ZmJOaevhayKJbrS2m2uKabdpT2prmvxH9Hokx8 INdsIzeyyEl0G5p330m8kDcW8Htxy++tt6zwKqYbH6Nqn7K+q9aJw6czOJ0ZHItQ 6q5wTVLc1dWIGalDYAw/C9BubHcv6TMK28spMY7p4m9JkRM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLq2nH4N1zIIKCDvoZFf 7vQ3QO1Xeu9TZBSO0MI00bHrwevsbHOsSSzioWc7PRr1Q1MCSlnDdjedctUs7zdx lzrqm+8bProgmXQlZwttEjDoFM0PYbrPXfzVtUx81g94ZciLAuTQVEg0hf9wJjgU ycVadTBVGBPK4W2+4LTCj56xXn2W0JX5llYQXwiee03dgTq/qLnEOlDFTBfon2od N3Gn6tA4yQOe0DBBYM+Ryee/CKMT6iWr5uFeenWetTc+vrujOGFFpkmzZd6sufpt uUld2I+dj+c/C4hgfKhq+y0pKNqjlOGA01NQBq3ErcCohPQ/Y2gqdSml1jA1AO+w UQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 166720475777027505463351782312722694128 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte DV SSL CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-31 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-31 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.piwik.bilfinger.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23824873105928066440696807005387222462289384735692958787209604973131337223482607312637070053002220433746191651318088279998833540288989611590413283232743228997651916968870803253822302603005049606523682225558983211859458031425804912779428135711045393149038525533676979692756114959199686230038493171395349999663455238920344595130766365807546373527813353453621384229858995908694078469785307108949846055043237985212435093983498767270848468939981111553600886021337195188506306677463336445749242711431468886106246559613324109451639055275611215796959071127166166437909891963458938666385719597281486359578403170772728880803921 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.piwik.bilfinger.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tn.symcb.com/tn.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9fb8c1a96cf2f5c0222a94ed5c99acd4ecd7c607 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tn.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tn.symcb.com/tn.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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