Faremanager.atpco.net

- Airline Tariff Publishing Company -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 0c:26:ef:65:f2:d3:6e:d1:ba:b1:d3:a2:33:f0:6a:72 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Airline Tariff Publishing Company

Organization: Airline Tariff Publishing Company
State / Province: Virginia
Locality: Dulles
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:26:ef:65:f2:d3:6e:d1:ba:b1:d3:a2:33:f0:6a:72
Serial Number (int): 16152898803133979668498850633942592114
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 90:ba:b7:ca:a2:e3:fc:ed:d8:be:26:b8:98:86:2b:9f:0e:4b:ec:6a
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 42:6e:d3:9a:5b:ab:eb:fb:ee:e8:b0:6d:fc:49:58:80:48:eb:d4:1b
Fingerprint (sha256): 6e:47:d9:15:0d:81:db:e2:1f:cd:a3:88:32:95:5c:15:f4:fb:96:13:94:19:46:7f:bb:b8:aa:ce:07:b9:b3:9d

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate Faremanager.atpco.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Faremanager.atpco.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

Faremanager.atpco.net

Other certificates including the domain name atpco.net

(limited to 100 certificates)
blog.atpco.net
training.atpco.net
pocapps.atpco.net
training.atpco.net
goldfaremanager.atpco.net
info.atpco.net
apis.consapi.atpco.net
cds3.cvent.com
cds3.cvent.com
ftpt.atpco.net
www.atpco.net
cds3.cvent.com
goldfaremanager.atpco.net
cds3.cvent.com
tn3270.atpco.net
cds3.cvent.com
cds3.cvent.com
econnect.atpco.net
servicemanager.atpco.net
cds3.cvent.com
WEBMAIL.ATPCO.NET
dpwg.atpco.net
gold.aop.services.atpco.net
sni.cloudflaressl.com
remote.atpco.net
baggage.atpco.net
faremanager.atpco.net
cds3.cvent.com
sitelist.atpco.net
cds3.cvent.com
cds3.cvent.com
baggageservice-staging.atpco.net
servicemanager.atpco.net
api.atpco.net
applications.atpco.net
goldfaremanager.atpco.net
cds3.cvent.com
servicemanager.atpco.net
stagingmessagehub.atpco.net
training.atpco.net
api.atpco.net
www.atpco.net
www.atpco.net
Faremanager.atpco.net
econnect.atpco.net
cds3.cvent.com
baggage-staging.atpco.net
cds3.cvent.com
training.atpco.net
cds3.cvent.com
messagehub.atpco.net
goldfaremanager.atpco.net
cds3.cvent.com
cds3.cvent.com
sni.cloudflaressl.com
econnect.atpco.net
goldfaremanager.atpco.net
cds3.cvent.com
messagehub.atpco.net
*.atpco.net
training.atpco.net
jira.atpco.net
econnect.atpco.net
messagehub.atpco.net
Faremanager.atpco.net
blog.atpco.net
applications.atpco.net
cds3.cvent.com
hub.atpco.net
cds3.cvent.com
faremanager.atpco.net
blog.atpco.net
cds3.cvent.com
userexperiencetraining.atpco.net
Faremanager.atpco.net
info.atpco.net
remote.atpco.net
dpwg.atpco.net
developer.atpco.net
econnect.atpco.net
cds3.cvent.com
cds3.cvent.com
cds3.cvent.com
ancillaryservice-staging.atpco.net
atpcotodlapi.atpco.net
cds3.cvent.com
cds3.cvent.com
*.atpco.net
cds3.cvent.com
applications.atpco.net
applications.atpco.net
vdi.atpco.net
cds3.cvent.com
cds3.cvent.com
www.atpco.net
www.atpco.net
econnect.atpco.net
userexperience.atpco.net
www.atpco.net
developer.atpco.net

Certificate

The complete raw certificate details for Faremanager.atpco.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIQDCbvZfLTbtG6sdOiM/BqcjANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMRswGQYDVQQDExJUaGF3dGUgUlNBIENBIDIwMTgwHhcN
MjIxMjA2MDAwMDAwWhcNMjQwMTA2MjM1OTU5WjB9MQswCQYDVQQGEwJVUzERMA8G
A1UECBMIVmlyZ2luaWExDzANBgNVBAcTBkR1bGxlczEqMCgGA1UEChMhQWlybGlu
ZSBUYXJpZmYgUHVibGlzaGluZyBDb21wYW55MR4wHAYDVQQDExVGYXJlbWFuYWdl
ci5hdHBjby5uZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeU/sT
ZFhZMqLLkBqH5nanwlskEKiaYuRYxgdvSK3KiDsva3yhRGLNz0rIjJzXOtP+dV4A
jZDppvCdjrc6aptEM3U4KfSMFr4GBeNBh3kq+Dg0rbpD5vDxdHtKUFs8h4g1DtnL
82iwQ6bCzjMQEOUmpDRkzSsI9clrM5PW2ZelQwD6Ca72lT52NAbWh4NwxB4z++hD
W5Ix6pPVKkslnR9izoQVZru5NM7F9jSBXVfW0Tx7lB95uydFPDA1nK+qOZxBvUFO
+4/5LXrg0T8l8SQUgusNYkkCM1MTD35WijV4jvqvV/ih8eDjOl+XBLbvhnsGS8W0
I5klfGeKv8z70FNVAgMBAAGjggGiMIIBnjAfBgNVHSMEGDAWgBSjyF5lVOUweMEF
6gcKalnMuf7eWjAdBgNVHQ4EFgQUkLq3yqLj/O3Yvia4mIYrnw5L7GowIAYDVR0R
BBkwF4IVRmFyZW1hbmFnZXIuYXRwY28ubmV0MA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOgYDVR0fBDMwMTAvoC2gK4YpaHR0
cDovL2NkcC50aGF3dGUuY29tL1RoYXd0ZVJTQUNBMjAxOC5jcmwwPgYDVR0gBDcw
NTAzBgZngQwBAgIwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5j
b20vQ1BTMG8GCCsGAQUFBwEBBGMwYTAkBggrBgEFBQcwAYYYaHR0cDovL3N0YXR1
cy50aGF3dGUuY29tMDkGCCsGAQUFBzAChi1odHRwOi8vY2FjZXJ0cy50aGF3dGUu
Y29tL1RoYXd0ZVJTQUNBMjAxOC5jcnQwCQYDVR0TBAIwADATBgorBgEEAdZ5AgQD
AQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv/QdL8e7Y3LwxCJnSjt3Pg+Rtc/r
prkQhdX1VaCXZFL4pHhjy/4uK4jlBu0+pLA9/ycEM2b0Tsak4A8OOpioMdclHDRM
vPKYvYt8Bk4LSLGPfQQ1BVvOoL+nMBcd0xt1HpxhWjR7kIiiISKK1N/92MkbhZcd
VZU3ttzG92R47RfRzRKOHfaGYG5osHivMX4nZzeNnzll6p31V2S1TGyXRHReZfpE
ogeYxkBTMDb+Ai+uWtPOy15g+DNnyvZnLiciQCLpW/eoY6spAZhN3dxxTP6tQtM0
LlfdgQN34KOdjcFHQA4vKOMhhdGgLhAilG5hl7YA6whYCLxTfSWnSg6GDA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlP7E2RYWTKiy5Aah+Z2
p8JbJBCommLkWMYHb0ityog7L2t8oURizc9KyIyc1zrT/nVeAI2Q6abwnY63Omqb
RDN1OCn0jBa+BgXjQYd5Kvg4NK26Q+bw8XR7SlBbPIeINQ7Zy/NosEOmws4zEBDl
JqQ0ZM0rCPXJazOT1tmXpUMA+gmu9pU+djQG1oeDcMQeM/voQ1uSMeqT1SpLJZ0f
Ys6EFWa7uTTOxfY0gV1X1tE8e5QfebsnRTwwNZyvqjmcQb1BTvuP+S164NE/JfEk
FILrDWJJAjNTEw9+Voo1eI76r1f4ofHg4zpflwS274Z7BkvFtCOZJXxnir/M+9BT
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16152898803133979668498850633942592114
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Virginia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dulles'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Airline Tariff Publishing Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Faremanager.atpco.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19987064643148670181317025555598530932571076436233860058401907253167757051926073709932956461239123307137646950132337133581981694617003837605898023454000999867112242383140461624345292560769615129158316701463643263839609030051501133302863080786186966230084651619907722848991792169705365724555939074538422376969564661045790132610372379557263313679175354652064412891868720662512188602442291789743999189672902561142166643837735531815914175105636119410208923469561587471062003799067338555500271530841489806132897430081255130003873197940311756199728045653107062243956249568626864268136657606868072386772453451573580562191189
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							90bab7caa2e3fcedd8be26b898862b9f0e4bec6a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Faremanager.atpco.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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