connect.bagmail.net
- arvato IT support GmbH -
Issued by thawte SHA256 SSL CA
About this certificate
This digital certificate with serial number 43:79:6a:9f:67:f6:f2:38:7e:5c:4c:83:5b:f0:c9:53 was issued on by thawte, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
arvato IT support GmbH
Organization:
arvato IT support GmbH
Organization unit: Communication Solutions
Organization unit: Communication Solutions
State / Province:
Nordrhein-Westfalen
Locality: Guetersloh
Country: DE
Locality: Guetersloh
Country: DE
thawte, Inc.
Organization:
thawte, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 43:79:6a:9f:67:f6:f2:38:7e:5c:4c:83:5b:f0:c9:53Serial Number (int): 89688706202343400090737378987953146195
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 2b:9a:35:ae:01:18:38:30:e1:70:7a:05:e0:11:76:a3:ce:bd:90:14
Fingerprint (sha1): ba:e3:f5:a1:a9:cf:03:88:ab:b3:2c:6a:7a:6a:74:f5:cc:7a:71:62
Fingerprint (sha256): 71:3f:41:94:dd:95:2e:35:75:ef:18:0a:1d:87:f1:e9:04:e5:08:ce:c6:f2:a7:9b:19:1b:3d:72:0a:12:85:9c
Issuing Certificate URL: http://tg.symcb.com/tg.crt
Revocation information
OCSP Server: http://tg.symcd.comCRL Distribution Point: http://tg.symcb.com/tg.crl
Check the revocation status for certificate connect.bagmail.net
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for connect.bagmail.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
connect.bagmail.net
Other certificates including the domain name bagmail.net
(limited to 100 certificates)
um.bagmail.net
owasemea.bertelsmann.de
um.bagmail.net
gtlbmllyd0100.bagmail.net
*.bagmail.net
devccgtlp02.vc.bertelsmann.de
gtlbml3lf0200.bagmail.net
gtlbmlske0200.bertelsmann.de
owasemea.bertelsmann.de
gtlbml3lf0100.bagmail.net
owasemea.bertelsmann.de
gtlbmlske0100.bertelsmann.de
gtlbml3lf0200.bagmail.net
devccgtlp02.vc.bertelsmann.de
connect.bagmail.net
owasemea.bertelsmann.de
*.bagmail.net
gtlbml3lf0200.bagmail.net
gtlbmllyf0100.bagmail.net
um.bagmail.net
gtlbml3lf0200.bagmail.net
gtlbml3le0100.bagmail.net
connect.bagmail.net
*.bagmail.net
gtlbmllyf0100.bagmail.net
dubbmlskf0001.bagmail.net
gtlbmlske0100.bertelsmann.de
gtlbmllyd0100.bagmail.net
gtlbml3lf0200.bagmail.net
gtlbmllyf0100.bagmail.net
*.bagmail.net
gtlbml3lf0100.bagmail.net
gtlbmlske0200.bertelsmann.de
gtlbmlske0100.bertelsmann.de
mucbmllys0001.bagmail.net
gtlbmllyd0100.bagmail.net
devccgtlp02.vc.bertelsmann.de
devccgtlp02.vc.bertelsmann.de
nycbml3lf0100.bagmail.net
*.bagmail.net
gtlbmllyd0100.bagmail.net
gtlbml3le0100.bagmail.net
nycbml3le0100.bagmail.net
owasemea.bertelsmann.de
um.bagmail.net
gtlbmllyd0100.bagmail.net
*.bagmail.net
devccgtlp02.vc.bertelsmann.de
gtlbml3lf0200.bagmail.net
gtlbmlske0200.bertelsmann.de
owasemea.bertelsmann.de
gtlbml3lf0100.bagmail.net
owasemea.bertelsmann.de
gtlbmlske0100.bertelsmann.de
gtlbml3lf0200.bagmail.net
devccgtlp02.vc.bertelsmann.de
connect.bagmail.net
owasemea.bertelsmann.de
*.bagmail.net
gtlbml3lf0200.bagmail.net
gtlbmllyf0100.bagmail.net
um.bagmail.net
gtlbml3lf0200.bagmail.net
gtlbml3le0100.bagmail.net
connect.bagmail.net
*.bagmail.net
gtlbmllyf0100.bagmail.net
dubbmlskf0001.bagmail.net
gtlbmlske0100.bertelsmann.de
gtlbmllyd0100.bagmail.net
gtlbml3lf0200.bagmail.net
gtlbmllyf0100.bagmail.net
*.bagmail.net
gtlbml3lf0100.bagmail.net
gtlbmlske0200.bertelsmann.de
gtlbmlske0100.bertelsmann.de
mucbmllys0001.bagmail.net
gtlbmllyd0100.bagmail.net
devccgtlp02.vc.bertelsmann.de
devccgtlp02.vc.bertelsmann.de
nycbml3lf0100.bagmail.net
*.bagmail.net
gtlbmllyd0100.bagmail.net
gtlbml3le0100.bagmail.net
nycbml3le0100.bagmail.net
Certificate
The complete raw certificate details for connect.bagmail.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE+zCCA+OgAwIBAgIQQ3lqn2f28jh+XEyDW/DJUzANBgkqhkiG9w0BAQsFADBD MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMR0wGwYDVQQDExR0 aGF3dGUgU0hBMjU2IFNTTCBDQTAeFw0xNzA4MDcwMDAwMDBaFw0xOTAxMjYyMzU5 NTlaMIGhMQswCQYDVQQGEwJERTEcMBoGA1UECAwTTm9yZHJoZWluLVdlc3RmYWxl bjETMBEGA1UEBwwKR3VldGVyc2xvaDEfMB0GA1UECgwWYXJ2YXRvIElUIHN1cHBv cnQgR21iSDEgMB4GA1UECwwXQ29tbXVuaWNhdGlvbiBTb2x1dGlvbnMxHDAaBgNV BAMME2Nvbm5lY3QuYmFnbWFpbC5uZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDIGo0nytLVNY7tEmFvnxl56bfU7tzR3Yv2l8xV7DA/U3O9sr6UNeVr A9HIcqIuvTEjIMJtoIB6yyNL06gQaKaz/XOQ4jbvzRITfGd509mQGoUrslV6mqF+ wKLs8/TYpLuazzkTf5KiqcVzgNV902PQeRTU5wEW4N3Z2K9pCkejFA6SiufQMRUD fXusneZWlDrsjuenzO9jndNVo/0SauJJ4/CqeTm+lQFwycB0JDq212SnX0Ik/ToL qVfYGXsjiSKQaSM9DeKfVmX5J8vnQJfXIkQo1JuOEQoBuzGPlIiKwk5rBtm3KzXA UKtrImtGGfoBns2qiEphGGLDrR60G+sjAgMBAAGjggGKMIIBhjAeBgNVHREEFzAV ghNjb25uZWN0LmJhZ21haWwubmV0MAkGA1UdEwQCMAAwbgYDVR0gBGcwZTBjBgZn gQwBAgIwWTAmBggrBgEFBQcCARYaaHR0cHM6Ly93d3cudGhhd3RlLmNvbS9jcHMw LwYIKwYBBQUHAgIwIwwhaHR0cHM6Ly93d3cudGhhd3RlLmNvbS9yZXBvc2l0b3J5 MA4GA1UdDwEB/wQEAwIFoDAfBgNVHSMEGDAWgBQrmjWuARg4MOFwegXgEXajzr2Q FDArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8vdGcuc3ltY2IuY29tL3RnLmNybDAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwVwYIKwYBBQUHAQEESzBJMB8G CCsGAQUFBzABhhNodHRwOi8vdGcuc3ltY2QuY29tMCYGCCsGAQUFBzAChhpodHRw Oi8vdGcuc3ltY2IuY29tL3RnLmNydDATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkq hkiG9w0BAQsFAAOCAQEAYUssQKMdO11N3d7VsGuMUzDjnG6Nv58POa0wIZI/RoCv rNESS28N7mljAIdMcGzLZ7TGEwK1HdH6PSQYzRJ/lituDqlVVANKjplFQaWCFzq3 eEKpQ0xAMajueOjVrtqWyHgMV9votsxz7SfmvCAAjvdDKoBB81g2P7oHmfhSwdl1 du3flbacrVG324/LHavqTWLn013HEsSvrMOWUDbI7Kq6aKJeseDKSchrAs/Xcrki JWBR9cyrs+Ms151KQ3Jz3SzOBthTY49qPosxzJa2Jimdlmqw+aC8nZLxqe/mjycl OY2tST++jDh2f97ONpI4IdB6HZdkrD2X+FvS63cR4A== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBqNJ8rS1TWO7RJhb58Z eem31O7c0d2L9pfMVewwP1NzvbK+lDXlawPRyHKiLr0xIyDCbaCAessjS9OoEGim s/1zkOI2780SE3xnedPZkBqFK7JVepqhfsCi7PP02KS7ms85E3+SoqnFc4DVfdNj 0HkU1OcBFuDd2divaQpHoxQOkorn0DEVA317rJ3mVpQ67I7np8zvY53TVaP9Emri SePwqnk5vpUBcMnAdCQ6ttdkp19CJP06C6lX2Bl7I4kikGkjPQ3in1Zl+SfL50CX 1yJEKNSbjhEKAbsxj5SIisJOawbZtys1wFCrayJrRhn6AZ7NqohKYRhiw60etBvr IwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 89688706202343400090737378987953146195 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SHA256 SSL CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-07 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-26 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein-Westfalen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Guetersloh' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'arvato IT support GmbH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Communication Solutions' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'connect.bagmail.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25260753970829502191324669144716503570410396432166349972043844855008673849510885190098290329915280581205759476418134596250775963026027982230883398158748348430704533040678464552342187937432691642799883460962836248964543790144745258522846084842399834421315656910087732257238522344635007012765319508241387703739449438599347662081406288158976079329605086011405926540316194723070811739152070257716072997457924341891298945017819243997271297855667449501142353974378015055073376864972803985611099246166493994121985970840071420532966564829722279502330846254453050681415361722283156067224861837600246179044277663859290085780259 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.bagmail.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2b9a35ae01183830e1707a05e01176a3cebd9014 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcb.com/tg.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcb.com/tg.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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