personal.sticos.no

- Sticos AS -

Issued by thawte EV SSL CA - G3

About this certificate

This digital certificate with serial number 1b:8c:33:02:8f:da:b9:ef:ee:24:04:1c:2a:23:6f:25 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Sticos AS

Company registration number: 934 228 391
Organization: Sticos AS
State / Province: Trondheim
Locality: Trondheim
Country: NO

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1b:8c:33:02:8f:da:b9:ef:ee:24:04:1c:2a:23:6f:25
Serial Number (int): 36617112052254495996976700098441604901
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: f0:70:51:da:d3:2a:91:4f:52:77:d7:86:77:74:0f:ce:71:1a:6c:22

Fingerprint (sha1): 48:c5:ca:f4:57:ae:22:2c:c5:37:bb:cc:9f:d6:21:af:d1:fd:0c:e5
Fingerprint (sha256): 73:64:f4:ff:0a:2a:0b:12:94:35:10:4d:08:4f:19:a1:07:17:c2:00:91:b1:62:f9:d8:ff:f0:71:56:4b:b7:00

Issuing Certificate URL: http://ti.symcb.com/ti.crt

Revocation information

OCSP Server: http://ti.symcd.com
CRL Distribution Point: http://ti.symcb.com/ti.crl

Check the revocation status for certificate personal.sticos.no

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for personal.sticos.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

personal.sticos.no

Other certificates including the domain name sticos.no

(limited to 100 certificates)
*.sticos.no
support-test.sticos.no
kampanje.sticos.no
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
kampanje.sticos.no
kampanje.sticos.no
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
status.320east.de
accountancymanagerstatus.co.uk
personal.sticos.no
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
status.320east.de
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
access.okonomibistand.no
accountancymanagerstatus.co.uk
status.320east.de
sip.sticos.no
status.320east.de
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
kampanje.sticos.no
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
cdn.sticos.no
accountancymanagerstatus.co.uk
access.sirakvina.no
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
kampanje.sticos.no
e-post.sticos.no
kampanje.sticos.no
accountancymanagerstatus.co.uk
kampanje.sticos.no
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
e-post.sticos.no
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
foundation.sticos.no
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
access.sea-cargo.no
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
kampanje.sticos.no
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
vpn.sticos.no
sip.sticos.no
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
status.320east.de
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
*.sticos.no
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
kampanje.sticos.no
personal.sticos.no
personal.sticos.no
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
kampanje.sticos.no
e-post.sticos.no
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
accountancymanagerstatus.co.uk
e-post.sticos.no
accountancymanagerstatus.co.uk

Certificate

The complete raw certificate details for personal.sticos.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGfTCCBWWgAwIBAgIQG4wzAo/aue/uJAQcKiNvJTANBgkqhkiG9w0BAQsFADBE
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMR4wHAYDVQQDExV0
aGF3dGUgRVYgU1NMIENBIC0gRzMwHhcNMTUxMjAyMDAwMDAwWhcNMTgwMTA2MjM1
OTU5WjCBsDETMBEGCysGAQQBgjc8AgEDEwJOTzEdMBsGA1UEDxMUUHJpdmF0ZSBP
cmdhbml6YXRpb24xEjAQBgNVBAoMCVN0aWNvcyBBUzEUMBIGA1UEBRMLOTM0IDIy
OCAzOTExCzAJBgNVBAYTAk5PMRIwEAYDVQQIDAlUcm9uZGhlaW0xEjAQBgNVBAcM
CVRyb25kaGVpbTEbMBkGA1UEAwwScGVyc29uYWwuc3RpY29zLm5vMIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuku62aDSIlocumgSQaLZXIhqPfRLC4u+
upgOk7ppPEQCeVHtFqeo8byhq4mWFiHFJ5J7QCOWY+XB3lhm6HlByM5tsOb74mXT
EBkhYhDhfAnukIDk6Bq2hkmXnuTF4HnAVbzU5tWBMHiuI7AlA6QqMt24K0QXdzj8
MbWNB0uYxN2kfiADXkSJiAI9Nv6LJz3hlPO/3DIaVaLjmwuItRayvGIHbDxn8R6r
9lWFPPacD2RqUK255dfLiKafbXGeH3V9ggTpljZiVXPfBUS4qDnYsrZL2AOaaIUK
uV8v660Qr1H1Lf401PjaP8t6sBTpjbzNUH9tWhDfFuXY8tNxje2mSwIDAQABo4IC
/DCCAvgwHQYDVR0RBBYwFIIScGVyc29uYWwuc3RpY29zLm5vMAkGA1UdEwQCMAAw
DgYDVR0PAQH/BAQDAgWgMCsGA1UdHwQkMCIwIKAeoByGGmh0dHA6Ly90aS5zeW1j
Yi5jb20vdGkuY3JsMHMGA1UdIARsMGowaAYLYIZIAYb4RQEHMAEwWTAmBggrBgEF
BQcCARYaaHR0cHM6Ly93d3cudGhhd3RlLmNvbS9jcHMwLwYIKwYBBQUHAgIwIwwh
aHR0cHM6Ly93d3cudGhhd3RlLmNvbS9yZXBvc2l0b3J5MB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBTwcFHa0yqRT1J314Z3dA/OcRps
IjBXBggrBgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly90aS5zeW1jZC5j
b20wJgYIKwYBBQUHMAKGGmh0dHA6Ly90aS5zeW1jYi5jb20vdGkuY3J0MIIBfwYK
KwYBBAHWeQIEAgSCAW8EggFrAWkAdgDd6x0reg1PpiCLga2BaHB+Lo6dAdVciI09
EcTNtuy+zAAAAVFiJwC+AAAEAwBHMEUCIBlYlzAP6ODZZG6H33VuGgdWsnnwPsyJ
Dl/tHBNI1sjqAiEAzdqG6CrojGOdxFBvL8EnR3E3ROdpcoIAAy/2z9WslbIAdwCk
uQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAVFiJwD0AAAEAwBIMEYC
IQCBwj/7LhhDKoWip30vViHGZhMufObuceBPhQMe+OweJwIhAMxDtUYAiSrS3fZZ
9tO9dvvlMMk+JomI6SIaX1fGoR2aAHYAaPaY+B9kgr46jO65KB1M/HFRXWeT1ETR
Cmesu09P+8QAAAFRYicA/AAABAMARzBFAiEAtFhBalp2pYj/o1imcBs8hks8VrFk
qHD0n6K0R6FBJSoCIC9gvRq0lXjFeWGJ9u8Kw5pkrsX5iLmhTbmBQ1FLbz1fMA0G
CSqGSIb3DQEBCwUAA4IBAQCFrjoE8O6ViqkJ6o94JMW84pxIKw9iBHwjux1ky0Hz
UfadAlPwzWTr3TfEhGE9sGF28xz3l3a5/m02Cb94zoBuXlQ3pEoOwhhWg7VOT+mr
gAO+xuctoKb/4nJsZ/QiifXG0XejJoAsbYNHzQNK+qMCZMwvSG98zLpQiHTCjYg/
L/zlJZQeseclrvtBDgE1ljhuaTq9QbI88DXXV5Tg3/zKrOT0caJFR/ziqqL7FXA7
HbQfqobvLsVKUAYou73j95qucaKgN8LiEWYeAODnOtv/y6nwzlK2+dxF4UBgBvbs
P7IfmDB24q37IdiULrLyyGeHrjSlM7Xfqi2fMba07Wea
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuku62aDSIlocumgSQaLZ
XIhqPfRLC4u+upgOk7ppPEQCeVHtFqeo8byhq4mWFiHFJ5J7QCOWY+XB3lhm6HlB
yM5tsOb74mXTEBkhYhDhfAnukIDk6Bq2hkmXnuTF4HnAVbzU5tWBMHiuI7AlA6Qq
Mt24K0QXdzj8MbWNB0uYxN2kfiADXkSJiAI9Nv6LJz3hlPO/3DIaVaLjmwuItRay
vGIHbDxn8R6r9lWFPPacD2RqUK255dfLiKafbXGeH3V9ggTpljZiVXPfBUS4qDnY
srZL2AOaaIUKuV8v660Qr1H1Lf401PjaP8t6sBTpjbzNUH9tWhDfFuXY8tNxje2m
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 36617112052254495996976700098441604901
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte EV SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sticos AS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '934 228 391'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Trondheim'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Trondheim'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'personal.sticos.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23517668520936359377113017815493857379307511463958250051323570980811115273653196122151972131275586289262453632467035200122205370989518630524630267500678956937206921228978780733891747411804893754012769478670595294052739468506664481417496423139332069839162798560126537285764046428641817104364945732046071273145469533810296983251012457032905777162387583259672895228323000757818119114253146727910608454277107038831279473960284499648386979485238311190364841514986188497011487723783712191205800424924853909826214054166329839271671891553223980628317409736675420752568458044993675869731932959197110001931843266920389756692043
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personal.sticos.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ti.symcb.com/ti.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.48.1 (Thawte EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f07051dad32a914f5277d78677740fce711a6c22
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ti.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ti.symcb.com/ti.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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