www.thawte.fr
- DigiCert, Inc. -
Issued by DigiCert SHA2 Extended Validation Server CA
About this certificate
This digital certificate with serial number 07:9a:30:fb:85:47:bd:d9:1e:b1:1a:45:cf:23:ce:7e was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
DigiCert, Inc.
Company registration number:
5299537-0142
Organization: DigiCert, Inc.
Organization unit: IT
Organization: DigiCert, Inc.
Organization unit: IT
State / Province:
Utah
Locality: Lehi
Country: US
Locality: Lehi
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 07:9a:30:fb:85:47:bd:d9:1e:b1:1a:45:cf:23:ce:7eSerial Number (int): 10105203169886777497501268253119598206
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: b5:3e:07:ff:1f:36:8c:ed:03:c4:9e:ec:22:c0:63:cd:1d:71:1c:6e
AuthorityKeyId: 3d:d3:50:a5:d6:a0:ad:ee:f3:4a:60:0a:65:d3:21:d4:f8:f8:d6:0f
Fingerprint (sha1): 2f:54:b2:df:98:a1:15:4c:51:dc:17:b4:27:60:b8:af:a6:d4:cf:75
Fingerprint (sha256): 78:9a:87:05:35:3f:23:a5:26:79:a3:0c:b1:f6:92:ba:40:7f:b8:6d:91:c4:03:d3:a6:dc:85:a1:8d:d0:86:b3
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/sha2-ev-server-g2.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ev-server-g2.crl
Check the revocation status for certificate www.thawte.fr
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.thawte.fr
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.thawte.fr
Other certificates including the domain name thawte.fr
(limited to 100 certificates)
search.thawte.fr
SSL-CERTIFICATE-CENTER.THAWTE.FR
ssl-certificate-center.thawte.fr
ssl-certificate-center.thawte.fr
ssl-certificate-center.thawte.fr
kb-thawte-fr.symantec.com
www.thawte.fr
thawte.fr
digicert.com
www.thawte.fr
pilot-ssl-certificate-center.thawte.fr
ssl-certificate-center-enterprise.thawte.fr
ssl-certificate-center.thawte.fr
www.thawte.fr
kb-thawte-fr.symantec.com
www.thawte.fr
thawte.com
ssl-certificate-center-enterprise.thawte.fr
ssl-certificate-center.thawte.fr
digicert.com
www.thawte.fr
pilot-ssl-certificate-center-enterprise.thawte.fr
search.thawte.fr
www.thawte.fr
search-thawte-fr.symantec.com
www.thawte.fr
www.thawte.fr
thawte.fr
www.thawte.fr
pilot-ssl-certificate-center-enterprise.thawte.fr
kb-thawte-fr.symantec.com
digicert.com
PILOT-SSL-CERTIFICATE-CENTER-ENTERPRISE.THAWTE.FR
ssl-certificate-center.thawte.fr
ssl-certificate-center.thawte.fr
ssl-certificate-center.thawte.fr
pilot-ssl-certificate-center.thawte.fr
pilot-ssl-certificate-center.thawte.fr
www.thawte.fr
pilot-ssl-certificate-center.thawte.fr
SSL-CERTIFICATE-CENTER-ENTERPRISE.THAWTE.FR
digicert.com
search-thawte-fr.symantec.com
www.thawte.fr
digicert.com
pilot-ssl-certificate-center.thawte.fr
search.thawte.fr
pilot-ssl-certificate-center.thawte.fr
digicert.com
pilot-ssl-certificate-center-enterprise.thawte.fr
pilot-ssl-certificate-center-enterprise.thawte.fr
PILOT-SSL-CERTIFICATE-CENTER-ENTERPRISE.THAWTE.FR
ssl-certificate-center.thawte.fr
kb-thawte-fr.symantec.com
thawte.com
pilot-ssl-certificate-center-enterprise.thawte.fr
pilot-ssl-certificate-center.thawte.fr
SSL-CERTIFICATE-CENTER.THAWTE.FR
SSL-CERTIFICATE-CENTER.THAWTE.FR
ssl-certificate-center.thawte.fr
ssl-certificate-center.thawte.fr
ssl-certificate-center.thawte.fr
kb-thawte-fr.symantec.com
www.thawte.fr
thawte.fr
digicert.com
www.thawte.fr
pilot-ssl-certificate-center.thawte.fr
ssl-certificate-center-enterprise.thawte.fr
ssl-certificate-center.thawte.fr
www.thawte.fr
kb-thawte-fr.symantec.com
www.thawte.fr
thawte.com
ssl-certificate-center-enterprise.thawte.fr
ssl-certificate-center.thawte.fr
digicert.com
www.thawte.fr
pilot-ssl-certificate-center-enterprise.thawte.fr
search.thawte.fr
www.thawte.fr
search-thawte-fr.symantec.com
www.thawte.fr
www.thawte.fr
thawte.fr
www.thawte.fr
pilot-ssl-certificate-center-enterprise.thawte.fr
kb-thawte-fr.symantec.com
digicert.com
PILOT-SSL-CERTIFICATE-CENTER-ENTERPRISE.THAWTE.FR
ssl-certificate-center.thawte.fr
ssl-certificate-center.thawte.fr
ssl-certificate-center.thawte.fr
pilot-ssl-certificate-center.thawte.fr
pilot-ssl-certificate-center.thawte.fr
www.thawte.fr
pilot-ssl-certificate-center.thawte.fr
SSL-CERTIFICATE-CENTER-ENTERPRISE.THAWTE.FR
digicert.com
search-thawte-fr.symantec.com
www.thawte.fr
digicert.com
pilot-ssl-certificate-center.thawte.fr
search.thawte.fr
pilot-ssl-certificate-center.thawte.fr
digicert.com
pilot-ssl-certificate-center-enterprise.thawte.fr
pilot-ssl-certificate-center-enterprise.thawte.fr
PILOT-SSL-CERTIFICATE-CENTER-ENTERPRISE.THAWTE.FR
ssl-certificate-center.thawte.fr
kb-thawte-fr.symantec.com
thawte.com
pilot-ssl-certificate-center-enterprise.thawte.fr
pilot-ssl-certificate-center.thawte.fr
SSL-CERTIFICATE-CENTER.THAWTE.FR
Certificate
The complete raw certificate details for www.thawte.fr in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGvTCCBaWgAwIBAgIQB5ow+4VHvdkesRpFzyPOfjANBgkqhkiG9w0BAQsFADB1 MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMTQwMgYDVQQDEytEaWdpQ2VydCBTSEEyIEV4dGVuZGVk IFZhbGlkYXRpb24gU2VydmVyIENBMB4XDTE4MDQxNzAwMDAwMFoXDTE5MDQxNzEy MDAwMFowgcsxHTAbBgNVBA8MFFByaXZhdGUgT3JnYW5pemF0aW9uMRMwEQYLKwYB BAGCNzwCAQMTAlVTMRUwEwYLKwYBBAGCNzwCAQITBFV0YWgxFTATBgNVBAUTDDUy OTk1MzctMDE0MjELMAkGA1UEBhMCVVMxDTALBgNVBAgTBFV0YWgxDTALBgNVBAcT BExlaGkxFzAVBgNVBAoTDkRpZ2lDZXJ0LCBJbmMuMQswCQYDVQQLEwJJVDEWMBQG A1UEAxMNd3d3LnRoYXd0ZS5mcjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALhvQvetJuI7QPrVbDJL2I2mgB3T7R41b6B+OY9jnPts3V3gak1R39qPdsRs N1m3ZBrNQRaES6XWFJDpluAIJVtbtsUkRunlUDrwOzBooh0ZDTj0nUGB4QjU5lNL 9CxfuVGE670OH4GYi8em4kgpZZiJQIk7LuxL8k2QIul7WT3/Wzin+37z36kcEKJu ovFrEYMBsZlubztiujd5Q5HGipB9o7S+c7fWnHlrWR7O7wvrSvWAJdu1RzDJYCSi bfeBrhnxBKyle3gHH1qXP2/Gpj2Im1YJhFaBDsqx//Ze7rht4leF8lqzOy2XrasQ tvLjipFZw1PmkYPwjMdvKTgYO10CAwEAAaOCAvAwggLsMB8GA1UdIwQYMBaAFD3T UKXWoK3u80pgCmXTIdT4+NYPMB0GA1UdDgQWBBS1Pgf/HzaM7QPEnuwiwGPNHXEc bjAYBgNVHREEETAPgg13d3cudGhhd3RlLmZyMA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwdQYDVR0fBG4wbDA0oDKgMIYuaHR0 cDovL2NybDMuZGlnaWNlcnQuY29tL3NoYTItZXYtc2VydmVyLWcyLmNybDA0oDKg MIYuaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL3NoYTItZXYtc2VydmVyLWcyLmNy bDBLBgNVHSAERDBCMDcGCWCGSAGG/WwCATAqMCgGCCsGAQUFBwIBFhxodHRwczov L3d3dy5kaWdpY2VydC5jb20vQ1BTMAcGBWeBDAEBMIGIBggrBgEFBQcBAQR8MHow JAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBSBggrBgEFBQcw AoZGaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hBMkV4dGVu ZGVkVmFsaWRhdGlvblNlcnZlckNBLmNydDAJBgNVHRMEAjAAMIIBBQYKKwYBBAHW eQIEAgSB9gSB8wDxAHcAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YUA AAFi1cikuQAABAMASDBGAiEAtZatg++bKcNITe0m1h8cCii5ZHCCA0nYduD0oma0 VJwCIQD/jENLzKqXtYC2J5TE/XPqzHcg/vtlM+3eYWp5g+OtOgB2AFYUBpov18Ls 0/XhvUSyPsdGdrm8mRFcwO+UmFXWidDdAAABYtXIpDYAAAQDAEcwRQIhAKhNJojE LOc9yaX8chY7YMa8g+ZE5XFB5GH15Fpz5SSyAiBe8JOLL6PiGD70d1lwiD/QAxsv OKGDcBbu2VDOtjSQXzANBgkqhkiG9w0BAQsFAAOCAQEAL6Uxw81svp4R/ISdl9AT IiwqIcbmMakblPA7kZlF6cpDCLwAWRw+sXrsGaIdKgO15ePf/OK5XTnAuRt+vhcC 6TG1Sq1MxuUBu716mO11MQX9ymwECMXV3tpB7PZrIGIlCg4XF2J6LyWEjWztvgGn d3l4IVCFKHDR0JE3qRowPXcpp08hbw1AHmShUBpIoVg/4MnF0c6HOWpABqvk0cAf 2vd4igvhCfNJy2fnImqhvUn6VKfOunESVebHtx1ONouUUZuU1sF28jv8A+Bq3O7V PrCI2vSQV5TE2k0q6eIwGTjhO2VokpwU/JQm+ZamvpBSxiLg1ix7Gq1l5dpy4vxK AQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuG9C960m4jtA+tVsMkvY jaaAHdPtHjVvoH45j2Oc+2zdXeBqTVHf2o92xGw3WbdkGs1BFoRLpdYUkOmW4Agl W1u2xSRG6eVQOvA7MGiiHRkNOPSdQYHhCNTmU0v0LF+5UYTrvQ4fgZiLx6biSCll mIlAiTsu7EvyTZAi6XtZPf9bOKf7fvPfqRwQom6i8WsRgwGxmW5vO2K6N3lDkcaK kH2jtL5zt9aceWtZHs7vC+tK9YAl27VHMMlgJKJt94GuGfEErKV7eAcfWpc/b8am PYibVgmEVoEOyrH/9l7uuG3iV4XyWrM7LZetqxC28uOKkVnDU+aRg/CMx28pOBg7 XQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10105203169886777497501268253119598206 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Extended Validation Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-17 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-17 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Utah' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '5299537-0142' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Utah' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lehi' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.thawte.fr' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23282713249494159809814232161232721283445749723086666751185308613756920340367286163561342754119728838177255664627218000184928582130021078520444251842199128576287322932298948348608581236724624751934273410792387836541002664627624816167015373300663029555566004098159350567410211437585910335397887158704500302684125766368605916529990441376485047490111050536087546837722362146845875257058998037802217882472491876700203858516450911491881606812226175779443092832239266744133693879526712449229302047681989945900440984346485179970897179833298407137315812341952771652196062707991287557285516672279277481327901730712816658692957 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3dd350a5d6a0adeef34a600a65d321d4f8f8d60f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b53e07ff1f368ced03c49eec22c063cd1d711c6e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thawte.fr' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ev-server-g2.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ev-server-g2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000162d5c8a4b90000040300483046022100b596ad83ef9b29c3484ded26d61f1c0a28b96470820349d876e0f4a266b4549c022100ff8c434bccaa97b580b62794c4fd73eacc7720fefb6533edde616a7983e3ad3a0076005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd00000162d5c8a4360000040300473045022100a84d2688c42ce73dc9a5fc72163b60c6bc83e644e57141e461f5e45a73e524b202205ef0938b2fa3e2183ef4775970883fd0031b2f38a1837016eed950ceb634905f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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