lsaccess.ninemsn.com.au
- ninemsn Pty Limited -
Issued by thawte SSL CA - G2
About this certificate
This digital certificate with serial number 49:14:4a:09:f3:17:5e:07:ff:99:7f:37:86:5b:49:82 was issued on by thawte, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
ninemsn Pty Limited
Organization:
ninemsn Pty Limited
Organization unit: Infrastructure
Organization unit: Infrastructure
State / Province:
New South Wales
Locality: Sydney
Country: AU
Locality: Sydney
Country: AU
thawte, Inc.
Organization:
thawte, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 49:14:4a:09:f3:17:5e:07:ff:99:7f:37:86:5b:49:82Serial Number (int): 97138991316066794856971414226859673986
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60
Fingerprint (sha1): c8:e3:da:59:3f:95:d0:c6:0e:38:2e:c7:eb:d3:ba:f0:57:a8:4d:28
Fingerprint (sha256): 7b:8d:db:a3:5c:12:26:8f:ff:0b:5d:2b:08:de:3f:09:36:4d:2b:40:aa:e5:34:a8:e9:a4:2b:76:40:59:9b:08
Issuing Certificate URL: http://tj.symcb.com/tj.crt
Revocation information
OCSP Server: http://tj.symcd.comCRL Distribution Point: http://tj.symcb.com/tj.crl
Check the revocation status for certificate lsaccess.ninemsn.com.au
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for lsaccess.ninemsn.com.au
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
sip.ninemsn.com.au
lsaccess.ninemsn.com.au
lsaccess.ninemsn.com.au
Other certificates including the domain name ninemsn.com.au
(limited to 100 certificates)
networkservices.origin.ninemsn.com.au
showpony.news.ninemsn.com.au
*.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
nine.com.au
www.wideworldofsports.ninemsn.com.au
www.networkservices.ninemsn.com.au
ninemsn.com.au
9now.com.au
somni.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
9now.com.au
sharepoint.ninemsn.com.au
webmail.ninemsn.com.au
favouritethings.news.ninemsn.com.au
login.ninemsn.com.au
www.networkservices.ninemsn.com.au
nine.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
somni.ninemsn.com.au
www.networkservices.ninemsn.com.au
lyncweb.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
adc.api.ninemsn.com.au
*.ninemsn.com.au
nine.com.au
newsalerts.ninemsn.com.au
www.networkservices.ninemsn.com.au
somni.ninemsn.com.au
*.carpoint.ninemsn.com.au
ultimateislandescape.news.ninemsn.com.au
www.networkservices.ninemsn.com.au
godo.ninemsn.com.au
www.networkservices.ninemsn.com.au
somni.ninemsn.com.au
*.ninemsn.com.au
*.carpoint.ninemsn.com.au
*.ninemsn.com.au
www.networkservices.ninemsn.com.au
miamiswim.ninemsn.com.au
sip.ninemsn.com.au
nowornever.ninemsn.com.au
alerts.news.ninemsn.com.au
godo.ninemsn.com.au
lyncweb.ninemsn.com.au
nine.com.au
www.networkservices.ninemsn.com.au
*.ninemsn.com.au
9now.com.au
www.networkservices.ninemsn.com.au
somni.ninemsn.com.au
health.ninemsn.com.au
www.networkservices.ninemsn.com.au
webmail.ninemsn.com.au
www.networkservices.ninemsn.com.au
entertainmentalerts.news.ninemsn.com.au
nine.com.au
sip.ninemsn.com.au
nine.com.au
9now.com.au
nine.com.au
www.networkservices.ninemsn.com.au
nine.com.au
*.ninemsn.com.au
*.sbkprod.ninemsn.com.au
www.networkservices.ninemsn.com.au
health.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
9now.com.au
nine.com.au
www.networkservices.ninemsn.com.au
lsaccess.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
9now.com.au
*.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
login.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
newsalerts.news.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
*.carpoint.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
nine.com.au
9now.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
somni.ninemsn.com.au
nine.com.au
www.networkservices.ninemsn.com.au
motoring.ninemsn.com.au
showpony.news.ninemsn.com.au
*.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
nine.com.au
www.wideworldofsports.ninemsn.com.au
www.networkservices.ninemsn.com.au
ninemsn.com.au
9now.com.au
somni.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
9now.com.au
sharepoint.ninemsn.com.au
webmail.ninemsn.com.au
favouritethings.news.ninemsn.com.au
login.ninemsn.com.au
www.networkservices.ninemsn.com.au
nine.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
somni.ninemsn.com.au
www.networkservices.ninemsn.com.au
lyncweb.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
adc.api.ninemsn.com.au
*.ninemsn.com.au
nine.com.au
newsalerts.ninemsn.com.au
www.networkservices.ninemsn.com.au
somni.ninemsn.com.au
*.carpoint.ninemsn.com.au
ultimateislandescape.news.ninemsn.com.au
www.networkservices.ninemsn.com.au
godo.ninemsn.com.au
www.networkservices.ninemsn.com.au
somni.ninemsn.com.au
*.ninemsn.com.au
*.carpoint.ninemsn.com.au
*.ninemsn.com.au
www.networkservices.ninemsn.com.au
miamiswim.ninemsn.com.au
sip.ninemsn.com.au
nowornever.ninemsn.com.au
alerts.news.ninemsn.com.au
godo.ninemsn.com.au
lyncweb.ninemsn.com.au
nine.com.au
www.networkservices.ninemsn.com.au
*.ninemsn.com.au
9now.com.au
www.networkservices.ninemsn.com.au
somni.ninemsn.com.au
health.ninemsn.com.au
www.networkservices.ninemsn.com.au
webmail.ninemsn.com.au
www.networkservices.ninemsn.com.au
entertainmentalerts.news.ninemsn.com.au
nine.com.au
sip.ninemsn.com.au
nine.com.au
9now.com.au
nine.com.au
www.networkservices.ninemsn.com.au
nine.com.au
*.ninemsn.com.au
*.sbkprod.ninemsn.com.au
www.networkservices.ninemsn.com.au
health.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
9now.com.au
nine.com.au
www.networkservices.ninemsn.com.au
lsaccess.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
9now.com.au
*.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
login.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
newsalerts.news.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
*.carpoint.ninemsn.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
nine.com.au
9now.com.au
www.networkservices.ninemsn.com.au
www.networkservices.ninemsn.com.au
somni.ninemsn.com.au
nine.com.au
www.networkservices.ninemsn.com.au
motoring.ninemsn.com.au
Certificate
The complete raw certificate details for lsaccess.ninemsn.com.au in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGbjCCBVagAwIBAgIQSRRKCfMXXgf/mX83hltJgjANBgkqhkiG9w0BAQsFADBB MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMRswGQYDVQQDExJ0 aGF3dGUgU1NMIENBIC0gRzIwHhcNMTYwMzIzMDAwMDAwWhcNMTcwNjE2MjM1OTU5 WjCBkTELMAkGA1UEBhMCQVUxGDAWBgNVBAgTD05ldyBTb3V0aCBXYWxlczEPMA0G A1UEBxQGU3lkbmV5MRwwGgYDVQQKFBNuaW5lbXNuIFB0eSBMaW1pdGVkMRcwFQYD VQQLFA5JbmZyYXN0cnVjdHVyZTEgMB4GA1UEAxQXbHNhY2Nlc3MubmluZW1zbi5j b20uYXUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH3KOIreiQ7m/D tm3eH5jOKruH4g6XyehLqkb3u4SH7lILbHnwD0IKN+BtTcrlSyFH6r75WvHdf4WH Z35lXbtdPpGjTQqcuNfHWh65IyilNG3uX+KPfm0DMB0bUZn1dy0AGhCy6xzQ1Orb EcTDvFpGNtUmID4WxM2FvbHIqVKEu3k7R3w8gVNuvLn7ndUFc/9Jzbj3XT/uBMl/ F96ZbDwKUN6i4qOYbZDoiW5EHhACboTBGFwY6OW1Y7WTo+cezbUtdQOTOgvjH2cy C/zONFw9T/9LXlo0lX1cfG0zHHaVsYenO2rhZ0XICtGnVMX9xFIJsCoNf0CNev1X Eh7yotSLAgMBAAGjggMPMIIDCzA2BgNVHREELzAtghJzaXAubmluZW1zbi5jb20u YXWCF2xzYWNjZXNzLm5pbmVtc24uY29tLmF1MAkGA1UdEwQCMAAwbgYDVR0gBGcw ZTBjBgZngQwBAgIwWTAmBggrBgEFBQcCARYaaHR0cHM6Ly93d3cudGhhd3RlLmNv bS9jcHMwLwYIKwYBBQUHAgIwIwwhaHR0cHM6Ly93d3cudGhhd3RlLmNvbS9yZXBv c2l0b3J5MA4GA1UdDwEB/wQEAwIFoDAfBgNVHSMEGDAWgBTCT0hX/NFPmsBdOH0O BdvZLrVSYDArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8vdGouc3ltY2IuY29tL3Rq LmNybDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwVwYIKwYBBQUHAQEE SzBJMB8GCCsGAQUFBzABhhNodHRwOi8vdGouc3ltY2QuY29tMCYGCCsGAQUFBzAC hhpodHRwOi8vdGouc3ltY2IuY29tL3RqLmNydDCCAX4GCisGAQQB1nkCBAIEggFu BIIBagFoAHcA3esdK3oNT6Ygi4GtgWhwfi6OnQHVXIiNPRHEzbbsvswAAAFTpRSR fwAABAMASDBGAiEA5JSxSeyARhjxEDUPzOQZqHOJY1xo18z+Ey/Ka4VLXRMCIQDI r7BX2JiQhOaH9FvlP0NcTxk6P6uxhvguvwZW66Rp5QB1AKS5CZC0GFgUh7sTosxn cAo8NZgE+RvfuON3zQ7IDdwQAAABU6UUka4AAAQDAEYwRAIgPYL8erl0AVV458Yq k7r5o16zvrVmM88Z1T1gqjGXS/8CIE80Omoighh+0YI1mBQTrea41myxI/pgJYi5 WrV41syVAHYAaPaY+B9kgr46jO65KB1M/HFRXWeT1ETRCmesu09P+8QAAAFTpRSR /gAABAMARzBFAiEAisAtq/Omjp0ZJQrdu9AEAM9lGASNjuGWjPoyMfNRInMCIEPH TvxAV2Dd18x+HqL5U3xNItCUKLCKTfCsvefOa3RqMA0GCSqGSIb3DQEBCwUAA4IB AQB6ollFQF8Ipe9QyYB6LlgYlHtQYyyeb+VPaKQTT1s4N2jTCOe8vrEEerlQYr5I mU5nVHiWsuXzaJS1Sz9vmwZDAHkXSYfcPI+ydD8e3BlZIA+zdjOHigQv33TK4nCB OryRxuNF1Imdn4GW89OU3eGlVVUsGRBR87Pl4csZC64L07zSl8A+tVexQedL/UVl fuUUIuDKPB2KHs90dmwfIeV/x02giqYaFq+lWi0pox4yErCdCDS1UetPnh9XNkk2 E/Q+o7h5pmMt0oGyYUn/V6Cn4PzIhfdMJAw65ccVwa4robxp+wSAM7e6fzEKt8Ys VSzHbSX1RoQakPlpLqlMITST -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9yjiK3okO5vw7Zt3h+Y ziq7h+IOl8noS6pG97uEh+5SC2x58A9CCjfgbU3K5UshR+q++Vrx3X+Fh2d+ZV27 XT6Ro00KnLjXx1oeuSMopTRt7l/ij35tAzAdG1GZ9XctABoQsusc0NTq2xHEw7xa RjbVJiA+FsTNhb2xyKlShLt5O0d8PIFTbry5+53VBXP/Sc24910/7gTJfxfemWw8 ClDeouKjmG2Q6IluRB4QAm6EwRhcGOjltWO1k6PnHs21LXUDkzoL4x9nMgv8zjRc PU//S15aNJV9XHxtMxx2lbGHpztq4WdFyArRp1TF/cRSCbAqDX9AjXr9VxIe8qLU iwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 97138991316066794856971414226859673986 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-23 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-16 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New South Wales' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Sydney' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'ninemsn Pty Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Infrastructure' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'lsaccess.ninemsn.com.au' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25230223737722098249533336633905161560281378324125618330143048511354899243898093136233646178729949653650038565978237948044392402286000300166225782790321275055270934742834694135032045392012029263653775292399942456775238709716978405965119403119479302723094952252715840931750043154464489229266286282542032335062611561557823626739402675624270622315958755817603639764306237783867873857822060717422021077577637069383008432540089888003179817120448715226410608842026671648990873846131195873088691007232087707890852847731452875550012900690825075370056479022398434759076712525623018908154612601677603619801954044134686957163659 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ninemsn.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsaccess.ninemsn.com.au' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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