ssl-certificate-center-enterprise-thawte-ilg.verisign.net

- Symantec Corporation -

Issued by thawte Extended Validation SSL CA

About this certificate

This digital certificate with serial number 40:cb:b9:94:ea:17:f8:cd:c2:72:db:34:08:23:8f:5c was issued on by thawte, Inc..

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Symantec Corporation

Company registration number: 2158113
Organization: Symantec Corporation
Organization unit: Infrastructure Operations
State / Province: California
Locality: Mountain View
Country: US

thawte, Inc.

Organization: thawte, Inc.
Organization unit: Terms of use at https://www.thawte.com/cps (c)06
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 40:cb:b9:94:ea:17:f8:cd:c2:72:db:34:08:23:8f:5c
Serial Number (int): 86128392036510386079113408441078746972
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: cd:32:e2:f2:5d:25:47:02:aa:8f:79:4b:32:ee:03:99:fd:30:49:d1

Fingerprint (sha1): 4c:af:6d:24:47:2b:65:9f:af:54:97:7f:7a:76:19:81:b2:39:d8:a8
Fingerprint (sha256): 7b:ed:18:cc:f0:0e:ca:b6:46:5b:08:81:94:ef:63:1b:0d:7b:07:0e:a4:10:89:db:f1:88:7c:d3:76:99:31:aa

Issuing Certificate URL: http://crl.thawte.com/ThawteEVCA2006.cer

Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://crl.thawte.com/ThawteEVCA2006.crl

Check the revocation status for certificate ssl-certificate-center-enterprise-thawte-ilg.verisign.net

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl-certificate-center-enterprise-thawte-ilg.verisign.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ssl-certificate-center-enterprise-thawte.verisign.net
SSL-CERTIFICATE-CENTER-ENTERPRISE.THAWTE.COM
ssl-certificate-center-enterprise-thawte-ilg.verisign.net

Other certificates including the domain name verisign.net

(limited to 100 certificates)
www.verisign.com
ssl-certificate-center-emea-ilg.verisign.net
ssl-certificate-center-enterprise-ncsa-ilg.verisign.net
query-emea-ilg.verisign.net
pilot-ssl-certificate-center-enterprise-apac-ilg.verisign.net
pilot-ssl-certificate-center-enterprise-apac.verisign.net
pkiservices.verisign.com
SSL-CERTIFICATE-CENTER.THAWTE.FR
eol-redirect.verisign.net
ssl-certificate-center-ncsa-ilg.verisign.net
ssl-certificate-center.thawte.com
www.verisign.com
www.verisign.com
pilot-ssl-certificate-center-enterprise-emea-ilg.verisign.net
pilot-ssl-certificate-center-enterprise-apac-ilg.verisign.net
ssl-certificate-center-ncsa.verisign.net
trustseal.verisign.com
pilot-ssl-certificate-center-enterprise-ncsa-ilg.verisign.net
ssl-certificate-center-ncsa-ilg.verisign.net
pilot-ssl-certificate-center.thawte.com
pilot-verify-ilg.verisign.net
query-ncsa.verisign.net
ssl-certificate-center-enterprise-emea.verisign.net
ssl-certificate-center-ncsa-ilg.verisign.net
www.verisign.com
ssl-certificate-center-emea-ilg.verisign.net
pilot-ssl-certificate-center-ncsa-ilg.verisign.net
pilot-ssl-certificate-center-emea-ilg.verisign.net
eol-redirect-thawte.verisign.net
vipuserservices.verisign.com
ssl-certificate-center-enterprise.thawte.fr
pilot-ssl-certificate-center-apac-ilg.verisign.net
pilot-ssl-certificate-center-emea-ilg.verisign.net
maintenance.verisign.net
www.verisign.com
www.verisign.com
pilot-ssl-certificate-center-enterprise-apac.verisign.net
blogs.thawte.com
pilot-ssl-certificate-center-enterprise-emea-ilg.verisign.net
pilot-ssl-certificate-center-ncsa-ilg.verisign.net
ssl-certificate-center-enterprise-apac-ilg.verisign.net
ssl-certificate-center-ncsa-ilg.verisign.net
ssl-certificate-center.thawte.de
pilot-verify.thawte.com
SSL-CERTIFICATE-CENTER.THAWTE.DE
www.verisign.com
ssl-certificate-center-enterprise.thawte.fr
pilot-pkiservices.verisign.com
ssl-certificate-center-apac-ilg.verisign.net
pilot-ssl-certificate-center.thawte.de
pilot-ssl-certificate-center-emea-ilg.verisign.net
pilot-ssl-certificate-center-enterprise-ncsa-ilg.verisign.net
ssl-certificate-center-enterprise-ncsa-ilg.verisign.net
test-products.verisign.com
pilot-ssl-certificate-center-enterprise-apac-ilg.verisign.net
ssl-certificate-center-enterprise-thawte-de-ilg.verisign.net
verify-ilg.verisign.net
pilot-ssl-certificate-center-enterprise.thawte.de
eol-redirect-thawte.verisign.net
maintenance.verisign.net
pilot-ssl-certificate-center-apac.verisign.net
ssl-certificate-center-emea.verisign.net
www.verisign.com
pilot-ssl-certificate-center-enterprise.thawte.de
trustseal.verisign.com
www.verisign.com
blogs.geotrust.com
pilot-verify.thawte.com
pilot-ssl-certificate-center-enterprise-ncsa-ilg.verisign.net
query-apac.verisign.net
SSL-CERTIFICATE-CENTER.THAWTE.DE
ssl-certificate-center-enterprise-emea.verisign.net
ssl-certificate-center-enterprise-thawte-ilg.verisign.net
pkiservices.verisign.com
query-emea-ilg.verisign.net
PILOT-SSL-CERTIFICATE-CENTER-ENTERPRISE.THAWTE.FR
pilot-adms.verisign.com
ssl-certificate-center.thawte.fr
knowledge-intl.verisign.net
pilot-verify-ilg.verisign.net
ssl-certificate-center-enterprise-emea-ilg.verisign.net
pilot-ssl-certificate-center-ncsa.verisign.net
pilot-ssl-certificate-center.thawte.com
pilot-ssl-certificate-center-enterprise.thawte.com
ssl-certificate-center-ncsa-ilg.verisign.net
www.verisign.com
ssl-certificate-center-enterprise-ncsa-ilg.verisign.net
pilot-ssl-certificate-center-enterprise-ncsa-ilg.verisign.net
query-ncsa.verisign.net
adms.verisign.com
authconnect-mtv.verisign.com
verify-ilg.verisign.net
pilot-ssl-certificate-center-enterprise-emea-ilg.verisign.net
pilot-ssl-certificate-center.thawte.fr
ssl-certificate-center-ncsa.verisign.net
www.verisign.com
ssl-certificate-center-emea.verisign.net
www.verisign.com
eol-redirect-thawte.verisign.net
pilot-ssl-certificate-center-ncsa-ilg.verisign.net

Certificate

The complete raw certificate details for ssl-certificate-center-enterprise-thawte-ilg.verisign.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAtNpeDGnjOXm8CZXfPX
kSICsbB2Me6uUtRYfO03UGknEfxZ24eBZXI6aZ+WIZO2a8kYWzL52KLpkoHtJSxG
mmKYjliaQPimdxAIaGML/oBl7ubpZ4UDEmMEQSx569FgmtAoSMRCaGKaUng2KzLa
t2S0CO4X2UpI0+HtZ5WEOA6xJdkJcVPsuCAfMGsJgdvuRgTETG+U9VfuoIu4BRUH
eMcCgjA2NFcXcLL6RglWoU5Z7p7n3HCE297qsWMEAXVfG69g8DvXZZA7GYE0KlSA
hk2E0DoWwPkorhMUjTACeVrt8ZZdJ86Ul54m4rrmGMZPQLUQ3YzWNvOVX6smio5S
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 86128392036510386079113408441078746972
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.thawte.com/cps (c)06'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte Extended Validation SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2158113'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Mountain View'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Infrastructure  Operations'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'ssl-certificate-center-enterprise-thawte-ilg.verisign.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24748281644407248961877135448324678916323944914581001974096457277520534339723657190011222400819333227025163893838817175655847598503034054967088970473472970917103035191844727872771875717713172292890881333400407692294458808811107306461747974909478644612204519699588170268260083465537137734922488171988386162616443866214354883613930459384934735566356115730232901082261465785819236509101212923220347227814971319692106570365459670276469815612150509602363074424300471314567822128573284606771412535218990995538587853009292608402194135753118140064748207433669446505314007592852176223471606097328218994403152016078334614983227
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.thawte.com/ThawteEVCA2006.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.48.1 (Thawte EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName cd32e2f25d254702aa8f794b32ee0399fd3049d1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.thawte.com/ThawteEVCA2006.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (163 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl-certificate-center-enterprise-thawte.verisign.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'SSL-CERTIFICATE-CENTER-ENTERPRISE.THAWTE.COM'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl-certificate-center-enterprise-thawte-ilg.verisign.net'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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