rx.avera.org
Issued by thawte DV SSL CA - G2
About this certificate
This digital certificate with serial number 62:40:d9:4a:07:41:30:b3:0a:bb:8c:bb:fa:22:97:e4 was issued on by thawte, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Certificate Subject
CN=rx.avera.org
thawte, Inc.
Organization:
thawte, Inc.
Organization unit: Domain Validated SSL
Organization unit: Domain Validated SSL
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 62:40:d9:4a:07:41:30:b3:0a:bb:8c:bb:fa:22:97:e4Serial Number (int): 130601057733881208204198121962742126564
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 9f:b8:c1:a9:6c:f2:f5:c0:22:2a:94:ed:5c:99:ac:d4:ec:d7:c6:07
Fingerprint (sha1): 26:8f:6c:f9:7f:56:83:5d:3a:63:eb:ef:0b:7f:97:d2:e5:9b:a2:4a
Fingerprint (sha256): 7e:f6:fe:87:a0:b3:97:5b:56:94:2c:ce:f9:ed:bb:c4:e9:aa:88:db:de:bc:35:7a:97:f1:f9:96:64:e7:08:3c
Issuing Certificate URL: http://tn.symcb.com/tn.crt
Revocation information
OCSP Server: http://tn.symcd.comCRL Distribution Point: http://tn.symcb.com/tn.crl
Check the revocation status for certificate rx.avera.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for rx.avera.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
rx.avera.org
Other certificates including the domain name avera.org
(limited to 100 certificates)
view.avera.org
mail1.avera.org
www.avera.org
mig.avera.org
fhq.avera.org
voalte3sb.voalte.avera.org
specialtyrx.avera.org
www1.avera.org
www.avera.org
rsa.avera.org
admin-webex.phs-sfalls.amck.net
citrix.avera.org
mail1.avera.org
mail.avera.org
goecare.avera.org
redcap.avera.org
view.avera.org
rx.avera.org
admin-webex.phs-sfalls.amck.net
mail.avera.org
staffportal.avera.org
gwextdc2.pa.avera.org
portal.avera.org
MTTASKDATA.avera.org
gwinetdc2.pa.avera.org
www.avera.org
view.avera.org
www.avera.org
teletracking.avera.org
view.avera.org
fhq.avera.org
mail2.avera.org
voalte3sb.voalte.avera.org
gwinetdc1.pa.avera.org
securelink.avera.org
www.avera.org
rxm.avera.org
portal.avera.org
portal.avera.org
www.avera.org
redcap.avera.org
mig.avera.org
meeting.avera.org
mail.avera.org
www.avera.org
avera.org
sso.avera.org
avera-exp-e-cluster.avera.org
mail1.avera.org
www1.avera.org
staffportal.avera.org
view.avera.org
portal.pa.avera.org
mig.avera.org
redcap.avera.org
rxm.avera.org
staffportal.avera.org
mail.avera.org
view.avera.org
www.avera.org
mig.avera.org
www.avera.org
mig.avera.org
sso.avera.org
voalte3.voalte.avera.org
MTGLOBALAPI.avera.org
mig.avera.org
mig.avera.org
mail.avera.org
rsa.avera.org
rx.avera.org
voalte3.voalte.avera.org
portal2.avera.org
www.avera.org
portal.avera.org
rsa.avera.org
view.avera.org
admin-webex.phs-sfalls.amck.net
mail.avera.org
mail1.avera.org
admin-webex.phs-sfalls.amck.net
fhq.avera.org
mail.avera.org
fhq.avera.org
voalte3.voalte.avera.org
gwextdc1.pa.avera.org
redcap.avera.org
voalte3sb.voalte.avera.org
portal.avera.org
www.avera.org
view.avera.org
www.avera.org
admin-webex.phs-sfalls.amck.net
goecare.avera.org
FormerStaffPortal.Avera.org
mig.avera.org
portal.avera.org
avera.org
portal.avera.org
rsa.avera.org
mail1.avera.org
www.avera.org
mig.avera.org
fhq.avera.org
voalte3sb.voalte.avera.org
specialtyrx.avera.org
www1.avera.org
www.avera.org
rsa.avera.org
admin-webex.phs-sfalls.amck.net
citrix.avera.org
mail1.avera.org
mail.avera.org
goecare.avera.org
redcap.avera.org
view.avera.org
rx.avera.org
admin-webex.phs-sfalls.amck.net
mail.avera.org
staffportal.avera.org
gwextdc2.pa.avera.org
portal.avera.org
MTTASKDATA.avera.org
gwinetdc2.pa.avera.org
www.avera.org
view.avera.org
www.avera.org
teletracking.avera.org
view.avera.org
fhq.avera.org
mail2.avera.org
voalte3sb.voalte.avera.org
gwinetdc1.pa.avera.org
securelink.avera.org
www.avera.org
rxm.avera.org
portal.avera.org
portal.avera.org
www.avera.org
redcap.avera.org
mig.avera.org
meeting.avera.org
mail.avera.org
www.avera.org
avera.org
sso.avera.org
avera-exp-e-cluster.avera.org
mail1.avera.org
www1.avera.org
staffportal.avera.org
view.avera.org
portal.pa.avera.org
mig.avera.org
redcap.avera.org
rxm.avera.org
staffportal.avera.org
mail.avera.org
view.avera.org
www.avera.org
mig.avera.org
www.avera.org
mig.avera.org
sso.avera.org
voalte3.voalte.avera.org
MTGLOBALAPI.avera.org
mig.avera.org
mig.avera.org
mail.avera.org
rsa.avera.org
rx.avera.org
voalte3.voalte.avera.org
portal2.avera.org
www.avera.org
portal.avera.org
rsa.avera.org
view.avera.org
admin-webex.phs-sfalls.amck.net
mail.avera.org
mail1.avera.org
admin-webex.phs-sfalls.amck.net
fhq.avera.org
mail.avera.org
fhq.avera.org
voalte3.voalte.avera.org
gwextdc1.pa.avera.org
redcap.avera.org
voalte3sb.voalte.avera.org
portal.avera.org
www.avera.org
view.avera.org
www.avera.org
admin-webex.phs-sfalls.amck.net
goecare.avera.org
FormerStaffPortal.Avera.org
mig.avera.org
portal.avera.org
avera.org
portal.avera.org
rsa.avera.org
Certificate
The complete raw certificate details for rx.avera.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEiTCCA3GgAwIBAgIQYkDZSgdBMLMKu4y7+iKX5DANBgkqhkiG9w0BAQsFADBj MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMR0wGwYDVQQLExRE b21haW4gVmFsaWRhdGVkIFNTTDEeMBwGA1UEAxMVdGhhd3RlIERWIFNTTCBDQSAt IEcyMB4XDTE2MDYwNzAwMDAwMFoXDTE5MDYwNzIzNTk1OVowFzEVMBMGA1UEAwwM cnguYXZlcmEub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+WE zy/q+EDfycpHFn5/32a5sU19oRZ/OKMHLFG08k3Im7Rmz0vpO8yAEtJHCqfi6mMm 6Ffz+Mg9MdJa2WbkR/96QT5FmCLNHNxlONd9I0ZARJy1+mRskjCN3sN8S7yF/Hbd MBRNIwu/iG5oODsH7zTveZhq8+SMk4Kb3qnEygPj8yrKFdhjmuZEZ1jYuDCw9DSW xSfxqsefMGbDDU67sqZDWylrtaQDgVcGzfrWxjE1eKKgsCVKJA6vnN1ZsXnRmYUQ sDpgN4jN+sg0pIaLSJgRSnNJh6arVTo+ivZiMvNI9ZKgLI4EmgUNeJgjc/I9oSfp +c2JtL5RxVIpyxBRUwIDAQABo4IBgzCCAX8wFwYDVR0RBBAwDoIMcnguYXZlcmEu b3JnMAkGA1UdEwQCMAAwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL3RuLnN5bWNi LmNvbS90bi5jcmwwbgYDVR0gBGcwZTBjBgZngQwBAgEwWTAmBggrBgEFBQcCARYa aHR0cHM6Ly93d3cudGhhd3RlLmNvbS9jcHMwLwYIKwYBBQUHAgIwIwwhaHR0cHM6 Ly93d3cudGhhd3RlLmNvbS9yZXBvc2l0b3J5MB8GA1UdIwQYMBaAFJ+4wals8vXA IiqU7VyZrNTs18YHMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8v dG4uc3ltY2QuY29tMCYGCCsGAQUFBzAChhpodHRwOi8vdG4uc3ltY2IuY29tL3Ru LmNydDATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEABYdl LEstCOm8LLH/wRjTY+qq3cqhNSa1q+cVwlfEPxOW1tO2I8s5jl490MQWPNJST8uB bBqzWSiVyk7sZKAObUpqvWpt+65/A1Lyc2ko54sZ8Ak5EHPF91AD2c05nObNKb07 jtGZiisX4DbNFNzw31o/5KsycB9fiYQqV09D5v00x/QFcHfPp81XZSVgmOMIFucl MP9cJ0L/4nu7UrtTdzEP3dh9OZcu5biXSbDvQfnnKpnxhzD82KgdRQyzQWFxDs28 gQzmqY0mRmegv1Gd0P6Cf/zIfas6Tjy0p/P/P2m6Cy1BeSPorevnAlbaXJu8jcp3 3n4MDRdY4O4X2fkHaA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+WEzy/q+EDfycpHFn5/ 32a5sU19oRZ/OKMHLFG08k3Im7Rmz0vpO8yAEtJHCqfi6mMm6Ffz+Mg9MdJa2Wbk R/96QT5FmCLNHNxlONd9I0ZARJy1+mRskjCN3sN8S7yF/HbdMBRNIwu/iG5oODsH 7zTveZhq8+SMk4Kb3qnEygPj8yrKFdhjmuZEZ1jYuDCw9DSWxSfxqsefMGbDDU67 sqZDWylrtaQDgVcGzfrWxjE1eKKgsCVKJA6vnN1ZsXnRmYUQsDpgN4jN+sg0pIaL SJgRSnNJh6arVTo+ivZiMvNI9ZKgLI4EmgUNeJgjc/I9oSfp+c2JtL5RxVIpyxBR UwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 130601057733881208204198121962742126564 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte DV SSL CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-07 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-07 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'rx.avera.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23214789740648951305211505654903208163130109432835023555221929483455768411118883408750410485066378078543840006883206494331894643113118223933175324925772335235900808907384740038243955729134197773633046118332823577405847045318936199038613747936582209060536812093548109924375966956518442711940708201420057236896979445149514327409331199331528468482218452376004063385081078613037724581405350104518365477044909123215377698106282644935477562297555672770324647106565558728131777828962637786970744334566731744200277341829887825072224421277497124095729100280165228968325875986787830892861689751283198471925949852485516283367763 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rx.avera.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tn.symcb.com/tn.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9fb8c1a96cf2f5c0222a94ed5c99acd4ecd7c607 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tn.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tn.symcb.com/tn.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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