apbwebint-prd.schn.com
Issued by Thawte RSA CA 2018
About this certificate
This digital certificate with serial number 0e:1d:6f:f2:d7:16:45:a0:7f:1b:96:18:de:61:9d:9d was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=apbwebint-prd.schn.com
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0e:1d:6f:f2:d7:16:45:a0:7f:1b:96:18:de:61:9d:9dSerial Number (int): 18762039137133868292813599737462758813
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: dc:17:0c:19:52:95:6a:c4:59:90:7b:c3:ec:e4:12:cb:cc:5c:d2:7f
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a
Fingerprint (sha1): ac:62:af:36:19:d5:e4:ea:4d:1b:94:8e:d3:20:3b:bb:56:cf:dc:2f
Fingerprint (sha256): 83:58:0d:81:d1:17:bd:5b:4b:6e:17:3f:ae:df:7f:4d:71:aa:e5:26:bb:7b:40:18:d1:07:2a:c4:f4:8e:98:9f
Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt
Revocation information
OCSP Server: http://status.thawte.comCRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl
Check the revocation status for certificate apbwebint-prd.schn.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for apbwebint-prd.schn.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
apbwebint-prd.schn.com
Other certificates including the domain name schn.com
(limited to 100 certificates)
mobile.schn.com
remoteeast.schn.com
citrix.schn.com
ssi05.schn.com
oraprod.schn.com
adfs.schn.com
oraprod.schn.com
mobile.schn.com
citrix.schn.com
ssior1lnxobi01.schn.com
oraprod.schn.com
supplier.schn.com
oraprod.schn.com
transfer.schn.com
citrix.schn.com
supplier-uat.schn.com
mobile.schn.com
ssi04.schn.com
apbwebint-prd.schn.com
sev.schn.com
mypo.schn.com
webmail.schn.com
transfer.schn.com
transfer.schn.com
mypo.schn.com
remoteeast.schn.com
adfs.schn.com
remoteeast.schn.com
transfer.schn.com
citrix.schn.com
apbwebint-dev.schn.com
remote.schn.com
portal.schn.com
ssiteamtrack.schn.com
ssi05.schn.com
citrix.schn.com
schn.com
web2.schn.com
ssi04.schn.com
mobile.schn.com
apps.schn.com
webmail.schn.com
*.schn.com
remotewest.schn.com
adfs.schn.com
ssiteamtrack.schn.com
supplier-uat.schn.com
ssi05.schn.com
apps.schn.com
apbwebint-uat.schn.com
apps.schn.com
webmail.schn.com
remotewest.schn.com
ssiteamtrack.schn.com
web2.schn.com
apbwebint-prd.schn.com
sni.cloudflaressl.com
ssiteamtrack.schn.com
remotewest.schn.com
sni.cloudflaressl.com
webmail.schn.com
oraprod.schn.com
ssi04.schn.com
adfs.schn.com
sni.cloudflaressl.com
*.schn.com
supplierinformation.schn.com
supplier-uat.schn.com
supplierinformation.schn.com
*.schn.com
sni.cloudflaressl.com
ssiteamtrack.schn.com
ssi05.schn.com
adfs.schn.com
Citrix.schn.com
remoteeast.schn.com
ssi04.schn.com
remotewest.schn.com
oraprod.schn.com
citrix.schn.com
ssi04.schn.com
ssi05.schn.com
ssi05.schn.com
mobile.schn.com
citrixtest.schn.com
ssiteamtrack.schn.com
ssiteamtrack.schn.com
ssior1lnxobi01.schn.com
*.schn.com
mobile.schn.com
adfs.schn.com
oraprod.schn.com
sev.schn.com
apbwebint-dev.schn.com
adfs.schn.com
officewebapps.schn.com
webmail.schn.com
ssiteamtrack.schn.com
sni.cloudflaressl.com
ssi04.schn.com
remoteeast.schn.com
citrix.schn.com
ssi05.schn.com
oraprod.schn.com
adfs.schn.com
oraprod.schn.com
mobile.schn.com
citrix.schn.com
ssior1lnxobi01.schn.com
oraprod.schn.com
supplier.schn.com
oraprod.schn.com
transfer.schn.com
citrix.schn.com
supplier-uat.schn.com
mobile.schn.com
ssi04.schn.com
apbwebint-prd.schn.com
sev.schn.com
mypo.schn.com
webmail.schn.com
transfer.schn.com
transfer.schn.com
mypo.schn.com
remoteeast.schn.com
adfs.schn.com
remoteeast.schn.com
transfer.schn.com
citrix.schn.com
apbwebint-dev.schn.com
remote.schn.com
portal.schn.com
ssiteamtrack.schn.com
ssi05.schn.com
citrix.schn.com
schn.com
web2.schn.com
ssi04.schn.com
mobile.schn.com
apps.schn.com
webmail.schn.com
*.schn.com
remotewest.schn.com
adfs.schn.com
ssiteamtrack.schn.com
supplier-uat.schn.com
ssi05.schn.com
apps.schn.com
apbwebint-uat.schn.com
apps.schn.com
webmail.schn.com
remotewest.schn.com
ssiteamtrack.schn.com
web2.schn.com
apbwebint-prd.schn.com
sni.cloudflaressl.com
ssiteamtrack.schn.com
remotewest.schn.com
sni.cloudflaressl.com
webmail.schn.com
oraprod.schn.com
ssi04.schn.com
adfs.schn.com
sni.cloudflaressl.com
*.schn.com
supplierinformation.schn.com
supplier-uat.schn.com
supplierinformation.schn.com
*.schn.com
sni.cloudflaressl.com
ssiteamtrack.schn.com
ssi05.schn.com
adfs.schn.com
Citrix.schn.com
remoteeast.schn.com
ssi04.schn.com
remotewest.schn.com
oraprod.schn.com
citrix.schn.com
ssi04.schn.com
ssi05.schn.com
ssi05.schn.com
mobile.schn.com
citrixtest.schn.com
ssiteamtrack.schn.com
ssiteamtrack.schn.com
ssior1lnxobi01.schn.com
*.schn.com
mobile.schn.com
adfs.schn.com
oraprod.schn.com
sev.schn.com
apbwebint-dev.schn.com
adfs.schn.com
officewebapps.schn.com
webmail.schn.com
ssiteamtrack.schn.com
sni.cloudflaressl.com
ssi04.schn.com
Certificate
The complete raw certificate details for apbwebint-prd.schn.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEujCCA6KgAwIBAgIQDh1v8tcWRaB/G5YY3mGdnTANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMRswGQYDVQQDExJUaGF3dGUgUlNBIENBIDIwMTgwHhcN MTkwNDMwMDAwMDAwWhcNMjEwNTEyMTIwMDAwWjAhMR8wHQYDVQQDExZhcGJ3ZWJp bnQtcHJkLnNjaG4uY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA 7QM8HGxMCi08XKbmmssMb3PdPGnvDMpkAeIAbGNtzfor20w6tLGimZeIjrfrSV7e y5L1ZxG6csvTeS3PM7WpYMF8f15pydOmryk2HfC3tmhBPC4c6Lsqd2C76EzbQxkg AAo9GBEEBASdViyvW8VSQMUoNiYcu3tkmCHW3+iuDfLYUpvGwf5FTy43l2LSuCqS sjjSzqAcqFrdd6tF4WhDql9G4m9FgZw1Byug7Atg2D596F3sjz/nV47OzZg9WPQ3 PPPPHBqjuk6tlybcjtoCZWD4TppsyWpAYG/tF5koDJZk2ULNjg/ugC/RCpStC1Ri YiJ9Db9cFc5vDwKurcI6WwIDAQABo4IBsTCCAa0wHwYDVR0jBBgwFoAUo8heZVTl MHjBBeoHCmpZzLn+3lowHQYDVR0OBBYEFNwXDBlSlWrEWZB7w+zkEsvMXNJ/MCEG A1UdEQQaMBiCFmFwYndlYmludC1wcmQuc2Nobi5jb20wDgYDVR0PAQH/BAQDAgWg MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA6BgNVHR8EMzAxMC+gLaAr hilodHRwOi8vY2RwLnRoYXd0ZS5jb20vVGhhd3RlUlNBQ0EyMDE4LmNybDBMBgNV HSAERTBDMDcGCWCGSAGG/WwBAjAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5k aWdpY2VydC5jb20vQ1BTMAgGBmeBDAECATBvBggrBgEFBQcBAQRjMGEwJAYIKwYB BQUHMAGGGGh0dHA6Ly9zdGF0dXMudGhhd3RlLmNvbTA5BggrBgEFBQcwAoYtaHR0 cDovL2NhY2VydHMudGhhd3RlLmNvbS9UaGF3dGVSU0FDQTIwMTguY3J0MAkGA1Ud EwQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAC5y Qi27lvJDyYo/lRnd9QBuV7HjjyF1g3dr1OHcFgDVw3N38jXt3wUeIfIuRn64Md7s RChLmuabSMfyyN1roDf2sJWDdvW5kueYYry0F9N7f2iEW1QSLbgBXTlCpW9by3H7 aEr1alCsS9tpZ0T7/B+aAtbLI9A7PCqLWXhMuLUR3cvw/bpXqx+tI4xpiOnsV75W Q0rNT+JIhAFHX6BY1fVujpOZ/yZ5cn86BHeoOLriHx2XQDIsHy3/RIi2pmNrsnRc Cf70B88T3/SWtEdbHyr05OCFoXUd1rAH7WgepoKB+sc6pWXgyVuEl3dD/8QjvtS7 CRYCnlVpsWrLTVgsoIs= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7QM8HGxMCi08XKbmmssM b3PdPGnvDMpkAeIAbGNtzfor20w6tLGimZeIjrfrSV7ey5L1ZxG6csvTeS3PM7Wp YMF8f15pydOmryk2HfC3tmhBPC4c6Lsqd2C76EzbQxkgAAo9GBEEBASdViyvW8VS QMUoNiYcu3tkmCHW3+iuDfLYUpvGwf5FTy43l2LSuCqSsjjSzqAcqFrdd6tF4WhD ql9G4m9FgZw1Byug7Atg2D596F3sjz/nV47OzZg9WPQ3PPPPHBqjuk6tlybcjtoC ZWD4TppsyWpAYG/tF5koDJZk2ULNjg/ugC/RCpStC1RiYiJ9Db9cFc5vDwKurcI6 WwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 18762039137133868292813599737462758813 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-30 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-12 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apbwebint-prd.schn.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29920073420578222746273759633936788906124558756214150436303292227734875430355320813527257065305645781386956084235785865009766830248052213348234120029156160340971917041997582186348568053355302383950391558800210418560132916778134491233726227941094014365903403992562968317308163935865448776280126165118139260743425837429292483958390709900863875155355916942570799423883263668693164928642623081721868711134912074492069769380945229610332023812881872249280745934639851477849199136458640954233415335833967214497318157723367769841977514365874602575907933399489296345232068831046155156745140247336869358194264700420855735401051 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) dc170c1952956ac459907bc3ece412cbcc5cd27f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apbwebint-prd.schn.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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