www.stadtarchiv.mannheim.de

Issued by Thawte DV SSL CA

About this certificate

This digital certificate with serial number 63:37:8f:e1:d1:5d:5d:4f:cb:f9:4a:c8:59:4a:a8:44 was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=www.stadtarchiv.mannheim.de,OU=Go to https://www.thawte.com/repository/index.html+OU=Thawte SSL123 certificate+OU=Domain Validated

Thawte, Inc.

Organization: Thawte, Inc.
Organization unit: Domain Validated SSL
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 63:37:8f:e1:d1:5d:5d:4f:cb:f9:4a:c8:59:4a:a8:44
Serial Number (int): 131882066185631212641351488930222614596
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: ab:44:e4:5d:ec:83:c7:d9:c0:85:9f:f7:e1:c6:97:90:b0:8c:3f:98

Fingerprint (sha1): 66:56:6f:8d:63:0c:41:a1:b6:81:1c:71:a1:83:56:ae:bc:52:dd:e8
Fingerprint (sha256): 83:76:b2:8d:5b:1a:08:fd:a7:5a:33:a6:fa:1d:54:26:78:14:bd:5e:a2:d2:94:50:75:48:87:75:ca:2d:89:b6

Issuing Certificate URL: http://svr-dv-aia.thawte.com/ThawteDV.cer

Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-dv-crl.thawte.com/ThawteDV.crl

Check the revocation status for certificate www.stadtarchiv.mannheim.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.stadtarchiv.mannheim.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.stadtarchiv.mannheim.de

Other certificates including the domain name mannheim.de

(limited to 100 certificates)
veranstaltungen.mannheim.de
red.mannheim.de
scope.mannheim.de
extern.mannheim.de
NBGstamanEXP-E1.mannheim.de
piwik.mannheim.de
web2.mannheim.de
mailings.konversion.mannheim.de
buergerinfo.mannheim.de
bewerbung.mannheim.de
www.mannheim.de
theater.mannheim.de
opendata.mannheim.de
www.mannheim.de
ccs.mannheim.de
mailings.konversion.mannheim.de
mailings.mannheim.de
ccs.mannheim.de
mailings.konversion.mannheim.de
bs.mannheim.de
veranstaltungen.mannheim.de
stadtarchiv.mannheim.de
*.mannheim.de
khria.mannheim.de
veranstaltungen.mannheim.de
gastwlan.mannheim.de
extern1.mannheim.de
www.mannheim.de
buergerinfo.mannheim.de
buergerinfo.mannheim.de
beteiligungshaushalt.mannheim.de
*.mannheim.de
svcloud.mannheim.de
bewerbung.mannheim.de
www.formular.mannheim.de
piwik.mannheim.de
*.mannheim.de
piwik.mannheim.de
katalog.mannheim.de
theater.mannheim.de
www.mannheim.de
www.formular.mannheim.de
www.mannheim.de
artup.mannheim.de
svcloud.mannheim.de
ccs.mannheim.de
piwik.mannheim.de
mdms.mannheim.de
katalog.mannheim.de
waehlenab18.mannheim.de
extern.mannheim.de
buergerportal.mannheim.de
mailings.konversion.mannheim.de
webco.mannheim.de
extern1.mannheim.de
ekol.mannheim.de
web2.mannheim.de
www.mannheim.de
theater.mannheim.de
scope.mannheim.de
services.mannheim.de
piwik.mannheim.de
extern1.mannheim.de
ekol.mannheim.de
stadtarchiv.mannheim.de
mailings.konversion.mannheim.de
web2.mannheim.de
bewerbung.mannheim.de
web2.mannheim.de
katalog.mannheim.de
NBGstamanEXP-E1.mannheim.de
services.mannheim.de
scope.mannheim.de
katalog.mannheim.de
mailings.konversion.mannheim.de
ccs.mannheim.de
veranstaltungen.mannheim.de
mailings.konversion.mannheim.de
theater.mannheim.de
mailings.konversion.mannheim.de
www5.mannheim.de
um.mannheim.de
formular.mannheim.de
katalog.mannheim.de
www.stadtarchiv.mannheim.de
umfrage.mannheim.de
bs.mannheim.de
bs.mannheim.de
bs.mannheim.de
extern.mannheim.de
buergerportal.mannheim.de
umfrage.mannheim.de
ccs.mannheim.de
extern.mannheim.de
svcsg50.mannheim.de
scope.mannheim.de
bs.mannheim.de
mailings.konversion.mannheim.de
katalog.mannheim.de
fuehrerschein.mannheim.de

Certificate

The complete raw certificate details for www.stadtarchiv.mannheim.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF/jCCBOagAwIBAgIQYzeP4dFdXU/L+UrIWUqoRDANBgkqhkiG9w0BAQUFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMVGhhd3RlLCBJbmMuMR0wGwYDVQQLExRE
b21haW4gVmFsaWRhdGVkIFNTTDEZMBcGA1UEAxMQVGhhd3RlIERWIFNTTCBDQTAe
Fw0xNDAzMDMwMDAwMDBaFw0xNzAzMDIyMzU5NTlaMIGiMTswOQYDVQQLDDJHbyB0
byBodHRwczovL3d3dy50aGF3dGUuY29tL3JlcG9zaXRvcnkvaW5kZXguaHRtbDEi
MCAGA1UECwwZVGhhd3RlIFNTTDEyMyBjZXJ0aWZpY2F0ZTEZMBcGA1UECwwQRG9t
YWluIFZhbGlkYXRlZDEkMCIGA1UEAwwbd3d3LnN0YWR0YXJjaGl2Lm1hbm5oZWlt
LmRlMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvtRDh40yfUJBi/3w
I3cHzTrWVhZiHazf8PViEaTSSlJgFVv3MOVV5pjdVtebEpK3Gy5kKzNfwjvKbYje
ZMmD5D0TlswPEx8S5GsWM9ALE86vogIxSEdVVW3lG2Sp4UZY50dVmeE1pRxyZWaY
HoB/i0akDz7XBPKeGrRn9t7DyGyTGPpU2tiLlDRtdfNc8q24uvWJByHaiLJuvsrD
L4n6Po/nMFs4cRTCPt+jAhVPTFzuaxQLAHq02k3wsnCgRqKpumjRU2r2VDbaeKW9
5q90kWtJwZPhihF0YlHIbQJu5R51rzpwnlcnVaTWWVugY/nIEszS6WAKe53XZfDe
jbtUejoKNbNGdp4K1Dwtnhr100I1L+yPmQ+lEVHNW4XYq8DXXwPDUJZji8YIgkem
t+oKqkvlEtaDefM2EZAb28YFIiRhrCAT5gRPW5YVWY6piL6kTbKU+nXxkva0lAiK
ROLdx7T7x0tF4AkO7HyRiJNXDrqBF7WAVcm/v0u0dWvj0GjSQLHPj/F+fMaHxSWB
/f2ThlsEmwAnnIJ3NB8K9GqcZ3aWrZy6idnKNk7hTKP6E7rJ7JyyYsBQ7zrbJ9uz
LJ7h3H5fjYrl0l/vUHCqvxpW62mKt+PSNqQxfkC5dAkZDSAUr2Q3sieHs3Y6pRwU
X2cfCeOoZIPnFIzfi18Q93LQreMCAwEAAaOCAXEwggFtMCYGA1UdEQQfMB2CG3d3
dy5zdGFkdGFyY2hpdi5tYW5uaGVpbS5kZTAJBgNVHRMEAjAAMDoGA1UdHwQzMDEw
L6AtoCuGKWh0dHA6Ly9zdnItZHYtY3JsLnRoYXd0ZS5jb20vVGhhd3RlRFYuY3Js
MEEGA1UdIAQ6MDgwNgYKYIZIAYb4RQEHNjAoMCYGCCsGAQUFBwIBFhpodHRwczov
L3d3dy50aGF3dGUuY29tL2NwczAfBgNVHSMEGDAWgBSrRORd7IPH2cCFn/fhxpeQ
sIw/mDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMGkGCCsGAQUFBwEBBF0wWzAiBggrBgEFBQcwAYYWaHR0cDovL29jc3AudGhh
d3RlLmNvbTA1BggrBgEFBQcwAoYpaHR0cDovL3N2ci1kdi1haWEudGhhd3RlLmNv
bS9UaGF3dGVEVi5jZXIwDQYJKoZIhvcNAQEFBQADggEBABb5jEsTVV+EY8FapcT/
HQmW4PmokZPGSLJiCK2ydowsqcDaxzzeMO3Rimze/g4tcyQ9fcEIidTZt7E+D3U8
EnTR1e2V/LSiQKM35cqN7kfPc/VuB5n+H8FXCbpF2IvRW3bfEmhbO4JC0SyueWW3
PAVrPsX5kk5bPLcGrNLTpJHqjDOUL0xmSIxBCNbw43vIhWGyQEHsgAvAa5rUVscr
/M9ZZZ5NBcvunfKmz4Snlm4O+e0W5Ntu6A3w4w4yHPA5Z1eULIAl2kaZb12mPBjZ
rwLmKHoEtAZpcaifi/ur3wwP4pheJj0xMIqY4QmMNqscLDPOdQuVjTCQaQ+VRaEc
l6U=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 131882066185631212641351488930222614596
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte DV SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-03-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Go to https://www.thawte.com/repository/index.html'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Thawte SSL123 certificate'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Domain Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.stadtarchiv.mannheim.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 778515031907841075963235950987495660232352903896704032610095149312723152827325470215192264122239261018183053086928713220597198840894149237432767096103028532327216173111229134008155653149418174057797882583579237072800960357102742974789109485471917624748639700432439734414105587858258179104589124994149865977498749656139736871186679915970623471381598372809550835550643943069092339787684785320273362711662070937310723345721948926466959569413823964313359437795707345020962856029545495422032862493097462401958654528184380632536406443703895784500858910370019924532176640605031474541120017488984442980002064287414891552325693874080964683795328354514591709352755185190953606105702726455190630306560113607853131022424255334629016160852013746277065526291368789692182589735854567465501090998105718657182076260950086031134797332238977038958590449335069478712236212768226600048517788918020723850347833823510720078881528472524037311938019785749084783700629131288479063249183136023555743106628527881496200805223261079415815927557778005767906850853014394620525370325835630415799682412197370938873180961356174798172331400022128866916919827501331703957147836840729354589554203104248228654212657777752173532778008007304716860191761114242197546417040867
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stadtarchiv.mannheim.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-dv-crl.thawte.com/ThawteDV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ab44e45dec83c7d9c0859ff7e1c69790b08c3f98
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-dv-aia.thawte.com/ThawteDV.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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