engplatform-qa.lafarge.com
- LAFARGE -
Issued by thawte SHA256 SSL CA
About this certificate
This digital certificate with serial number 38:f6:01:94:13:d7:f7:4a:2b:d0:16:a5:4d:1a:ed:02 was issued on by thawte, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
LAFARGE
Organization:
LAFARGE
State / Province:
Paris
Locality: PARIS
Country: FR
Locality: PARIS
Country: FR
thawte, Inc.
Organization:
thawte, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 38:f6:01:94:13:d7:f7:4a:2b:d0:16:a5:4d:1a:ed:02Serial Number (int): 75714104805473814272584165337656388866
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 2b:9a:35:ae:01:18:38:30:e1:70:7a:05:e0:11:76:a3:ce:bd:90:14
Fingerprint (sha1): d2:3d:4d:15:fc:8e:a7:11:53:00:1f:6f:00:f0:3b:f0:23:43:3e:a0
Fingerprint (sha256): 8d:5b:30:48:fb:96:93:4b:3a:bc:96:98:eb:d5:73:07:e3:b7:59:32:08:6a:c4:7a:07:cf:59:b5:0b:de:79:60
Issuing Certificate URL: http://tg.symcb.com/tg.crt
Revocation information
OCSP Server: http://tg.symcd.comCRL Distribution Point: http://tg.symcb.com/tg.crl
Check the revocation status for certificate engplatform-qa.lafarge.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for engplatform-qa.lafarge.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
engplatform-qa.lafarge.com
Other certificates including the domain name lafarge.com
(limited to 100 certificates)
login.lafarge.com
getmarket.lafarge.com
brandportal.lafargeholcim.com
brandportal.lafargeholcim.com
brandportal.lafargeholcim.com
nemo.lafarge.com
corpidc-app20.corp.lafargeone.net
lobaveno.lafarge.com
*.lafarge.com
login.lafarge.com
lnacsg01.qua.na.lafarge.com
egate-apac.lafarge.com
ERPCSS-VN.LAFARGE.COM
lnacsg01.lafarge.com
lnacsg01.lafarge.com
corpidc-app20.corp.lafargeone.net
engplatform-qa.lafarge.com
stinternet.lafarge.com
apcrss.lafarge.com
swift.lafarge.com
engplatform.lafarge.com
idacovoiturage.lafarge.com
getmarket.lafarge.com
lobaveno.lafarge.com
lnacsg01.lafarge.com
erpcss-cn.lafarge.com
lnacsg04.prd.na.lafarge.com
brandportal.lafargeholcim.com
zambia-supplychain.lafarge.com
zambia-supplychain.lafarge.com
egate-emea.lafarge.com
erpcss-cn.lafarge.com
nemo.lafarge.com
brandportal.lafargeholcim.com
lbmobileqa.lafarge.com
citrix.qua.na.lafarge.com
qa-zambia-supplychain.lafarge.com
brandportal.lafargeholcim.com
nemo.lafarge.com
login-qa.lafarge.com
getmarket.lafarge.com
qua-vpn.ap.holcim.net
*.lafarge.com
erpcss-cn.lafarge.com
oneipc.lafarge.com
corpidc-app22.lafarge.com
login-qa.lafarge.com
AMAACS.na.lafarge.com
login-qa.lafarge.com
egate.lafarge.com
brandportal.lafargeholcim.com
egate.lafarge.com
brandportal.lafargeholcim.com
brandportal.lafargeholcim.com
zambia-supplychain.lafarge.com
login.lafarge.com
maximo.lafarge.com
lbmobile.lafarge.com
www.holcim.com
lnacsg03.prd.na.lafarge.com
erpcss-cn.lafarge.com
brandportal.lafargeholcim.com
sdc.lafarge.com
egate-apac.lafarge.com
egate-emea.lafarge.com
apcrss.lafarge.com
login.lafarge.com
imperva.com
imperva.com
brandportal.lafargeholcim.com
AMAACS.na.lafarge.com
login-qa.lafarge.com
engplatform-qa.lafarge.com
syncrotess-itec.lafarge.com
maximo.lafarge.com
lnacsg01.lafarge.com
citrix.na.lafarge.com
swift.lafarge.com
oneipc.lafarge.com
twsinternet.lafarge.com
stinternet.lafarge.com
zambia-supplychain.lafarge.com
www.holcim.com
apcrss.lafarge.com
egate.lafarge.com
brandportal.lafargeholcim.com
theo.lafarge.com
lbmobileqa.lafarge.com
imperva.com
brandportal.lafargeholcim.com
getmarket-qa.lafarge.com
lobaveno.lafarge.com
citrix.qua.na.lafarge.com
engplatform.lafarge.com
brandportal.lafargeholcim.com
getmarket-qa.lafarge.com
twsinternet.lafarge.com
theo.lafarge.com
corpidc-app20.corp.lafargeone.net
login.lafarge.com
getmarket.lafarge.com
brandportal.lafargeholcim.com
brandportal.lafargeholcim.com
brandportal.lafargeholcim.com
nemo.lafarge.com
corpidc-app20.corp.lafargeone.net
lobaveno.lafarge.com
*.lafarge.com
login.lafarge.com
lnacsg01.qua.na.lafarge.com
egate-apac.lafarge.com
ERPCSS-VN.LAFARGE.COM
lnacsg01.lafarge.com
lnacsg01.lafarge.com
corpidc-app20.corp.lafargeone.net
engplatform-qa.lafarge.com
stinternet.lafarge.com
apcrss.lafarge.com
swift.lafarge.com
engplatform.lafarge.com
idacovoiturage.lafarge.com
getmarket.lafarge.com
lobaveno.lafarge.com
lnacsg01.lafarge.com
erpcss-cn.lafarge.com
lnacsg04.prd.na.lafarge.com
brandportal.lafargeholcim.com
zambia-supplychain.lafarge.com
zambia-supplychain.lafarge.com
egate-emea.lafarge.com
erpcss-cn.lafarge.com
nemo.lafarge.com
brandportal.lafargeholcim.com
lbmobileqa.lafarge.com
citrix.qua.na.lafarge.com
qa-zambia-supplychain.lafarge.com
brandportal.lafargeholcim.com
nemo.lafarge.com
login-qa.lafarge.com
getmarket.lafarge.com
qua-vpn.ap.holcim.net
*.lafarge.com
erpcss-cn.lafarge.com
oneipc.lafarge.com
corpidc-app22.lafarge.com
login-qa.lafarge.com
AMAACS.na.lafarge.com
login-qa.lafarge.com
egate.lafarge.com
brandportal.lafargeholcim.com
egate.lafarge.com
brandportal.lafargeholcim.com
brandportal.lafargeholcim.com
zambia-supplychain.lafarge.com
login.lafarge.com
maximo.lafarge.com
lbmobile.lafarge.com
www.holcim.com
lnacsg03.prd.na.lafarge.com
erpcss-cn.lafarge.com
brandportal.lafargeholcim.com
sdc.lafarge.com
egate-apac.lafarge.com
egate-emea.lafarge.com
apcrss.lafarge.com
login.lafarge.com
imperva.com
imperva.com
brandportal.lafargeholcim.com
AMAACS.na.lafarge.com
login-qa.lafarge.com
engplatform-qa.lafarge.com
syncrotess-itec.lafarge.com
maximo.lafarge.com
lnacsg01.lafarge.com
citrix.na.lafarge.com
swift.lafarge.com
oneipc.lafarge.com
twsinternet.lafarge.com
stinternet.lafarge.com
zambia-supplychain.lafarge.com
www.holcim.com
apcrss.lafarge.com
egate.lafarge.com
brandportal.lafargeholcim.com
theo.lafarge.com
lbmobileqa.lafarge.com
imperva.com
brandportal.lafargeholcim.com
getmarket-qa.lafarge.com
lobaveno.lafarge.com
citrix.qua.na.lafarge.com
engplatform.lafarge.com
brandportal.lafargeholcim.com
getmarket-qa.lafarge.com
twsinternet.lafarge.com
theo.lafarge.com
corpidc-app20.corp.lafargeone.net
login.lafarge.com
Certificate
The complete raw certificate details for engplatform-qa.lafarge.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIExDCCA6ygAwIBAgIQOPYBlBPX90or0BalTRrtAjANBgkqhkiG9w0BAQsFADBD MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMR0wGwYDVQQDExR0 aGF3dGUgU0hBMjU2IFNTTCBDQTAeFw0xNzAxMTEwMDAwMDBaFw0xOTAzMTIyMzU5 NTlaMGQxCzAJBgNVBAYTAkZSMQ4wDAYDVQQIDAVQYXJpczEOMAwGA1UEBwwFUEFS SVMxEDAOBgNVBAoMB0xBRkFSR0UxIzAhBgNVBAMMGmVuZ3BsYXRmb3JtLXFhLmxh ZmFyZ2UuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySu0n7tO 96Ua67jsl3rqFvypJ1EGeU4kYLWA446/iLosrYbqMIHrygd5XF7D8FJyYU6Dngnp WJLGR/Lrzjm00ZnARtzSzUh+4GkExwmrma8qz5+2jS/7BM+q07EGHj37aLoccSmt k0j0ogthL1ko1m8XW0Cqiu2cMLI9hJXztdyVyoXA3Hrj1K9qrcIVY4KOATRW5HzN zXeiEZzJ/dH9FS3DUEuHdtX168uRnYsO6wU0Dmu9pV16asDGd0l1lxLvZK+cTPfW 6VGWI1IUUE1Gb19F74yY87G6C/3zI8Y5pb5FQICYe/Y9NjUz5vzNQwaVMcM+wFiJ fiKyxKtSD+ubqQIDAQABo4IBkTCCAY0wJQYDVR0RBB4wHIIaZW5ncGxhdGZvcm0t cWEubGFmYXJnZS5jb20wCQYDVR0TBAIwADBuBgNVHSAEZzBlMGMGBmeBDAECAjBZ MCYGCCsGAQUFBwIBFhpodHRwczovL3d3dy50aGF3dGUuY29tL2NwczAvBggrBgEF BQcCAjAjDCFodHRwczovL3d3dy50aGF3dGUuY29tL3JlcG9zaXRvcnkwDgYDVR0P AQH/BAQDAgWgMB8GA1UdIwQYMBaAFCuaNa4BGDgw4XB6BeARdqPOvZAUMCsGA1Ud HwQkMCIwIKAeoByGGmh0dHA6Ly90Zy5zeW1jYi5jb20vdGcuY3JsMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjBXBggrBgEFBQcBAQRLMEkwHwYIKwYBBQUH MAGGE2h0dHA6Ly90Zy5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly90Zy5z eW1jYi5jb20vdGcuY3J0MBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRlbclI/IRYbnkPvbEsrfWOlN19NfHj4XSl5aHfc9lLvK46T9pe8tw 0KEr+RJyiT60dn/WlH7cFNoobapVartrEHFs1+gVGIgWMxlWpnl4nyVrsnOlt2iu jezyFV99XY8OQOVplpe2vMKNVlYrkjmUUWuUljwSjOYsIjWW8RNWlWopZnYNnbs8 w2atwPeSuVbtK+d/J+zQJIOYMz8KMwTQH+IUD0PariyCxmiQbDyHuhEv/w8/oAnH HCUutzoEXCa8ydlRgwqj65PA+5U0qudzPt5kWj5tnuxdQjZploGMArVKfgwfsnU0 Bu379XZrBy2XJE8xm9FEHAfj6Yx6jEaJ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySu0n7tO96Ua67jsl3rq FvypJ1EGeU4kYLWA446/iLosrYbqMIHrygd5XF7D8FJyYU6DngnpWJLGR/Lrzjm0 0ZnARtzSzUh+4GkExwmrma8qz5+2jS/7BM+q07EGHj37aLoccSmtk0j0ogthL1ko 1m8XW0Cqiu2cMLI9hJXztdyVyoXA3Hrj1K9qrcIVY4KOATRW5HzNzXeiEZzJ/dH9 FS3DUEuHdtX168uRnYsO6wU0Dmu9pV16asDGd0l1lxLvZK+cTPfW6VGWI1IUUE1G b19F74yY87G6C/3zI8Y5pb5FQICYe/Y9NjUz5vzNQwaVMcM+wFiJfiKyxKtSD+ub qQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 75714104805473814272584165337656388866 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SHA256 SSL CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-11 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-12 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Paris' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PARIS' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'LAFARGE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'engplatform-qa.lafarge.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25395451314208426322523196665813687372908910990500228536941322984340126774324118053404422192345016565869343251304048033615611676817713647356420279436156664609366600551236177973187082487718082686397163578264707817148106488375017900468689153798207919670183371001576341240765516900760815258253451363790832619995036989755458403636499151209389033107677536566651967429001315276633867836574731363351022571374435589086222988280674493957531438469633973349145775485170148717256972712539546767126354191592934701415566365374814249839345768212464324643899330494904311448137754965863358993643734751584441079020500868300418803538857 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'engplatform-qa.lafarge.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2b9a35ae01183830e1707a05e01176a3cebd9014 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcb.com/tg.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcb.com/tg.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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