expressway.bayada.com

- BAYADA Home Health Care -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 24:50:dc:18:ae:ad:d9:57:9d:ba:fe:2c:41:b4:52:f9 was issued on by thawte, Inc..

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

BAYADA Home Health Care

Organization: BAYADA Home Health Care
Organization unit: BAYADA Home Health Care
State / Province: New Jersey
Locality: Moorestown
Country: US

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 24:50:dc:18:ae:ad:d9:57:9d:ba:fe:2c:41:b4:52:f9
Serial Number (int): 48272055682589023590123430523503399673
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 0d:94:f9:35:08:1e:5e:fc:00:ae:2e:9b:2c:16:35:f0:c3:4a:dc:f4
Fingerprint (sha256): 96:91:3a:a7:a9:e5:a4:7b:7c:f8:d4:a4:9c:d7:e9:7b:b1:a3:13:0c:3f:2c:49:dc:0b:c3:bc:ed:c6:a8:28:f2

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate expressway.bayada.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for expressway.bayada.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

collab-edge.bayada.com
collab-edge.heroes.bayada.com
xmpp.bayada.com
chatnode1.xmpp.bayada.com
chatnode2.xmpp.bayada.com
expressway.bayada.com

Other certificates including the domain name bayada.com

(limited to 100 certificates)
szervizek.carglass.hu
secureapps.bayada.com
education.bayada.com
expressway.bayada.com
cisco.bayada.com
itsupport.bayada.com
education.bayada.com
www.bayada.com
*.bayada.com
education.bayada.com
jobs.bayada.com
mail.bayada.com
jobs.bayada.com
email.bayada.com
hs.bayada.com
hsemail.bayada.com
home.bayada.com
fs.bayada.com
stores.tesco.com.pagescdn.com
blog.bayada.com
shop.bayada.com
*.bayada.com
training.bayada.com
jobs.bayada.com
*.bayada.com
*.bayada.com
email.bayada.com
hsemail.bayada.com
jobs.bayada.com
hsemail.bayada.com
*.bayada.com
jobs.bayada.com
hs.bayada.com
blog.bayada.com
expressway.bayada.com
financialreports.bayada.com
locations.aussiegrill.com
offices.bayada.com
*.bayada.com
education.bayada.com
education.bayada.com
blog.bayada.com
hs.bayada.com
education.bayada.com
secureapps.bayada.com
coxbusiness-search.yext-cdn.com
www.bayada.com
shop.bayada.com
storefinder.carpetright.co.uk.yext-cdn.com
training.bayada.com
education.bayada.com
locations.aussiegrill.com
secure.bayada.com
jobs.bayada.com
education.bayada.com
itsupport.bayada.com
ciscovm.bayada.com
stores.dxl.com
shoppingspecials.bayada.com
expressway02.bayada.com
blog.bayada.com
local.pharmacy.safeway.com
partnerservices.bayada.com
education.bayada.com
shoppingspecials.bayada.com
local.oldsecond.com
jobs.bayada.com
local.pharmacy.safeway.com
itsupport.bayada.com
partnerservices-stage.bayada.com
secureapps.bayada.com
itsupport.bayada.com
answers-embed.bellross.com.pagescdn.com
education.bayada.com
itsupport.bayada.com
my.bayada.com
education.bayada.com
offices.bayada.com
reports.bayada.com
stores.sakura-dining-tokyo.jp
education.bayada.com
ca-stores.iqos.com.yext-cdn.com
secureapps.bayada.com
education.bayada.com
tesite.bayada.com
hs.bayada.com
coxbusiness-search.yext-cdn.com
hs.bayada.com
trainingreports.bayada.com
education.bayada.com
financialreports.bayada.com
secure.bayada.com
shoppingspecials.bayada.com
shoppingspecials.bayada.com
email2.bayada.com
education.bayada.com
hsemail.bayada.com
autodiscover.bayada.com
expressway.bayada.com
*.bayada.com

Certificate

The complete raw certificate details for expressway.bayada.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGdjCCBV6gAwIBAgIQJFDcGK6t2Veduv4sQbRS+TANBgkqhkiG9w0BAQsFADBB
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMRswGQYDVQQDExJ0
aGF3dGUgU1NMIENBIC0gRzIwHhcNMTcwMTE4MDAwMDAwWhcNMTgwMTE3MjM1OTU5
WjCBmzELMAkGA1UEBhMCVVMxEzARBgNVBAgMCk5ldyBKZXJzZXkxEzARBgNVBAcM
Ck1vb3Jlc3Rvd24xIDAeBgNVBAoMF0JBWUFEQSBIb21lIEhlYWx0aCBDYXJlMSAw
HgYDVQQLDBdCQVlBREEgSG9tZSBIZWFsdGggQ2FyZTEeMBwGA1UEAwwVZXhwcmVz
c3dheS5iYXlhZGEuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA
k+17JaJXF044KVQxGmAdg34UTStlyJh9NSGxEsWSzFTpLmM9lzGfxAmPbNUvdlnm
z+50VB1F3oDROVcXzCgQzCKv/7tGKRr4egxmJyAbqa8DRasMLESQyPpv3XLqJyd/
43IGaRHeTPE+eP6o5930QQS+Wbd5hz5OfHswfWkk10Tw+Ney9DLtyrFoi8SSU7vJ
I87uIU/DDF2rTeXkISIFtAyezuM13tqpRkXlSpqJ/GRPrm4GR//078UUvK2HjJ/V
atqw2PcgGYtFsCfKWIgmWi5J8VD4ABgFpguWT3Zp6tMfr0RJAeExu5YcCi7B8nLk
3hdOV756Hj7GNdPwz/IJ+Q3rpePdXRiRu0AuELEZ3y8LtceTqULDvrxvqs6ezTO0
VRCj6tfTXnAhNLn9VQZYxAYdN1aSBpicGy+lQDbpWXuHycP7mvog32FOAKSZkWCV
Od4B+EHuccGjp5d2eyNeSl1o85H25F9B1j55JGsyJ+8yKxSMmHiqEiQB78GRmyH4
L678cbeKxAlLhgvQPSpWYDbiy5I1674zSkGSJ8NIPnkk64oI7vGBPqEquCShcH03
+3g4Dlbydg9SqQlJadBBp+UujlH1uY0NZ1DbX7cxosaYtmCjk6vna65HBr72Gzmf
kiz8TJysBn216iVBuEUwh/mh8skKLnzevWy/4uiIcrUCAwEAAaOCAg0wggIJMIGg
BgNVHREEgZgwgZWCFmNvbGxhYi1lZGdlLmJheWFkYS5jb22CHWNvbGxhYi1lZGdl
Lmhlcm9lcy5iYXlhZGEuY29tgg94bXBwLmJheWFkYS5jb22CGWNoYXRub2RlMS54
bXBwLmJheWFkYS5jb22CGWNoYXRub2RlMi54bXBwLmJheWFkYS5jb22CFWV4cHJl
c3N3YXkuYmF5YWRhLmNvbTAJBgNVHRMEAjAAMG4GA1UdIARnMGUwYwYGZ4EMAQIC
MFkwJgYIKwYBBQUHAgEWGmh0dHBzOi8vd3d3LnRoYXd0ZS5jb20vY3BzMC8GCCsG
AQUFBwICMCMMIWh0dHBzOi8vd3d3LnRoYXd0ZS5jb20vcmVwb3NpdG9yeTAOBgNV
HQ8BAf8EBAMCBaAwHwYDVR0jBBgwFoAUwk9IV/zRT5rAXTh9DgXb2S61UmAwKwYD
VR0fBCQwIjAgoB6gHIYaaHR0cDovL3RqLnN5bWNiLmNvbS90ai5jcmwwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMFcGCCsGAQUFBwEBBEswSTAfBggrBgEF
BQcwAYYTaHR0cDovL3RqLnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL3Rq
LnN5bWNiLmNvbS90ai5jcnQwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcN
AQELBQADggEBAAO6OUihhmxP2uY/dFsx41AZita8XUJTjNgOpy9hshcc+Gwyr57R
Vd0ObYakL23zKRpqycnUMRM9O9K3ryY9NWgj/jMw6io3tzqY4qXYzkIA9/t216po
3EhwD8k7xcfHkDfj367zijtGhk2uxdul++CfLnJXu0Rlwfa28ad68AEJk9QMrl6x
Sk7Dn0wgqAj9nBtUyAIEbrI4qtQd9PhFNG7/+VvqZdNfGhHm/bZFeV8R40UeAPXk
8oLXomfugdOf4eyMZcYSOu5Tbq5xjL4qDyPqH1wV7SgUqmhNe8SYHNXC1nkidaSr
4ojpL41FfqF34NOj3qKyZOiSFY+keT2/DlI=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 48272055682589023590123430523503399673
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Moorestown'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BAYADA Home Health Care'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BAYADA Home Health Care'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'expressway.bayada.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 603492201937818029719622728195998365450742237848152542530850170353450809229626832728677988849766831449615384656142265271779113428575620103588500305718442528264463758044539398863599376069779629374765334750839444800428112044797003563029121884651234040436086955923787542775809979918490398199521425169730572131523708870660299046306203868077543894388796788807716387942616625422955296773601988579085134499437436118040650880415925744957922244360647547539789876997509104454416601292383810146478772438518249444600904579415599212974630550960617876953887781308069515652791513793239635871409743685567561168931053145756337181704607701982080758085289615818553399637981070803478846324954109983175474554965917285379596140473910234965274923033561264959283751784424748901258028086531789083792276439769406459963821823527345551918380753139111272123881409198539622254405776379883666230594516772374181444895862805057417417584626027862778359003847537680095601401639317929270781829799548697702625108903984538704720796517515160488174122216403213841673031537472757190743777489726938858202094209485673613450380856224076007062082168678323132282756621788091527911110599279023162462987567850776553643666000305872559967524085305585732452531534570803996412623745717
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (152 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.bayada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collab-edge.heroes.bayada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xmpp.bayada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chatnode1.xmpp.bayada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chatnode2.xmpp.bayada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expressway.bayada.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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