kundenportal.tg-verlag.de
Issued by Thawte TLS RSA CA G1
About this certificate
This digital certificate with serial number 01:c3:f1:bc:fa:36:dd:73:49:f5:4b:e1:f1:7d:b9:1d was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=kundenportal.tg-verlag.de
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 01:c3:f1:bc:fa:36:dd:73:49:f5:4b:e1:f1:7d:b9:1dSerial Number (int): 2346628916245820214027881710975039773
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: 73:5e:03:fb:52:d7:ed:90:16:15:00:c5:0e:9d:a3:df:f5:f0:85:09
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7
Fingerprint (sha1): 7f:da:ce:3a:0b:f4:00:e4:97:a8:dd:30:8c:41:ac:0d:a0:2d:7f:73
Fingerprint (sha256): 9e:0c:03:1a:c7:c9:47:fb:72:be:5b:b1:c6:26:01:a8:38:17:65:31:4d:41:b5:b8:ce:17:88:7e:67:b2:f4:b4
Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt
Revocation information
OCSP Server: http://status.thawte.comCRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl
Check the revocation status for certificate kundenportal.tg-verlag.de
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for kundenportal.tg-verlag.de
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
kundenportal.tg-verlag.de
Other certificates including the domain name tg-verlag.de
(limited to 100 certificates)
kundenportal.tg-verlag.de
www.tg-verlag.de
kundenportal-chemnitz.tg-verlag.de
www.tg-verlag.de
kundenportal-chemnitz.tg-verlag.de
www.tg-verlag.de
kundenportal-chemnitz.tg-verlag.de
kundenportal-chemnitz.tg-verlag.de
kundenportal.tg-verlag.de
kundenportal.tg-verlag.de
kundenportal-chemnitz.tg-verlag.de
kundenportal-chemnitz.tg-verlag.de
kundenportal.tg-verlag.de
kundenportal-chemnitz.tg-verlag.de
kundenportal.tg-verlag.de
kundenportal.tg-verlag.de
kundenportal.tg-verlag.de
tg-verlag.de
kundenportal-chemnitz.tg-verlag.de
tg-verlag.de
tg-verlag.de
kundenportal.tg-verlag.de
kundenportal.tg-verlag.de
www.tg-verlag.de
www.tg-verlag.de
kundenportal.tg-verlag.de
kundenportal-chemnitz.tg-verlag.de
kundenportal.tg-verlag.de
www.tg-verlag.de
extranet.tg-verlag.de
kundenportal-chemnitz.tg-verlag.de
kundenportal-chemnitz.tg-verlag.de
kundenportal.tg-verlag.de
kundenportal.tg-verlag.de
www.tg-verlag.de
kundenportal-chemnitz.tg-verlag.de
www.tg-verlag.de
kundenportal-chemnitz.tg-verlag.de
www.tg-verlag.de
kundenportal-chemnitz.tg-verlag.de
kundenportal-chemnitz.tg-verlag.de
kundenportal.tg-verlag.de
kundenportal.tg-verlag.de
kundenportal-chemnitz.tg-verlag.de
kundenportal-chemnitz.tg-verlag.de
kundenportal.tg-verlag.de
kundenportal-chemnitz.tg-verlag.de
kundenportal.tg-verlag.de
kundenportal.tg-verlag.de
kundenportal.tg-verlag.de
tg-verlag.de
kundenportal-chemnitz.tg-verlag.de
tg-verlag.de
tg-verlag.de
kundenportal.tg-verlag.de
kundenportal.tg-verlag.de
www.tg-verlag.de
www.tg-verlag.de
kundenportal.tg-verlag.de
kundenportal-chemnitz.tg-verlag.de
kundenportal.tg-verlag.de
www.tg-verlag.de
extranet.tg-verlag.de
kundenportal-chemnitz.tg-verlag.de
kundenportal-chemnitz.tg-verlag.de
kundenportal.tg-verlag.de
kundenportal.tg-verlag.de
Certificate
The complete raw certificate details for kundenportal.tg-verlag.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgIQAcPxvPo23XNJ9Uvh8X25HTANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRUaGF3dGUgVExTIFJTQSBDQSBHMTAe Fw0xODAyMTkwMDAwMDBaFw0xODA2MjExMjAwMDBaMCQxIjAgBgNVBAMTGWt1bmRl bnBvcnRhbC50Zy12ZXJsYWcuZGUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK AoICAQCowWqARr+gmf84O6a5RXDE6AENcKmUUfzh0atelGAnpfOqZ4ZMQacT+dY4 NUhQzcc4iPlrBUCSOtTbAoNXSUJC6Lw/Z4OKvmgBisY5EPXrWDCghTUNsvRN87ZN yB5zFDdHid/hOza0l4/cfi7PaOwo4VcGYzRKtqCxP7s/I12QQaOqz7ysfM5ApfF9 4j6CqROPGpTXus4HIJlyrytDTADJFtTW73n5VzlQ4NXKjd54o7+z10DZ1ZQw6NO6 EIl3CPRRhI+SjmojyiVb07IYRE40cYLeMGS0DXKMnhRANk3RBDoX2usVehDFEyRT BfdOkX0Z5oKgKSynx35tyOhT9+/RRyCQQw+dTU5WlJvGVsaM0KDerFwpBBEuIz8i 2fQOrmYreQI/bi2m3SC+9EYtI68VG+s+BMxxdLV9cPlRrKYIKL3JBhK2hUJ0WnAe o8Nzlbl1SdmcAKX7AP9Ab5tGY9/nA9SFJGlfCdzx1sbA04SenvrC9crvv7uNZMQP L/j+cymPQmAqsgt0uD70qlBec7SBV8fIogrnuiWo6Q0FFK0HzwAVHSMgrc6AJhyu +n4gAh75HrnZYebKxb9jBUvGjvMWux27LLEGR3CoMluPpPstSv/YtOtgZgGa5b9m J+5NDB3ezCIepQZOj2EzMHGsJjN+y4+7s6Ro1MmnTthrTWm5kwIDAQABo4IBtjCC AbIwHwYDVR0jBBgwFoAUpYz+MszrDyzUGcYIuAAkiF3DxbcwHQYDVR0OBBYEFHNe A/tS1+2QFhUAxQ6do9/18IUJMCQGA1UdEQQdMBuCGWt1bmRlbnBvcnRhbC50Zy12 ZXJsYWcuZGUwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY2RwLnRoYXd0ZS5jb20v VGhhd3RlVExTUlNBQ0FHMS5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQIwKjAo BggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwB AgEwcAYIKwYBBQUHAQEEZDBiMCQGCCsGAQUFBzABhhhodHRwOi8vc3RhdHVzLnRo YXd0ZS5jb20wOgYIKwYBBQUHMAKGLmh0dHA6Ly9jYWNlcnRzLnRoYXd0ZS5jb20v VGhhd3RlVExTUlNBQ0FHMS5jcnQwCQYDVR0TBAIwADATBgorBgEEAdZ5AgQDAQH/ BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwt+MwJjJ47OmUtmc5i41dm/HXzmipFP6 8BD3enm8VeBrXoUza90TsWg8VxWhDVERjHETF321b/HqeeJZPer7xa2SufT0LgYD JFRH9w+1I/Y2GjYbnTJ6vo1NsnU7GyJVakFReDBWDFrZDNsQVo+jQJpvBcGqTooS jRtitY4LW+j/4AwFG2VKOys1cl8cDp6sYgM6T6/QlE4JfCDtvQmoFMODB8agWbUl G+A9hRvzGlKWrgU1pHVe0Qvkpyk39/OFGTt6eZ77vnKbWcw+cr4iitcWLLwi7AYK krO72CTInPzdHGO0X50KPoHwdsUBTBsCUxnyxiSVtPRS6x38vLQcwg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqMFqgEa/oJn/ODumuUVw xOgBDXCplFH84dGrXpRgJ6XzqmeGTEGnE/nWODVIUM3HOIj5awVAkjrU2wKDV0lC Qui8P2eDir5oAYrGORD161gwoIU1DbL0TfO2TcgecxQ3R4nf4Ts2tJeP3H4uz2js KOFXBmM0SragsT+7PyNdkEGjqs+8rHzOQKXxfeI+gqkTjxqU17rOByCZcq8rQ0wA yRbU1u95+Vc5UODVyo3eeKO/s9dA2dWUMOjTuhCJdwj0UYSPko5qI8olW9OyGERO NHGC3jBktA1yjJ4UQDZN0QQ6F9rrFXoQxRMkUwX3TpF9GeaCoCksp8d+bcjoU/fv 0UcgkEMPnU1OVpSbxlbGjNCg3qxcKQQRLiM/Itn0Dq5mK3kCP24tpt0gvvRGLSOv FRvrPgTMcXS1fXD5UaymCCi9yQYStoVCdFpwHqPDc5W5dUnZnACl+wD/QG+bRmPf 5wPUhSRpXwnc8dbGwNOEnp76wvXK77+7jWTEDy/4/nMpj0JgKrILdLg+9KpQXnO0 gVfHyKIK57olqOkNBRStB88AFR0jIK3OgCYcrvp+IAIe+R652WHmysW/YwVLxo7z FrsduyyxBkdwqDJbj6T7LUr/2LTrYGYBmuW/ZifuTQwd3swiHqUGTo9hMzBxrCYz fsuPu7OkaNTJp07Ya01puZMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2346628916245820214027881710975039773 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-19 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-21 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kundenportal.tg-verlag.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 688462502325851024939702415110057007726171975407851447137797060204313075392217594002499400162812557526780893667040874512083912032520343285605719232277474265076813032866816129373546878254925988030228802952523090408673038111547139098244875996457353690193653817990351839510003053584339606240772329284966367803639802687632244325884661899276153422305046783478022315694180092258181819673146756642841415372107009224475218240546884819134339040321122138979884952930479999157770371374298526492146232623475605823063337631694284183930918823337921249352193706712815394923928414582538556509525402785407572556130514158771066166422829168658554017206553412685796711181623251572976589413179484548095745516693493277216633997606688632594197635819166177206227615385913914869132334829776123243522128979390179738522048121714581079217189921082338022095014956527346466072301213657824592505135213026169339665413753425111960624003078680127773813143751111211674910857208958705853887753377010822320844564950224643841096526096681195092939872193114299108398881794509137437505080113536676140069033529578275263550040862561813775937618391997633864853668931985719578122138669916559144360502567788894279603027207970205283979584936042883832559394066300787827265709390227 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 735e03fb52d7ed90161500c50e9da3dff5f08509 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kundenportal.tg-verlag.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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