vinrcl.safercar.gov
- National Highway Traffic Safety Administration -
Issued by thawte SSL CA - G2
About this certificate
This digital certificate with serial number 1e:13:f5:73:64:fb:d5:8d:e7:8b:41:0d:ca:84:23:47 was issued on by thawte, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
National Highway Traffic Safety Administration
Organization:
National Highway Traffic Safety Administration
Organization unit: Support
Organization unit: Support
State / Province:
District of Columbia
Locality: Washington
Country: US
Locality: Washington
Country: US
thawte, Inc.
Organization:
thawte, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 1e:13:f5:73:64:fb:d5:8d:e7:8b:41:0d:ca:84:23:47Serial Number (int): 39980471846704171556303026767603704647
Serial Number lenght: 125 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60
Fingerprint (sha1): e7:95:a2:17:a6:f6:5b:3d:3d:61:cd:89:2c:51:d9:a3:77:a8:0e:f9
Fingerprint (sha256): a6:06:d4:8a:3b:1c:88:33:22:12:01:ca:a3:35:e5:a6:a2:ab:34:61:ae:f0:73:b8:99:f6:5d:35:33:70:e8:cb
Issuing Certificate URL: http://tj.symcb.com/tj.crt
Revocation information
OCSP Server: http://tj.symcd.comCRL Distribution Point: http://tj.symcb.com/tj.crl
Check the revocation status for certificate vinrcl.safercar.gov
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for vinrcl.safercar.gov
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
vinrcl.safercar.gov
Other certificates including the domain name safercar.gov
(limited to 100 certificates)
safercar.gov
friar.safercar.gov
safercar.gov
origin-prod-www.safercar.gov
safercar.gov
safercar.gov
origin-prod-www.safercar.gov
safercar.gov
www.safercar.gov
safercar.gov
safercar.gov
safercar.gov
origin-dr-www.safercar.gov
safercar.gov
www.safercar.gov
safercar.gov
www.safercar.gov
safercar.gov
safercar.gov
safercar.gov
friar.safercar.gov
map.safercar.gov
safercar.gov
vinrcl.safercar.gov
safercar.gov
safercar.gov
safercar.gov
map.safercar.gov
safercar.gov
safercar.gov
safercar.gov
map.safercar.gov
map.safercar.gov
map.safercar.gov
safercar.gov
safercar.gov
safercar.gov
www.safercar.gov
vinrcl.safercar.gov
origin-dr-www.safercar.gov
safercar.gov
www.safercar.gov
vinrcl.safercar.gov
safercar.gov
safercar.gov
safercar.gov
safercar.gov
vinrcl.safercar.gov
vinrcl.safercar.gov
www.safercar.gov
FRIAR.SAFERCAR.GOV
safercar.gov
safercar.gov
vinrcl.safercar.gov
www.safercar.gov
friar.safercar.gov
map.safercar.gov
safercar.gov
friar.safercar.gov
safercar.gov
safercar.gov
safercar.gov
safercar.gov
safercar.gov
friar.safercar.gov
safercar.gov
map.safercar.gov
origin-dr-www.safercar.gov
safercar.gov
safercar.gov
safercar.gov
www.safercar.gov
safercar.gov
map.safercar.gov
safercar.gov
friar.safercar.gov
safercar.gov
origin-prod-www.safercar.gov
safercar.gov
safercar.gov
origin-prod-www.safercar.gov
safercar.gov
www.safercar.gov
safercar.gov
safercar.gov
safercar.gov
origin-dr-www.safercar.gov
safercar.gov
www.safercar.gov
safercar.gov
www.safercar.gov
safercar.gov
safercar.gov
safercar.gov
friar.safercar.gov
map.safercar.gov
safercar.gov
vinrcl.safercar.gov
safercar.gov
safercar.gov
safercar.gov
map.safercar.gov
safercar.gov
safercar.gov
safercar.gov
map.safercar.gov
map.safercar.gov
map.safercar.gov
safercar.gov
safercar.gov
safercar.gov
www.safercar.gov
vinrcl.safercar.gov
origin-dr-www.safercar.gov
safercar.gov
www.safercar.gov
vinrcl.safercar.gov
safercar.gov
safercar.gov
safercar.gov
safercar.gov
vinrcl.safercar.gov
vinrcl.safercar.gov
www.safercar.gov
FRIAR.SAFERCAR.GOV
safercar.gov
safercar.gov
vinrcl.safercar.gov
www.safercar.gov
friar.safercar.gov
map.safercar.gov
safercar.gov
friar.safercar.gov
safercar.gov
safercar.gov
safercar.gov
safercar.gov
safercar.gov
friar.safercar.gov
safercar.gov
map.safercar.gov
origin-dr-www.safercar.gov
safercar.gov
safercar.gov
safercar.gov
www.safercar.gov
safercar.gov
map.safercar.gov
safercar.gov
Certificate
The complete raw certificate details for vinrcl.safercar.gov in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF8TCCBNmgAwIBAgIQHhP1c2T71Y3ni0ENyoQjRzANBgkqhkiG9w0BAQsFADBB MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMRswGQYDVQQDExJ0 aGF3dGUgU1NMIENBIC0gRzIwHhcNMTQxMDAyMDAwMDAwWhcNMTYwNzI3MjM1OTU5 WjCBqjELMAkGA1UEBhMCVVMxHTAbBgNVBAgMFERpc3RyaWN0IG9mIENvbHVtYmlh MRMwEQYDVQQHDApXYXNoaW5ndG9uMTcwNQYDVQQKDC5OYXRpb25hbCBIaWdod2F5 IFRyYWZmaWMgU2FmZXR5IEFkbWluaXN0cmF0aW9uMRAwDgYDVQQLDAdTdXBwb3J0 MRwwGgYDVQQDDBN2aW5yY2wuc2FmZXJjYXIuZ292MIICIjANBgkqhkiG9w0BAQEF AAOCAg8AMIICCgKCAgEAjhWhaMDvujvh7vacAk2rOptU3UKEcRaNg1v4CvdBWFgg lPQcRZAg4l8oRP/bX5NjzhAXwZh1mCBSorgljzqakNTtxjCfmHMwDP1fkdmYQbNe ebw1vZJrtG3v8MI+klZB2efaqbC9i3a2uXwKiZ+QC/NPcRW7i0SXDmGu9ErQavUT 2ftnOARZP7/7QjFkC7PP+h2KpKg99Bbc12ShxZBmrzWONJKJfmlFkwl0ZBzGdm/0 +2ZlKctZJJAq0zn6X3+HQXiHTelFGFFwB7sJbGc/W0aY/j0khMV+WR+houyuYfAY V9X01v05hiKYntlLtWMOehYlT+78aaktaD4oXZejQN3duaJ9KKVbE5bwX92Wfrur Z0ibn0UUyxRt7u8QwwI3wcfafwUtcyIqCeVejakz9TO8xZahgJ/TJZvRna88ulwo cu3gH7TderXr3AqNDQk8kHmStGRBZCIhgrlbCYTc8PU6Nua0yWwc9Nd7lkcZqfhX lhMnXlOz/CqNyx4qTLkxCQbK2SeYox/I5eizUgRvYvMJeK/HqttL1Of5Vg1yCeu0 xRRrWeJ+FgOVokcay+swHxbRKvbZl9UiQEP4OYDpmpc/bKq5PCe1LhxZBToWp0CW 3xhsyTEiqENEMaOuOg4ClMYYCsex/R/SJzrAQYHRobAQwCT++1vmb7CVpEhuujUC AwEAAaOCAXkwggF1MB4GA1UdEQQXMBWCE3ZpbnJjbC5zYWZlcmNhci5nb3YwCQYD VR0TBAIwADByBgNVHSAEazBpMGcGCmCGSAGG+EUBBzYwWTAmBggrBgEFBQcCARYa aHR0cHM6Ly93d3cudGhhd3RlLmNvbS9jcHMwLwYIKwYBBQUHAgIwIwwhaHR0cHM6 Ly93d3cudGhhd3RlLmNvbS9yZXBvc2l0b3J5MA4GA1UdDwEB/wQEAwIFoDAfBgNV HSMEGDAWgBTCT0hX/NFPmsBdOH0OBdvZLrVSYDArBgNVHR8EJDAiMCCgHqAchhpo dHRwOi8vdGouc3ltY2IuY29tL3RqLmNybDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI KwYBBQUHAwIwVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8vdGou c3ltY2QuY29tMCYGCCsGAQUFBzAChhpodHRwOi8vdGouc3ltY2IuY29tL3RqLmNy dDANBgkqhkiG9w0BAQsFAAOCAQEAPraSd+H3qytrBpxBIpIGOIolFsUy8TbHJNON LYwbLcffpvnqoW/HaDEQ1IIyrMOmVScYXpFK3UVo2Cby+evfvDSgsV5xYMPozvBt G4v2g1txP4kZLDAevgUWb/tRWc73nYcYi58au0fXqbMqMmRbzb5hPjN3cgNzFfIu +T1g6mRYvJmj/DfJfXuSQETZgto5ezl9BSbCzFoGrb9n6dzOLVA2t7v3Ya7P0PRv GR+Z7pyVhyZZa6nGM0cQ3m4usS7oVP1zkF2ZcycoSlObg6zb82R/v6ZdzofRrrCg 70Jdj99k8QYQ+81q4I2WMnOxJZ+yetfVfEJ/VTyXH47lkFLqXg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAjhWhaMDvujvh7vacAk2r OptU3UKEcRaNg1v4CvdBWFgglPQcRZAg4l8oRP/bX5NjzhAXwZh1mCBSorgljzqa kNTtxjCfmHMwDP1fkdmYQbNeebw1vZJrtG3v8MI+klZB2efaqbC9i3a2uXwKiZ+Q C/NPcRW7i0SXDmGu9ErQavUT2ftnOARZP7/7QjFkC7PP+h2KpKg99Bbc12ShxZBm rzWONJKJfmlFkwl0ZBzGdm/0+2ZlKctZJJAq0zn6X3+HQXiHTelFGFFwB7sJbGc/ W0aY/j0khMV+WR+houyuYfAYV9X01v05hiKYntlLtWMOehYlT+78aaktaD4oXZej QN3duaJ9KKVbE5bwX92WfrurZ0ibn0UUyxRt7u8QwwI3wcfafwUtcyIqCeVejakz 9TO8xZahgJ/TJZvRna88ulwocu3gH7TderXr3AqNDQk8kHmStGRBZCIhgrlbCYTc 8PU6Nua0yWwc9Nd7lkcZqfhXlhMnXlOz/CqNyx4qTLkxCQbK2SeYox/I5eizUgRv YvMJeK/HqttL1Of5Vg1yCeu0xRRrWeJ+FgOVokcay+swHxbRKvbZl9UiQEP4OYDp mpc/bKq5PCe1LhxZBToWp0CW3xhsyTEiqENEMaOuOg4ClMYYCsex/R/SJzrAQYHR obAQwCT++1vmb7CVpEhuujUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 39980471846704171556303026767603704647 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-02 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-27 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'District of Columbia' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Washington' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'National Highway Traffic Safety Administration' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Support' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'vinrcl.safercar.gov' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 579654163752766811189600178100645356411428508531631541527858317322097978809869287260820705258835387848745164083262092892258917851767190909067867790305967047659733232285737808874675924380410517288894494650613013718225627274007586092943861790830182684242571471172162599206271953956752263615756479830807127951802494638592414873959112247220427626811989458035407178858751239678550536807934810663659644599192101432809032719830273398243917276082386984927198940723394134124915589030852514427322422244579540046788374860305293237508441654076067951345259650008557044249028866320242451505836625321477314013469052857999947062710706792845106862019090600534849727317479937056437718552557472870457825393310369049772963584555227156552193771812254414472857558168823931876893574863347397728417288793376200146046585792669971359116876179338232223053546693447539262666294508804582489306382382642439425238546912697906503918938116488467625922779867974357178959250339906978437502830468404723597103896633287881675960030731333167572277352943089204077012428421306097282967201266030985358580186399074804511347983256298322786299218982731739205010969362994873521626798475298195888966121852297898817984368950541393440861114516046768745923773357442898632854628907573 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vinrcl.safercar.gov' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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