gateway.rdm.hayden-homes.com
Issued by Thawte RSA CA 2018
About this certificate
This digital certificate with serial number 05:84:4c:ae:54:0a:50:14:5e:37:40:b0:06:ab:b1:6e was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=gateway.rdm.hayden-homes.com
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 05:84:4c:ae:54:0a:50:14:5e:37:40:b0:06:ab:b1:6eSerial Number (int): 7333078439090539868663631283095318894
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 32:00:85:03:d6:1e:02:82:6b:98:a5:76:8d:20:14:06:65:58:f7:66
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a
Fingerprint (sha1): 77:3d:95:d1:0d:61:60:a1:53:8e:56:12:bb:55:d3:ec:0d:8a:76:8a
Fingerprint (sha256): aa:62:36:e0:85:86:47:ff:cb:29:7f:2f:3a:70:c0:d8:46:e6:6c:1d:3a:e3:ec:0b:50:29:32:83:d1:8c:77:48
Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt
Revocation information
OCSP Server: http://status.thawte.comCRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl
Check the revocation status for certificate gateway.rdm.hayden-homes.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for gateway.rdm.hayden-homes.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
gateway.rdm.hayden-homes.com
Other certificates including the domain name hayden-homes.com
(limited to 100 certificates)
hayden-homes.com
kova.hayden-homes.com
kova.hayden-homes.com
gateway.hayden-homes.com
gateway.rdm.hayden-homes.com
gateway.rdm.hayden-homes.com
hayden-homes.com
*.hayden-homes.com
helpdesk.aeainvestors.com
eedesk.hayden-homes.com
hayden-homes.com
*.hayden-homes.com
hayden-homes.com
*.hayden-homes.com
hayden-homes.com
gateway.va.hayden-homes.com
onbase.hayden-homes.com
hayden-homes.com
servicedesk.intranerve.com
eedesk.hayden-homes.com
hayden-homes.com
eedesk.hayden-homes.com
gateway.va.hayden-homes.com
*.hayden-homes.com
hayden-homes.com
eedesk.hayden-homes.com
hayden-homes.com
hayden-homes.com
kova.hayden-homes.com
hayden-homes.com
*.hayden-homes.com
*.hayden-homes.com
*.hayden-homes.com
hayden-homes.com
hayden-homes.com
gateway.rdm.hayden-homes.com
*.hayden-homes.com
gateway.hayden-homes.com
hayden-homes.com
*.hayden-homes.com
*.hayden-homes.com
helpdesk.aeainvestors.com
gateway.hayden-homes.com
*.aws.hayden-homes.com
gateway.rdm.hayden-homes.com
hayden-homes.com
hayden-homes.com
kova.hayden-homes.com
imoit.ciraconnect.com
gateway.va.hayden-homes.com
hayden-homes.com
helpdesk.aeainvestors.com
*.hayden-homes.com
*.hayden-homes.com
helpdesk.aeainvestors.com
*.hayden-homes.com
hayden-homes.com
*.hayden-homes.com
hayden-homes.com
gateway.va.hayden-homes.com
kova.hayden-homes.com
hayden-homes.com
kova.hayden-homes.com
kova.hayden-homes.com
gateway.hayden-homes.com
gateway.rdm.hayden-homes.com
gateway.rdm.hayden-homes.com
hayden-homes.com
*.hayden-homes.com
helpdesk.aeainvestors.com
eedesk.hayden-homes.com
hayden-homes.com
*.hayden-homes.com
hayden-homes.com
*.hayden-homes.com
hayden-homes.com
gateway.va.hayden-homes.com
onbase.hayden-homes.com
hayden-homes.com
servicedesk.intranerve.com
eedesk.hayden-homes.com
hayden-homes.com
eedesk.hayden-homes.com
gateway.va.hayden-homes.com
*.hayden-homes.com
hayden-homes.com
eedesk.hayden-homes.com
hayden-homes.com
hayden-homes.com
kova.hayden-homes.com
hayden-homes.com
*.hayden-homes.com
*.hayden-homes.com
*.hayden-homes.com
hayden-homes.com
hayden-homes.com
gateway.rdm.hayden-homes.com
*.hayden-homes.com
gateway.hayden-homes.com
hayden-homes.com
*.hayden-homes.com
*.hayden-homes.com
helpdesk.aeainvestors.com
gateway.hayden-homes.com
*.aws.hayden-homes.com
gateway.rdm.hayden-homes.com
hayden-homes.com
hayden-homes.com
kova.hayden-homes.com
imoit.ciraconnect.com
gateway.va.hayden-homes.com
hayden-homes.com
helpdesk.aeainvestors.com
*.hayden-homes.com
*.hayden-homes.com
helpdesk.aeainvestors.com
*.hayden-homes.com
hayden-homes.com
*.hayden-homes.com
hayden-homes.com
gateway.va.hayden-homes.com
kova.hayden-homes.com
hayden-homes.com
Certificate
The complete raw certificate details for gateway.rdm.hayden-homes.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGMjCCBRqgAwIBAgIQBYRMrlQKUBReN0CwBquxbjANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMRswGQYDVQQDExJUaGF3dGUgUlNBIENBIDIwMTgwHhcN MTkwOTE3MDAwMDAwWhcNMjExMjA5MTIwMDAwWjAnMSUwIwYDVQQDExxnYXRld2F5 LnJkbS5oYXlkZW4taG9tZXMuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAmZiVH6UySXKCuPgn79h3TRZqnV+4DXiVHwVCg+cNQY8hQPFPCAN6N6K2 d7ZB5UenntNlisV2XMRf50NUPO/3EaXoMABIbor9K/UGtQrfEe9bpUlTqYMwBB1P qrUMXXehl/CNSr/ALm+pvN6bSUWcl9wiChdl29n+w0qngCyNGpXtPcOl5X4NB/tq IUZZ8DJ1gn/JvzLwE/ICuGtTk8B81UMDHCjKKAlCuzek9tbhbzEulbWjCsakYN/C 28rq5B8XiGQ2+XBRCqUhYq7sSbhm7z5dzw1pd/wBN9NDM8MnkEmmMDDfjuO3R8jG VbPOnBFttt6Xc35Jjs2hhoMe3hl39QIDAQABo4IDIzCCAx8wHwYDVR0jBBgwFoAU o8heZVTlMHjBBeoHCmpZzLn+3lowHQYDVR0OBBYEFDIAhQPWHgKCa5ildo0gFAZl WPdmMCcGA1UdEQQgMB6CHGdhdGV3YXkucmRtLmhheWRlbi1ob21lcy5jb20wDgYD VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA6BgNV HR8EMzAxMC+gLaArhilodHRwOi8vY2RwLnRoYXd0ZS5jb20vVGhhd3RlUlNBQ0Ey MDE4LmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBAjAqMCgGCCsGAQUFBwIBFhxo dHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECATBvBggrBgEFBQcB AQRjMGEwJAYIKwYBBQUHMAGGGGh0dHA6Ly9zdGF0dXMudGhhd3RlLmNvbTA5Bggr BgEFBQcwAoYtaHR0cDovL2NhY2VydHMudGhhd3RlLmNvbS9UaGF3dGVSU0FDQTIw MTguY3J0MAkGA1UdEwQCMAAwggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB1AO5L vbd1zmC64UJpH6vhnmajD35fsHLYgwDEe4l6qP3LAAABbT/xWzIAAAQDAEYwRAIg H4IpRtPwCe1CBYe/UXdO++5NFW/5/ZhG6p9s6zhgD18CIC59nc+x93znwczkyrnX d4injxZorKJA/FcHwRn1SXZPAHcAh3W/51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq /16ggw8AAAFtP/FbhQAABAMASDBGAiEA6UeMQBCgoewNGiKpXS9DiHjJ9PmOULm5 lmz9837q998CIQDZtIpqsYdKtk3hC5ORkz5c1jvrdaWgOvlkb1HP9jG2ZwB1AESU ZS6w7s6vxEAH2Kj+KMDa5oK+2MsxtT/TM5a1toGoAAABbT/xWo0AAAQDAEYwRAIg DvuJVxUrOstrq9hsedpjaqZ9PKb/UgLp6TgmYp673LACIHaHoIpYg/p7UBfxGp2f P7rK1O9WH9nBlCXzryIEzQlyMA0GCSqGSIb3DQEBCwUAA4IBAQA5n0wzcoOPeyH9 tpuNRNXIupVHjEX0D3uE/1CKC8ssLY0cLgVAja2j0CYa9L4FKwGyG+1iTQuI9tah 4v3ED4MB+MuVOXTk4J6mw82bYfqeh70hYjI4O0dYdM1uf5buKV48NY0SqQgwC+LC tny3d8zX8W7GIJoYqpfCDwfdlWMqSY2j25rTAO/HLk1PBuRdidMYgLKTz3ohaZVA WlWrRQS732Ru5LGXmXbwD3NYzyg+db4Lu6qTbXs7MZwaeMG8SQosiciZi48vRRVl GBmLSDzC86V+AF8R8eUua9Yjbq6o/nrm/YlrU9xfvuNF64sMRx2F3bdItr1TV39d fHhN7yFc -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZiVH6UySXKCuPgn79h3 TRZqnV+4DXiVHwVCg+cNQY8hQPFPCAN6N6K2d7ZB5UenntNlisV2XMRf50NUPO/3 EaXoMABIbor9K/UGtQrfEe9bpUlTqYMwBB1PqrUMXXehl/CNSr/ALm+pvN6bSUWc l9wiChdl29n+w0qngCyNGpXtPcOl5X4NB/tqIUZZ8DJ1gn/JvzLwE/ICuGtTk8B8 1UMDHCjKKAlCuzek9tbhbzEulbWjCsakYN/C28rq5B8XiGQ2+XBRCqUhYq7sSbhm 7z5dzw1pd/wBN9NDM8MnkEmmMDDfjuO3R8jGVbPOnBFttt6Xc35Jjs2hhoMe3hl3 9QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 7333078439090539868663631283095318894 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-17 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-09 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gateway.rdm.hayden-homes.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19389701901798508836237201713718371616218147567409429321548093874467143188387935348405719104067960988604312994330884519520788439050939538201939288346929538472002215853412816013602203478777313885741321287067659565040475995290869110621557438013411626180122960016842758278309543778666860198429946063087689333614329580982988783927175931785772608153836760155585857591005398629825748412563623586600680665574370554293986260007667461617440674154470680742449976060467562387251820909024090719704021886665348191171094041911304726872505927797762811293007934637924990789384058870060425854643550495946832772234009110357494489249781 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 32008503d61e02826b98a5768d2014066558f766 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateway.rdm.hayden-homes.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 0167007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016d3ff15b32000004030046304402201f822946d3f009ed420587bf51774efbee4d156ff9fd9846ea9f6ceb38600f5f02202e7d9dcfb1f77ce7c1cce4cab9d77788a78f1668aca240fc5707c119f549764f0077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016d3ff15b850000040300483046022100e9478c4010a0a1ec0d1a22a95d2f438878c9f4f98e50b9b9966cfdf37eeaf7df022100d9b48a6ab1874ab64de10b9391933e5cd63beb75a5a03af9646f51cff631b6670075004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000016d3ff15a8d000004030046304402200efb8957152b3acb6babd86c79da636aa67d3ca6ff5202e9e93826629ebbdcb002207687a08a5883fa7b5017f11a9d9f3fbacad4ef561fd9c19425f3af2204cd0972 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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