search-thawte-fr.symantec.com

- Thawte, Inc. -

Issued by thawte EV SSL CA - G3

About this certificate

This digital certificate with serial number 4c:91:a6:d0:7a:cb:c4:11:91:42:52:58:af:bf:b8:53 was issued on by thawte, Inc..

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Thawte, Inc.

Company registration number: 3898261
Organization: Thawte, Inc.
Organization unit: IT Security
State / Province: California
Locality: Mountain View
Country: US

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:91:a6:d0:7a:cb:c4:11:91:42:52:58:af:bf:b8:53
Serial Number (int): 101777594121596674538577032085132785747
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: f0:70:51:da:d3:2a:91:4f:52:77:d7:86:77:74:0f:ce:71:1a:6c:22

Fingerprint (sha1): ae:9d:34:25:47:79:f2:bd:d9:a2:a6:56:9f:5a:5e:60:8e:b4:59:a1
Fingerprint (sha256): ae:c7:07:c2:ef:57:26:5a:3d:53:85:95:35:a2:e1:9e:f2:b2:15:0d:96:93:64:c5:28:0f:04:bf:98:f3:74:47

Issuing Certificate URL: http://ti.symcb.com/ti.crt

Revocation information

OCSP Server: http://ti.symcd.com
CRL Distribution Point: http://ti.symcb.com/ti.crl

Check the revocation status for certificate search-thawte-fr.symantec.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for search-thawte-fr.symantec.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

search.thawte.fr
search-thawte-fr-web-tus.symantec.com
search-thawte-fr-web-asb.symantec.com
search-thawte-fr.symantec.com

Other certificates including the domain name symantec.com

(limited to 100 certificates)
787.Symantec.com
www.verisign.com
dub2comgwypin01.symc.symantec.com
amtrust.kinnser.com
statuspage.io
msl.ges.symantec.com
revprouat.symc.symantec.com
shasta-anti-spam-stats.symantec.com
tools.symc.symantec.com
cloudmarketplace.status.symantec.com
UAT-OIDU1.GES.SYMANTEC.COM
statuspage.io
symantec.com
kb-thawte.symantec.com
d78de818-a0eb-4260-806a-d56c49087402.ds.dlp.protect.symantec.com
cwp.status.symantec.com
IMWS-SYMWISE-QA.SYMC.SYMANTEC.COM
CPESLB1.GES.SYMANTEC.COM
statuspage.io
mssvpn.symantec.com
c6aea99a-29b8-4e5c-8305-294aeddce88d.ds.dlp.protect.symantec.com
status.accelitas.io
packages-mountainview.symc.symantec.com
cnniptccmpin13.net.symantec.com
asb1-mpi-ise-2.net.symantec.com
firewallendpoint.vip.symantec.com
AEMOKMANALYTICS-UAT.SYMC.SYMANTEC.COM
QLIKSENSEUAT.SYMANTEC.COM
statuspage.io
statuspage.io
cwp.status.symantec.com
ica.symantec.com
MVC1IPTEGWPIN01.NET.SYMANTEC.COM
eloqua-trustservices.symantec.com
statuspage.io
ssl-certificate-center-enterprise-ncsa-ilg.verisign.net
licensing.dmas.symantec.com
pgp.symantec.com
su1-staging.nbu.symantec.com
help.gitlinq.com
usea1.r3.securitycloud.symantec.com
statuspage.io
cons-support-jp1.symantec.com
vip.symantec.com
DEEPSIGHTADMIN.SYMANTEC.COM
mftint-nam.ges.symantec.com
content-symwise-app-west.symc.symantec.com
tus3tmsappdin01.symc.symantec.com
shasta-rrs-test.symantec.com
www-uat-west.symantec.com
swi-inv-admin-uat.symc.symantec.com
rundeck-tus3.ges.symantec.com
fusestatus.com
scmnet50qa.symc.symantec.com
www.symantec.com
telemetry.veritas.com
PARTNERNET-DEV.NBU.SYMANTEC.COM
ssltest-evsgc.jp.websecurity.symantec.com
94b36575-cdd1-4708-8061-e12bf9a11ad1.ds.dlp.protect.symantec.com
INTMPG-QA.SYMC.SYMANTEC.COM
cebealt-int2.norton.com
EMS-UAT-LICENSING.SYMANTEC.COM
sice.stage.enc.protect.symantec.com
contentauthor-uat1.symc.Symantec.com
loggeruat.cclab.symantec.com
ssltest-sha2fc.jp.websecurity.symantec.com
icdm.status.symantec.com
kb-thawte-de.symantec.com
csas.norton.com
dmshealth.dealertrack.com
SPR1IPTCUCPIN01.symc.symantec.com
analyzer.symantec.com
IMWS-SYMWISE-DEV-APP-TUS3.SYMC.SYMANTEC.COM
jira.ges.symantec.com
tus1csswebpin01.symc.symantec.com
appisolation.status.symantec.com
jenkins-stage-tus3.ges.symantec.com
tenant0-p01-smtp.na.dlp.protect.symantec.com
statuspage.io
ASB1VVCVCCPIN01.symc.symantec.com
shelladdin.symantec.com
userservices.vip.symantec.com
statuspage.io
products.websecurity.symantec.com
symdl.symc.symantec.com
6h60rqz7vjhj.stspg-customer.com.como3.pl
TUSVC-09.SYMC.SYMANTEC.COM
SYMPAY-QA22.GES.SYMANTEC.COM
SUPPORTPORTAL-WEST-STAGE.SYMANTEC.COM
maintenance.blackbaud.com
exftpp.symantec.com
tusvipapplpi01.symc.symantec.com
statuspage.io
tools-review.engba.symantec.com
ev1-0121.ev12311.Symantec.com
MFTBC.SYMANTEC.COM
statuspage.io
avs-avpg.crsi.symantec.com
haystatus.mambu.com
CUL1RFPSEPQIN23.symc.symantec.com

Certificate

The complete raw certificate details for search-thawte-fr.symantec.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHMTCCBhmgAwIBAgIQTJGm0HrLxBGRQlJYr7+4UzANBgkqhkiG9w0BAQsFADBE
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMR4wHAYDVQQDExV0
aGF3dGUgRVYgU1NMIENBIC0gRzMwHhcNMTcwMjE2MDAwMDAwWhcNMTkwMjE2MjM1
OTU5WjCB8DETMBEGCysGAQQBgjc8AgEDEwJVUzEZMBcGCysGAQQBgjc8AgECEwhE
ZWxhd2FyZTEdMBsGA1UEDxMUUHJpdmF0ZSBPcmdhbml6YXRpb24xFTATBgNVBAoM
DFRoYXd0ZSwgSW5jLjEQMA4GA1UEBRMHMzg5ODI2MTELMAkGA1UEBhMCVVMxEzAR
BgNVBAgMCkNhbGlmb3JuaWExFjAUBgNVBAcMDU1vdW50YWluIFZpZXcxFDASBgNV
BAsMC0lUIFNlY3VyaXR5MSYwJAYDVQQDDB1zZWFyY2gtdGhhd3RlLWZyLnN5bWFu
dGVjLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMOLe2F5VeZJ
33zTQ1uL1XzeD8QEprpNr0FSu4Yqr29Ssd0VQmbCuoX1695W9Ld8+90YiQ4z8J0t
xP1Y3iAJ0FeSIEVs/0RKjQmsVsSV1VOG9BJm2+fNRwpmeRLDIWKcPnKFtujjd4yA
eBH+9kGKOTzuvumepeP/a/jM7SmURNzuRvjqOUlyBu0PKoyD5DisbpkUL3UtINY8
CC1KYtKAjxmVW5d9bSK2y+xqaREw5xVPChIjVEWWEkR11ijt8CkUrhrgWntiCVrd
8wcTxbD77Qr8tswoNc1SRLNqRqe8/kELDYJc5S4sTLyEH0ZbOoiBb956nNtw9F6L
F1bOjkf4zL0CAwEAAaOCA3AwggNsMIGJBgNVHREEgYEwf4IQc2VhcmNoLnRoYXd0
ZS5mcoIlc2VhcmNoLXRoYXd0ZS1mci13ZWItdHVzLnN5bWFudGVjLmNvbYIlc2Vh
cmNoLXRoYXd0ZS1mci13ZWItYXNiLnN5bWFudGVjLmNvbYIdc2VhcmNoLXRoYXd0
ZS1mci5zeW1hbnRlYy5jb20wCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwKwYD
VR0fBCQwIjAgoB6gHIYaaHR0cDovL3RpLnN5bWNiLmNvbS90aS5jcmwwfAYDVR0g
BHUwczBoBgtghkgBhvhFAQcwATBZMCYGCCsGAQUFBwIBFhpodHRwczovL3d3dy50
aGF3dGUuY29tL2NwczAvBggrBgEFBQcCAjAjDCFodHRwczovL3d3dy50aGF3dGUu
Y29tL3JlcG9zaXRvcnkwBwYFZ4EMAQEwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
AQUFBwMCMB8GA1UdIwQYMBaAFPBwUdrTKpFPUnfXhnd0D85xGmwiMFcGCCsGAQUF
BwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDovL3RpLnN5bWNkLmNvbTAmBggrBgEF
BQcwAoYaaHR0cDovL3RpLnN5bWNiLmNvbS90aS5jcnQwggF9BgorBgEEAdZ5AgQC
BIIBbQSCAWkBZwB2AN3rHSt6DU+mIIuBrYFocH4ujp0B1VyIjT0RxM227L7MAAAB
Wki07xQAAAQDAEcwRQIhALvoqXTxOogc1UDSuz6Ney4MXCl8e2mkaYLmWwDI6pan
AiBH8bh58NGYTiqj0+OavTKV1GESut/98724EvGtb5zdoQB2AKS5CZC0GFgUh7sT
osxncAo8NZgE+RvfuON3zQ7IDdwQAAABWki07zoAAAQDAEcwRQIhAI/L1f0cwve1
TRJyfVjKn9NMN7W8nZC6SfXWkGrK9U3IAiAt7/JJy0qocA3vBCknuG1Uy5H4dJXU
jyEDIUQgV56VxgB1AO5Lvbd1zmC64UJpH6vhnmajD35fsHLYgwDEe4l6qP3LAAAB
Wki072YAAAQDAEYwRAIgBaOQy0edrOC7aO4MltTXniCjXGOb0aiaNvDL6EDxEScC
IHN+i877VBZFFjiwcVal04u4xn2tkb0jna1E1lKXIc4XMA0GCSqGSIb3DQEBCwUA
A4IBAQBktAg6+4LnnUyB5JCDLGJWOgMOscdF41q2hYHbkdtmtV6jhjN/SHoUh7cp
J1KQHjMoeHj00ehN07GHWcBCzb5V11mT0nngANeSaImsSZEs0LxAe5QCBedYWDsc
uFNTSit+MSckZ3wNXA9FxgAK9kERRS/LCBrVyGaRZgpGdotDvuNxVIF2qRpPVuiv
d9k61cv5aN1EMINGXd119fWrauUczXdlqzc7vtunULYgekPz18PmExhh9MQSL7ZD
9kOUKMJ/rnvhP1X6ZkzZlJpJUilqUsPL4+kaP4yKSaGQiJom7Hyy2Lxc/FbXnL+x
tgbZGzmgwP0nLa47Fg9ByWOH6YPn
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4t7YXlV5knffNNDW4vV
fN4PxASmuk2vQVK7hiqvb1Kx3RVCZsK6hfXr3lb0t3z73RiJDjPwnS3E/VjeIAnQ
V5IgRWz/REqNCaxWxJXVU4b0Embb581HCmZ5EsMhYpw+coW26ON3jIB4Ef72QYo5
PO6+6Z6l4/9r+MztKZRE3O5G+Oo5SXIG7Q8qjIPkOKxumRQvdS0g1jwILUpi0oCP
GZVbl31tIrbL7GppETDnFU8KEiNURZYSRHXWKO3wKRSuGuBae2IJWt3zBxPFsPvt
Cvy2zCg1zVJEs2pGp7z+QQsNglzlLixMvIQfRls6iIFv3nqc23D0XosXVs6OR/jM
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 101777594121596674538577032085132785747
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte EV SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '3898261'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Mountain View'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT Security'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'search-thawte-fr.symantec.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24685250584434098910638761138441947918929275687012720465076614949021496280442890656055195406239974298114243148240758827981125969115310347901924998792765358031798337629571832343355898644404360858549282150780611460472506331411419910564664672317318737610806042287737710876798497850717063560322177096932675925637434544329725016644156375883333108660748060240939530563879705950728505684737825043237993511002026596972932721146848870085338584296856264611232960821576338923013615611853201349756817911981270176679017141711275955177051520029056758252037624413901546704055697474148199137912917092511950135374831992476902773804221
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.thawte.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search-thawte-fr-web-tus.symantec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search-thawte-fr-web-asb.symantec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search-thawte-fr.symantec.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ti.symcb.com/ti.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (117 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.48.1 (Thawte EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f07051dad32a914f5277d78677740fce711a6c22
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ti.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ti.symcb.com/ti.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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