*.reachmedia.co.nz

- REACH MEDIA NEW ZEALAND LIMITED -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 34:6b:28:a8:8a:0b:6b:70:15:87:b1:72:5b:df:47:d2 was issued on by thawte, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

REACH MEDIA NEW ZEALAND LIMITED

Organization: REACH MEDIA NEW ZEALAND LIMITED
Organization unit: Business Systems
State / Province: Wellington
Locality: Wellington
Country: NZ

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 34:6b:28:a8:8a:0b:6b:70:15:87:b1:72:5b:df:47:d2
Serial Number (int): 69676256194117037310638191261066938322
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 1f:94:38:f2:56:c3:50:de:66:af:42:37:57:7d:1d:a9:32:a5:bc:01
Fingerprint (sha256): b2:b7:ed:a7:2b:9d:53:ce:ce:ce:7b:25:ff:2f:b0:4e:ac:81:8c:92:20:02:7a:8b:1a:14:fa:bd:ad:a3:a5:86

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate *.reachmedia.co.nz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.reachmedia.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.reachmedia.co.nz
reachmedia.co.nz

Other certificates including the domain name reachmedia.co.nz

(limited to 100 certificates)
reach.nz
sandbox.rpcadmin.sauvara.com
www.reachmedia.co.nz
aquacontrol.in
federiquitos.com
reachmedia.co.nz
reachmedia.co.nz
enquiries.reachmedia.co.nz
sputnik.reachmedia.co.nz
*.reachmedia.co.nz
sputnik.reachmedia.co.nz
quote.reachmedia.co.nz
*.reachmedia.co.nz
auditustec.com
www.rotsonsolitaire.com
www.mcareauto.com
federiquitos.com
www.gomyapp.com
reach.nz
reach.nz
engage.reachmedia.co.nz
app.yours.work.life
*.reachmedia.co.nz
www.3pondsdigital.io
www.aircache.app
engage.reachmedia.co.nz
*.reachmedia.co.nz
www.reachmedia.co.nz
sputnik.reachmedia.co.nz
epicgames.12traits.com
djanblom.dk
enquiries.reachmedia.co.nz
givebee.co
web.journee.live
reachmedia.co.nz
quote.reachmedia.co.nz
enquiries.reachmedia.co.nz
d-olympus.store
www.jayuyastem.org
lms.reachmedia.co.nz
construtoramayor.com.br
reachmedia.co.nz
web.journee.live
blockdrop.app
physician.hotfix.lifemd.com
construtoramayor.com.br
*.reachmedia.co.nz
bodymap.ai
member.toothpicprelive.com
sputnik.reachmedia.co.nz
olive.olivos.cl
reach.nz
admin.vojo.com.br
www.riingo.com
*.reachmedia.co.nz
reachmedia.co.nz
pinpoint-latest-wpba.cox2m.com
bodymap.ai
www.ryancorb.in
reach.nz
www.ryancorb.in
*.reachmedia.co.nz
reachmedia.co.nz
www.reachmedia.co.nz
www.mcareauto.com
couriers.reachmedia.co.nz
www-nutrigenomix-test.mixxmac.com
engage.reachmedia.co.nz
lms.reachmedia.co.nz
*.reachmedia.co.nz
ta.dn2me.com
hyper.hanak.in
fonts.typogram.co
www.reachmedia.co.nz
www.blate.app
ta.dn2me.com
reachmedia.co.nz
reach.nz
portal-uat.hastingsdeering.com.au
admin.vojo.com.br

Certificate

The complete raw certificate details for *.reachmedia.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG5zCCBc+gAwIBAgIQNGsoqIoLa3AVh7FyW99H0jANBgkqhkiG9w0BAQsFADBB
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMRswGQYDVQQDExJ0
aGF3dGUgU1NMIENBIC0gRzIwHhcNMTYwNzI2MDAwMDAwWhcNMTkwNzI2MjM1OTU5
WjCBmTELMAkGA1UEBhMCTloxEzARBgNVBAgMCldlbGxpbmd0b24xEzARBgNVBAcM
CldlbGxpbmd0b24xKDAmBgNVBAoMH1JFQUNIIE1FRElBIE5FVyBaRUFMQU5EIExJ
TUlURUQxGTAXBgNVBAsMEEJ1c2luZXNzIFN5c3RlbXMxGzAZBgNVBAMMEioucmVh
Y2htZWRpYS5jby5uejCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJjh
P18CaQdQ+QCtL8kcYV1jvJv/tyTNKvR0zzkdxYjJdTosRq+GLtl04ZYpfOcwO6zz
lvdOKPib0T99amHL8IWcogFamluaThBQpHT7JQebag7RzztF/DPNk29H7Uq0LlOx
2dMau/inr32IIIFzNCN+1jeSYLV1LtGjgUA/AqabB3RYGuUIxuf9R5kn7I5fu62g
bK02T+S4g7OMV2r1Gy5/Rh0NDEVrAty55CIHrarfc64WrIbHySZmuHBZcnxcHnYz
VWHO3Vt3BpDkFJOBTEWSIU7crP+29IwGH5XXqJKKQ7fyyRL8bpRc1xh/ws5EsWmG
7dhby3o3GScMVXdPbpkCAwEAAaOCA4AwggN8MC8GA1UdEQQoMCaCEioucmVhY2ht
ZWRpYS5jby5ueoIQcmVhY2htZWRpYS5jby5uejAJBgNVHRMEAjAAMG4GA1UdIARn
MGUwYwYGZ4EMAQICMFkwJgYIKwYBBQUHAgEWGmh0dHBzOi8vd3d3LnRoYXd0ZS5j
b20vY3BzMC8GCCsGAQUFBwICMCMMIWh0dHBzOi8vd3d3LnRoYXd0ZS5jb20vcmVw
b3NpdG9yeTAOBgNVHQ8BAf8EBAMCBaAwHwYDVR0jBBgwFoAUwk9IV/zRT5rAXTh9
DgXb2S61UmAwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL3RqLnN5bWNiLmNvbS90
ai5jcmwwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMFcGCCsGAQUFBwEB
BEswSTAfBggrBgEFBQcwAYYTaHR0cDovL3RqLnN5bWNkLmNvbTAmBggrBgEFBQcw
AoYaaHR0cDovL3RqLnN5bWNiLmNvbS90ai5jcnQwggH2BgorBgEEAdZ5AgQCBIIB
5gSCAeIB4AB2AN3rHSt6DU+mIIuBrYFocH4ujp0B1VyIjT0RxM227L7MAAABViTp
j4gAAAQDAEcwRQIhAIUnvWrFn+9FHbgan4pgUKWCL98A+TIyxODxRjRdIp4lAiA6
rKJigYAVM8kYg4pOk7rrmfDRXVskzsv/eeydG3oO2gB1AKS5CZC0GFgUh7sTosxn
cAo8NZgE+RvfuON3zQ7IDdwQAAABViTpj7UAAAQDAEYwRAIgFHqsv3piQ2RDKoQY
vz489g5eBcpVSMwLrOI8mjKfneUCIEiXKL21eUKi5B4RVC3nnkqKdyNmb6REv2zr
HsMTWpN1AHYAaPaY+B9kgr46jO65KB1M/HFRXWeT1ETRCmesu09P+8QAAAFWJOmP
tQAABAMARzBFAiBKj9wnKHXrNMF6a31ArYFrHn9plzqADQ5V91gVrROp1gIhAKtX
MbLCRUw4qFS+c7UosMVNq8rx1Pv9aPro4e9zxRJjAHcA7ku9t3XOYLrhQmkfq+Ge
ZqMPfl+wctiDAMR7iXqo/csAAAFWJOmR3gAABAMASDBGAiEA5b5rR/eASfeBJdWx
hOaREEh2xnHdOaNEuX9hqlh+XDkCIQDx85Akr8QARd/IcygBoZh8uE7faFcntcaU
NLxX0AMQ9jANBgkqhkiG9w0BAQsFAAOCAQEAZez4XIhvVHk3dp+PVsWppiPwV4HY
VcUhggagrko6qivah166KqxvVONpO/fMWRmRnB708Xk0XJT29KFqqzfgSIfirPIa
RGE2sh3vaXSQ7rXj+AFl4H//clnIqGXzYL7yD1zAme1wCj5kj4yX62MFOudiFttD
dbvoqFLfWs5sIj5UmTow0SP4kY4gMkg7+K21vgu98tLfi3BbpzB7l7Ub9R/DcHdr
Nrv5BI+rB9HiVKL4IOrh68Rr6tCNSUSWIgQLku2fDsL/mwRMCuMkTNLiDUtdLAGB
KusU5VFGtd72+U3Y20J77uwdAgwHyAlvx+UDM+PBYGOqILVvIizpK/YZ3A==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOE/XwJpB1D5AK0vyRxh
XWO8m/+3JM0q9HTPOR3FiMl1OixGr4Yu2XThlil85zA7rPOW904o+JvRP31qYcvw
hZyiAVqaW5pOEFCkdPslB5tqDtHPO0X8M82Tb0ftSrQuU7HZ0xq7+KevfYgggXM0
I37WN5JgtXUu0aOBQD8CppsHdFga5QjG5/1HmSfsjl+7raBsrTZP5LiDs4xXavUb
Ln9GHQ0MRWsC3LnkIgetqt9zrhashsfJJma4cFlyfFwedjNVYc7dW3cGkOQUk4FM
RZIhTtys/7b0jAYfldeokopDt/LJEvxulFzXGH/CzkSxaYbt2FvLejcZJwxVd09u
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 69676256194117037310638191261066938322
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Wellington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Wellington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'REACH MEDIA NEW ZEALAND LIMITED'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Business Systems'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.reachmedia.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19299296058303840655129788796457085967424045448272594792376469437707720640241792203222182337704865226919060062416675083312766364777993720821753456018517730817911159631759646351491145711401426439782007020062333622872208460953620948493161851470370474167050912375095744653124798126352393826137781766780034693374417000018319408913865800456461485608909520092581186832642102458020732145752047294223863595606160893573046784199203219561009666566153609212765199943824036584222349199701891973884810233343220145733470385675250994878227514074864048529575965158768646444423157057570504236327345754510015427937877471368917858348697
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.reachmedia.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reachmedia.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							01e0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015624e98f8800000403004730450221008527bd6ac59fef451db81a9f8a6050a5822fdf00f93232c4e0f146345d229e2502203aaca26281801533c918838a4e93baeb99f0d15d5b24cecbff79ec9d1b7a0eda007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015624e98fb500000403004630440220147aacbf7a624364432a8418bf3e3cf60e5e05ca5548cc0bace23c9a329f9de50220489728bdb57942a2e41e11542de79e4a8a7723666fa444bf6ceb1ec3135a937500760068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc40000015624e98fb5000004030047304502204a8fdc272875eb34c17a6b7d40ad816b1e7f69973a800d0e55f75815ad13a9d6022100ab5731b2c2454c38a854be73b528b0c54dabcaf1d4fbfd68fae8e1ef73c51263007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000015624e991de0000040300483046022100e5be6b47f78049f78125d5b184e691104876c671dd39a344b97f61aa587e5c39022100f1f39024afc40045dfc8732801a1987cb84edf685727b5c69434bc57d00310f6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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