seguronet.seguroslafise.com.ni

- Seguros LAFISE, S.A. -

Issued by thawte Extended Validation SHA256 SSL CA

About this certificate

This digital certificate with serial number 2e:2c:c0:85:f7:fa:ca:ce:ee:b2:38:64:ba:bf:0e:e2 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Seguros LAFISE, S.A.

Company registration number: J0310000000999
Organization: Seguros LAFISE, S.A.
Organization unit: TI
State / Province: Managua
Locality: Managua
Country: NI

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 2e:2c:c0:85:f7:fa:ca:ce:ee:b2:38:64:ba:bf:0e:e2
Serial Number (int): 61376853704617164703143344478334422754
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 3b:24:c8:31:a0:b7:5a:d0:6a:b8:d2:ca:07:74:cc:1e:24:d4:c4:dc

Fingerprint (sha1): 80:4b:77:e4:c2:f1:62:43:78:96:ac:86:99:ae:f8:bb:62:65:c5:e5
Fingerprint (sha256): bc:a0:38:df:e3:dc:11:4e:bd:06:62:e5:1d:ee:5c:08:9f:e3:b1:4e:8c:fd:8e:90:e2:9b:a3:39:35:38:cd:fe

Issuing Certificate URL: http://tf.symcb.com/tf.crt

Revocation information

OCSP Server: http://tf.symcd.com
CRL Distribution Point: http://tf.symcb.com/tf.crl

Check the revocation status for certificate seguronet.seguroslafise.com.ni

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for seguronet.seguroslafise.com.ni

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

seguronet.seguroslafise.com.ni

Other certificates including the domain name seguroslafise.com.ni

(limited to 100 certificates)
bancaseguros.seguroslafise.com.ni
seguronet.seguroslafise.com.ni
seguronet.seguroslafise.com.ni
seguronethn.seguroslafise.com.ni
seguronethn.seguroslafise.com.ni
seguronethn.seguroslafise.com.ni
secure.seguroslafise.com.ni
seguronethn.seguroslafise.com.ni
secure.seguroslafise.com.ni
secure.seguroslafise.com.ni
seguronetnlb.seguroslafise.com.ni
seguronet.seguroslafise.com.ni
seguronethn.seguroslafise.com.ni
seguronethn.seguroslafise.com.ni
seguronethn.seguroslafise.com.ni
secure.seguroslafise.com.ni
seguronetnlb.seguroslafise.com.ni
secure.seguroslafise.com.ni
seguronetnlb.seguroslafise.com.ni
seguronetnlb.seguroslafise.com.ni
seguronet.seguroslafise.com.ni
corredurias.seguroslafise.com.ni
seguronetnlb.seguroslafise.com.ni
seguronet.seguroslafise.com.ni

Certificate

The complete raw certificate details for seguronet.seguroslafise.com.ni in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHvTCCBqWgAwIBAgIQLizAhff6ys7usjhkur8O4jANBgkqhkiG9w0BAQsFADBX
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMTEwLwYDVQQDEyh0
aGF3dGUgRXh0ZW5kZWQgVmFsaWRhdGlvbiBTSEEyNTYgU1NMIENBMB4XDTE2MDEw
NjAwMDAwMFoXDTE4MDEyNjIzNTk1OVowgdMxEzARBgsrBgEEAYI3PAIBAxMCTkkx
HTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMR0wGwYDVQQKDBRTZWd1cm9z
IExBRklTRSwgUy5BLjEXMBUGA1UEBRMOSjAzMTAwMDAwMDA5OTkxCzAJBgNVBAYT
Ak5JMRAwDgYDVQQIDAdNYW5hZ3VhMRAwDgYDVQQHDAdNYW5hZ3VhMQswCQYDVQQL
DAJUSTEnMCUGA1UEAwwec2VndXJvbmV0LnNlZ3Vyb3NsYWZpc2UuY29tLm5pMIIC
IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyL4SvRPdQvDkzLiQcdxn9AeO
0AWP9VAzQTEeTp5wFOXBoDjewoyOjWo3lwYhA02fF3n/v0K2QUU/6wRIEdVZkS1E
2yuzII4pygDDNQrYlX1wnpywKFgYI87cdjRDu3sTtRnaA4wdHjfd72j09i0EPFd+
2aZLleD7+2OB8UNKVjU2gee3ty6VNvGKpWlq1Nbd2qMHUo47ja8uKq7dnwy3vSpl
FnztvwVa8e/6achWi++QxIhzkr1RTZcW4+m4yUtsggR9s3QcCoPFQVzHHFpqg4gh
Bqg6Yul7iti1SmyaplC5VN5XzYRYzI8taNA8UNdndFsddmmFP1dUglKzaln44Js2
P1aK0lREbeIbKHwMsaATegrNfBUveFdRQWR3LPFM0C0In1pdmchH7siJExSlRyAL
GBoAkRgg+mHN3mQWheyk4iVsWV6LK4ZMApNSfDF/VKA0XbSIA6j5q74gW0D9bP69
6c5+Jy8Y0OTeajTAV4X62U8uI3g8lifTGgiM5d+l5FfZ2joGb/xvuvWPuf4LYrcF
L6JMyvX3IC9Eqb/r+Mll11sSgUHrZZvcWwDxMbqYlxg+ewP1iTrMcCh5e31R3xph
eQOwoIu4fIiHU2FDhg8sEPHh54AqF4YrYWgElxEdhJguEw1zJbmhPwsH6TEqWWHu
K4bffkVM8K3h5YbVrWECAwEAAaOCAwYwggMCMCkGA1UdEQQiMCCCHnNlZ3Vyb25l
dC5zZWd1cm9zbGFmaXNlLmNvbS5uaTAJBgNVHRMEAjAAMA4GA1UdDwEB/wQEAwIF
oDArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8vdGYuc3ltY2IuY29tL3RmLmNybDBz
BgNVHSAEbDBqMGgGC2CGSAGG+EUBBzABMFkwJgYIKwYBBQUHAgEWGmh0dHBzOi8v
d3d3LnRoYXd0ZS5jb20vY3BzMC8GCCsGAQUFBwICMCMMIWh0dHBzOi8vd3d3LnRo
YXd0ZS5jb20vcmVwb3NpdG9yeTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH
AwIwHwYDVR0jBBgwFoAUOyTIMaC3WtBquNLKB3TMHiTUxNwwVwYIKwYBBQUHAQEE
SzBJMB8GCCsGAQUFBzABhhNodHRwOi8vdGYuc3ltY2QuY29tMCYGCCsGAQUFBzAC
hhpodHRwOi8vdGYuc3ltY2IuY29tL3RmLmNydDCCAX0GCisGAQQB1nkCBAIEggFt
BIIBaQFnAHYA3esdK3oNT6Ygi4GtgWhwfi6OnQHVXIiNPRHEzbbsvswAAAFSF4qQ
IgAABAMARzBFAiEAjrJvMvGLmSmJL+bBCUq4rxq7WZRV35r3xG+X6Y670DcCIHIb
4iWJ1Ndb1UZYmnUsqSGpHz08SkgFWyfr8383ednUAHUApLkJkLQYWBSHuxOizGdw
Cjw1mAT5G9+443fNDsgN3BAAAAFSF4qQQAAABAMARjBEAiAGHGqGhdY1E/ZhbzkD
1VUnYl+VMYATuKjK0nO7z49X/wIgPzktCYt1PHeptMH8VOZ7rQBpi1LK3te9NsFT
Rt+2g0UAdgBo9pj4H2SCvjqM7rkoHUz8cVFdZ5PURNEKZ6y7T0/7xAAAAVIXipBD
AAAEAwBHMEUCIQDaQ9/vJ8/jqeC2A8yinJa4+BlSn7jJ8kRFvo2QNjsnHgIged0E
J8sj/TNlneMMweysIU1jrYREXxmYTSAj3KsU6UowDQYJKoZIhvcNAQELBQADggEB
AN7aZh3Z2zfjp69/jPkYTzmYDPOwatrYE4ouPAdMoPliq0C+NhCaDSV4/Y6P9C83
kbgXdMtsKHd0D1AJj/28aAfflSwDCy6sRMEszT3kKGTqzFjy61eh2/cEM/XUO5xa
ieZya8zq9q2klk3GHM/KIu8roy+skemI+B5GEpV0IrrXcrSqyg3DSbWhK311opgo
qv0ntW0StgzH+qIIWH/54tFYkvwyEfI15HSTKlDsx1zIm9xhGTkBkmSXjpN5cfSk
R4FOVDEBn6EdNL+iDOatUcKJ9SIiP29eg03Wt3zYHY69w7TvhwXjBkHJCgPG38Td
jbEZCoQP8Ok+Weuit1aFCGA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 61376853704617164703143344478334422754
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte Extended Validation SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Seguros LAFISE, S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'J0310000000999'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Managua'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Managua'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'TI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'seguronet.seguroslafise.com.ni'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 818957840920660631165757221044853800327595538239809087412209591387273000272529439191865518910421242546340008406575122760289479680404082504671623213441002908725124250729437676094180431147380150690998614312908295565407112302943930983075518633992611118512685357564295663695234106270134304129864566253699884644693367464580293266813677063820940937960847279859272502567338842216002837734744557222242281983597097710761207719471357714026375939189157711475572563477478622256193028499453005187270467920824070228935979745183200878288769047955443173460213352126088958734183607752543630759721515224327129539274745714049878034494490067871430623800726124566072175577568182641410783978369112097102039929853601428488221297386107267242644804427116614195211062220288233268610802142859329874627179578123095877187267934571444479020395234350033840196913683737939456187697604262647564191223359064105688109829395261144030102412069971945872358390740285560741008632350936012295304615277439511182003320417920658148504335007244908415297913167460203065261883086955393319961084757764274606312023141350152451645426051897221721193722900167125349051313255139693918373283834981946482911266438348435878298470489743750767444786527419364826875825393786159427912589487457
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seguronet.seguroslafise.com.ni'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tf.symcb.com/tf.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.48.1 (Thawte EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3b24c831a0b75ad06ab8d2ca0774cc1e24d4c4dc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tf.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tf.symcb.com/tf.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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