cai.cegedim.fr
- CEGEDIM SA -
Issued by Thawte RSA CA 2018
About this certificate
This digital certificate with serial number 07:d0:30:bc:46:e9:1f:28:b3:27:2d:7c:92:fc:aa:9e was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
CEGEDIM SA
Organization:
CEGEDIM SA
Organization unit: IT
Organization unit: IT
State / Province:
Ile-de-France
Locality: BOULOGNE BILLANCOURT
Country: FR
Locality: BOULOGNE BILLANCOURT
Country: FR
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 07:d0:30:bc:46:e9:1f:28:b3:27:2d:7c:92:fc:aa:9eSerial Number (int): 10385582189570960766541241898535529118
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: ff:64:30:a0:35:19:48:70:9c:11:12:26:1e:f4:c9:97:55:e3:f0:64
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a
Fingerprint (sha1): 26:93:4c:fd:47:26:54:78:8f:f4:5c:17:2f:0a:ce:4e:e7:d9:b8:52
Fingerprint (sha256): c2:e0:5e:d3:41:15:61:cc:87:bd:38:0d:0a:06:b8:04:4d:e1:e1:a5:b5:ac:4a:a8:2e:70:3f:cd:af:22:7c:51
Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt
Revocation information
OCSP Server: http://status.thawte.comCRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl
Check the revocation status for certificate cai.cegedim.fr
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cai.cegedim.fr
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cai.cegedim.fr
Other certificates including the domain name cegedim.fr
(limited to 100 certificates)
cai.cegedim.fr
cai.cegedim.fr
*.cegedim.fr
cai.cegedim.fr
trophees.cegedim.fr
teletrans.cegedim.fr
*.cegedim.fr
teledistrib.cegedim.fr
tst-teledistrib.cegedim.fr
ws-edi.cegedim.fr
tst-teledistrib.cegedim.fr
cai.cegedim.fr
*.cegedim.fr
teledistrib.cegedim.fr
teledistrib.cegedim.fr
teletrans.cegedim.fr
cai.cegedim.fr
teledistrib.cegedim.fr
*.cegedim.fr
ws-edi.cegedim.fr
tst-teledistrib.cegedim.fr
tst-teledistrib.cegedim.fr
*.cegedim.fr
teledistrib.cegedim.fr
www.pco.cegedim.fr
teledistrib.cegedim.fr
tst-teledistrib.cegedim.fr
www.pco.cegedim.fr
teledistrib.cegedim.fr
pmx01i.cegedim.fr
teledistrib.cegedim.fr
*.cegedim.fr
tst-teledistrib.cegedim.fr
cai.cegedim.fr
teletrans.cegedim.fr
*.cegedim.fr
serviceclientteams.cegedim.fr
teledistrib.cegedim.fr
cai.cegedim.fr
tst-teledistrib.cegedim.fr
oftp2.cegedim.fr
*.cegedim.fr
teletrans.cegedim.fr
cai.cegedim.fr
tst-teledistrib.cegedim.fr
*.cegedim.fr
cai.cegedim.fr
*.cegedim.fr
services-teleprocedures.cegedim.fr
teledistrib.cegedim.fr
cai.cegedim.fr
*.cegedim.fr
cai.cegedim.fr
trophees.cegedim.fr
teletrans.cegedim.fr
*.cegedim.fr
teledistrib.cegedim.fr
tst-teledistrib.cegedim.fr
ws-edi.cegedim.fr
tst-teledistrib.cegedim.fr
cai.cegedim.fr
*.cegedim.fr
teledistrib.cegedim.fr
teledistrib.cegedim.fr
teletrans.cegedim.fr
cai.cegedim.fr
teledistrib.cegedim.fr
*.cegedim.fr
ws-edi.cegedim.fr
tst-teledistrib.cegedim.fr
tst-teledistrib.cegedim.fr
*.cegedim.fr
teledistrib.cegedim.fr
www.pco.cegedim.fr
teledistrib.cegedim.fr
tst-teledistrib.cegedim.fr
www.pco.cegedim.fr
teledistrib.cegedim.fr
pmx01i.cegedim.fr
teledistrib.cegedim.fr
*.cegedim.fr
tst-teledistrib.cegedim.fr
cai.cegedim.fr
teletrans.cegedim.fr
*.cegedim.fr
serviceclientteams.cegedim.fr
teledistrib.cegedim.fr
cai.cegedim.fr
tst-teledistrib.cegedim.fr
oftp2.cegedim.fr
*.cegedim.fr
teletrans.cegedim.fr
cai.cegedim.fr
tst-teledistrib.cegedim.fr
*.cegedim.fr
cai.cegedim.fr
*.cegedim.fr
services-teleprocedures.cegedim.fr
teledistrib.cegedim.fr
Certificate
The complete raw certificate details for cai.cegedim.fr in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIQB9AwvEbpHyizJy18kvyqnjANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMRswGQYDVQQDExJUaGF3dGUgUlNBIENBIDIwMTgwHhcN MjAwMzA0MDAwMDAwWhcNMjIwNTAzMTIwMDAwWjB/MQswCQYDVQQGEwJGUjEWMBQG A1UECBMNSWxlLWRlLUZyYW5jZTEdMBsGA1UEBxMUQk9VTE9HTkUgQklMTEFOQ09V UlQxEzARBgNVBAoTCkNFR0VESU0gU0ExCzAJBgNVBAsTAklUMRcwFQYDVQQDEw5j YWkuY2VnZWRpbS5mcjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANxa xZJ+EeHqfzF5d2Xv/3TV6ofj7V/0WvckPryiXk3M01aXJ4VH3aFP4sXvZX9LUaTa WZfwyC801JT5Rvh3mfc+34iyDtpP92BfU4F8n4fJeJpPWfZUpazpXxJ/gRwtDl4H nlF2LiJXe0B+44c2M4mvkFdEUE0hzzvYotHWpiDpcW8T64EJECdUVrlWsd5wGw2/ ItA5cRbsCza5UF/L8ob5MPRU/QS5odcdfLltx54QY5AAQnRGBg6PJYpgCczUfcxT +EZH4mPnELUwJWAVHDQFFt3re+ic65TfqBzB/Ar56Xd4K4SeYMxvovUjyl2VexkK DEzHYa6wyIevq2LjS3sCAwEAAaOCAakwggGlMB8GA1UdIwQYMBaAFKPIXmVU5TB4 wQXqBwpqWcy5/t5aMB0GA1UdDgQWBBT/ZDCgNRlIcJwREiYe9MmXVePwZDAZBgNV HREEEjAQgg5jYWkuY2VnZWRpbS5mcjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMDoGA1UdHwQzMDEwL6AtoCuGKWh0dHA6Ly9j ZHAudGhhd3RlLmNvbS9UaGF3dGVSU0FDQTIwMTguY3JsMEwGA1UdIARFMEMwNwYJ YIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNv bS9DUFMwCAYGZ4EMAQICMG8GCCsGAQUFBwEBBGMwYTAkBggrBgEFBQcwAYYYaHR0 cDovL3N0YXR1cy50aGF3dGUuY29tMDkGCCsGAQUFBzAChi1odHRwOi8vY2FjZXJ0 cy50aGF3dGUuY29tL1RoYXd0ZVJTQUNBMjAxOC5jcnQwCQYDVR0TBAIwADATBgor BgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFYGnY7y0stlG63z8 VE/1z0g0kl7EFWuTMXfN6yz9Dt8WNR6vYkEB0FnpHTrY/pQBQtwFSeI5yv8E2RF0 /cjylwtUtizFETtI7vKqck83Gr0N57Jy2hyf1ffIS4Uxirbv/HqDl3cgPc31AKRN sU7qSlmbr9fjsy4Kwkn3cZoQSyaatZJeDaRcIaRL6MgKsJOEURLzrmmWgvxAWRMx hSp1HEbV5IBFk1r9WNQgRZeV4z1xDAbK4sN2SpHgV9s5i2PFPphI1E2djQs03lhn BBHa5GBQsyWF4TJGIhqo3czWNoIhwnsX1o3D96oqMl1HFWLG4EdhQJh87ZY4XTn6 20RfRw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FrFkn4R4ep/MXl3Ze// dNXqh+PtX/Ra9yQ+vKJeTczTVpcnhUfdoU/ixe9lf0tRpNpZl/DILzTUlPlG+HeZ 9z7fiLIO2k/3YF9TgXyfh8l4mk9Z9lSlrOlfEn+BHC0OXgeeUXYuIld7QH7jhzYz ia+QV0RQTSHPO9ii0damIOlxbxPrgQkQJ1RWuVax3nAbDb8i0DlxFuwLNrlQX8vy hvkw9FT9BLmh1x18uW3HnhBjkABCdEYGDo8limAJzNR9zFP4RkfiY+cQtTAlYBUc NAUW3et76JzrlN+oHMH8Cvnpd3grhJ5gzG+i9SPKXZV7GQoMTMdhrrDIh6+rYuNL ewIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10385582189570960766541241898535529118 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-03 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ile-de-France' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BOULOGNE BILLANCOURT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CEGEDIM SA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cai.cegedim.fr' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27817188318891247454292452559870674443186407744760405810937125545113602028694560376432175872667245114708345623020544585424473869938902571064846511524155305200624013386981015121782330149415811923037243843965653623284257909039294184173624534053942210057575968341716144021584540190416997790163635822072276057107291644349117217402371822459434961929258983192830899595820008538993551477044883238171174328739233957166938964809590426255366288346486228579165812420298355606054119997133525638319181221111276716840620395307555645803482237877415978886217805520411167518258625483003398874473514130734664929954623206738357718829947 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ff6430a0351948709c1112261ef4c99755e3f064 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cai.cegedim.fr' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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