www.uat.renewal.schoolfeeplan.com

- Premium Credit Limited -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 16:1e:1b:40:63:28:63:b6:b8:c7:5d:c8:de:13:41:0e was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Premium Credit Limited

Organization: Premium Credit Limited
Organization unit: Datacentre
State / Province: Surrey
Locality: Epsom
Country: GB

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 16:1e:1b:40:63:28:63:b6:b8:c7:5d:c8:de:13:41:0e
Serial Number (int): 29399337539373737430760409200042656014
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 43:9b:c7:a8:40:41:f0:de:e0:47:62:e7:33:ee:d9:33:62:aa:78:aa
Fingerprint (sha256): c5:16:8c:f3:4b:74:d0:86:23:9b:bb:5a:6e:ab:d9:0c:70:ed:a3:fa:7f:76:d5:0a:18:88:ef:b3:a9:3f:39:31

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate www.uat.renewal.schoolfeeplan.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.uat.renewal.schoolfeeplan.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.uat.renewal.schoolfeeplan.com

Other certificates including the domain name schoolfeeplan.com

(limited to 100 certificates)
www.schoolfeeplan.com
digital.premiumcredit.com
digital.premiumcredit.com
digital.premiumcredit.com
www.schoolfeeplan.com
digital.premiumcredit.com
digital.premiumcredit.com
www.preprod.schoolfeeplan.com
www.preprod.renewal.schoolfeeplan.com
www.preprod.renewal.schoolfeeplan.com
test.premiumcredit.com
www.uat.renewal.schoolfeeplan.com
digital.premiumcredit.com
www.schoolfeeplan.com
digital.premiumcredit.com
digital.premiumcredit.com
www.schoolfeeplan.com
digital.premiumcredit.com
www.uat.schoolfeeplan.com
digital.premiumcredit.com
digital.premiumcredit.com
test.premiumcredit.com
digital.premiumcredit.com
test.premiumcredit.com
www.schoolfeeplan.com
digital.premiumcredit.com
digital.premiumcredit.com
digital.premiumcredit.com
www.ssd.schoolfeeplan.com
digital.premiumcredit.com
www.schoolfeeplan.com
digital.premiumcredit.com
digital.premiumcredit.com
digital.premiumcredit.com
www.uat.schoolfeeplan.com
www.uat.schoolfeeplan.com
digital.premiumcredit.com
digital.premiumcredit.com
www.renewal.schoolfeeplan.com
digital.premiumcredit.com
digital.premiumcredit.com
test.premiumcredit.com
digital.premiumcredit.com
www.preprod.schoolfeeplan.com
www.schoolfeeplan.com
digital.premiumcredit.com
digital.premiumcredit.com
digital.premiumcredit.com
digital.premiumcredit.com
digital.premiumcredit.com
digital.premiumcredit.com
test.premiumcredit.com
www.ssd.schoolfeeplan.com
www.uat.renewal.schoolfeeplan.com
digital.premiumcredit.com
digital.premiumcredit.com
www.renewal.schoolfeeplan.com
digital.premiumcredit.com
digital.premiumcredit.com
test.premiumcredit.com
www.renewal.schoolfeeplan.com
digital.premiumcredit.com
www.preprod.renewal.schoolfeeplan.com
digital.premiumcredit.com
www.schoolfeeplan.com
digital.premiumcredit.com
www.schoolfeeplan.com
digital.premiumcredit.com
www.schoolfeeplan.com
www.preprod.schoolfeeplan.com

Certificate

The complete raw certificate details for www.uat.renewal.schoolfeeplan.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGYjCCBUqgAwIBAgIQFh4bQGMoY7a4x13I3hNBDjANBgkqhkiG9w0BAQsFADBB
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMRswGQYDVQQDExJ0
aGF3dGUgU1NMIENBIC0gRzIwHhcNMTYwNzIwMDAwMDAwWhcNMTcxMDA1MjM1OTU5
WjCBkDELMAkGA1UEBhMCR0IxDzANBgNVBAgMBlN1cnJleTEOMAwGA1UEBwwFRXBz
b20xHzAdBgNVBAoMFlByZW1pdW0gQ3JlZGl0IExpbWl0ZWQxEzARBgNVBAsMCkRh
dGFjZW50cmUxKjAoBgNVBAMMIXd3dy51YXQucmVuZXdhbC5zY2hvb2xmZWVwbGFu
LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALz8QyxCUrC7mV3T
+d/eZjT2VFCxp44yfMxtFAbnO8leuWa2DY4OGntJvaXtbQ5ESdFWuZ6CRQkWFoK9
q1C+aFn513cySTOhmNMDeuKjJRfDfmRDGMEZkbxYtGav99FIwfKQaQRWmtqIN9kz
xxIaCeFddgpdFTh6lZ0QkT2DyU/AIlUWzNDuvISS8SOcKggQTMHfaoSepWGN/q6Z
uSL7+w1lOd5nDdesyNn1qyfF70dNaYH9nHH4AH1AhlunxEPM4IQpwvDni++DM17+
obdOMhkbp4ERZcNctotkeu8DdOjPdzd8qlrRbIJjmcUT9SMFv7TmAAfqjR8PsDSF
kzh/b0MCAwEAAaOCAwQwggMAMCwGA1UdEQQlMCOCIXd3dy51YXQucmVuZXdhbC5z
Y2hvb2xmZWVwbGFuLmNvbTAJBgNVHRMEAjAAMG4GA1UdIARnMGUwYwYGZ4EMAQIC
MFkwJgYIKwYBBQUHAgEWGmh0dHBzOi8vd3d3LnRoYXd0ZS5jb20vY3BzMC8GCCsG
AQUFBwICMCMMIWh0dHBzOi8vd3d3LnRoYXd0ZS5jb20vcmVwb3NpdG9yeTAOBgNV
HQ8BAf8EBAMCBaAwHwYDVR0jBBgwFoAUwk9IV/zRT5rAXTh9DgXb2S61UmAwKwYD
VR0fBCQwIjAgoB6gHIYaaHR0cDovL3RqLnN5bWNiLmNvbS90ai5jcmwwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMFcGCCsGAQUFBwEBBEswSTAfBggrBgEF
BQcwAYYTaHR0cDovL3RqLnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL3Rq
LnN5bWNiLmNvbS90ai5jcnQwggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB2AN3r
HSt6DU+mIIuBrYFocH4ujp0B1VyIjT0RxM227L7MAAABVgX6Vi8AAAQDAEcwRQIh
AMkZ2j9FHaQi47w3ctfAZBVO6ctpWz4XboX3pU3vl44MAiBMUPWLqBerG2UKqDwT
8SeK1sWf3M9ZYcdiYL+kg5A0PgB2AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3
zQ7IDdwQAAABVgX6Vk8AAAQDAEcwRQIhAMCuQMrlcRQqZA/WOizxFyC+RAMhLsKQ
W5UIE6bCjOKfAiB06lMprPnvi7d0/T1keh7QR5/QUll6sahFvnSypDeOmAB1AGj2
mPgfZIK+OozuuSgdTPxxUV1nk9RE0QpnrLtPT/vEAAABVgX6VlAAAAQDAEYwRAIg
S+jcRZptWe+/i+trBS45TNtIXD3sctHh9jdfuoJcbZgCIAfW3pZmfqlUr4+VAe2G
SowtokMfa2D6pY9Ap6Kob2USMA0GCSqGSIb3DQEBCwUAA4IBAQBqPhN56hLiAdOV
yEpHso9DhkxsiMGeWIH4zBjjrFzdSNOY2q7pnl72tuD0v4JbkcfYKj2eAZCdfKdZ
QiHSD9zzuzt5sXDL/IgHtZ/iYmeb+MyGjto4AUEdPy67DuwE5F7QJSXZB3EoQa7n
mGSRNNHTbheLw2XxW/jmjaoM2eC49Wp3KA69KYO5P/O+dns5fY3Ug/3JwZAQNfr5
9CFkAUB3zYgdKi8pW8nb60oFaHawRb+zMHNDuDfWfBw2DoY2UTynJyCpbYQNUlNh
sBw6C4rRBSJmhpcZa5zaNNcZbNbrojE8TDk21R7Pw6JzBL84GF3qFhoZXHmASuwd
3DV5rplT
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPxDLEJSsLuZXdP5395m
NPZUULGnjjJ8zG0UBuc7yV65ZrYNjg4ae0m9pe1tDkRJ0Va5noJFCRYWgr2rUL5o
WfnXdzJJM6GY0wN64qMlF8N+ZEMYwRmRvFi0Zq/30UjB8pBpBFaa2og32TPHEhoJ
4V12Cl0VOHqVnRCRPYPJT8AiVRbM0O68hJLxI5wqCBBMwd9qhJ6lYY3+rpm5Ivv7
DWU53mcN16zI2fWrJ8XvR01pgf2ccfgAfUCGW6fEQ8zghCnC8OeL74MzXv6ht04y
GRungRFlw1y2i2R67wN06M93N3yqWtFsgmOZxRP1IwW/tOYAB+qNHw+wNIWTOH9v
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 29399337539373737430760409200042656014
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Surrey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Epsom'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Premium Credit Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Datacentre'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.uat.renewal.schoolfeeplan.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23857196556418185450535432684601375253464921240990274374071209845204511233878129774925607941747114711231068690795114394696477874543333440115106016860781610246862797276924158153654755559739284406820344977009335672393366263899857369119289937341008654498514091734287788835347499246219528984081648391224843441382983972993736196312221797803537753109590407485787360114024645968595348373795748111027712041830611739923807615086827207478703297693210343308629859360486965502393703763451692156780547811152814304569449295788056140059069226350396881816952191283555439626400892250639208062856791554935622264996382119629046186733379
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uat.renewal.schoolfeeplan.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006a3e1379ea12e201d395c84a47b28f43864c6c88c19e5881f8cc18e3ac5cdd48d398daaee99e5ef6b6e0f4bf825b91c7d82a3d9e01909d7ca7594221d20fdcf3bb3b79b170cbfc8807b59fe262679bf8cc868eda3801411d3f2ebb0eec04e45ed02525d907712841aee798649134d1d36e178bc365f15bf8e68daa0cd9e0b8f56a77280ebd2983b93ff3be767b397d8dd483fdc9c1901035faf9f42164014077cd881d2a2f295bc9dbeb4a056876b045bfb3307343b837d67c1c360e8636513ca72720a96d840d525361b01c3a0b8ad10522668697196b9cda34d7196cd6eba2313c4c3936d51ecfc3a27304bf38185dea161a195c79804aec1ddc3579ae9953