sip.gruppohera.it

- HERA S.p.a. -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 22:92:7f:01:9d:5a:e1:61:9d:b2:79:b5:09:14:99:64 was issued on by thawte, Inc..

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

HERA S.p.a.

Organization: HERA S.p.a.
State / Province: Bologna
Locality: Bologna
Country: IT

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 22:92:7f:01:9d:5a:e1:61:9d:b2:79:b5:09:14:99:64
Serial Number (int): 45954403191980064987775663271826463076
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): f5:9e:a3:88:b0:35:72:75:f1:9b:ba:13:ba:2b:6e:1f:08:67:ed:65
Fingerprint (sha256): d2:1c:f9:bf:62:04:dd:99:03:b5:cb:31:12:7a:52:13:e5:4c:11:e1:6f:38:8d:93:22:ad:b4:de:e3:cf:0a:73

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate sip.gruppohera.it

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sip.gruppohera.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sip.acegasapsamga.it
sip.inretedistribuzione.it
sip.collaboration.gruppohera.it
sipconf.gruppohera.it
sip.consulenti.inretedistribuzione.it
sip.consulenti.gruppohera.it
sip.gruppohera.it

Other certificates including the domain name gruppohera.it

(limited to 100 certificates)
admin.govoltmobility.com
heureka.gruppohera.it
*.gruppohera.it
gepeweb.gruppohera.it
heureka.gruppohera.it
incapsula.com
*.mobility.gruppohera.it
akamai-san122.exacttarget.com
incapsula.com
incapsula.com
incapsula.com
heureka.gruppohera.it
incapsula.com
*.gruppohera.it
incapsula.com
incapsula.com
heureka.gruppohera.it
akamai-san122.exacttarget.com
incapsula.com
webmail.gruppohera.it
heureka.gruppohera.it
heraricarica.gruppohera.it
offerte-heracomm.gruppohera.it
akamai-san122.exacttarget.com
ragazzi.gruppohera.it
indicienergetici.gruppohera.it
www.gruppohera.it
incapsula.com
incapsula.com
pasemplice-tst.gruppohera.it
incapsula.com
incapsula.com
mobile.gruppohera.it
incapsula.com
sts.gruppohera.it
eng.gruppohera.it
indicienergetici.gruppohera.it
incapsula.com
incapsula.com
incapsula.com
eng.gruppohera.it
incapsula.com
incapsula.com
incapsula.com
indicienergetici.gruppohera.it
incapsula.com
incapsula.com
www.gruppohera.it
incapsula.com
www.minidot.be
heureka.gruppohera.it
servizionline.gruppohera.it
www.gruppohera.it
heracomm.gruppohera.it
incapsula.com
offerte-heracomm.gruppohera.it
*.gruppohera.it
akamai-san122.exacttarget.com
sip.gruppohera.it
www.admin.k-9access.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
incapsula.com
heracomm2.gruppohera.it
incapsula.com
heracomm.gruppohera.it
sts.gruppohera.it
servizionline.gruppohera.it
incapsula.com
click.contatti.gruppohera.it
incapsula.com
*.gruppohera.it
www.gruppohera.it
servizionline.gruppohera.it
akamai-san122.exacttarget.com
incapsula.com
ragazzi.gruppohera.it
app.paymytable.com
incapsula.com
incapsula.com
*.gruppohera.it
incapsula.com
incapsula.com
akamai-san122.exacttarget.com
*.mobility.gruppohera.it
sts.gruppohera.it
heracomm2.gruppohera.it
*.gruppohera.it
incapsula.com
prestazionifognatura.gruppohera.it
heraricarica.gruppohera.it
incapsula.com
heracomm.gruppohera.it
sts.gruppohera.it
beam.gruppohera.it
heracomm.gruppohera.it

Certificate

The complete raw certificate details for sip.gruppohera.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFajCCBFKgAwIBAgIQIpJ/AZ1a4WGdsnm1CRSZZDANBgkqhkiG9w0BAQsFADBB
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMRswGQYDVQQDExJ0
aGF3dGUgU1NMIENBIC0gRzIwHhcNMTYwNjI3MDAwMDAwWhcNMTkwNDI3MjM1OTU5
WjBjMQswCQYDVQQGEwJJVDEQMA4GA1UECAwHQm9sb2duYTEQMA4GA1UEBwwHQm9s
b2duYTEUMBIGA1UECgwLSEVSQSBTLnAuYS4xGjAYBgNVBAMMEXNpcC5ncnVwcG9o
ZXJhLml0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ATE3BY1cJk8
n8kQxfYklcSqBtz531tSVBdL+7yLRv8zq6cXWdH/9ky+8hPHzu14fmwGFefaPJCh
4Wu+BNsY3u+oVZE0DUnFajy69r5BriAykmwI9KtMTUQA09YCpsw2atxyBB/b2FRw
kTH4cLlzv5RGEzsLkbd9tnaD0H1gLjnmOj1epm36ehDj1O1U/JzTFBbIrqF8gGH2
OVViJ4DblRiIy8R5sqmM4ZU+QyHl/oleoSQRjWUlGmSLbNGQu6UZnO1jVgU4B99k
K0LByYDa8BEVCwdVXLmg5lzlMoUHtmInsp8V/Q6SboB39+KplNWab/fjpWzPujpK
HbNNSNRlXwIDAQABo4ICOjCCAjYwgc0GA1UdEQSBxTCBwoIUc2lwLmFjZWdhc2Fw
c2FtZ2EuaXSCGnNpcC5pbnJldGVkaXN0cmlidXppb25lLml0gh9zaXAuY29sbGFi
b3JhdGlvbi5ncnVwcG9oZXJhLml0ghVzaXBjb25mLmdydXBwb2hlcmEuaXSCJXNp
cC5jb25zdWxlbnRpLmlucmV0ZWRpc3RyaWJ1emlvbmUuaXSCHHNpcC5jb25zdWxl
bnRpLmdydXBwb2hlcmEuaXSCEXNpcC5ncnVwcG9oZXJhLml0MAkGA1UdEwQCMAAw
bgYDVR0gBGcwZTBjBgZngQwBAgIwWTAmBggrBgEFBQcCARYaaHR0cHM6Ly93d3cu
dGhhd3RlLmNvbS9jcHMwLwYIKwYBBQUHAgIwIwwhaHR0cHM6Ly93d3cudGhhd3Rl
LmNvbS9yZXBvc2l0b3J5MA4GA1UdDwEB/wQEAwIFoDAfBgNVHSMEGDAWgBTCT0hX
/NFPmsBdOH0OBdvZLrVSYDArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8vdGouc3lt
Y2IuY29tL3RqLmNybDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwVwYI
KwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8vdGouc3ltY2QuY29tMCYG
CCsGAQUFBzAChhpodHRwOi8vdGouc3ltY2IuY29tL3RqLmNydDATBgorBgEEAdZ5
AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYfO306oBsbd/7ekQuFHhfX80
EiqflmtG2PwBKaSQizrlNWTRb13BOKYys1jUD24R5tdYKaNa+Oprr3Rld/hw+rT3
o6GPZXn7/tmdKm1TM9Cl/tBGXMY8P/4ClE/ZYVE6vrTZ30ea4gqbp+DDj9+OFhqQ
xWDa2VCnOxvPW208WHjOSrF5X4wKzkWBLRLUWU88gJa+ghp7pmaO8oLDKaTpc5H+
3+dFqzQ2w5ol3FAcOjQGxEcGyArazyNEXPSdMwk7gzkw1vXCSL/yztlbGl2FXyia
nJcrmQp5dtshs0JsIu2qrKFhG9xksN508vFUJNpPpwTRn9bab/AA4w0FP3/6uA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ATE3BY1cJk8n8kQxfYk
lcSqBtz531tSVBdL+7yLRv8zq6cXWdH/9ky+8hPHzu14fmwGFefaPJCh4Wu+BNsY
3u+oVZE0DUnFajy69r5BriAykmwI9KtMTUQA09YCpsw2atxyBB/b2FRwkTH4cLlz
v5RGEzsLkbd9tnaD0H1gLjnmOj1epm36ehDj1O1U/JzTFBbIrqF8gGH2OVViJ4Db
lRiIy8R5sqmM4ZU+QyHl/oleoSQRjWUlGmSLbNGQu6UZnO1jVgU4B99kK0LByYDa
8BEVCwdVXLmg5lzlMoUHtmInsp8V/Q6SboB39+KplNWab/fjpWzPujpKHbNNSNRl
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 45954403191980064987775663271826463076
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bologna'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bologna'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'HERA S.p.a.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'sip.gruppohera.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26764872326096685375582507622799781332181394333165395015203354221542481446548257452492957066869966920236324453269647837683683496917026735456754835928056412692449492122814007705568633158717616444534782147926377702597022389709753389104368721036180243846859963800428739341308752663492334317030042315652543364248603452280553600641656146278200566817382435761062276074191281245834508242849887039908530412043807198238114480154090629928391587608120414799467040064077217096341578532496423291233108450766311915282713547705019049815311963689084188017415450133537744210622858292889726701580749533806529835369145325184131045549407
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (197 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.acegasapsamga.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.inretedistribuzione.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.collaboration.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipconf.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.consulenti.inretedistribuzione.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.consulenti.gruppohera.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.gruppohera.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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