*.gnt-group.com
Issued by Thawte RSA CA 2018
About this certificate
This digital certificate with serial number 06:01:7e:a7:a0:f9:a3:54:52:b5:bf:7f:67:66:05:b7 was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.gnt-group.com
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 06:01:7e:a7:a0:f9:a3:54:52:b5:bf:7f:67:66:05:b7Serial Number (int): 7983129136100625459391512173563217335
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 62:e6:8f:44:21:ed:79:04:f6:dd:db:9b:e9:9c:3a:05:07:cb:48:90
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a
Fingerprint (sha1): e5:36:60:b1:37:b8:e1:e9:b1:87:eb:13:55:ee:3a:74:b6:77:b0:55
Fingerprint (sha256): d2:c4:8a:3d:59:f1:9b:35:8e:c9:cf:3f:11:ed:94:fe:e9:1c:37:92:85:08:2c:27:30:bc:5b:53:63:23:22:28
Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt
Revocation information
OCSP Server: http://status.thawte.comCRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl
Check the revocation status for certificate *.gnt-group.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.gnt-group.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.gnt-group.com
gnt-group.com
gnt-group.com
Other certificates including the domain name gnt-group.com
(limited to 100 certificates)
customerportal.uk.rlb.com
*.gnt-group.com
servicedesk.esmsglobal.com
service.littlegarth.org
customerportal.uk.rlb.com
support.homeinstead.ie
service.littlegarth.org
support.brill.com
*.gnt-group.com
ep-sps.gnt-group.com
customerportal.uk.rlb.com
customerportal.uk.rlb.com
servicedesk.am-labor.de
support.homeinstead.ie
it.rmk.ee
it.rmk.ee
itsupport.gnt-group.com
customerportal.uk.rlb.com
support.homeinstead.ie
servicedesk.christs.cam.ac.uk
customerportal.uk.rlb.com
support.brill.com
customerportal.uk.rlb.com
servicedesk.christs.cam.ac.uk
customerportal.uk.rlb.com
support.homeinstead.ie
servicedesk.christs.cam.ac.uk
service.littlegarth.org
customerportal.uk.rlb.com
customerportal.uk.rlb.com
gnt-group.com
support.brill.com
customerportal.uk.rlb.com
servicedesk.synergyretailsupport.co.uk
production.gnt-group.com
itdesk.ininingroup.com
servicedesk.christs.cam.ac.uk
customerportal.uk.rlb.com
customerportal.uk.rlb.com
servicedesk.am-labor.de
servicedesk.synergyretailsupport.co.uk
servicedesk.esmsglobal.com
itsupport.hvdgroup.com
itsupport.hvdgroup.com
support.homeinstead.ie
customerportal.uk.rlb.com
itdesk.ininingroup.com
it.rmk.ee
servicedesk.tpos.co.uk
production.gnt-group.com
itsupport.hvdgroup.com
customerportal.uk.rlb.com
customerportal.uk.rlb.com
support.homeinstead.ie
customerportal.uk.rlb.com
support.homeinstead.ie
customerportal.uk.rlb.com
itdesk.ininingroup.com
ep-sps.gnt-group.com
servicedesk.synergyretailsupport.co.uk
*.gnt-group.com
customerportal.uk.rlb.com
servicedesk.esmsglobal.com
gnt-group.com
customerportal.uk.rlb.com
support.homeinstead.ie
itsupport.hvdgroup.com
production.gnt-group.com
soporte.klz.rf.gd
customerportal.uk.rlb.com
*.gnt-group.com
support.homeinstead.ie
gnt-group.com
www.projects.gnt-group.com
itsupport.gnt-group.com
servicedesk.tpos.co.uk
servicedesk.tpos.co.uk
support.brill.com
servicedesk.tpos.co.uk
*.gnt-group.com
servicedesk.am-labor.de
itdesk.ininingroup.com
it.rmk.ee
servicedesk.esmsglobal.com
itsupport.gnt-group.com
servicedesk.am-labor.de
customerportal.uk.rlb.com
customerportal.uk.rlb.com
itsupport.gnt-group.com
support.homeinstead.ie
customerportal.uk.rlb.com
www.gnt-group.com
*.gnt-group.com
servicedesk.esmsglobal.com
service.littlegarth.org
customerportal.uk.rlb.com
support.homeinstead.ie
service.littlegarth.org
support.brill.com
*.gnt-group.com
ep-sps.gnt-group.com
customerportal.uk.rlb.com
customerportal.uk.rlb.com
servicedesk.am-labor.de
support.homeinstead.ie
it.rmk.ee
it.rmk.ee
itsupport.gnt-group.com
customerportal.uk.rlb.com
support.homeinstead.ie
servicedesk.christs.cam.ac.uk
customerportal.uk.rlb.com
support.brill.com
customerportal.uk.rlb.com
servicedesk.christs.cam.ac.uk
customerportal.uk.rlb.com
support.homeinstead.ie
servicedesk.christs.cam.ac.uk
service.littlegarth.org
customerportal.uk.rlb.com
customerportal.uk.rlb.com
gnt-group.com
support.brill.com
customerportal.uk.rlb.com
servicedesk.synergyretailsupport.co.uk
production.gnt-group.com
itdesk.ininingroup.com
servicedesk.christs.cam.ac.uk
customerportal.uk.rlb.com
customerportal.uk.rlb.com
servicedesk.am-labor.de
servicedesk.synergyretailsupport.co.uk
servicedesk.esmsglobal.com
itsupport.hvdgroup.com
itsupport.hvdgroup.com
support.homeinstead.ie
customerportal.uk.rlb.com
itdesk.ininingroup.com
it.rmk.ee
servicedesk.tpos.co.uk
production.gnt-group.com
itsupport.hvdgroup.com
customerportal.uk.rlb.com
customerportal.uk.rlb.com
support.homeinstead.ie
customerportal.uk.rlb.com
support.homeinstead.ie
customerportal.uk.rlb.com
itdesk.ininingroup.com
ep-sps.gnt-group.com
servicedesk.synergyretailsupport.co.uk
*.gnt-group.com
customerportal.uk.rlb.com
servicedesk.esmsglobal.com
gnt-group.com
customerportal.uk.rlb.com
support.homeinstead.ie
itsupport.hvdgroup.com
production.gnt-group.com
soporte.klz.rf.gd
customerportal.uk.rlb.com
*.gnt-group.com
support.homeinstead.ie
gnt-group.com
www.projects.gnt-group.com
itsupport.gnt-group.com
servicedesk.tpos.co.uk
servicedesk.tpos.co.uk
support.brill.com
servicedesk.tpos.co.uk
*.gnt-group.com
servicedesk.am-labor.de
itdesk.ininingroup.com
it.rmk.ee
servicedesk.esmsglobal.com
itsupport.gnt-group.com
servicedesk.am-labor.de
customerportal.uk.rlb.com
customerportal.uk.rlb.com
itsupport.gnt-group.com
support.homeinstead.ie
customerportal.uk.rlb.com
www.gnt-group.com
Certificate
The complete raw certificate details for *.gnt-group.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgIQBgF+p6D5o1RStb9/Z2YFtzANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMRswGQYDVQQDExJUaGF3dGUgUlNBIENBIDIwMTgwHhcN MTgwOTE0MDAwMDAwWhcNMjAwMjIyMTIwMDAwWjAaMRgwFgYDVQQDDA8qLmdudC1n cm91cC5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCT+Tx/tAUq n7HBJoTJ/aFj4Z3RgYFSIsBj7rGPw4JuciJ+dKvdJBkyxYatzWvLvKbvDqEFpDF7 2fng8DNUW9hJMxItwp3dz9pK+5AO/IjbgXBt5OfCTu4VPO028drdVH8T2mALy5nF AN/M/CWpmZ7r7dyj8//GU0ozQgndkZHAIE8298RDtVpuAqFXF63gH8sdlPljaBP4 2nNW7kKepJhECAv5NVRYVgopFUqyFVyjKHCbqXqNHw4HF95nnB8XsGwbzqJitiSc Ng1SNoUZjmf4KtiitO8mmHiknk+FVEst1uFM6Ah4fHEvEQ75TQ+ZPI5COWlqmzKS wiSkc+s1rt+ipiuNevnwkQRoz/YiMfJaveI5iP45M4M55v2ADbfRskyfqygOfvwu ex1TtD2qJuMjiQMCRrBZsNs7SKUSWpn563HGbcHGNJno2G6rxCpCzaNV3Wq6fRC8 qFPQZFPAgLIxxTf3NfEwlYhkXAZKo80hzRUMvcJakFrCuHUPUB/X6KKEjzezbowg UAKEpsaqfoydsxQKcyyVPP0iHuD3ho+ouRQ0wNHSdw0nBNxbAltaVgB2NUawdNUT GXoeDfNGo1CgBDmhZlvpE59dUtf8F2X3zHwO1x6+gvg41dzYkvuAkXkvFeyO1Ox0 MutkeyxGA1iiTLd54CjAa2jik0ljfH5MiQIDAQABo4IBuTCCAbUwHwYDVR0jBBgw FoAUo8heZVTlMHjBBeoHCmpZzLn+3lowHQYDVR0OBBYEFGLmj0Qh7XkE9t3bm+mc OgUHy0iQMCkGA1UdEQQiMCCCDyouZ250LWdyb3VwLmNvbYINZ250LWdyb3VwLmNv bTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MDoGA1UdHwQzMDEwL6AtoCuGKWh0dHA6Ly9jZHAudGhhd3RlLmNvbS9UaGF3dGVS U0FDQTIwMTguY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAECMCowKAYIKwYBBQUH AgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQIBMG8GCCsG AQUFBwEBBGMwYTAkBggrBgEFBQcwAYYYaHR0cDovL3N0YXR1cy50aGF3dGUuY29t MDkGCCsGAQUFBzAChi1odHRwOi8vY2FjZXJ0cy50aGF3dGUuY29tL1RoYXd0ZVJT QUNBMjAxOC5jcnQwCQYDVR0TBAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkq hkiG9w0BAQsFAAOCAQEAOKYIlHmoCDHKBDqvv8g5Lav/ZEOgOmoDGUnwHUr3V0Vd Y3U2Okjb/8tFVX4gMRPa54hAdPWleVhEeIzFQJgf9L8ANWcP9Q7V4BvACaYumqXN RnhRzTvPRQ6o88NjBsSmIN+D2OFt9zGB2dHJvZFQqCLk2MSYUVyeSyOkYuCmNA6v 1BsM+Z+NItonuMtj9/8RuL/ClIroZ7I3NThw2EPKg4ktB/mbUOzvYi0YP717kEdk Yy2J0DWrY4N4I/gHLxgpJ+oLOWlPKxlU/dqgvE4n34du1mVHE2ovoZRAR26G7x4B 9BkVKp0TCVAJ861+kd/D4vQSoFyvPRv5nJGFntdRxw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAk/k8f7QFKp+xwSaEyf2h Y+Gd0YGBUiLAY+6xj8OCbnIifnSr3SQZMsWGrc1ry7ym7w6hBaQxe9n54PAzVFvY STMSLcKd3c/aSvuQDvyI24FwbeTnwk7uFTztNvHa3VR/E9pgC8uZxQDfzPwlqZme 6+3co/P/xlNKM0IJ3ZGRwCBPNvfEQ7VabgKhVxet4B/LHZT5Y2gT+NpzVu5CnqSY RAgL+TVUWFYKKRVKshVcoyhwm6l6jR8OBxfeZ5wfF7BsG86iYrYknDYNUjaFGY5n +CrYorTvJph4pJ5PhVRLLdbhTOgIeHxxLxEO+U0PmTyOQjlpapsyksIkpHPrNa7f oqYrjXr58JEEaM/2IjHyWr3iOYj+OTODOeb9gA230bJMn6soDn78LnsdU7Q9qibj I4kDAkawWbDbO0ilElqZ+etxxm3BxjSZ6Nhuq8QqQs2jVd1qun0QvKhT0GRTwICy McU39zXxMJWIZFwGSqPNIc0VDL3CWpBawrh1D1Af1+iihI83s26MIFAChKbGqn6M nbMUCnMslTz9Ih7g94aPqLkUNMDR0ncNJwTcWwJbWlYAdjVGsHTVExl6Hg3zRqNQ oAQ5oWZb6ROfXVLX/Bdl98x8DtcevoL4ONXc2JL7gJF5LxXsjtTsdDLrZHssRgNY oky3eeAowGto4pNJY3x+TIkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 7983129136100625459391512173563217335 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-14 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-22 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.gnt-group.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 603679535378234391627148640766252239073920993692934489551734425664428663039332041528081239832220064232801475533996724907100117695255778053854439324038485166997616940112156971875385623405140495746440692087405166871486949646511866385558701554505539675313645330059472291119114994811888894434582499547106246548076467763337892637112403596020080935925182172466686583935624506418519313689156505405818715818674068666691754443716788920112590664916573672876165214916091400951560979975941245065911784188760744210306120177331705092712156989114738945405697425609319111204478565485283753808349633800549179938788422541224373953857137874599476445418471262122457683568654826337505391422985473101276856771758636131985843232248830685297146537649176843779696592558771256912613625242114966599071465066823979302559303269312672685232057942524785672665747383471124767405566030710254417121427737564758984035922677045631614843476251534529896715836455218638276807878530992809342053777618744533719253494164147733510053201533709934439542578344681879138987979897697462298501639391813830661241759892305301451882309049009079218886268337112526732323686892683106048848938358134043967629086182364743314059031770537429339515304193295506731526891094813331320667853704329 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 62e68f4421ed7904f6dddb9be99c3a0507cb4890 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gnt-group.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gnt-group.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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