apicert.globalcrossing.com
- Level 3 Communications, Inc -
Issued by thawte SSL CA - G2
About this certificate
This digital certificate with serial number 3e:1b:04:9e:4c:76:68:33:c6:12:c9:7b:9a:bd:24:35 was issued on by thawte, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Level 3 Communications, Inc
Organization:
Level 3 Communications, Inc
Organization unit: GTI
Organization unit: GTI
State / Province:
Colorado
Locality: Broomfield
Country: US
Locality: Broomfield
Country: US
thawte, Inc.
Organization:
thawte, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 3e:1b:04:9e:4c:76:68:33:c6:12:c9:7b:9a:bd:24:35Serial Number (int): 82552421425197322400761006077012419637
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60
Fingerprint (sha1): cb:e1:50:a3:aa:f4:51:8b:ae:c4:5b:70:d5:2f:f4:c3:02:2e:96:5f
Fingerprint (sha256): d4:c6:80:53:41:24:14:67:19:58:90:3b:7d:dd:0a:43:ed:ba:4f:cc:95:2f:70:1d:f7:de:2d:63:78:c2:cf:fe
Issuing Certificate URL: http://tj.symcb.com/tj.crt
Revocation information
OCSP Server: http://tj.symcd.comCRL Distribution Point: http://tj.symcb.com/tj.crl
Check the revocation status for certificate apicert.globalcrossing.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for apicert.globalcrossing.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
apicert.globalcrossing.com
Other certificates including the domain name globalcrossing.com
(limited to 100 certificates)
edge-ext.globalcrossing.com
zextsvcz.globalcrossing.com
enrollment.globalcrossing.com
uptime.globalcrossing.com
b2bqa.globalcrossing.com
b2bqa.globalcrossing.com
ecd.globalcrossing.com
lyncdiscoverinternal.globalcrossing.com
dialin-na.globalcrossing.com
extranet.globalcrossing.com
b2bdev.globalcrossing.com
dialin.globalcrossing.com
meet-na.globalcrossing.com
api-nvt.globalcrossing.com
tools.globalcrossing.com
api-dev.globalcrossing.com
ucommand.globalcrossing.com
api.globalcrossing.com
b2bp.globalcrossing.com
meet-na.globalcrossing.com
uptime.globalcrossing.com
owa2007.globalcrossing.com
xextsvcx.globalcrossing.com
desio.globalcrossing.com
b2bdev.globalcrossing.com
globalcrossing.com
activesync-roc.globalcrossing.com
owa-test.globalcrossing.com
b2buat.globalcrossing.com
cwa.globalcrossing.com
ecd.level3.com
myapps.globalcrossing.com
securityforms.globalcrossing.com
ucommand.globalcrossing.com
glbcap1.globalcrossing.com
webvpn.globalcrossing.com
apidev.globalcrossing.com
api-qa.globalcrossing.com
dialin.globalcrossing.com
meet.globalcrossing.com
api-dev.globalcrossing.com
uptime.globalcrossing.com
lyncdiscover.globalcrossing.com
api-sbe2.globalcrossing.com
uptime.globalcrossing.com
api-sb2.globalcrossing.com
owa2010.globalcrossing.com
owa2007.globalcrossing.com
desio.globalcrossing.com
globalcrossing.com
web-na.globalcrossing.com
glbcap1.globalcrossing.com
glbcwces.globalcrossing.com
glbcap1.globalcrossing.com
api-qa.globalcrossing.com
api-sb2.globalcrossing.com
ews.globalcrossing.com
ecd.globalcrossing.com
smtp.globalcrossing.com
share.globalcrossing.com
myapps.globalcrossing.com
activesync-test.globalcrossing.com
lyncdiscover.globalcrossing.com
owa2007.globalcrossing.com
YEXTSVCY.GLOBALCROSSING.COM
web-emea.globalcrossing.com
ucommand.globalcrossing.com
cu4web.globalcrossing.com
ap.beta.globalcrossing.com
owa2007.globalcrossing.com
b2b.globalcrossing.com
apidev.globalcrossing.com
owa2010.globalcrossing.com
glbcap1.globalcrossing.com
activesync2010.globalcrossing.com
cwa.globalcrossing.com
api-sb2.globalcrossing.com
apm.level3.com
api.globalcrossing.com
confsummary.globalcrossing.com
uptime.globalcrossing.com
owa.globalcrossing.com
xextsvcx.globalcrossing.com
api.globalcrossing.com
confsummary.globalcrossing.com
ecd.globalcrossing.com
enrollment.globalcrossing.com
glbcwces.globalcrossing.com
desio.globalcrossing.com
yextsvcy.globalcrossing.com
b2bdev.globalcrossing.com
b2b.globalcrossing.com
cwa.globalcrossing.com
share.globalcrossing.com
api-sbe2.globalcrossing.com
api-sb.globalcrossing.com
apidev.globalcrossing.com
enrollment.globalcrossing.com
b2bp.globalcrossing.com
apicert.globalcrossing.com
zextsvcz.globalcrossing.com
enrollment.globalcrossing.com
uptime.globalcrossing.com
b2bqa.globalcrossing.com
b2bqa.globalcrossing.com
ecd.globalcrossing.com
lyncdiscoverinternal.globalcrossing.com
dialin-na.globalcrossing.com
extranet.globalcrossing.com
b2bdev.globalcrossing.com
dialin.globalcrossing.com
meet-na.globalcrossing.com
api-nvt.globalcrossing.com
tools.globalcrossing.com
api-dev.globalcrossing.com
ucommand.globalcrossing.com
api.globalcrossing.com
b2bp.globalcrossing.com
meet-na.globalcrossing.com
uptime.globalcrossing.com
owa2007.globalcrossing.com
xextsvcx.globalcrossing.com
desio.globalcrossing.com
b2bdev.globalcrossing.com
globalcrossing.com
activesync-roc.globalcrossing.com
owa-test.globalcrossing.com
b2buat.globalcrossing.com
cwa.globalcrossing.com
ecd.level3.com
myapps.globalcrossing.com
securityforms.globalcrossing.com
ucommand.globalcrossing.com
glbcap1.globalcrossing.com
webvpn.globalcrossing.com
apidev.globalcrossing.com
api-qa.globalcrossing.com
dialin.globalcrossing.com
meet.globalcrossing.com
api-dev.globalcrossing.com
uptime.globalcrossing.com
lyncdiscover.globalcrossing.com
api-sbe2.globalcrossing.com
uptime.globalcrossing.com
api-sb2.globalcrossing.com
owa2010.globalcrossing.com
owa2007.globalcrossing.com
desio.globalcrossing.com
globalcrossing.com
web-na.globalcrossing.com
glbcap1.globalcrossing.com
glbcwces.globalcrossing.com
glbcap1.globalcrossing.com
api-qa.globalcrossing.com
api-sb2.globalcrossing.com
ews.globalcrossing.com
ecd.globalcrossing.com
smtp.globalcrossing.com
share.globalcrossing.com
myapps.globalcrossing.com
activesync-test.globalcrossing.com
lyncdiscover.globalcrossing.com
owa2007.globalcrossing.com
YEXTSVCY.GLOBALCROSSING.COM
web-emea.globalcrossing.com
ucommand.globalcrossing.com
cu4web.globalcrossing.com
ap.beta.globalcrossing.com
owa2007.globalcrossing.com
b2b.globalcrossing.com
apidev.globalcrossing.com
owa2010.globalcrossing.com
glbcap1.globalcrossing.com
activesync2010.globalcrossing.com
cwa.globalcrossing.com
api-sb2.globalcrossing.com
apm.level3.com
api.globalcrossing.com
confsummary.globalcrossing.com
uptime.globalcrossing.com
owa.globalcrossing.com
xextsvcx.globalcrossing.com
api.globalcrossing.com
confsummary.globalcrossing.com
ecd.globalcrossing.com
enrollment.globalcrossing.com
glbcwces.globalcrossing.com
desio.globalcrossing.com
yextsvcy.globalcrossing.com
b2bdev.globalcrossing.com
b2b.globalcrossing.com
cwa.globalcrossing.com
share.globalcrossing.com
api-sbe2.globalcrossing.com
api-sb.globalcrossing.com
apidev.globalcrossing.com
enrollment.globalcrossing.com
b2bp.globalcrossing.com
apicert.globalcrossing.com
Certificate
The complete raw certificate details for apicert.globalcrossing.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIQPhsEnkx2aDPGEsl7mr0kNTANBgkqhkiG9w0BAQsFADBB MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMRswGQYDVQQDExJ0 aGF3dGUgU1NMIENBIC0gRzIwHhcNMTUwNDMwMDAwMDAwWhcNMTgwNDI5MjM1OTU5 WjCBjjELMAkGA1UEBhMCVVMxETAPBgNVBAgMCENvbG9yYWRvMRMwEQYDVQQHDApC cm9vbWZpZWxkMSQwIgYDVQQKDBtMZXZlbCAzIENvbW11bmljYXRpb25zLCBJbmMx DDAKBgNVBAsMA0dUSTEjMCEGA1UEAwwaYXBpY2VydC5nbG9iYWxjcm9zc2luZy5j b20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBo5YakDTXzeuqN4oR GsXeOBj9bjt3SJoF9vZ1TcP/K0IsFc7levsQdtf542HX69o85Y6spDZjutnWNEWA cjlpf/70B86vdKG0HLoBeXQolBqmbpYGdtTLtRv27UU1CH44+M40tQxiP1ejwG3u FU12z/qwgwLBBYB0Fd4hegndXcgnCZAwlZZYkJl/LFqDqLyh0NkFJKvdoPpSwz59 aKpw53u4uWaSp8HcPo5cmSdPFU8gGPMHc120DhT89VTQAEJBinccnz8YcFeC00n3 VTIg/xD2mSGMQxottdQDcjVtuI/HrIblVIgEXPBXjZRKYeGHcR7an87RhNfRcBDm 0a31AgMBAAGjggF8MIIBeDAlBgNVHREEHjAcghphcGljZXJ0Lmdsb2JhbGNyb3Nz aW5nLmNvbTAJBgNVHRMEAjAAMG4GA1UdIARnMGUwYwYGZ4EMAQICMFkwJgYIKwYB BQUHAgEWGmh0dHBzOi8vd3d3LnRoYXd0ZS5jb20vY3BzMC8GCCsGAQUFBwICMCMM IWh0dHBzOi8vd3d3LnRoYXd0ZS5jb20vcmVwb3NpdG9yeTAOBgNVHQ8BAf8EBAMC BaAwHwYDVR0jBBgwFoAUwk9IV/zRT5rAXTh9DgXb2S61UmAwKwYDVR0fBCQwIjAg oB6gHIYaaHR0cDovL3RqLnN5bWNiLmNvbS90ai5jcmwwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0 cDovL3RqLnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL3RqLnN5bWNiLmNv bS90ai5jcnQwDQYJKoZIhvcNAQELBQADggEBAE3SXtxZNGdfpDENMt9w1ccZCFL/ cXn1DEpIAPU8mHQMB40F1vHSykHxRwI9G3CgonVppNFfJWcjR8ptFt30fDXjWLkg 0VqCpczyQGTFpGmyGBT5E+bZPX1Ab82+muc1Bc5agax72pZ1cvGQ4zcH2Nhl64fL TRtjVCwdLOWVGkGEfONiJxn3eB0zRv396cD0zXIY9pPap9QPHSohAm0et1wkxiE0 K08oCC/fwYTd7D0+QItr7rF2MvuT5tjhFkFzGXPmT45EJ3CsMEHr4nFyNH7GBlgt 9Qk9/Aqm6xYP+uvNaHtALpCSaEt4O6/zt6nBPC9YoDCNXw+s4Y5fwEGx1LQ= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaOWGpA0183rqjeKERrF 3jgY/W47d0iaBfb2dU3D/ytCLBXO5Xr7EHbX+eNh1+vaPOWOrKQ2Y7rZ1jRFgHI5 aX/+9AfOr3ShtBy6AXl0KJQapm6WBnbUy7Ub9u1FNQh+OPjONLUMYj9Xo8Bt7hVN ds/6sIMCwQWAdBXeIXoJ3V3IJwmQMJWWWJCZfyxag6i8odDZBSSr3aD6UsM+fWiq cOd7uLlmkqfB3D6OXJknTxVPIBjzB3NdtA4U/PVU0ABCQYp3HJ8/GHBXgtNJ91Uy IP8Q9pkhjEMaLbXUA3I1bbiPx6yG5VSIBFzwV42USmHhh3Ee2p/O0YTX0XAQ5tGt 9QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 82552421425197322400761006077012419637 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-30 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-29 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Colorado' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Broomfield' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Level 3 Communications, Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'GTI' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'apicert.globalcrossing.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24444660290612142930163410415859859286725309239213395176721553118570843711682119329150386716984059537226909009913242696656953518686947073458804427575621425163419346948183126141537780582944154837593522960503556712871886988019484616267606979444673052681155414118781243547678968992205596325492865311795213282364575058806303664834160136112756283854558061950833075441219366418396574813777304990194519189570365913110024544493093057669053597261114122435047709013930149332824954856957508919250017763450503835363427099439831943236854645095976932693920505390281452495078442827318455282117190931102843832588320902585889489792501 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apicert.globalcrossing.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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