www.renewal.schoolfeeplan.com

- Premium Credit Limited -

Issued by thawte EV SSL CA - G3

About this certificate

This digital certificate with serial number 4d:e1:7e:55:04:ae:62:ae:9d:31:bc:46:72:c0:a4:77 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Premium Credit Limited

Company registration number: 02015200
Organization: Premium Credit Limited
Organization unit: Datacentre
State / Province: Surrey
Locality: Epsom
Country: GB

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4d:e1:7e:55:04:ae:62:ae:9d:31:bc:46:72:c0:a4:77
Serial Number (int): 103521384788061491397828775471122261111
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: f0:70:51:da:d3:2a:91:4f:52:77:d7:86:77:74:0f:ce:71:1a:6c:22

Fingerprint (sha1): 6c:46:c8:70:c5:df:4d:b8:dd:ce:77:91:6f:0f:a5:48:d5:0d:a6:64
Fingerprint (sha256): d5:c4:d9:54:5a:76:89:37:28:7d:b7:fe:1d:c4:66:ca:b3:ad:09:5b:79:25:b1:69:21:0e:4d:f3:ec:eb:cf:0a

Issuing Certificate URL: http://ti.symcb.com/ti.crt

Revocation information

OCSP Server: http://ti.symcd.com
CRL Distribution Point: http://ti.symcb.com/ti.crl

Check the revocation status for certificate www.renewal.schoolfeeplan.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.renewal.schoolfeeplan.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.renewal.schoolfeeplan.com

Other certificates including the domain name schoolfeeplan.com

(limited to 100 certificates)
www.schoolfeeplan.com
digital.premiumcredit.com
digital.premiumcredit.com
digital.premiumcredit.com
www.schoolfeeplan.com
digital.premiumcredit.com
digital.premiumcredit.com
www.preprod.schoolfeeplan.com
www.preprod.renewal.schoolfeeplan.com
www.preprod.renewal.schoolfeeplan.com
test.premiumcredit.com
www.uat.renewal.schoolfeeplan.com
digital.premiumcredit.com
www.schoolfeeplan.com
digital.premiumcredit.com
digital.premiumcredit.com
www.schoolfeeplan.com
digital.premiumcredit.com
www.uat.schoolfeeplan.com
digital.premiumcredit.com
digital.premiumcredit.com
test.premiumcredit.com
digital.premiumcredit.com
test.premiumcredit.com
www.schoolfeeplan.com
digital.premiumcredit.com
digital.premiumcredit.com
digital.premiumcredit.com
www.ssd.schoolfeeplan.com
digital.premiumcredit.com
www.schoolfeeplan.com
digital.premiumcredit.com
digital.premiumcredit.com
digital.premiumcredit.com
www.uat.schoolfeeplan.com
www.uat.schoolfeeplan.com
digital.premiumcredit.com
www.renewal.schoolfeeplan.com
digital.premiumcredit.com
digital.premiumcredit.com
test.premiumcredit.com
digital.premiumcredit.com
www.preprod.schoolfeeplan.com
www.schoolfeeplan.com
digital.premiumcredit.com
digital.premiumcredit.com
digital.premiumcredit.com
digital.premiumcredit.com
digital.premiumcredit.com
digital.premiumcredit.com
test.premiumcredit.com
www.ssd.schoolfeeplan.com
www.uat.renewal.schoolfeeplan.com
digital.premiumcredit.com
digital.premiumcredit.com
www.renewal.schoolfeeplan.com
digital.premiumcredit.com
digital.premiumcredit.com
test.premiumcredit.com
www.renewal.schoolfeeplan.com
digital.premiumcredit.com
www.preprod.renewal.schoolfeeplan.com
digital.premiumcredit.com
www.schoolfeeplan.com
digital.premiumcredit.com
www.schoolfeeplan.com
digital.premiumcredit.com
www.schoolfeeplan.com
www.preprod.schoolfeeplan.com

Certificate

The complete raw certificate details for www.renewal.schoolfeeplan.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGsTCCBZmgAwIBAgIQTeF+VQSuYq6dMbxGcsCkdzANBgkqhkiG9w0BAQsFADBE
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMR4wHAYDVQQDExV0
aGF3dGUgRVYgU1NMIENBIC0gRzMwHhcNMTYwODAyMDAwMDAwWhcNMTgxMDA1MjM1
OTU5WjCB0zETMBEGCysGAQQBgjc8AgEDEwJHQjEfMB0GA1UECgwWUHJlbWl1bSBD
cmVkaXQgTGltaXRlZDELMAkGA1UEBhMCR0IxDzANBgNVBAgMBlN1cnJleTEOMAwG
A1UEBwwFRXBzb20xHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5pemF0aW9uMREwDwYD
VQQFEwgwMjAxNTIwMDETMBEGA1UECwwKRGF0YWNlbnRyZTEmMCQGA1UEAwwdd3d3
LnJlbmV3YWwuc2Nob29sZmVlcGxhbi5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCp2urSZcOWkclvOuE68Z3dusKjcZrBrBT56i8Af5a4kce2u6PL
uK7h2caP5bs/KJbKy4R4Q+31XI8H5FrYUPO4+Lxz8/+f1zg0KzCN0mCLXnEuAMfc
9bFJqa+7PQ9fFG46SAKBnlmI0QZUWjI5TxFFLNqgb85nw+eOyk+YM16EdQ2BABLi
VZqANVpP01ngH8p2ae9u2lKf0u4WjNtIE8GGYERd7kqwV1qCynqtBDL9R1LP9xV0
GC3IPjdvJJoPjXX8YqwXcNM5M8It0w4l5V2U9+jDRjvelZiifv83IBKBiEtMeJk9
mphwhbFUV8m25UOZjWnG2M7pLRRK9vfMuoJlAgMBAAGjggMNMIIDCTAoBgNVHREE
ITAfgh13d3cucmVuZXdhbC5zY2hvb2xmZWVwbGFuLmNvbTAJBgNVHRMEAjAAMA4G
A1UdDwEB/wQEAwIFoDArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8vdGkuc3ltY2Iu
Y29tL3RpLmNybDB8BgNVHSAEdTBzMGgGC2CGSAGG+EUBBzABMFkwJgYIKwYBBQUH
AgEWGmh0dHBzOi8vd3d3LnRoYXd0ZS5jb20vY3BzMC8GCCsGAQUFBwICMCMMIWh0
dHBzOi8vd3d3LnRoYXd0ZS5jb20vcmVwb3NpdG9yeTAHBgVngQwBATAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHwYDVR0jBBgwFoAU8HBR2tMqkU9Sd9eG
d3QPznEabCIwVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8vdGku
c3ltY2QuY29tMCYGCCsGAQUFBzAChhpodHRwOi8vdGkuc3ltY2IuY29tL3RpLmNy
dDCCAXwGCisGAQQB1nkCBAIEggFsBIIBaAFmAHYA3esdK3oNT6Ygi4GtgWhwfi6O
nQHVXIiNPRHEzbbsvswAAAFWSskKVwAABAMARzBFAiAah7MaWrE1BGEeTeCsuGx0
KuN1oObQzyXZJOqHEjJD2QIhAMKaqmD4EfRwEgLryYlDuSbVm2b4SiqbAfJn8A+4
+90gAHUApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFWSskKeQAA
BAMARjBEAiA0oQt3OoMxs5sguOimlCIq+3ASwJ2KeBdZc4JWuG17HwIgYwmLg7pj
vjky8bfdliRVtnQz6RhHhk/YncHEW1An8r4AdQBo9pj4H2SCvjqM7rkoHUz8cVFd
Z5PURNEKZ6y7T0/7xAAAAVZKyQqOAAAEAwBGMEQCICtOuEg7AI2jkniOHVAoLt3E
Oi7hOrn5d7lWUrL0bJewAiAi+xKpRqdHKBKZkEGQsGqXGPl2tiLo7F9t1BseoTY7
jTANBgkqhkiG9w0BAQsFAAOCAQEAMhNHyheJH+Wgvq6VG/rER+yNNWU4WbRLQ95p
gaFoOiOt7oxUZZqzjI+pcyPfvJfbwK9hlTz/cWLoq9bQ+G6WroDv18WjuLCYr2kz
YvPJbBmempLKKjQ5hPlokwuSWUMkOOFl7Rb7EQF3eznP8k1gcm12cSFKrQ5OW7VA
BfADlnCS/Mqu3FMQhqXTtigM7etF4mxzizESS4h5QTzpEALQqigh3yEJ+RFeOe/O
BVvfcFYSiWo3W/amg33Wtzqb17dagBz4dniyKn3QF1vXU/2rcGHhdmACWHm6q0em
E9mUglHYy+URjADzsHE7HEltwFpHnOxK0Enca9MvsCCJSDSowA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdrq0mXDlpHJbzrhOvGd
3brCo3GawawU+eovAH+WuJHHtrujy7iu4dnGj+W7PyiWysuEeEPt9VyPB+Ra2FDz
uPi8c/P/n9c4NCswjdJgi15xLgDH3PWxSamvuz0PXxRuOkgCgZ5ZiNEGVFoyOU8R
RSzaoG/OZ8PnjspPmDNehHUNgQAS4lWagDVaT9NZ4B/KdmnvbtpSn9LuFozbSBPB
hmBEXe5KsFdagsp6rQQy/UdSz/cVdBgtyD43bySaD411/GKsF3DTOTPCLdMOJeVd
lPfow0Y73pWYon7/NyASgYhLTHiZPZqYcIWxVFfJtuVDmY1pxtjO6S0USvb3zLqC
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 103521384788061491397828775471122261111
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte EV SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Premium Credit Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Surrey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Epsom'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '02015200'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Datacentre'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.renewal.schoolfeeplan.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21442225669967485221728513926902457209426540641940326234558525600467720995696757606087719837671195973302728247247346821062176826722143522184470630501925122735596893195368690749944109006537511232659416822383421114563401239048117361913410107992700245698172264747222655117556666829244418427519872892130362884597927054471149718391338852541133530842171944241865408222242947073400903380142877920528854749781740302707694456036923281847165445971723631303268882970220751235796372373807060806748722940819172522978674424713552974209490804143212241358941562726247470924139100736252177491782168632184165431952297838745768422965861
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.renewal.schoolfeeplan.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ti.symcb.com/ti.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (117 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.48.1 (Thawte EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f07051dad32a914f5277d78677740fce711a6c22
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ti.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ti.symcb.com/ti.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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