XITMI2WDCCCP020.fgcorp.fgad.fg.local
- Fiat Services -
Issued by Thawte SSL CA
About this certificate
This digital certificate with serial number 2f:ef:6f:ae:31:37:be:72:af:8f:85:78:f8:15:d0:cd was issued on by Thawte, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DNSNames must have a valid TLD. (BRs: 3.2.2.4)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Fiat Services
Organization:
Fiat Services
Organization unit: ICT Architectures
Organization unit: ICT Architectures
State / Province:
Torino
Locality: Torino
Country: IT
Locality: Torino
Country: IT
Thawte, Inc.
Organization:
Thawte, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 2f:ef:6f:ae:31:37:be:72:af:8f:85:78:f8:15:d0:cdSerial Number (int): 63716939899479308413645279117914263757
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: a7:a2:83:bb:34:45:40:3d:fc:d5:30:4f:12:b9:3e:a1:01:9f:f6:db
Fingerprint (sha1): d6:89:bc:b7:78:96:27:a0:18:d5:3d:1b:8d:69:76:fb:e3:28:f1:b7
Fingerprint (sha256): d5:f3:6a:b8:89:84:7a:f4:59:00:69:6a:3d:ac:5c:c8:da:20:f3:29:e7:3d:24:b7:6a:65:40:31:d3:56:f7:0c
Issuing Certificate URL: http://svr-ov-aia.thawte.com/ThawteOV.cer
Revocation information
OCSP Server: http://ocsp.thawte.comCRL Distribution Point: http://svr-ov-crl.thawte.com/ThawteOV.crl
Check the revocation status for certificate XITMI2WDCCCP020.fgcorp.fgad.fg.local
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for XITMI2WDCCCP020.fgcorp.fgad.fg.local
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
XITMI2WDCCCP020.fgcorp.fgad.fg.local
Other certificates including the domain name fg.local
(limited to 100 certificates)
hpadsm.fg.local
lyncpool01.fgcorp.fgad.fg.local
XITMI2WDCCCP020.fgcorp.fgad.fg.local
XITMI1WDCCCP010.fgcorp.fgad.fg.local
eoffice.eSeeLYNX.com
mail.fentonglass.com
lyncpool01.fgcorp.fgad.fg.local
mx.fraymangroup.com
xittor47apcp030.fgcorp.fgad.fg.local
CAGLyncEEPool01.fgcorp.fgad.fg.local
CAGLyncEEPool01.fgcorp.fgad.fg.local
webmail.fishergerman.co.uk
mail.fusiongroupinc.com
eoffice.eSeeLYNX.com
fiberutilities.com
owa.fraymangroup.com
mail.foresitegroupinc.com
XITMI1WDCCCP010.fgcorp.fgad.fg.local
CAGLyncEEPool01.fgcorp.fgad.fg.local
hpadsm.fiatgroup.com
lyncpool01.fgcorp.fgad.fg.local
mail.fentonglass.com
exmail.fiberutilities.com
exmail.fiberutilities.com
XITMI2WDCCCP020.fgcorp.fgad.fg.local
myarea.fg.local
lyncpool01.fgcorp.fgad.fg.local
remote.fgplc.com
CAGLyncEEPool01.fgcorp.fgad.fg.local
lyncdir01.fgcorp.fgad.fg.local
lyncpool01.fgcorp.fgad.fg.local
lyncpool01.fgcorp.fgad.fg.local
XITMI2WDCCCP020.fgcorp.fgad.fg.local
XITMI1WDCCCP010.fgcorp.fgad.fg.local
eoffice.eSeeLYNX.com
mail.fentonglass.com
lyncpool01.fgcorp.fgad.fg.local
mx.fraymangroup.com
xittor47apcp030.fgcorp.fgad.fg.local
CAGLyncEEPool01.fgcorp.fgad.fg.local
CAGLyncEEPool01.fgcorp.fgad.fg.local
webmail.fishergerman.co.uk
mail.fusiongroupinc.com
eoffice.eSeeLYNX.com
fiberutilities.com
owa.fraymangroup.com
mail.foresitegroupinc.com
XITMI1WDCCCP010.fgcorp.fgad.fg.local
CAGLyncEEPool01.fgcorp.fgad.fg.local
hpadsm.fiatgroup.com
lyncpool01.fgcorp.fgad.fg.local
mail.fentonglass.com
exmail.fiberutilities.com
exmail.fiberutilities.com
XITMI2WDCCCP020.fgcorp.fgad.fg.local
myarea.fg.local
lyncpool01.fgcorp.fgad.fg.local
remote.fgplc.com
CAGLyncEEPool01.fgcorp.fgad.fg.local
lyncdir01.fgcorp.fgad.fg.local
lyncpool01.fgcorp.fgad.fg.local
Certificate
The complete raw certificate details for XITMI2WDCCCP020.fgcorp.fgad.fg.local in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIQL+9vrjE3vnKvj4V4+BXQzTANBgkqhkiG9w0BAQUFADA8 MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMVGhhd3RlLCBJbmMuMRYwFAYDVQQDEw1U aGF3dGUgU1NMIENBMB4XDTE0MDUwOTAwMDAwMFoXDTE1MDUwOTIzNTk1OVowgZIx CzAJBgNVBAYTAklUMQ8wDQYDVQQIEwZUb3Jpbm8xDzANBgNVBAcUBlRvcmlubzEW MBQGA1UEChQNRmlhdCBTZXJ2aWNlczEaMBgGA1UECxQRSUNUIEFyY2hpdGVjdHVy ZXMxLTArBgNVBAMUJFhJVE1JMldEQ0NDUDAyMC5mZ2NvcnAuZmdhZC5mZy5sb2Nh bDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALNl5hBEgT65tfDvx/Di uXEJWG9yaGATy0F/oVpzaIHIy9FlbgXLTQS+2wMMIgPG9a1Tg5GOdMT9WJ6Kh+yZ reLeC3cg4tJVTXzAighGE69pE8/fniL8nrYzUH9XEPZ5eIzmLDudvznJ44Ya9nfF Bj2FWPuCzpLLbT/tBe3fBTEol9yvAgyc5CHB4nU1HT/3NoxFlX3hVx+Lz3sOdJYK t9YGYSvn1sh4j+v5e5O9Sod57ll21sXQVzdlWMIbaUXBSbi3bH2vd0h9hJoD6dPV h1iu3gasDkdIPLLJ/Yyz/kbQxQ/gTLLo5drzfUeSE/2fF27bRf+1btllXaR1bZVu iAkCAwEAAaOCAXswggF3MC8GA1UdEQQoMCaCJFhJVE1JMldEQ0NDUDAyMC5mZ2Nv cnAuZmdhZC5mZy5sb2NhbDAJBgNVHRMEAjAAMEIGA1UdIAQ7MDkwNwYKYIZIAYb4 RQEHNjApMCcGCCsGAQUFBwIBFhtodHRwczovL3d3dy50aGF3dGUuY29tL2Nwcy8w DgYDVR0PAQH/BAQDAgWgMB8GA1UdIwQYMBaAFKeig7s0RUA9/NUwTxK5PqEBn/bb MDoGA1UdHwQzMDEwL6AtoCuGKWh0dHA6Ly9zdnItb3YtY3JsLnRoYXd0ZS5jb20v VGhhd3RlT1YuY3JsMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBpBggr BgEFBQcBAQRdMFswIgYIKwYBBQUHMAGGFmh0dHA6Ly9vY3NwLnRoYXd0ZS5jb20w NQYIKwYBBQUHMAKGKWh0dHA6Ly9zdnItb3YtYWlhLnRoYXd0ZS5jb20vVGhhd3Rl T1YuY2VyMA0GCSqGSIb3DQEBBQUAA4IBAQAWW+llJwjQ/BYsmEtFJexxrT3F3FlN lmsb9+ZW1M9YcvxWb9IGUhF7P3yw2K+hJfnMVpvRlM+0aONVBqufFzVA6drCxSZB kw6xFQDLQYPjiiHvKgVNai5f3/n9mtdQO/r3BpFDghmr4Tx2l1+Y3CLXP3cBVfGV 3YhvKfbk+bZuOyx8KNbW9QfJ2hOMhnGTsv3Jr+h/8Rh1d4YZzkIha/P591L6oinu foRDXwciwquHGSLvh/+M22OCuaAQQWYEx5SphPn/sd6nK38noO1bW3+Ah+OZvrqE OQspFez6fWhR/QcbyUFWaMP+zX+izBL75j9NPVMtCyKE0K19dOoMmlgE -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2XmEESBPrm18O/H8OK5 cQlYb3JoYBPLQX+hWnNogcjL0WVuBctNBL7bAwwiA8b1rVODkY50xP1YnoqH7Jmt 4t4LdyDi0lVNfMCKCEYTr2kTz9+eIvyetjNQf1cQ9nl4jOYsO52/Ocnjhhr2d8UG PYVY+4LOksttP+0F7d8FMSiX3K8CDJzkIcHidTUdP/c2jEWVfeFXH4vPew50lgq3 1gZhK+fWyHiP6/l7k71Kh3nuWXbWxdBXN2VYwhtpRcFJuLdsfa93SH2EmgPp09WH WK7eBqwOR0g8ssn9jLP+RtDFD+BMsujl2vN9R5IT/Z8XbttF/7Vu2WVdpHVtlW6I CQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 63716939899479308413645279117914263757 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-05-09 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-09 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Torino' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Torino' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Fiat Services' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'ICT Architectures' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'XITMI2WDCCCP020.fgcorp.fgad.fg.local' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22646904703627797292584141503659144787161260715839906304936543257017824041363386341051355300916098063941840945164066623364679527834046977356592818613044237581699498853454224901912355904432837667761987422285660539068666109963959321143501004485122777507007695460543734826164128483737310612083803920169755979995583121232675921517291486667460144542578112526680311797313964110719628711253077391763656673580444774813755881745335511786728421660271048225286223936893990351287745289515121776167045231880293053080092351619970770831819243366844843531930865747777816210634968648286011356241679785357334836150175878769206656665609 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'XITMI2WDCCCP020.fgcorp.fgad.fg.local' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a7a283bb3445403dfcd5304f12b93ea1019ff6db . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-crl.thawte.com/ThawteOV.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-aia.thawte.com/ThawteOV.cer' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00165be9652708d0fc162c984b4525ec71ad3dc5dc594d966b1bf7e656d4cf5872fc566fd20652117b3f7cb0d8afa125f9cc569bd194cfb468e35506ab9f173540e9dac2c52641930eb11500cb4183e38a21ef2a054d6a2e5fdff9fd9ad7503bfaf70691438219abe13c76975f98dc22d73f770155f195dd886f29f6e4f9b66e3b2c7c28d6d6f507c9da138c867193b2fdc9afe87ff11875778619ce42216bf3f9f752faa229ee7e84435f0722c2ab871922ef87ff8cdb6382b9a010416604c794a984f9ffb1dea72b7f27a0ed5b5b7f8087e399beba84390b2915ecfa7d6851fd071bc9415668c3fecd7fa2cc12fbe63f4d3d532d0b2284d0ad7d74ea0c9a5804