enrollment.cfer.com
- Global Crossing Telecommunications Inc. -
Issued by Thawte SSL CA
About this certificate
This digital certificate with serial number 22:8d:9c:d9:3a:22:16:85:95:94:85:73:69:77:f8:64 was issued on by Thawte, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Global Crossing Telecommunications Inc.
Organization:
Global Crossing Telecommunications Inc.
Organization unit: IT
Organization unit: IT
State / Province:
New York
Locality: Rochester
Country: US
Locality: Rochester
Country: US
Thawte, Inc.
Organization:
Thawte, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 22:8d:9c:d9:3a:22:16:85:95:94:85:73:69:77:f8:64Serial Number (int): 45929046980141326034062516454673610852
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: a7:a2:83:bb:34:45:40:3d:fc:d5:30:4f:12:b9:3e:a1:01:9f:f6:db
Fingerprint (sha1): 3f:f7:70:6d:ac:1d:71:e7:9c:b1:8a:46:5a:b7:d2:88:8c:ba:25:90
Fingerprint (sha256): d9:e2:fd:2f:d4:5a:74:66:01:f7:de:8f:e7:18:fc:02:76:04:52:96:a8:ea:be:e0:36:d5:b9:5b:cc:e5:eb:29
Issuing Certificate URL: http://svr-ov-aia.thawte.com/ThawteOV.cer
Revocation information
OCSP Server: http://ocsp.thawte.comCRL Distribution Point: http://svr-ov-crl.thawte.com/ThawteOV.crl
Check the revocation status for certificate enrollment.cfer.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for enrollment.cfer.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
enrollment.cfer.com
Other certificates including the domain name cfer.com
(limited to 100 certificates)
enrollment.cfer.com
opal.cfer.com
ecd.lumen.com
conf-cert.cfer.com
moderator.cfer.com
opal.cfer.com
capi.cfer.com
wbx1.cfer.com
moderator.cfer.com
ecd.cfer.com
ecd.cfer.com
iwr.cfer.com
conf.cfer.com
capi.cfer.com
capi.cfer.com
gclm.cfer.com
conf.cfer.com
opal.cfer.com
moderator.cfer.com
collaboration-sso.cfer.com
capi.cfer.com
capi-cert.cfer.com
confsummary.cfer.com
moderator.cfer.com
conf.cfer.com
iwr.cfer.com
enrollment.cfer.com
moderator.cfer.com
capi-cert.cfer.com
conf-cert.cfer.com
capi-cert.cfer.com
iwr.cfer.com
moderator-cert.cfer.com
ecd.level3.com
capi-sb.cfer.com
opal.cfer.com
moderator-cert.cfer.com
collaboration-sso.cfer.com
iwr.cfer.com
iwr.cfer.com
moderator-cert.cfer.com
moderator-cert.cfer.com
capi-sb.cfer.com
g8.cfer.com
iwr.cfer.com
calendar.cfer.com
moderator.cfer.com
training.iwr.cfer.com
conf.cfer.com
conf.cfer.com
opal.cfer.com
gclm.cfer.com
conf.cfer.com
moderator-island-idc.cfer.com
iwr.cfer.com
opal.cfer.com
enrollment.cfer.com
moderator.cfer.com
collaboration-sso.cfer.com
autorecord.cfer.com
iwr.cfer.com
ecd.cfer.com
enrollment.cfer.com
moderator.cfer.com
opal.cfer.com
emeetingapi.cfer.com
capi-cert.cfer.com
collaboration-sso.cfer.com
capi-cert.cfer.com
livemeeting.cfer.com
autorecord.cfer.com
livemeeting.cfer.com
moderator-cert.cfer.com
capi-cert.cfer.com
livemeeting.cfer.com
enrollment.cfer.com
collaboration-sso-cert.cfer.com
ecd.cfer.com
ecd.cfer.com
moderator.cfer.com
ecd.cfer.com
collaboration-sso.cfer.com
conf.cfer.com
enrollment.cfer.com
conf.cfer.com
moderator-island-idc.cfer.com
autorecord.cfer.com
capi.cfer.com
conf.cfer.com
autorecord.cfer.com
capi.cfer.com
capi.cfer.com
gclm.cfer.com
g8.cfer.com
iwr.cfer.com
collaboration-sso.cfer.com
ecd.cfer.com
enrollment.cfer.com
ecd.cfer.com
enrollment.cfer.com
opal.cfer.com
ecd.lumen.com
conf-cert.cfer.com
moderator.cfer.com
opal.cfer.com
capi.cfer.com
wbx1.cfer.com
moderator.cfer.com
ecd.cfer.com
ecd.cfer.com
iwr.cfer.com
conf.cfer.com
capi.cfer.com
capi.cfer.com
gclm.cfer.com
conf.cfer.com
opal.cfer.com
moderator.cfer.com
collaboration-sso.cfer.com
capi.cfer.com
capi-cert.cfer.com
confsummary.cfer.com
moderator.cfer.com
conf.cfer.com
iwr.cfer.com
enrollment.cfer.com
moderator.cfer.com
capi-cert.cfer.com
conf-cert.cfer.com
capi-cert.cfer.com
iwr.cfer.com
moderator-cert.cfer.com
ecd.level3.com
capi-sb.cfer.com
opal.cfer.com
moderator-cert.cfer.com
collaboration-sso.cfer.com
iwr.cfer.com
iwr.cfer.com
moderator-cert.cfer.com
moderator-cert.cfer.com
capi-sb.cfer.com
g8.cfer.com
iwr.cfer.com
calendar.cfer.com
moderator.cfer.com
training.iwr.cfer.com
conf.cfer.com
conf.cfer.com
opal.cfer.com
gclm.cfer.com
conf.cfer.com
moderator-island-idc.cfer.com
iwr.cfer.com
opal.cfer.com
enrollment.cfer.com
moderator.cfer.com
collaboration-sso.cfer.com
autorecord.cfer.com
iwr.cfer.com
ecd.cfer.com
enrollment.cfer.com
moderator.cfer.com
opal.cfer.com
emeetingapi.cfer.com
capi-cert.cfer.com
collaboration-sso.cfer.com
capi-cert.cfer.com
livemeeting.cfer.com
autorecord.cfer.com
livemeeting.cfer.com
moderator-cert.cfer.com
capi-cert.cfer.com
livemeeting.cfer.com
enrollment.cfer.com
collaboration-sso-cert.cfer.com
ecd.cfer.com
ecd.cfer.com
moderator.cfer.com
ecd.cfer.com
collaboration-sso.cfer.com
conf.cfer.com
enrollment.cfer.com
conf.cfer.com
moderator-island-idc.cfer.com
autorecord.cfer.com
capi.cfer.com
conf.cfer.com
autorecord.cfer.com
capi.cfer.com
capi.cfer.com
gclm.cfer.com
g8.cfer.com
iwr.cfer.com
collaboration-sso.cfer.com
ecd.cfer.com
enrollment.cfer.com
ecd.cfer.com
enrollment.cfer.com
Certificate
The complete raw certificate details for enrollment.cfer.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIExDCCA6ygAwIBAgIQIo2c2ToiFoWVlIVzaXf4ZDANBgkqhkiG9w0BAQUFADA8 MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMVGhhd3RlLCBJbmMuMRYwFAYDVQQDEw1U aGF3dGUgU1NMIENBMB4XDTE0MDQxODAwMDAwMFoXDTE1MDQxODIzNTk1OVowgZEx CzAJBgNVBAYTAlVTMREwDwYDVQQIEwhOZXcgWW9yazESMBAGA1UEBxQJUm9jaGVz dGVyMTAwLgYDVQQKFCdHbG9iYWwgQ3Jvc3NpbmcgVGVsZWNvbW11bmljYXRpb25z IEluYy4xCzAJBgNVBAsUAklUMRwwGgYDVQQDFBNlbnJvbGxtZW50LmNmZXIuY29t MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXFKkx+OeEZw5SwGWVjl +B2F1YnW+bo6IIiYx1G0ZkXEWT7jBCMJe4RiXaKKHD1N1acQEr1KWGbLnrM7W2nr bz6GJuYZt7MAcmG0RkYFOjew/GP9VdaowPXuJuxEvgi1NtQ2O/B+Vgn6uZR6gDsk FDZRi0w5O/VJ6yGrSSnEr9GhA7ilU5Nmrd7qpl1ry1pXYJa+QwFjGJg0VvJXq2pg Hr/+eRawM1cXSSwbmzR1sVgZDoKgjzSmbw4T5uPpDS++avbEBgM0z8mRL9mmJvSv 9yLAlYSHSiX5dfG3mRVVcc0labpMOp+avJUnh26tRWsvNQL7e2vyG+WeRH1uh78D vQIDAQABo4IBajCCAWYwHgYDVR0RBBcwFYITZW5yb2xsbWVudC5jZmVyLmNvbTAJ BgNVHRMEAjAAMEIGA1UdIAQ7MDkwNwYKYIZIAYb4RQEHNjApMCcGCCsGAQUFBwIB FhtodHRwczovL3d3dy50aGF3dGUuY29tL2Nwcy8wDgYDVR0PAQH/BAQDAgWgMB8G A1UdIwQYMBaAFKeig7s0RUA9/NUwTxK5PqEBn/bbMDoGA1UdHwQzMDEwL6AtoCuG KWh0dHA6Ly9zdnItb3YtY3JsLnRoYXd0ZS5jb20vVGhhd3RlT1YuY3JsMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBpBggrBgEFBQcBAQRdMFswIgYIKwYB BQUHMAGGFmh0dHA6Ly9vY3NwLnRoYXd0ZS5jb20wNQYIKwYBBQUHMAKGKWh0dHA6 Ly9zdnItb3YtYWlhLnRoYXd0ZS5jb20vVGhhd3RlT1YuY2VyMA0GCSqGSIb3DQEB BQUAA4IBAQA2wewUTIiBUlVJ6ywCK6gp5uCPsfg3QoXXQ9xp5wvkj2bcN2m8SDDO GRLkvVqTpG/E2U+xnraPZ5vHKTe9QkETyb5mtxOtyhKexL4eZqScRz+NVmFa1MNw iXlyUKZYQ1jnteq/tOoH+Xz5OKr021TclHXZb5Xf6yZEgUEPEvWeTuMvV+SJlcEj 1AL3xQfw+/dqhQ6nq2qNBQ2303pvD1agaMjpg0elAw35qA1VHf988XKYes6idGNH vBzRDDIaEnAqPItS/ZXRCT28HUWuayOJb/X2f2wNti1EXjhWrfrwc8OPHLAbyEzd hpjhggwQdOjGUkS6irquG8Q4smjzjRfp -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXFKkx+OeEZw5SwGWVjl +B2F1YnW+bo6IIiYx1G0ZkXEWT7jBCMJe4RiXaKKHD1N1acQEr1KWGbLnrM7W2nr bz6GJuYZt7MAcmG0RkYFOjew/GP9VdaowPXuJuxEvgi1NtQ2O/B+Vgn6uZR6gDsk FDZRi0w5O/VJ6yGrSSnEr9GhA7ilU5Nmrd7qpl1ry1pXYJa+QwFjGJg0VvJXq2pg Hr/+eRawM1cXSSwbmzR1sVgZDoKgjzSmbw4T5uPpDS++avbEBgM0z8mRL9mmJvSv 9yLAlYSHSiX5dfG3mRVVcc0labpMOp+avJUnh26tRWsvNQL7e2vyG+WeRH1uh78D vQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 45929046980141326034062516454673610852 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-18 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-18 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Rochester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Global Crossing Telecommunications Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'enrollment.cfer.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23409952444566378322793767555664323847720931927807025631594259704336430139204283770708469689733288705137277632565450836320354640125611802276213862861789748459338448904287967496811043434674138026477710176562436223917037378748395764807942127228043194320787704157055190984932414038702507514403676684542504078501734376840691001080283323448336499199229212913833267656695399820408225704090475924613548698173401739434905862265820575122955384158843530698481926871738801989002767194223460455778922507791895521767543804324924194775666346275031421750318013265859846659945804913939432442838052397618210477358672311933811040388029 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enrollment.cfer.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a7a283bb3445403dfcd5304f12b93ea1019ff6db . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-crl.thawte.com/ThawteOV.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-aia.thawte.com/ThawteOV.cer' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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