reflektis.com
- Reflektis -
Issued by Thawte EV RSA CA 2018
About this certificate
This digital certificate with serial number 0a:91:8b:e2:a3:19:6d:4c:65:9f:b2:4f:67:9b:f8:42 was issued on by DigiCert Inc.
With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Reflektis
Company registration number:
02048888
Organization: Reflektis
Organization unit: Reflektis
Organization: Reflektis
Organization unit: Reflektis
State / Province:
Groningen
Locality: Usquert
Country: NL
Locality: Usquert
Country: NL
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0a:91:8b:e2:a3:19:6d:4c:65:9f:b2:4f:67:9b:f8:42Serial Number (int): 14048000213313140434695779277401225282
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 11:f7:b5:d1:49:a1:fd:e2:04:67:a1:cf:34:8c:30:b6:11:a0:c6:36
AuthorityKeyId: e7:01:fc:0c:16:18:ca:7d:b2:8c:ec:87:27:a3:6f:61:81:3b:84:39
Fingerprint (sha1): 12:0a:dc:ec:06:a3:f0:54:c6:67:c6:5e:5b:96:2b:10:80:f8:20:77
Fingerprint (sha256): e2:29:d3:3b:17:ed:69:82:8a:e8:ad:84:1b:90:03:e5:e8:64:e5:39:dd:d2:fb:8c:51:00:9b:24:3f:20:b5:0f
Issuing Certificate URL: http://cacerts.thawte.com/ThawteEVRSACA2018.crt
Revocation information
OCSP Server: http://status.thawte.comCRL Distribution Point: http://cdp.thawte.com/ThawteEVRSACA2018.crl
Check the revocation status for certificate reflektis.com
10
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for reflektis.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
reflektis.com
www.reflektis.com
robvens.st
www.robvens.nl
robvens.com
robvens.nl
reflektis.nl
www.robvens.st
www.robvens.com
www.reflektis.nl
www.reflektis.com
robvens.st
www.robvens.nl
robvens.com
robvens.nl
reflektis.nl
www.robvens.st
www.robvens.com
www.reflektis.nl
Other certificates including the domain name reflektis.com
(limited to 100 certificates)
payments.inursecoach.com
invoice.redsixdigital.com
app.pawsworldwide.org
ssl255761.cloudflaressl.com
support.plcorp.com
indiahr.lennoxintl.com
payments.inursecoach.com
support.digitalxraid.com
ssl84384.cloudflare.com
payments.inursecoach.com
payments.inursecoach.com
app.pawsworldwide.org
portail-client1.dawisey.com
ssl255761.cloudflaressl.com
reflektis.com
www.reflektis.com
books.anyflux.com
payments.inursecoach.com
app.pawsworldwide.org
support.reflektis.com
books.anyflux.com
ssl255761.cloudflaressl.com
app.pawsworldwide.org
reflektis.com
payments.inursecoach.com
payments.inursecoach.com
app.pawsworldwide.org
reflektis.com
reflektis.com
reflektis.com
payments.inursecoach.com
app.pawsworldwide.org
www.reflektis.com
reflektis.com
ssl255761.cloudflaressl.com
books.anyflux.com
app.pawsworldwide.org
payments.inursecoach.com
reflektis.com
support.reflektis.com
reflektis.com
ssl255761.cloudflaressl.com
kundencenter.rudolph-itnetworks.de
csmeta.emtholding.com
indiahr.lennoxintl.com
indiahr.lennoxintl.com
ssl255761.cloudflaressl.com
support.fastview360.co.uk
app.pawsworldwide.org
support.qubelotto.co.uk
indiahr.lennoxintl.com
support.plcorp.com
indiahr.lennoxintl.com
books.begeleidwonennederland.nl
administratie.stickybandits.nl
payments.inursecoach.com
clients.axeltra.com
customer-creator.zoho.com
payments.inursecoach.com
mon-compte.prezens.fr
payments.inursecoach.com
client.semago.eu
books.anyflux.com
ssl255761.cloudflaressl.com
indiahr.lennoxintl.com
app.pawsworldwide.org
reflektis.com
my.42nerds.com
payments.inursecoach.com
customer-creator.zoho.com
ssl255761.cloudflaressl.com
payments.inursecoach.com
ssl255761.cloudflaressl.com
payments.inursecoach.com
www.reflektis.com
www.reflektis.com
www.reflektis.com
app.pawsworldwide.org
books.parteam.fr
clientaccess.tristella.co.za
invoice.redsixdigital.com
indiahr.lennoxintl.com
indiahr.lennoxintl.com
files.drockmeeschter.lu
client.hardingsurveyors.co.uk
indiahr.lennoxintl.com
indiahr.lennoxintl.com
my.exposure-systems.com
ssl255761.cloudflaressl.com
accounts.baglietto.co.uk
indiahr.lennoxintl.com
facture.evocion.fr
reflektis.com
reflektis.com
ssl255761.cloudflaressl.com
app.pawsworldwide.org
app.pawsworldwide.org
customer-creator.zoho.com
reflektis.com
accounts.3bz.co.uk
invoice.redsixdigital.com
app.pawsworldwide.org
ssl255761.cloudflaressl.com
support.plcorp.com
indiahr.lennoxintl.com
payments.inursecoach.com
support.digitalxraid.com
ssl84384.cloudflare.com
payments.inursecoach.com
payments.inursecoach.com
app.pawsworldwide.org
portail-client1.dawisey.com
ssl255761.cloudflaressl.com
reflektis.com
www.reflektis.com
books.anyflux.com
payments.inursecoach.com
app.pawsworldwide.org
support.reflektis.com
books.anyflux.com
ssl255761.cloudflaressl.com
app.pawsworldwide.org
reflektis.com
payments.inursecoach.com
payments.inursecoach.com
app.pawsworldwide.org
reflektis.com
reflektis.com
reflektis.com
payments.inursecoach.com
app.pawsworldwide.org
www.reflektis.com
reflektis.com
ssl255761.cloudflaressl.com
books.anyflux.com
app.pawsworldwide.org
payments.inursecoach.com
reflektis.com
support.reflektis.com
reflektis.com
ssl255761.cloudflaressl.com
kundencenter.rudolph-itnetworks.de
csmeta.emtholding.com
indiahr.lennoxintl.com
indiahr.lennoxintl.com
ssl255761.cloudflaressl.com
support.fastview360.co.uk
app.pawsworldwide.org
support.qubelotto.co.uk
indiahr.lennoxintl.com
support.plcorp.com
indiahr.lennoxintl.com
books.begeleidwonennederland.nl
administratie.stickybandits.nl
payments.inursecoach.com
clients.axeltra.com
customer-creator.zoho.com
payments.inursecoach.com
mon-compte.prezens.fr
payments.inursecoach.com
client.semago.eu
books.anyflux.com
ssl255761.cloudflaressl.com
indiahr.lennoxintl.com
app.pawsworldwide.org
reflektis.com
my.42nerds.com
payments.inursecoach.com
customer-creator.zoho.com
ssl255761.cloudflaressl.com
payments.inursecoach.com
ssl255761.cloudflaressl.com
payments.inursecoach.com
www.reflektis.com
www.reflektis.com
www.reflektis.com
app.pawsworldwide.org
books.parteam.fr
clientaccess.tristella.co.za
invoice.redsixdigital.com
indiahr.lennoxintl.com
indiahr.lennoxintl.com
files.drockmeeschter.lu
client.hardingsurveyors.co.uk
indiahr.lennoxintl.com
indiahr.lennoxintl.com
my.exposure-systems.com
ssl255761.cloudflaressl.com
accounts.baglietto.co.uk
indiahr.lennoxintl.com
facture.evocion.fr
reflektis.com
reflektis.com
ssl255761.cloudflaressl.com
app.pawsworldwide.org
app.pawsworldwide.org
customer-creator.zoho.com
reflektis.com
accounts.3bz.co.uk
Certificate
The complete raw certificate details for reflektis.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIH0TCCBrmgAwIBAgIQCpGL4qMZbUxln7JPZ5v4QjANBgkqhkiG9w0BAQsFADBf MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR4wHAYDVQQDExVUaGF3dGUgRVYgUlNBIENBIDIwMTgw HhcNMTkxMjIzMDAwMDAwWhcNMjAxMjIyMTIwMDAwWjCBujEdMBsGA1UEDwwUUHJp dmF0ZSBPcmdhbml6YXRpb24xEzARBgsrBgEEAYI3PAIBAxMCTkwxETAPBgNVBAUT CDAyMDQ4ODg4MQswCQYDVQQGEwJOTDESMBAGA1UECBMJR3JvbmluZ2VuMRAwDgYD VQQHEwdVc3F1ZXJ0MRIwEAYDVQQKEwlSZWZsZWt0aXMxEjAQBgNVBAsTCVJlZmxl a3RpczEWMBQGA1UEAxMNcmVmbGVrdGlzLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQAD ggIPADCCAgoCggIBAMkR2sIiATRPT1ZebEd94mjX37ovxQm3K2k6sMMz/FYqHvKW c4uRXfD0OUgP6zIUqS/UCIm5E3ET3uqB3huNOp3xhmxOAaaseFFEVq0YS2aUZ8+G pUY0zXwICFFoxmMx4KILxtqGQJCSRfAliC2xxs12z98gPkjlTks6MMH4JHdclVaP Hy6lbr1guOnbdyOL/gGyp+MEa9pFvK50LwR+mg0UqguqcypqzJNc/ZrQHl6yJ1yf 9eijXddu5eiRyJMSLw8vjzSQpbmrUw+crJvc3Ee/BY85zPDWcXZt5TtVQDsw2sB3 fmZ6S3KFWMObiv7/knWQVHd0pnpH0dPpv73LL8t0eegupCqrRbWhFvBQ+HKd7o22 H0aIR4zLsrit0PdbgegMMzfnOoWHRSiPDnjT2WQcXttLaDl+lMmhjxwI3a7Tffgp cHxVd5adPBbf1KOHi78ZgprmH2l8QXe9+2yJqc7E41sMmfTkS7jYwL71TRAzak6N b+pvpxKPxkgVzlnzcuFzv/OwafhP9cCQEK7je8vqBa9OxS3JO7bX7jCEqotWRPKK ja/R20YmlU4Pfv194ITzaXZkiDKadPM7zhEgHGuVUGV37X32vF20dluAiUqg4oRq VRmjFRIxJT6IAukL68YcG2vi7WM4u9gNYAIatUw8V5U4J+WyJ/ykWMBD+K7vAgMB AAGjggMrMIIDJzAfBgNVHSMEGDAWgBTnAfwMFhjKfbKM7Icno29hgTuEOTAdBgNV HQ4EFgQUEfe10Umh/eIEZ6HPNIwwthGgxjYwgaMGA1UdEQSBmzCBmIINcmVmbGVr dGlzLmNvbYIRd3d3LnJlZmxla3Rpcy5jb22CCnJvYnZlbnMuc3SCDnd3dy5yb2J2 ZW5zLm5sggtyb2J2ZW5zLmNvbYIKcm9idmVucy5ubIIMcmVmbGVrdGlzLm5sgg53 d3cucm9idmVucy5zdIIPd3d3LnJvYnZlbnMuY29tghB3d3cucmVmbGVrdGlzLm5s MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw PAYDVR0fBDUwMzAxoC+gLYYraHR0cDovL2NkcC50aGF3dGUuY29tL1RoYXd0ZUVW UlNBQ0EyMDE4LmNybDBLBgNVHSAERDBCMDcGCWCGSAGG/WwCATAqMCgGCCsGAQUF BwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAcGBWeBDAEBMHEGCCsG AQUFBwEBBGUwYzAkBggrBgEFBQcwAYYYaHR0cDovL3N0YXR1cy50aGF3dGUuY29t MDsGCCsGAQUFBzAChi9odHRwOi8vY2FjZXJ0cy50aGF3dGUuY29tL1RoYXd0ZUVW UlNBQ0EyMDE4LmNydDAJBgNVHRMEAjAAMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDx AHcApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFvMm0eAwAABAMA SDBGAiEAjjK5k+ItjCzIg0x5imWGdPtOWi63iX3+7rR2vCse1NoCIQDzM9eT7LJk keDKj0e0kDpOTTMl0tyNxV9Wa+EQYFtycQB2AFYUBpov18Ls0/XhvUSyPsdGdrm8 mRFcwO+UmFXWidDdAAABbzJtHnwAAAQDAEcwRQIhAM9B77yG0bAhSK10jTP3SGZc Kun9B3SkulEEsGoL9k+DAiAjXsucB9JwLT6GI/ws1DZbR/4/pnG3l7J6lag4py4U OjANBgkqhkiG9w0BAQsFAAOCAQEAS0uiEAP6JR22yGBDZh0HLW1FQbOuvM8VJ9su syK57UKe1PntncFHGEd48q9VJxcTnp5gSQutPY0xk7RyLRb+klr2F8M+8h6hsOm7 gnNAYO2p+LxtK7eXyQUtcxMHOmldWyredCMHC4ZnvKe1GhJM3cMk1QwnaF9/f9js 5JKqZVom/frFELSC8QpACA4u4pRjSUqeHEcAdwEjhp4doZYr80NIL9A51pYgYnpo HfwhWFZ57TNxHCtJapLIUIOP7F+f2iF9ADnynxsCcYJ41RMXB/NnlhZTAMuYJVPM 29Yh/n28aB4SKE3x5MyUabgDIUCLEUPSccN8JwDq1F6MwigT3Q== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyRHawiIBNE9PVl5sR33i aNffui/FCbcraTqwwzP8Vioe8pZzi5Fd8PQ5SA/rMhSpL9QIibkTcRPe6oHeG406 nfGGbE4Bpqx4UURWrRhLZpRnz4alRjTNfAgIUWjGYzHgogvG2oZAkJJF8CWILbHG zXbP3yA+SOVOSzowwfgkd1yVVo8fLqVuvWC46dt3I4v+AbKn4wRr2kW8rnQvBH6a DRSqC6pzKmrMk1z9mtAeXrInXJ/16KNd127l6JHIkxIvDy+PNJCluatTD5ysm9zc R78FjznM8NZxdm3lO1VAOzDawHd+ZnpLcoVYw5uK/v+SdZBUd3SmekfR0+m/vcsv y3R56C6kKqtFtaEW8FD4cp3ujbYfRohHjMuyuK3Q91uB6AwzN+c6hYdFKI8OeNPZ ZBxe20toOX6UyaGPHAjdrtN9+ClwfFV3lp08Ft/Uo4eLvxmCmuYfaXxBd737bImp zsTjWwyZ9ORLuNjAvvVNEDNqTo1v6m+nEo/GSBXOWfNy4XO/87Bp+E/1wJAQruN7 y+oFr07FLck7ttfuMISqi1ZE8oqNr9HbRiaVTg9+/X3ghPNpdmSIMpp08zvOESAc a5VQZXftffa8XbR2W4CJSqDihGpVGaMVEjElPogC6Qvrxhwba+LtYzi72A1gAhq1 TDxXlTgn5bIn/KRYwEP4ru8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 14048000213313140434695779277401225282 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte EV RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-23 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-22 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '02048888' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Groningen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Usquert' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Reflektis' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Reflektis' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'reflektis.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 820292989335755997861216078962100810194028929683559420797305164307091348041824178059988728714015898974152477508330678399760824465803046906641200049109472545837824605539731093142599042569215624203416117034159426361182008995035825668351814600543816741001885281676662581993349900370218196019744443975731891457537532935972714902923104666026910431180175298551189203018040667433745005341150950860826913844265643659005625265927317018802613936510942676090370868369541191437549419113704053592098199773796122501709257435612742355066637429438644252352020140602547575446961539480965550041863304748916994339745574282455558729509121038611534036785044161364301497318433348343440789759335288000415732973940120339546368721057411866855178941833822213853872850090466715442127672452009267429188684620286466850083986331323298086291299909914585170620280241532786039927671234424360904326802376807651479850128681267730928533235301372212206911469453166266428216944166966738629379140196645632404084565240827612227979970300527129355915947796846981877367543267980637732068968719868852721651028435180250748453743143864404656665076464799833433528139069125624879136831212213109398379212962989379495171304969083272679286235901005758731327217092494289726178749624047 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e701fc0c1618ca7db28cec8727a36f61813b8439 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 11f7b5d149a1fde20467a1cf348c30b611a0c636 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (155 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reflektis.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reflektis.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robvens.st' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.robvens.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robvens.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robvens.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reflektis.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.robvens.st' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.robvens.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reflektis.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteEVRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteEVRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016f326d1e0300000403004830460221008e32b993e22d8c2cc8834c798a658674fb4e5a2eb7897dfeeeb476bc2b1ed4da022100f333d793ecb26491e0ca8f47b4903a4e4d3325d2dc8dc55f566be110605b72710076005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000016f326d1e7c0000040300473045022100cf41efbc86d1b02148ad748d33f748665c2ae9fd0774a4ba5104b06a0bf64f830220235ecb9c07d2702d3e8623fc2cd4365b47fe3fa671b797b27a95a838a72e143a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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