*.dipsalut.cat

- Dipsalut - Organisme Autònom de Salut Púb de Diputació Girona -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 04:2c:2a:f7:a1:92:7d:a7:e2:0c:e6:44:a8:43:b2:98 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Dipsalut - Organisme Autònom de Salut Púb de Diputació Girona

Organization: Dipsalut - Organisme Autònom de Salut Púb de Diputació Girona
State / Province: Girona
Locality: Girona
Country: ES

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:2c:2a:f7:a1:92:7d:a7:e2:0c:e6:44:a8:43:b2:98
Serial Number (int): 5546244525478873444325319543707906712
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 27:4b:0e:7d:8a:3e:9d:63:e0:9c:4d:d7:a5:9f:cf:19:b8:c2:b9:eb
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 2a:d9:70:12:59:d7:f2:89:d2:93:b9:0d:66:85:40:c4:03:af:1d:43
Fingerprint (sha256): e4:61:9f:71:6a:10:bd:e7:f2:b5:33:21:de:5d:4a:24:b8:06:1f:0f:ba:8e:da:16:fb:3f:09:b5:0b:c5:34:0b

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate *.dipsalut.cat

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.dipsalut.cat

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.dipsalut.cat
dipsalut.cat

Other certificates including the domain name dipsalut.cat

(limited to 100 certificates)
crm.dipsalut.cat
www.dipsalut.cat
crm.dipsalut.cat
randomprompt.com
registre.dipsalut.cat
joytasker.com
www.upliftnow.net
docu.dipsalut.cat
www.dipsalut.cat
aplicacions.dipsalut.cat
www.dipsalut.cat
transparencia.dipsalut.cat
www.rhynocare.ca
www.ladietadeldottmagrolino.play-bay.com
docs.dipsalut.cat
registre.dipsalut.cat
aplicacions.dipsalut.cat
docs.dipsalut.cat
platform.censminoristes.dipsalut.cat
simsap.dipsalut.cat
console.sagantosu-fan-token.jasmy.co.jp
crm.dipsalut.cat
test.tetel.in
seu.dipsalut.cat
alfresco.dipsalut.cat
seu.dipsalut.cat
seu.dipsalut.cat
ssid.yidindji.country
www.dipsalut.cat
transparencia.dipsalut.cat
test.tetel.in
*.dipsalut.cat
www.cpanel.lmserp.com
transparencia.dipsalut.cat
alfresco.dipsalut.cat
simsap.dipsalut.cat
crm.dipsalut.cat
simsap.dipsalut.cat
crm.dipsalut.cat
sgi.dipsalut.cat
seu.dipsalut.cat
transparencia.dipsalut.cat
simsap.dipsalut.cat
crm.dipsalut.cat
transparencia.dipsalut.cat
www.hachede.tv
transparencia.dipsalut.cat
www.dipsalut.cat
www.dipsalut.cat
sgi.dipsalut.cat
alfresco.dipsalut.cat
seu.dipsalut.cat
docu.dipsalut.cat
seu.dipsalut.cat
simsap.dipsalut.cat
sgi.dipsalut.cat
*.dipsalut.cat
docs.dipsalut.cat
aplicacions.dipsalut.cat
hipchat.dipsalut.cat
transparencia.dipsalut.cat
docs.dipsalut.cat
docs.dipsalut.cat
docs.dipsalut.cat
registre.dipsalut.cat
www.dipsalut.cat
api-uat.freetrade.io
*.dipsalut.cat
www.global-visaconsultant.com
seu.dipsalut.cat
seu.dipsalut.cat
aplicacions.dipsalut.cat
docs.dipsalut.cat
crm.dipsalut.cat
www.dipsalut.cat
crm.dipsalut.cat
simsap.dipsalut.cat
simsap.dipsalut.cat
sgi.dipsalut.cat
*.dipsalut.cat
docs.dipsalut.cat
sgi.dipsalut.cat
*.dipsalut.cat
docu.dipsalut.cat
alfresco.dipsalut.cat
docu.dipsalut.cat
www.dipsalut.cat

Certificate

The complete raw certificate details for *.dipsalut.cat in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGkzCCBXugAwIBAgIQBCwq96GSfafiDOZEqEOymDANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMRswGQYDVQQDExJUaGF3dGUgUlNBIENBIDIwMTgwHhcN
MjMwMTE3MDAwMDAwWhcNMjQwMTE3MjM1OTU5WjCBlDELMAkGA1UEBhMCRVMxDzAN
BgNVBAgTBkdpcm9uYTEPMA0GA1UEBxMGR2lyb25hMUowSAYDVQQKDEFEaXBzYWx1
dCAtIE9yZ2FuaXNtZSBBdXTDsm5vbSBkZSBTYWx1dCBQw7piIGRlICBEaXB1dGFj
acOzIEdpcm9uYTEXMBUGA1UEAwwOKi5kaXBzYWx1dC5jYXQwggEiMA0GCSqGSIb3
DQEBAQUAA4IBDwAwggEKAoIBAQDfc25n/S92Yek+z812KscPLfHnUhzBq8UQIOdm
WgktPm57qEbymqWQ33VrX5uJIYbdsbu/DLobxwyPlnDd4pOX1tuuhsIlHV/1t/Vj
Sx6kCz2HHVF0+4bNxgTgt8g/HL43WdNs2D1Au4V+mC1BV1IFufINuw7A7G59YrpO
WYFghKvAvdMsyDU4aEoDvAb/ann7qy0DaxxFPYOyVeRshF3Na3WbDTV+QuHxZysg
2saH3xEbj08QDJTL5N41e8/yT5WoVOdA+g6DkTqJT6uCHlWpGxLuEntABiJ/SzNI
MT58neIAZeEcjg01yNkaDIDABL3Fi03PVGQAOV3u5VaKj2orAgMBAAGjggMWMIID
EjAfBgNVHSMEGDAWgBSjyF5lVOUweMEF6gcKalnMuf7eWjAdBgNVHQ4EFgQUJ0sO
fYo+nWPgnE3XpZ/PGbjCueswJwYDVR0RBCAwHoIOKi5kaXBzYWx1dC5jYXSCDGRp
cHNhbHV0LmNhdDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMDoGA1UdHwQzMDEwL6AtoCuGKWh0dHA6Ly9jZHAudGhhd3RlLmNv
bS9UaGF3dGVSU0FDQTIwMTguY3JsMD4GA1UdIAQ3MDUwMwYGZ4EMAQICMCkwJwYI
KwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzBvBggrBgEFBQcB
AQRjMGEwJAYIKwYBBQUHMAGGGGh0dHA6Ly9zdGF0dXMudGhhd3RlLmNvbTA5Bggr
BgEFBQcwAoYtaHR0cDovL2NhY2VydHMudGhhd3RlLmNvbS9UaGF3dGVSU0FDQTIw
MTguY3J0MAkGA1UdEwQCMAAwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB2AO7N
0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABhb/vI08AAAQDAEcwRQIg
EdWELSpd5mX8Ev7rBimiWDUwobpAl1CNi38tPiXHEX4CIQC3Yu/XVzwKcrdwITMh
+10W3XkOpPfiZ+Ne9cn9uWcpdwB2AHPZnokbTJZ4oCB9R53mssYc0FFecRkqjGuA
EHrBd3K1AAABhb/vI8EAAAQDAEcwRQIhAPKY6xu923gYS2FZ/z/dLQZrJSfVzU5U
T8AviDMgIGOsAiA2ipo7dRvPGahZsBtrg5ulaL8QKJkKkIGeFAA0cODkzQB2AEiw
42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABhb/vI44AAAQDAEcwRQIg
EDjDaXypgPe4PkwqQhfjTxDQiUSi4mkDVgvl2jKzgtsCIQCGxYIq/N52DXdHfD4w
j+BKozM8TaGlk4+TVq5TlgsmkTANBgkqhkiG9w0BAQsFAAOCAQEAhfurHQT7zbQS
xNmq2AQhCBkMerqjbRRMDZVyoQ664Q45cK/JEQf+GYdpj92S8eRsaN6V8RoRGKZA
u20vAfWS78Wm083jV9bTQkShbBPXBk6iX4ps1Ra9Tt5ap0O9oup/WkKeHEYSkSUQ
ss+DMasBuVazbUiUXbitkCqf2uAIBDG3NdB/l+WjCJ7qkKUOVdYWm9/uizEg7N0F
EMz6D3ZcDwdAvHg6SbTazgm+lzzoQ1+y1A//i40yxc//KLYsilGPaXRLIoi/+hhP
EnRwGsP9sJDiqMDKe7KkOz8lPRTfPvYkpKLYcwiXdRG85TGjU4mKpViPvZA7NrJW
zXHvgH9x6w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33NuZ/0vdmHpPs/NdirH
Dy3x51IcwavFECDnZloJLT5ue6hG8pqlkN91a1+biSGG3bG7vwy6G8cMj5Zw3eKT
l9bbrobCJR1f9bf1Y0sepAs9hx1RdPuGzcYE4LfIPxy+N1nTbNg9QLuFfpgtQVdS
BbnyDbsOwOxufWK6TlmBYISrwL3TLMg1OGhKA7wG/2p5+6stA2scRT2DslXkbIRd
zWt1mw01fkLh8WcrINrGh98RG49PEAyUy+TeNXvP8k+VqFTnQPoOg5E6iU+rgh5V
qRsS7hJ7QAYif0szSDE+fJ3iAGXhHI4NNcjZGgyAwAS9xYtNz1RkADld7uVWio9q
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5546244525478873444325319543707906712
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Girona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Girona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Dipsalut - Organisme Autònom de Salut Púb de  Diputació Girona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.dipsalut.cat'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28208063290247186345584682174195822544311822335466832689802114661768376691505325874414500863287898634749515530206414287596464278873364271194699046759469751799550693812131547433649923069193454815920960509905333379965904990784342795177541663582924600463489584482063635486400802225378880271920430188068282758315986384360797205479434179042233893018974141511183239259961998268266346540767940684873301053437636171698000592217224985490263565365402211636081397148088758453224682833336511425082821651490460607460003876511859885237386138755400650737213519192670154000130360801306277108693898046385581712975517754213377088907819
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							274b0e7d8a3e9d63e09c4dd7a59fcf19b8c2b9eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dipsalut.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dipsalut.cat'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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