pfa.levexis.com
- TagMan Ltd -
Issued by Thawte RSA CA 2018
About this certificate
This digital certificate with serial number 02:d9:36:ad:76:bf:db:f1:ab:c3:43:18:77:93:ff:ef was issued on by DigiCert Inc.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
TagMan Ltd
Organization:
TagMan Ltd
Organization unit: IT
Organization unit: IT
Locality:
London
Country: GB
Country: GB
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 02:d9:36:ad:76:bf:db:f1:ab:c3:43:18:77:93:ff:efSerial Number (int): 3786293403213776145899021130179805167
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 58:6d:d0:00:78:28:be:55:b4:51:2e:ff:ab:5b:c0:57:51:a7:b2:cb
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a
Fingerprint (sha1): 21:31:68:b1:1c:a0:f0:6f:f4:cd:1d:5e:fa:4f:2f:64:8d:35:e4:d0
Fingerprint (sha256): e7:fd:02:8e:3b:1d:56:0f:bc:37:87:ec:5f:38:6d:cc:ff:b7:bd:13:9a:63:36:a0:49:3d:8c:59:f9:4e:a0:3b
Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt
Revocation information
OCSP Server: http://status.thawte.comCRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl
Check the revocation status for certificate pfa.levexis.com
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for pfa.levexis.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
pfa.levexis.com
tagman.heathrow.com
tagman.heathrowexpress.com
tagman.stylebop.com
tagman.heathrow.com
tagman.heathrowexpress.com
tagman.stylebop.com
Other certificates including the domain name levexis.com
(limited to 100 certificates)
res.levexis.com
*.levexis.com
*.levexis.com
*.levexis.com
pfa.levexis.com
sec.levexis.com
res.levexis.com
pfa.levexis.com
s8.wac.edgecastcdn.net
res.levexis.com
res.levexis.com
res.levexis.com
pfa.levexis.com
res.levexis.com
s8.wac.edgecastcdn.net
res.levexis.com
res.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
sec.levexis.com
sec.levexis.com
res.levexis.com
s8.wac.edgecastcdn.net
res.levexis.com
pfa.levexis.com
res.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
sec.levexis.com
sec.levexis.com
s8.wac.edgecastcdn.net
res.levexis.com
res.levexis.com
pfa.levexis.com
*.levexis.com
*.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
pfa.levexis.com
res.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
res.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
pfa.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
pfa.levexis.com
res.levexis.com
s8.wac.edgecastcdn.net
pfa.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
res.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
pfna.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
*.levexis.com
res.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
res.levexis.com
s8.wac.edgecastcdn.net
res.levexis.com
pfa.levexis.com
sec.levexis.com
res.levexis.com
res.levexis.com
s8.wac.edgecastcdn.net
pfa.levexis.com
res.levexis.com
pfa.levexis.com
*.levexis.com
*.levexis.com
s8.wac.edgecastcdn.net
pfa.levexis.com
s8.wac.edgecastcdn.net
pfa.levexis.com
res.levexis.com
s8.wac.edgecastcdn.net
sec.levexis.com
s8.wac.edgecastcdn.net
sec.levexis.com
sec.levexis.com
*.levexis.com
*.levexis.com
*.levexis.com
*.levexis.com
pfa.levexis.com
sec.levexis.com
res.levexis.com
pfa.levexis.com
s8.wac.edgecastcdn.net
res.levexis.com
res.levexis.com
res.levexis.com
pfa.levexis.com
res.levexis.com
s8.wac.edgecastcdn.net
res.levexis.com
res.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
sec.levexis.com
sec.levexis.com
res.levexis.com
s8.wac.edgecastcdn.net
res.levexis.com
pfa.levexis.com
res.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
sec.levexis.com
sec.levexis.com
s8.wac.edgecastcdn.net
res.levexis.com
res.levexis.com
pfa.levexis.com
*.levexis.com
*.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
pfa.levexis.com
res.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
res.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
pfa.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
pfa.levexis.com
res.levexis.com
s8.wac.edgecastcdn.net
pfa.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
res.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
pfna.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
*.levexis.com
res.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
res.levexis.com
s8.wac.edgecastcdn.net
res.levexis.com
pfa.levexis.com
sec.levexis.com
res.levexis.com
res.levexis.com
s8.wac.edgecastcdn.net
pfa.levexis.com
res.levexis.com
pfa.levexis.com
*.levexis.com
*.levexis.com
s8.wac.edgecastcdn.net
pfa.levexis.com
s8.wac.edgecastcdn.net
pfa.levexis.com
res.levexis.com
s8.wac.edgecastcdn.net
sec.levexis.com
s8.wac.edgecastcdn.net
sec.levexis.com
sec.levexis.com
*.levexis.com
Certificate
The complete raw certificate details for pfa.levexis.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIQAtk2rXa/2/Grw0MYd5P/7zANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMRswGQYDVQQDExJUaGF3dGUgUlNBIENBIDIwMTgwHhcN MjAwMTIxMDAwMDAwWhcNMjEwMTIwMTIwMDAwWjBaMQswCQYDVQQGEwJHQjEPMA0G A1UEBxMGTG9uZG9uMRMwEQYDVQQKEwpUYWdNYW4gTHRkMQswCQYDVQQLEwJJVDEY MBYGA1UEAxMPcGZhLmxldmV4aXMuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAozBp3raP0MeGuWo/MpHIlavznwLmVk0meboBr82zGM6SiLfSImEf x+a6MrY9k1ujb6R0oApgulNQ3TtpbYpsiONOI24449nNYFehC13j8O7kAiVDYDJy DvFjKu2RbEs2Rkqu9EbHNLi3E22n7FbwZ5N7TzhO0rdnzNppnb4cLGPCcCGVNVM9 dSZ4dtw+wcGgLyDZSF7yJkTST0G9hDUXO3a9WqjqsrSp/q56hw7or1279Q/oGRaX RJEK+JBzKQDyowHNOGNrTNZcPaoyoO4NX2jXMo+vLqjI/G8EaHo6LRws8AbgB8fb yRHY6BfDAN38tojRguiIihYL344Hx27GDQIDAQABo4IB8DCCAewwHwYDVR0jBBgw FoAUo8heZVTlMHjBBeoHCmpZzLn+3lowHQYDVR0OBBYEFFht0AB4KL5VtFEu/6tb wFdRp7LLMGAGA1UdEQRZMFeCD3BmYS5sZXZleGlzLmNvbYITdGFnbWFuLmhlYXRo cm93LmNvbYIadGFnbWFuLmhlYXRocm93ZXhwcmVzcy5jb22CE3RhZ21hbi5zdHls ZWJvcC5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjA6BgNVHR8EMzAxMC+gLaArhilodHRwOi8vY2RwLnRoYXd0ZS5jb20v VGhhd3RlUlNBQ0EyMDE4LmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBATAqMCgG CCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAEC AjBvBggrBgEFBQcBAQRjMGEwJAYIKwYBBQUHMAGGGGh0dHA6Ly9zdGF0dXMudGhh d3RlLmNvbTA5BggrBgEFBQcwAoYtaHR0cDovL2NhY2VydHMudGhhd3RlLmNvbS9U aGF3dGVSU0FDQTIwMTguY3J0MAkGA1UdEwQCMAAwEwYKKwYBBAHWeQIEAwEB/wQC BQAwDQYJKoZIhvcNAQELBQADggEBAExoS0HBwhxYyzRPurrfeBi62l7q1DLQI+NC xd0E6C/VkMP2lYn7C1yaaOauxT7ka0aqVP9J/wgeOUDbhoQ8evRbih5wliBAbQN0 GUymDGgty6/Yeku27ZQmRQJ9QUTXFx4TGEUVwy8oxOeOh7BgRb+MVmjyg4i/cD6y 4j7xMz4PJ74Ab+DAFb4XrihDHugLwqsEThpAvpjn87FvLVOqWWkahU+sGWXW+6PU oE+LvJ/5JrSu4hOdtzH1UOUTCP7wOPjnC+yFYM5wL29vtWvGCsxxdHf8+BrA/G4B 6VGg5DsZXf4IuI0+PY0w1MFfV0Ki6yXws8zoQDlPHqEQ2iWNZVM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozBp3raP0MeGuWo/MpHI lavznwLmVk0meboBr82zGM6SiLfSImEfx+a6MrY9k1ujb6R0oApgulNQ3TtpbYps iONOI24449nNYFehC13j8O7kAiVDYDJyDvFjKu2RbEs2Rkqu9EbHNLi3E22n7Fbw Z5N7TzhO0rdnzNppnb4cLGPCcCGVNVM9dSZ4dtw+wcGgLyDZSF7yJkTST0G9hDUX O3a9WqjqsrSp/q56hw7or1279Q/oGRaXRJEK+JBzKQDyowHNOGNrTNZcPaoyoO4N X2jXMo+vLqjI/G8EaHo6LRws8AbgB8fbyRHY6BfDAN38tojRguiIihYL344Hx27G DQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 3786293403213776145899021130179805167 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-21 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-20 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TagMan Ltd' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pfa.levexis.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20600717323014047797566647026524142265196328599528689313262035581984422195786918008166729806248810691322354348678090656125108458437359429622239319669584408457252221779286073277608702025023886668189523184726213352639469069299792399201345900204114253018585428356972363531421352406516246398005503271483767960582256325882637676815220829486899042322012852911856597040119394154906699833811282232751623892095512678511598548463228975395086277119750828721183626171169770391677752677168877877129396840351647124524774450079196256966756978198462644828774930240644429654851633791053736342044918329462886159424446721175131253556749 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 586dd0007828be55b4512effab5bc05751a7b2cb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfa.levexis.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.heathrow.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.heathrowexpress.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.stylebop.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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