res.levexis.com

- TagMan Ltd -

Issued by Thawte SSL CA

About this certificate

This digital certificate with serial number 4f:72:38:4e:f0:09:7e:2a:b6:7d:b3:17:60:9b:26:b2 was issued on by Thawte, Inc..

With 50 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

TagMan Ltd

Organization: TagMan Ltd
Organization unit: Ops
State / Province: London
Locality: London
Country: GB

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4f:72:38:4e:f0:09:7e:2a:b6:7d:b3:17:60:9b:26:b2
Serial Number (int): 105602075577903683410804611913774474930
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: a7:a2:83:bb:34:45:40:3d:fc:d5:30:4f:12:b9:3e:a1:01:9f:f6:db

Fingerprint (sha1): 1e:29:c8:60:cd:f9:5d:89:ff:9d:d0:40:ef:b8:3b:a6:d6:78:4f:7d
Fingerprint (sha256): e8:2d:8d:92:72:ac:c0:ec:c4:dc:85:b1:0d:26:16:51:00:68:18:4f:66:15:17:2d:5e:a7:e5:22:93:51:4b:a6

Issuing Certificate URL: http://tb.symcb.com/tb.crt

Revocation information

OCSP Server: http://tb.symcd.com
CRL Distribution Point: http://tb.symcb.com/tb.crl

Check the revocation status for certificate res.levexis.com

50

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for res.levexis.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

attribution.kvd.com.au
attribution.lebara.com
attribution.mylyve.com
attribution.saucony.com
ensighten.airnewzealand.co.uk
madata.newlook.com
pfa.levexis.com
pfna.levexis.com
san.tagmandemo.com
sec.levexis.com
service-ens.sueddeutsche.de
tagman.allstarwine.com
tagman.americanholidays.com
tagman.bestwestern.com
tagman.britishairways.com
tagman.christianmingle.com
tagman.citalia.com
tagman.crystalski.co.uk
tagman.crystalsummer.co.uk
tagman.fotolia.com
tagman.guoman.com
tagman.hayesandjarvis.co.uk
tagman.heathrow.com
tagman.heathrowairport.com
tagman.heathrowexpress.com
tagman.intercall.com
tagman.jurysinns.com
tagman.lauraashley.com
tagman.markafoni.com
tagman.seatwave.at
tagman.seatwave.be
tagman.seatwave.com
tagman.seatwave.ie
tagman.sovereign.com
tagman.stylebop.com
tagman.surfstitch.com
tagman.talkmobile.co.uk
tagman.thebodyshop-usa.com
tagman.thebodyshop.co.uk
tagman.thistle.com
tagman.thomsonlakes.co.uk
tagman.thomsonski.co.uk
tagman.transavia.com
tagman.viator.com
tagman.virgin-atlantic.com
tagman.waitrose.com
tagman.waitrosecellar.com
tags.aumago.com
attribution.nasm.org
res.levexis.com

Other certificates including the domain name levexis.com

(limited to 100 certificates)
res.levexis.com
*.levexis.com
*.levexis.com
*.levexis.com
pfa.levexis.com
sec.levexis.com
res.levexis.com
pfa.levexis.com
s8.wac.edgecastcdn.net
res.levexis.com
res.levexis.com
res.levexis.com
pfa.levexis.com
res.levexis.com
s8.wac.edgecastcdn.net
res.levexis.com
res.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
sec.levexis.com
sec.levexis.com
res.levexis.com
s8.wac.edgecastcdn.net
res.levexis.com
pfa.levexis.com
res.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
sec.levexis.com
sec.levexis.com
s8.wac.edgecastcdn.net
res.levexis.com
res.levexis.com
pfa.levexis.com
*.levexis.com
*.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
pfa.levexis.com
res.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
res.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
pfa.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
pfa.levexis.com
res.levexis.com
s8.wac.edgecastcdn.net
pfa.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
res.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
pfna.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
*.levexis.com
res.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
res.levexis.com
s8.wac.edgecastcdn.net
res.levexis.com
pfa.levexis.com
sec.levexis.com
res.levexis.com
res.levexis.com
s8.wac.edgecastcdn.net
pfa.levexis.com
res.levexis.com
pfa.levexis.com
*.levexis.com
*.levexis.com
s8.wac.edgecastcdn.net
pfa.levexis.com
s8.wac.edgecastcdn.net
pfa.levexis.com
res.levexis.com
s8.wac.edgecastcdn.net
sec.levexis.com
s8.wac.edgecastcdn.net
sec.levexis.com
sec.levexis.com
*.levexis.com

Certificate

The complete raw certificate details for res.levexis.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5bpKwMzD3lk262z50Xr
4mxkwETT2QZc6Rqq6Fj469ATOCRp1xM2hPfcG9lpuZUmXOOqvWbDpRvWhKbjK/DF
mByL39RTywc279MviQHOm+OxAi8goB7eZxBrX/kk2jygU/WeTiSVfmzIOfURa6l5
5cXGMLIZ8365BYesDv/82hQ47E412fM3QiMMRzsmaEhezoPlXeopt/PhVyEiJEFg
HN1581El+sgChHjaW+xGsNa4RK/n4Zc6mR8HLiIYmze5unm9qjltNb67gBkQ37Ew
z0D/dNZHko9MuLY/taqknKskDUQGRmjPk4AJ1+YJQGkZsL92blOY7zxcQCraZdjb
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 105602075577903683410804611913774474930
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-07-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'TagMan Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Ops'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'res.levexis.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22166120264293519390417320082810968409403201406025263939036390608280591796482345395657231229059424476543681253415294789847565820148366227855082731806348847687526957473311439519872598462540090979774386632680456258815714347150705027745312283652300973091404351425827883752604948159559263061142976588092908892652215692763666643734675007510913378960376297320772940719809248269767882097853036735986739131606396994479801786708350249852847393455129211015833187416580419535453517443630144884279850165954313153596779973878732159808103611171587096196965126776965245461430663262019013026335462858317775056069030453909345034361787
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1164 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attribution.kvd.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attribution.lebara.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attribution.mylyve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attribution.saucony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ensighten.airnewzealand.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madata.newlook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfa.levexis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfna.levexis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san.tagmandemo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.levexis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service-ens.sueddeutsche.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.allstarwine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.americanholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.bestwestern.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.britishairways.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.christianmingle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.citalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.crystalski.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.crystalsummer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.fotolia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.guoman.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.hayesandjarvis.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.heathrow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.heathrowairport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.heathrowexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.intercall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.jurysinns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.lauraashley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.markafoni.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.seatwave.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.seatwave.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.seatwave.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.seatwave.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.sovereign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.stylebop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.surfstitch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.talkmobile.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.thebodyshop-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.thebodyshop.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.thistle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.thomsonlakes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.thomsonski.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.transavia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.viator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.virgin-atlantic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.waitrose.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.waitrosecellar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tags.aumago.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attribution.nasm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'res.levexis.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a7a283bb3445403dfcd5304f12b93ea1019ff6db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tb.symcb.com/tb.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tb.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tb.symcb.com/tb.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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