webmail.ovb.at

- OVB Holding AG -

Issued by Thawte TLS RSA CA G1

About this certificate

This digital certificate with serial number 0a:21:94:28:11:b5:51:d4:47:73:d3:bc:a7:27:c2:d8 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

OVB Holding AG

Organization: OVB Holding AG
Organization unit: EDV
State / Province: Nordrhein-Westfalen
Locality: Köln
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:21:94:28:11:b5:51:d4:47:73:d3:bc:a7:27:c2:d8
Serial Number (int): 13466630725409096226432486639472722648
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ff:c8:f2:86:77:e3:9f:cc:22:6b:7c:8d:42:73:53:54:ad:9f:9a:e5
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7

Fingerprint (sha1): fa:8e:c4:7d:cd:3f:d1:72:4e:cb:f9:08:3e:d4:5b:86:17:08:6e:dc
Fingerprint (sha256): ef:64:bc:96:45:b6:d6:b9:88:8c:11:cd:95:3d:85:c0:11:52:83:85:cb:51:54:e2:81:60:be:5c:23:eb:d1:8d

Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl

Check the revocation status for certificate webmail.ovb.at

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.ovb.at

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.ovb.at

Other certificates including the domain name ovb.at

(limited to 100 certificates)
share.saxobroko.com
autodiscover.ch.ovb.eu
www.petroexplore.com
citrix.ovb.at
*.ovb.at
*.ovb.at
app.tagncash.com
www.mansamusa.ae
www.knocksy.pl
learning.ovb.at
neatmap.ca
autodiscover.ch.ovb.eu
admin.enteroffer.com
autodiscover.ch.ovb.eu
easy.ovb.at
pokemonbrowser.com
neatmap.ca
remote.ovb.at
icewarp.ovb.email
pre.housebuddy.app
www.aidosa.co.kr
autodiscover.ch.ovb.eu
www.ovb.at
citrix.ovb.at
learning.ovb.at
link.fanlan.net
www.learning.ovb.at
autodiscover.ch.ovb.eu
rocketparts.io
icewarp.ovb.email
www.aidosa.co.kr
test.easy.ovb.at
autodiscover.ch.ovb.eu
elegantdevelopment.com
autodiscover.ch.ovb.eu
incom.xyz
tod.feltax.xyz
citrix.ovb.at
admin-dev.workshop-live.com
citrix.ovb.at
www.discordmodsimulator.tk
test.easy.ovb.at
blog.dnjw.com
demo.easy.ovb.at
strate.my-memory.io
loki.meisterveda.com
www.chandlersouth.org
autodiscover.ch.ovb.eu
autodiscover.ch.ovb.eu
easy.ovb.at
autodiscover.ch.ovb.eu
test.easy.ovb.at
filetransfer.ovb.at
www.ovb.at
sunyside.co.jp
dash.deerbot.cf
learning.ovb.at
wl.ueue.com.au
www.avalande.com
idanbirman.dev
www.davidandsam.tv
advesto.de
demo.easy.ovb.at
filetransfer.ovb.at
www.antsolutions.co.za
100percentfa.com
www.ovb.at
icewarp.ovb.email
kumarrealestate.co
icewarp.ovb.email
connect.geovina.com
www.craigfrancies.com
autodiscover.ovb.at
autodiscover.ch.ovb.eu
citrix.ovb.at
www.ovb.at
autodiscover.ch.ovb.eu
citrix.ovb.at
tab.quantastic.ai
citrix.ovb.at
login.uiclap.com
wl.ueue.com.au
webmail.ovb.at
ovbmail.cz
dev.leveluptriathloncoaching.com
webmail.ovb.at
advesto.de
pinhasov.com
icewarp.ovb.email
zkdrops.com
aleksipamilo.dev
autodiscover.ch.ovb.eu

Certificate

The complete raw certificate details for webmail.ovb.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGezCCBWOgAwIBAgIQCiGUKBG1UdRHc9O8pyfC2DANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRUaGF3dGUgVExTIFJTQSBDQSBHMTAe
Fw0xODA1MDQwMDAwMDBaFw0yMDA1MDMxMjAwMDBaMHsxCzAJBgNVBAYTAkRFMRww
GgYDVQQIExNOb3JkcmhlaW4tV2VzdGZhbGVuMQ4wDAYDVQQHDAVLw7ZsbjEXMBUG
A1UEChMOT1ZCIEhvbGRpbmcgQUcxDDAKBgNVBAsTA0VEVjEXMBUGA1UEAxMOd2Vi
bWFpbC5vdmIuYXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsC/3s
FVQre1yM73GsWnrlzJxbSvV5hFpt7ql1MA902XXAaV+aHRt13obLyKjR0jJN7iDz
+EDm9DPCshRweLx/Wd7+Rx68R66sDn4S0JDmS/0WadYrBnM+zI3c3NE8PJHrlDqd
WhPedeqeI/F94GTIZCgQ2alXNnLCnypdenrLQyRD4vYYmWezoVfzSjcXrpjssXaO
EUX6oEfCqRtRPuLLVArH3khC7DGmqqUWAAn6Z6C8w88o/rQqV3BeWfUORtGbZBT3
ARBNQnkt0Q59+t0aXsNFY1jEZK/R8ASuL4JN/+a93jxt9/HP4Zh0GtH4Oa1ofxoJ
XH0MiRKsAlAMZgldAgMBAAGjggMWMIIDEjAfBgNVHSMEGDAWgBSljP4yzOsPLNQZ
xgi4ACSIXcPFtzAdBgNVHQ4EFgQU/8jyhnfjn8wia3yNQnNTVK2fmuUwGQYDVR0R
BBIwEIIOd2VibWFpbC5vdmIuYXQwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY2Rw
LnRoYXd0ZS5jb20vVGhhd3RlVExTUlNBQ0FHMS5jcmwwTAYDVR0gBEUwQzA3Bglg
hkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29t
L0NQUzAIBgZngQwBAgIwcAYIKwYBBQUHAQEEZDBiMCQGCCsGAQUFBzABhhhodHRw
Oi8vc3RhdHVzLnRoYXd0ZS5jb20wOgYIKwYBBQUHMAKGLmh0dHA6Ly9jYWNlcnRz
LnRoYXd0ZS5jb20vVGhhd3RlVExTUlNBQ0FHMS5jcnQwCQYDVR0TBAIwADCCAXwG
CisGAQQB1nkCBAIEggFsBIIBaAFmAHUApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+4
43fNDsgN3BAAAAFjK0M1KwAABAMARjBEAiALD2yZDvIS5rvFBROpNHi4Ar2Gch/A
x4Ls8JCi4AxA5QIgJlVmGo4fSFe+/xMfRSldeIOp7nmisjn4kZS8wr04c4QAdgBv
U3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAWMrQza7AAAEAwBHMEUC
IEG+TXS6cWmcJkphH8ChqSxF9IEaseTMTSrEFFb2ylsXAiEA/zoXsFIMHrmNlYeb
m0MeD4A+TwsIKkne9yaEes5Ky34AdQC72d+8H4pxtZOUI5eqkntHOFeVCqtS6BqQ
lmQ2jh7RhQAAAWMrQzX/AAAEAwBGMEQCIE6OlfvBJ5XiTrCLrZIg8eCQRwQH3njB
fMK92GJikcTPAiBYm5ePnA5XHv+gty3526n5oEXkg1q6Y12HuzA8mpevETANBgkq
hkiG9w0BAQsFAAOCAQEAhHyADiyhTz3oKTqcwSNM/J+HjjMbVpzBtEOaS8H5ofTz
F9jLxSYdIWqFM82okKokZQbpFwPRzWDGxQBb+LhaHD4FiuGTT3woygrfsK5HwoQQ
1h1vEi2LrrirXvQ0YOtx4jWERN7X9EiRCxIf8Qz9gKCCn/necUFxsyVpB+r7HtTA
pXqWWFGVMc6q/e6NAlbH2KtHjpRv2+GehNvu1gHKRWD2Yd/cjE/ytKUj2LbScC+s
nJJpfXuiSEOZfBdCAYR7ZkxdaqVccH6fkUajQh+sPTnFcM2NRdNyzkkqRT+s6wQP
r7ZuzLsWjuBV0h9qbXB/6yUDqhSlRwWwuAT85JJpVg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAv97BVUK3tcjO9xrFp6
5cycW0r1eYRabe6pdTAPdNl1wGlfmh0bdd6Gy8io0dIyTe4g8/hA5vQzwrIUcHi8
f1ne/kcevEeurA5+EtCQ5kv9FmnWKwZzPsyN3NzRPDyR65Q6nVoT3nXqniPxfeBk
yGQoENmpVzZywp8qXXp6y0MkQ+L2GJlns6FX80o3F66Y7LF2jhFF+qBHwqkbUT7i
y1QKx95IQuwxpqqlFgAJ+megvMPPKP60KldwXln1DkbRm2QU9wEQTUJ5LdEOffrd
Gl7DRWNYxGSv0fAEri+CTf/mvd48bffxz+GYdBrR+DmtaH8aCVx9DIkSrAJQDGYJ
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13466630725409096226432486639472722648
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-03 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Köln'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OVB Holding AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EDV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.ovb.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21718901872359145228575681534403627326647597313549594593808199380079570195251163557680802217354375855564803963973968001820958699215394128251286736270196703502696479890240362689610124002701067455460508283999827965259416613275144174409585919740848954532026037389239974599343515395938835020185816237590420701024020052002600991238347541739303637931295026246803205922333899637990958342365362950020867411608913452061276697076954168835829445557072340603417195400773828515068363337277749417040790854335335650147479541256245561081318932322714014307879670046174127502639921288178988645127686953795335807937698660104333871679837
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ffc8f28677e39fcc226b7c8d42735354ad9f9ae5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.ovb.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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