*.novamedia.com
- Novamedia B.V. -
Issued by thawte SSL CA - G2
About this certificate
This digital certificate with serial number 19:92:be:2f:a3:d4:9f:f3:f5:8a:36:7b:2d:02:9c:39 was issued on by thawte, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Novamedia B.V.
Organization:
Novamedia B.V.
Organization unit: Novamedia B.V.
Organization unit: Novamedia B.V.
State / Province:
Noord-Holland
Locality: Amsterdam
Country: NL
Locality: Amsterdam
Country: NL
thawte, Inc.
Organization:
thawte, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 19:92:be:2f:a3:d4:9f:f3:f5:8a:36:7b:2d:02:9c:39Serial Number (int): 33992632668220417875325193606314236985
Serial Number lenght: 125 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60
Fingerprint (sha1): 56:d9:bf:ce:10:b9:e5:d0:57:97:0e:68:fc:be:f9:48:73:f2:da:34
Fingerprint (sha256): ef:ec:2d:59:ff:67:53:9f:ac:4a:e6:47:c3:10:d8:a2:81:06:f7:34:34:db:99:7b:fc:83:0c:7b:29:4b:c9:d8
Issuing Certificate URL: http://tj.symcb.com/tj.crt
Revocation information
OCSP Server: http://tj.symcd.comCRL Distribution Point: http://tj.symcb.com/tj.crl
Check the revocation status for certificate *.novamedia.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.novamedia.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.novamedia.com
novamedia.com
novamedia.com
Other certificates including the domain name novamedia.com
(limited to 100 certificates)
fs.se.novamedia.com
nexus.devtools.share-aws.se.novamedia.com
nexus.devtools.share-aws.se.novamedia.com
*.nl.novamedia.com
*.dev-aws.se.novamedia.com
nexus.se.novamedia.com
workspace.novamedia.com
mail.se.novamedia.com
dev1-aws.se.novamedia.com
mail.se.novamedia.com
nexus.devtools.share-aws.se.novamedia.com
dashboard.share-aws.se.novamedia.com
NIN-Pool-Ext.eeghlan.net
stage-aws.se.novamedia.com
*.nl.novamedia.com
*.de.novamedia.com
*.novamedia.com
api.novamedia.com
stage-aws.se.novamedia.com
*.nl.novamedia.com
stage-aws.se.novamedia.com
*.novamedia.com
nexus.se.novamedia.com
*.novamedia.com
*.novamedia.com
acc-aws.se.novamedia.com
acc-aws.se.novamedia.com
teamcity.devtools.share-aws.se.novamedia.com
*.novamedia.com
fs.se.novamedia.com
*.novamedia.com
mail.se.novamedia.com
mfa.novamedia.com
*.novamedia.com
*.novamedia.com
nps.infra.novamedia.com
workspace.novamedia.com
access.eeghlan.net
api.at1.gdlservices.nl
dev-aws.se.novamedia.com
mail.se.novamedia.com
dswcta.novamedia.com
*.uk.novamedia.com
*.dev-aws.se.novamedia.com
*.novamedia.com
*.nl.novamedia.com
mail.se.novamedia.com
prod-aws.se.novamedia.com
api.at1.gdlservices.nl
*.novamedia.com
api.novamedia.com
NIN-Pool-Ext.eeghlan.net
*.novamedia.com
*.nl.novamedia.com
dev1-aws.se.novamedia.com
dashboard.share-aws.se.novamedia.com
*.uk.novamedia.com
fs.se.novamedia.com
novamedia.com
*.novamedia.com
workspace.novamedia.com
dev-aws.se.novamedia.com
*.novamedia.com
*.uk.novamedia.com
*.nl.novamedia.com
prod-aws.se.novamedia.com
*.novamedia.com
NIN-Pool-Ext.eeghlan.net
teamcity.se.novamedia.com
mail.se.novamedia.com
dashboard.share-aws.se.novamedia.com
*.acc-aws.se.novamedia.com
nexus.devtools.share-aws.se.novamedia.com
nexus.devtools.share-aws.se.novamedia.com
*.nl.novamedia.com
*.dev-aws.se.novamedia.com
nexus.se.novamedia.com
workspace.novamedia.com
mail.se.novamedia.com
dev1-aws.se.novamedia.com
mail.se.novamedia.com
nexus.devtools.share-aws.se.novamedia.com
dashboard.share-aws.se.novamedia.com
NIN-Pool-Ext.eeghlan.net
stage-aws.se.novamedia.com
*.nl.novamedia.com
*.de.novamedia.com
*.novamedia.com
api.novamedia.com
stage-aws.se.novamedia.com
*.nl.novamedia.com
stage-aws.se.novamedia.com
*.novamedia.com
nexus.se.novamedia.com
*.novamedia.com
*.novamedia.com
acc-aws.se.novamedia.com
acc-aws.se.novamedia.com
teamcity.devtools.share-aws.se.novamedia.com
*.novamedia.com
fs.se.novamedia.com
*.novamedia.com
mail.se.novamedia.com
mfa.novamedia.com
*.novamedia.com
*.novamedia.com
nps.infra.novamedia.com
workspace.novamedia.com
access.eeghlan.net
api.at1.gdlservices.nl
dev-aws.se.novamedia.com
mail.se.novamedia.com
dswcta.novamedia.com
*.uk.novamedia.com
*.dev-aws.se.novamedia.com
*.novamedia.com
*.nl.novamedia.com
mail.se.novamedia.com
prod-aws.se.novamedia.com
api.at1.gdlservices.nl
*.novamedia.com
api.novamedia.com
NIN-Pool-Ext.eeghlan.net
*.novamedia.com
*.nl.novamedia.com
dev1-aws.se.novamedia.com
dashboard.share-aws.se.novamedia.com
*.uk.novamedia.com
fs.se.novamedia.com
novamedia.com
*.novamedia.com
workspace.novamedia.com
dev-aws.se.novamedia.com
*.novamedia.com
*.uk.novamedia.com
*.nl.novamedia.com
prod-aws.se.novamedia.com
*.novamedia.com
NIN-Pool-Ext.eeghlan.net
teamcity.se.novamedia.com
mail.se.novamedia.com
dashboard.share-aws.se.novamedia.com
*.acc-aws.se.novamedia.com
Certificate
The complete raw certificate details for *.novamedia.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF6DCCBNCgAwIBAgIQGZK+L6PUn/P1ijZ7LQKcOTANBgkqhkiG9w0BAQsFADBB MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMRswGQYDVQQDExJ0 aGF3dGUgU1NMIENBIC0gRzIwHhcNMTcwNzA1MDAwMDAwWhcNMjAwNzA0MjM1OTU5 WjCBhTELMAkGA1UEBhMCTkwxFjAUBgNVBAgMDU5vb3JkLUhvbGxhbmQxEjAQBgNV BAcMCUFtc3RlcmRhbTEXMBUGA1UECgwOTm92YW1lZGlhIEIuVi4xFzAVBgNVBAsM Dk5vdmFtZWRpYSBCLlYuMRgwFgYDVQQDDA8qLm5vdmFtZWRpYS5jb20wggIiMA0G CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCV/U61SeifEfeuudk1B1HF3+frJzkh DmbkvCiWygn858otKu7SfejQFy31Pbnsr7CEX6XKl2daRiiNV+2tmqYjdyEeMhLe RE0sJbLfOeqQ5HLyxhulyY7Z3933Y65wPDWIQCMghy6X+gOy0wf2XoArmNkSgXka sqeipZwUBjgaC1SSjNNwoOVddbc6fL/Egx6C3O6mm3+Ck6tSJzMWfye29ozjHxHP IOLSfzJjfe/GLFWZ/6l5erq9+jgDByfJ6QrHH3Ah/lYTpBp4TpP3vkWhxXr6fTRN PcYoVH/DEJvSVIgvgnJxqbfADQNK9ZowuI+kTDSF0kPUvzCfMHaS0z7aIggW8UJJ 6XaxvapP+R/h1hLjKbpCLHv/N76IQgnJDAYq/4gn4BUdy2aA5RNsnmO0jde727Xq 1hOSWe535R3PfWd5OOL5ClsBSBWJqK/kt7xdvwAT9y1sTWGNlHhgVFaJLQQ9OlDj 07RXCpsBNb+S5yLbim+9kGU16XrjCAd1rm8POoLkyKBc8fosNZCwcpsC7ZHmF6au bej5ZOSkUQrYc3g7YmaicUu2V+L5JSzcZOhDCESnShoUadtpBmmcckCJALF9GrPE S0G4pyc9v5BDGirrHoxA6HNw29QovtEzQY4+gUsT3TxnFC1a+JYP5SGwG6s6IYNc XvUyOF3f5gABaQIDAQABo4IBlTCCAZEwKQYDVR0RBCIwIIIPKi5ub3ZhbWVkaWEu Y29tgg1ub3ZhbWVkaWEuY29tMAkGA1UdEwQCMAAwbgYDVR0gBGcwZTBjBgZngQwB AgIwWTAmBggrBgEFBQcCARYaaHR0cHM6Ly93d3cudGhhd3RlLmNvbS9jcHMwLwYI KwYBBQUHAgIwIwwhaHR0cHM6Ly93d3cudGhhd3RlLmNvbS9yZXBvc2l0b3J5MA4G A1UdDwEB/wQEAwIFoDAfBgNVHSMEGDAWgBTCT0hX/NFPmsBdOH0OBdvZLrVSYDAr BgNVHR8EJDAiMCCgHqAchhpodHRwOi8vdGouc3ltY2IuY29tL3RqLmNybDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwVwYIKwYBBQUHAQEESzBJMB8GCCsG AQUFBzABhhNodHRwOi8vdGouc3ltY2QuY29tMCYGCCsGAQUFBzAChhpodHRwOi8v dGouc3ltY2IuY29tL3RqLmNydDATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAW2kpC9hs9ooaeEMer993aAW8D/6DHY6gl+aHDVHOeFraLbAF N/l+K2ouBYnTaviDMge1JgaJBZbw0etcqe6InAfVFA+UPzNsA7x7800ODMO1amfY 4SkgFUh+y3X+jzDL4iypjAkIaHYZqjssf/+r6yJaQJQ9hMHisDjZFWu0uI0GYwen vLibt3zSEj3s4ZLsYnVjqPa7vAQ4o9oTldRC4ihrWc+EuIRW34uCQL1dF0TwcviO X3nd969slUeALE/wHPHQlCW4RNWGbsoa9AeWWg6UZS1NcPFXA2zX90c7e84vfjZQ jqTjWdnXo3LiS5LZLuoScB7ltQEDtTdDRCxwSw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAlf1OtUnonxH3rrnZNQdR xd/n6yc5IQ5m5LwolsoJ/OfKLSru0n3o0Bct9T257K+whF+lypdnWkYojVftrZqm I3chHjIS3kRNLCWy3znqkORy8sYbpcmO2d/d92OucDw1iEAjIIcul/oDstMH9l6A K5jZEoF5GrKnoqWcFAY4GgtUkozTcKDlXXW3Ony/xIMegtzuppt/gpOrUiczFn8n tvaM4x8RzyDi0n8yY33vxixVmf+peXq6vfo4AwcnyekKxx9wIf5WE6QaeE6T975F ocV6+n00TT3GKFR/wxCb0lSIL4Jycam3wA0DSvWaMLiPpEw0hdJD1L8wnzB2ktM+ 2iIIFvFCSel2sb2qT/kf4dYS4ym6Qix7/ze+iEIJyQwGKv+IJ+AVHctmgOUTbJ5j tI3Xu9u16tYTklnud+Udz31neTji+QpbAUgViaiv5Le8Xb8AE/ctbE1hjZR4YFRW iS0EPTpQ49O0VwqbATW/kuci24pvvZBlNel64wgHda5vDzqC5MigXPH6LDWQsHKb Au2R5hemrm3o+WTkpFEK2HN4O2JmonFLtlfi+SUs3GToQwhEp0oaFGnbaQZpnHJA iQCxfRqzxEtBuKcnPb+QQxoq6x6MQOhzcNvUKL7RM0GOPoFLE908ZxQtWviWD+Uh sBurOiGDXF71Mjhd3+YAAWkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 33992632668220417875325193606314236985 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-05 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-04 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Noord-Holland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Amsterdam' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Novamedia B.V.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Novamedia B.V.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.novamedia.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 611903701490704561576121764120211018511580394032087714284156060852327723199079498088533494313492188884709885329610122111430809896704459348212702200195620268744715375553181901757526264994770463461597919739757962324838105234855733602734729709212440685739066720216929876273435111694152074147677234049475130922343056790828860102727219075549370051966617872823177511664212770872369543997981270631171417571575529166786240025484458498039192344290760255327792479907022990884351903135407362725473983618479242650838695211193700772383115120430866773934581715347465550046370150364237981422001733781879818805540970333993444345748535692240805794082461613682757768450509310337125315988621536707974800932920172536267515972153623828472261407362596519587875808187189899616796066317647566739628794821255767684716986862299392441679868888317998301229170579115624921318061480307268341334371515874701924444174766941869416541456519311366993090502848426339419188448811931585761792622084376660206702593398994181148291106155946041294505657902655174201626705246570380406055211301084351112976226552342664972392287201887884580264233838193735712528096729118811682722501634821174770126076074046368530706578971485134633169931110321894048945759179253585860151048405353 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.novamedia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novamedia.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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