web.tdpud.org

- Truckee Donner Public Utility District -

Issued by Thawte SSL CA

About this certificate

This digital certificate with serial number 1e:26:95:ce:61:f1:0e:54:fe:5f:0a:d8:74:81:71:84 was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Truckee Donner Public Utility District

Organization: Truckee Donner Public Utility District
Organization unit: Information Technology
State / Province: California
Locality: Truckee
Country: US

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1e:26:95:ce:61:f1:0e:54:fe:5f:0a:d8:74:81:71:84
Serial Number (int): 40077185584515686430529323676664426884
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: a7:a2:83:bb:34:45:40:3d:fc:d5:30:4f:12:b9:3e:a1:01:9f:f6:db

Fingerprint (sha1): d7:82:68:20:59:a6:92:5a:37:7a:51:ab:1e:fd:cc:ff:e9:52:33:48
Fingerprint (sha256): f4:75:27:c5:00:0d:a2:be:39:73:40:fe:5c:0e:93:0c:53:96:67:18:67:e6:e1:72:5e:ca:53:55:32:15:bb:b0

Issuing Certificate URL: http://svr-ov-aia.thawte.com/ThawteOV.cer

Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-ov-crl.thawte.com/ThawteOV.crl

Check the revocation status for certificate web.tdpud.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for web.tdpud.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

web.tdpud.org

Other certificates including the domain name tdpud.org

(limited to 100 certificates)
tdpud.org
san-e2.granicusgovaccess.net
tdpud.org
tdpud.org
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-b3.granicusgovaccess.net
tdpud.org
san-b3.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
ebill.tdpud.org
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
tdpud.org
*.tdpud.org
san-b3.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
tdpud.org
ebill.tdpud.org
san-e2.granicusgovaccess.net
ebill.tdpud.org
tdpud.org
san-e2.granicusgovaccess.net
ebill.tdpud.org
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
*.tdpud.org
san-e2.granicusgovaccess.net
tdpud.org
san-e2.granicusgovaccess.net
ebill.tdpud.org
san-e2.granicusgovaccess.net
ebill.tdpud.org
*.tdpud.org
ebill.tdpud.org
san-e2.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-b3.granicusgovaccess.net
*.tdpud.org
san-e2.granicusgovaccess.net
san-b3.granicusgovaccess.net
tdpud.org
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-b3.granicusgovaccess.net
tdpud.org
san-e2.granicusgovaccess.net
*.tdpud.org
*.tdpud.org
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-b3.granicusgovaccess.net
*.tdpud.org
san-b3.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-e2.granicusgovaccess.net
ebill.tdpud.org
san-b3.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-b3.granicusgovaccess.net
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net
ebill.tdpud.org
web.tdpud.org
san-e2.granicusgovaccess.net
san-e2.granicusgovaccess.net

Certificate

The complete raw certificate details for web.tdpud.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEyzCCA7OgAwIBAgIQHiaVzmHxDlT+XwrYdIFxhDANBgkqhkiG9w0BAQUFADA8
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMVGhhd3RlLCBJbmMuMRYwFAYDVQQDEw1U
aGF3dGUgU1NMIENBMB4XDTEzMTAyNDAwMDAwMFoXDTE3MTAyMzIzNTk1OVowgZ4x
CzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRAwDgYDVQQHFAdUcnVj
a2VlMS8wLQYDVQQKFCZUcnVja2VlIERvbm5lciBQdWJsaWMgVXRpbGl0eSBEaXN0
cmljdDEfMB0GA1UECxQWSW5mb3JtYXRpb24gVGVjaG5vbG9neTEWMBQGA1UEAxQN
d2ViLnRkcHVkLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALa6
e+xj5pL9mSK0RTsIx6VFk3GD7YTU3V8zDY07fBLmiZnAjBsMvHxr87DCp+p0t3uJ
mxfumUVda320cg1RqUo0Q9P6jmi9VPX3BH65TX6syO9i7FRqW1Du6a6EQ4QGGsfB
0sMb0sIaReWS0XIKpSC47VY85Zak4tb4D9iZSlQceg/AOdOxytzjVJmDaTNvgSl9
JRUrBYrauDeEq0DnMM+I8NU6avoKQfhTR+A9LGUFFsKiGv5Scvt2DC5LPEz0O7a4
iKovwHXuvuajs5xH2F3QvIoX+WuBmDmKLHlHFRiQCds2WQTO/OECGZSeMAOW7nXe
1HGmxGuSyd//yb3oFzkCAwEAAaOCAWQwggFgMBgGA1UdEQQRMA+CDXdlYi50ZHB1
ZC5vcmcwCQYDVR0TBAIwADBCBgNVHSAEOzA5MDcGCmCGSAGG+EUBBzYwKTAnBggr
BgEFBQcCARYbaHR0cHM6Ly93d3cudGhhd3RlLmNvbS9jcHMvMA4GA1UdDwEB/wQE
AwIFoDAfBgNVHSMEGDAWgBSnooO7NEVAPfzVME8SuT6hAZ/22zA6BgNVHR8EMzAx
MC+gLaArhilodHRwOi8vc3ZyLW92LWNybC50aGF3dGUuY29tL1RoYXd0ZU9WLmNy
bDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwaQYIKwYBBQUHAQEEXTBb
MCIGCCsGAQUFBzABhhZodHRwOi8vb2NzcC50aGF3dGUuY29tMDUGCCsGAQUFBzAC
hilodHRwOi8vc3ZyLW92LWFpYS50aGF3dGUuY29tL1RoYXd0ZU9WLmNlcjANBgkq
hkiG9w0BAQUFAAOCAQEAcK5nQkwTkrq6haorQD7G62hAEyvPmRoOWdfv9tHbGkM4
IgMascEkNk2hHeLip71IsoKVZmUGSy3b4Yd5M+BxXzkkdOZPe8q1i404bL4Hf8zl
LbPZ/I/ZSYSFwZxL83nQfZSmLiKFcl4ebAxsAQbYe4sZnHrcohVw+w4f9iFig+K+
W1fgsHM6Ax1zO0iCMGeIX3TCyoy568PRw+FDfLejx96zxPhJXCg7NDip5AjemQiq
T5HaRcMRqyJudTuo94Filn5C1xk+JgZRPOEdvJ0fLTlz8LTc693fLTSZp/cuziZ7
kDm6owSwnZe/JERrE67eIKlqcWzfryQs25YBi4qcfg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrp77GPmkv2ZIrRFOwjH
pUWTcYPthNTdXzMNjTt8EuaJmcCMGwy8fGvzsMKn6nS3e4mbF+6ZRV1rfbRyDVGp
SjRD0/qOaL1U9fcEfrlNfqzI72LsVGpbUO7proRDhAYax8HSwxvSwhpF5ZLRcgql
ILjtVjzllqTi1vgP2JlKVBx6D8A507HK3ONUmYNpM2+BKX0lFSsFitq4N4SrQOcw
z4jw1Tpq+gpB+FNH4D0sZQUWwqIa/lJy+3YMLks8TPQ7triIqi/Ade6+5qOznEfY
XdC8ihf5a4GYOYoseUcVGJAJ2zZZBM784QIZlJ4wA5budd7UcabEa5LJ3//JvegX
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 40077185584515686430529323676664426884
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-10-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Truckee'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Truckee Donner Public Utility District'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Information Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'web.tdpud.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23067330228937798588018339631954867774750778706540717515228453339567759932275847180742375884695112192094316943807853446656375502435613272274177751724640611066721252632211794463900983527279205758314403770578174157643663393125029533241489060539193465538315392750685514942209832428841465858587732483716143150157732867742187002795560292660187915580475703746616512503331869994747269800043583053993112426374434203441291824086831757855332132473884513766345536224604570030205183244066067183453663462294302582874630302806558010281878846696774624719388054450645463827149847866811827463828827335590094716130828628329785142548281
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.tdpud.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a7a283bb3445403dfcd5304f12b93ea1019ff6db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-crl.thawte.com/ThawteOV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (93 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-aia.thawte.com/ThawteOV.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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