*.opt.nc

- OFFICE DES POSTES ET TELECOMMUNICATIONS DE NOUVELLE-CALEDONIE -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 0b:98:26:79:0f:dd:ff:e8:db:08:79:d5:d2:39:2d:de was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • X520 Subject fields MUST only contain printable control characters (RFC 5280: Appendix A)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

OFFICE DES POSTES ET TELECOMMUNICATIONS DE NOUVELLE-CALEDONIE

Organization: OFFICE DES POSTES ET TELECOMMUNICATIONS DE NOUVELLE-CALEDONIE
Organization unit: OPT NC - Direction des Systemes d’Information
Locality: NOUMEA
Country: NC

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:98:26:79:0f:dd:ff:e8:db:08:79:d5:d2:39:2d:de
Serial Number (int): 15411517399214627643275236711501213150
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 3f:88:07:5d:ec:f8:c9:0a:e4:57:4d:50:69:3d:cb:87:dd:bd:2c:97
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 6e:34:d0:13:3b:2e:17:20:1c:a3:a9:aa:c8:5a:35:c8:83:64:dd:ef
Fingerprint (sha256): f5:2e:9a:d7:f9:22:00:98:cd:b7:32:43:26:39:14:08:60:e9:04:36:a3:71:32:b0:12:c4:9b:47:67:ce:ef:be

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate *.opt.nc

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.opt.nc

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.opt.nc
opt.nc

Other certificates including the domain name opt.nc

(limited to 100 certificates)
helios.opt.nc
*.opt.nc
eos.opt.nc
*.opt.nc
*.opt.nc
sip.opt.nc
helios.opt.nc
*.opt.nc
*.opt.nc
*.opt.nc
*.opt.nc
*.opt.nc
maps.opendata.opt.nc
eos.opt.nc
helios.opt.nc
*.opt.nc
eos.opt.nc
*.opt.nc
maps.opendata.opt.nc
*.opt.nc
sip.opt.nc
*.opt.nc
*.opt.nc
*.opt.nc
eos.opt.nc
eos.opt.nc
*.opt.nc
helios.opt.nc
*.opt.nc
*.opt.nc
helios.opt.nc
webmail.opt.nc
*.opt.nc
*.opt.nc
*.opt.nc
*.opt.nc
maps.opendata.opt.nc
*.opt.nc
payments.opt.nc
maps.opendata.opt.nc
*.opt.nc
sip.opt.nc
maps.opendata.opt.nc
*.opt.nc
*.opt.nc
sip.opt.nc
eos.opt.nc
*.opt.nc
*.opt.nc
*.opt.nc
maps.opendata.opt.nc
sip.opt.nc
*.opt.nc
*.opt.nc
sip.opt.nc
*.opt.nc
webmail.opt.nc
eos.opt.nc
*.opt.nc
titan.opt.nc
*.opt.nc
titan.opt.nc
*.opt.nc
*.opt.nc
payments.opt.nc
titan.opt.nc
eos.opt.nc
webmail.opt.nc
maps.opendata.opt.nc
*.opt.nc
*.opt.nc
*.opt.nc
titan.opt.nc
*.opt.nc
*.opt.nc
*.opt.nc
auth.opt.nc
*.opt.nc
maps.opendata.opt.nc

Certificate

The complete raw certificate details for *.opt.nc in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGuDCCBaCgAwIBAgIQC5gmeQ/d/+jbCHnV0jkt3jANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMRswGQYDVQQDExJUaGF3dGUgUlNBIENBIDIwMTgwHhcN
MTgwOTE0MDAwMDAwWhcNMjAwMTAyMTIwMDAwWjCBtjELMAkGA1UEBhMCTkMxDzAN
BgNVBAcTBk5PVU1FQTFGMEQGA1UEChM9T0ZGSUNFIERFUyBQT1NURVMgRVQgVEVM
RUNPTU1VTklDQVRJT05TIERFIE5PVVZFTExFLUNBTEVET05JRTE7MDkGA1UECwwy
T1BUIE5DIC0gRGlyZWN0aW9uIGRlcyBTeXN0ZW1lcyBkw6LCgMKZSW5mb3JtYXRp
b24xETAPBgNVBAMMCCoub3B0Lm5jMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6eWqI9XjtkyJ65BiwRr52GbJ1bQ0iCZWLS5N44O78NLNDfiL9VZ+jRJS
BVqyTe6z6eqwHoXoR7nfSmBxoTimWPKclkl3sXxEXFRuOy6FdfweKJctzC7C38e1
Qm0XNH2gGalBmcxaBoWIcOdVTeT0jxtQQM3lip1ZB9fZS+sGAVeq6LfBlYIm08/R
Ai1TEszpghMmI5Yr2L7BJvc2XyehWLPaBbwqeesSWTv/wVP65/nmsEGSb/s/UAw7
sXpyKojvEGUr46WNUIMsi3/L7qhmMAaNMyQdmNL8XWMyP/T9/wALb54+wuXGLGxE
q3qBRPRVYi8bPIH/CQT1Qn++YDYuiQIDAQABo4IDGTCCAxUwHwYDVR0jBBgwFoAU
o8heZVTlMHjBBeoHCmpZzLn+3lowHQYDVR0OBBYEFD+IB13s+MkK5FdNUGk9y4fd
vSyXMBsGA1UdEQQUMBKCCCoub3B0Lm5jggZvcHQubmMwDgYDVR0PAQH/BAQDAgWg
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA6BgNVHR8EMzAxMC+gLaAr
hilodHRwOi8vY2RwLnRoYXd0ZS5jb20vVGhhd3RlUlNBQ0EyMDE4LmNybDBMBgNV
HSAERTBDMDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5k
aWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjBvBggrBgEFBQcBAQRjMGEwJAYIKwYB
BQUHMAGGGGh0dHA6Ly9zdGF0dXMudGhhd3RlLmNvbTA5BggrBgEFBQcwAoYtaHR0
cDovL2NhY2VydHMudGhhd3RlLmNvbS9UaGF3dGVSU0FDQTIwMTguY3J0MAkGA1Ud
EwQCMAAwggF/BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB2AKS5CZC0GFgUh7sTosxn
cAo8NZgE+RvfuON3zQ7IDdwQAAABZdbsdUEAAAQDAEcwRQIhAK+nncFOHCc9UNqW
PKn7D0f6vNNUDNmO9tAfMBZnIO5/AiALKFV1KfW7wzZwAyXEoowia9uV6cNonH3n
gW08cVimBwB3AId1v+dZfPiMQ5lfvfNu/1aNR1Y2/0q1YMG06v9eoIMPAAABZdbs
diEAAAQDAEgwRgIhAND8YO6xrLaEfCy2Adk0jlt54QuVBdMaWjAXWGou5R20AiEA
4SuyO9Bw6MfogWzO4vOlPh9RhYdOz5xthfKYWj/b1yQAdgDuS723dc5guuFCaR+r
4Z5mow9+X7By2IMAxHuJeqj9ywAAAWXW7HWIAAAEAwBHMEUCIQCD0q4BQb+PsEzX
SnxM4xQdk7AeSrSdcXUphxVpEhciigIgdUi8WN869e8hQEE/GxN+7lSr/dH3EScm
yit5CgxSzuYwDQYJKoZIhvcNAQELBQADggEBAK5GHZdDdW0wanrWeJg4pCB8brGg
bK82eNFPVwWZ4EksrNSbpEFQktRlfae8gLLN2HMycNEm2gbI2pSpl/p/9Ph/Ci0r
iqahN8Yy5qFJfHT1au1u6JO5q4BhzG9h6586PLPtyEBK9/DX2MdiRBFuCxWrbkrj
Kg1FO1IdvRGEhgj4+bYC2udtCTs7xkzH40D4TLwjBaOkGpGeS2amblKFqRXKbu3s
z8Hl/qXs/kHeqcyaz3G1ohz5SQ8MBleeH44u5Mp2HZk4AgNkmTd0eeRFCPsEi/bi
h5P4ir12KN8K+icgR+hrmJ7EN6lNzJ7sypAwxoOqtcIfyLpJbGt6GAw1qyY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6eWqI9XjtkyJ65BiwRr5
2GbJ1bQ0iCZWLS5N44O78NLNDfiL9VZ+jRJSBVqyTe6z6eqwHoXoR7nfSmBxoTim
WPKclkl3sXxEXFRuOy6FdfweKJctzC7C38e1Qm0XNH2gGalBmcxaBoWIcOdVTeT0
jxtQQM3lip1ZB9fZS+sGAVeq6LfBlYIm08/RAi1TEszpghMmI5Yr2L7BJvc2Xyeh
WLPaBbwqeesSWTv/wVP65/nmsEGSb/s/UAw7sXpyKojvEGUr46WNUIMsi3/L7qhm
MAaNMyQdmNL8XWMyP/T9/wALb54+wuXGLGxEq3qBRPRVYi8bPIH/CQT1Qn++YDYu
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15411517399214627643275236711501213150
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-02 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NOUMEA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OFFICE DES POSTES ET TELECOMMUNICATIONS DE NOUVELLE-CALEDONIE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'OPT NC - Direction des Systemes d’Information'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.opt.nc'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29526776896894530743605068860257574645848060502096291487326394725580604029302079262000434232312332798258430945383543127012330227619531703850009606205291734342202514216525542679280575051787794353231295005815095776396358487057943570536400561725798288746515657740831542904068056713562932957275953780330971342346236903419320353422526956771937671234648791596523600571350117783788321025323480901432497682331623179122089953727984884066480894009456562965451565733980717466620514454586732167673192066269697667332864311181241615580467996953205360763131454456261934285651636664460652474670923334356314316085997231892346321645193
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3f88075decf8c90ae4574d50693dcb87ddbd2c97
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.opt.nc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opt.nc'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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