*.cargolux.com
- Champ Cargosystems -
Issued by thawte SSL CA - G2
About this certificate
This digital certificate with serial number 06:1d:c5:e6:5a:c4:83:5d:9c:a9:92:dc:66:1a:38:21 was issued on by thawte, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Champ Cargosystems
Organization:
Champ Cargosystems
State / Province:
CONTERN
Locality: CONTERN
Country: LU
Locality: CONTERN
Country: LU
thawte, Inc.
Organization:
thawte, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 06:1d:c5:e6:5a:c4:83:5d:9c:a9:92:dc:66:1a:38:21Serial Number (int): 8129958468867523599932084577109686305
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60
Fingerprint (sha1): 71:aa:5e:36:eb:1b:81:b6:9c:35:65:96:c5:bb:db:42:9b:f2:fd:83
Fingerprint (sha256): fb:d4:4b:5c:ac:23:3f:fc:71:82:89:df:6a:46:41:8e:ed:db:84:cc:4e:90:de:d2:17:80:1b:45:8a:ad:a3:d4
Issuing Certificate URL: http://tj.symcb.com/tj.crt
Revocation information
OCSP Server: http://tj.symcd.comCRL Distribution Point: http://tj.symcb.com/tj.crl
Check the revocation status for certificate *.cargolux.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.cargolux.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.cargolux.com
cargolux.com
cargolux.com
Other certificates including the domain name cargolux.com
(limited to 100 certificates)
www.cargolux.com
cargolux.com
*.cargolux.com
www.cargolux.com
sip.champ.aero
www.cargolux.com
www.cargolux.com
CVZPWEUASAVAS01.cargolux.com
anniversary.cargolux.com
www.cargolux.com
sync.cargolux.com
cargolux.com
*.cargolux.com
cargolux.com
cargolux.com
cargolux.com
cargolux.com
sync.cargolux.com
*.cargolux.com
cargolux.com
sync.cargolux.com
www.cargolux.com
sip.champ.aero
sync.cargolux.com
www.cargolux.com
sync.cargolux.com
sip.champ.aero
www.cargolux.com
*.cargolux.com
www.cargolux.com
*.cargolux.com
sync.cargolux.com
sync.cargolux.com
sip.champ.aero
anniversary.cargolux.com
sync.cargolux.com
www.cargolux.com
*.cargolux.com
cargolux.com
*.cargolux.com
www.cargolux.com
sip.champ.aero
www.cargolux.com
www.cargolux.com
CVZPWEUASAVAS01.cargolux.com
anniversary.cargolux.com
www.cargolux.com
sync.cargolux.com
cargolux.com
*.cargolux.com
cargolux.com
cargolux.com
cargolux.com
cargolux.com
sync.cargolux.com
*.cargolux.com
cargolux.com
sync.cargolux.com
www.cargolux.com
sip.champ.aero
sync.cargolux.com
www.cargolux.com
sync.cargolux.com
sip.champ.aero
www.cargolux.com
*.cargolux.com
www.cargolux.com
*.cargolux.com
sync.cargolux.com
sync.cargolux.com
sip.champ.aero
anniversary.cargolux.com
sync.cargolux.com
www.cargolux.com
*.cargolux.com
Certificate
The complete raw certificate details for *.cargolux.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIQBh3F5lrEg12cqZLcZho4ITANBgkqhkiG9w0BAQsFADBB MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMdGhhd3RlLCBJbmMuMRswGQYDVQQDExJ0 aGF3dGUgU1NMIENBIC0gRzIwHhcNMTYwMzMxMDAwMDAwWhcNMTkwMzMxMjM1OTU5 WjBnMQswCQYDVQQGEwJMVTEQMA4GA1UECBMHQ09OVEVSTjEQMA4GA1UEBxQHQ09O VEVSTjEbMBkGA1UEChQSQ2hhbXAgQ2FyZ29zeXN0ZW1zMRcwFQYDVQQDFA4qLmNh cmdvbHV4LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOhskAsB ZRqdA2IIUaXqDm2C5NbOHJqyDDOzeOYPngPWxxJIWGyvOJXyxdm9oRL3A7lEEjLK Ld0Xf+04DYVl2jx14JjmrACovEp8ieKBTwRHHwPmK3OBR+GqHV9nsrx76M9juKOM IyFr+hFts349H4UDtyA7eMPdzvZI3qtxUJ2KGv9IIVvZsAMY/SPleduinea00W4j 011nnIn+RVkw0/Mj/PmhJeqhxa6yR9iOGc6CsjwQ5uYpMua52jUEpZhssQETxHw4 2YNueGidE4+n2HVn/rTzGgL6AMl84jt+mVFJ/l3GKr99lmR61Z+9lf9FsLlbh8Dj Ec5v482qDgPY0kECAwEAAaOCA3cwggNzMCcGA1UdEQQgMB6CDiouY2FyZ29sdXgu Y29tggxjYXJnb2x1eC5jb20wCQYDVR0TBAIwADBuBgNVHSAEZzBlMGMGBmeBDAEC AjBZMCYGCCsGAQUFBwIBFhpodHRwczovL3d3dy50aGF3dGUuY29tL2NwczAvBggr BgEFBQcCAjAjDCFodHRwczovL3d3dy50aGF3dGUuY29tL3JlcG9zaXRvcnkwDgYD VR0PAQH/BAQDAgWgMB8GA1UdIwQYMBaAFMJPSFf80U+awF04fQ4F29kutVJgMCsG A1UdHwQkMCIwIKAeoByGGmh0dHA6Ly90ai5zeW1jYi5jb20vdGouY3JsMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBXBggrBgEFBQcBAQRLMEkwHwYIKwYB BQUHMAGGE2h0dHA6Ly90ai5zeW1jZC5jb20wJgYIKwYBBQUHMAKGGmh0dHA6Ly90 ai5zeW1jYi5jb20vdGouY3J0MIIB9QYKKwYBBAHWeQIEAgSCAeUEggHhAd8AdgDd 6x0reg1PpiCLga2BaHB+Lo6dAdVciI09EcTNtuy+zAAAAVPLfVy7AAAEAwBHMEUC IDY5oCVLWSPJVjUTnzTacR7BU6MMvOHMUA/+x6fXPfWpAiEA31Y/mD70Db5fl5Yz qMwnWN32mg9v0EuRL4xNeIKDLz0AdwCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jj d80OyA3cEAAAAVPLfVwAAAAEAwBIMEYCIQDx5Sy1zZRzsHHMCSftHbaS7/deJErZ iSHgsVnDpYuuZAIhAOhi0yRH5W0t6SsEqFeGgkL9EXziqlIZ6WLZouVV+KFDAHUA aPaY+B9kgr46jO65KB1M/HFRXWeT1ETRCmesu09P+8QAAAFTy31cAAAABAMARjBE AiBg/wrYelghMm0oQtMCxU+/dJfF5SHpdtMNf0WqrImNQwIgNiu12nvbdSE2AfN+ ZuBUJLR5T5Wl2QAKRLp88elTAH4AdQDuS723dc5guuFCaR+r4Z5mow9+X7By2IMA xHuJeqj9ywAAAVPLfV3NAAAEAwBGMEQCIDnFyBTeahTCKW9Wzcy4P3vzYKDV2GXW EKNNxpU5l1WkAiBPdi13vflNJBbwXZU91RZZ2sD9Qy85an9H3m28ieuXkDANBgkq hkiG9w0BAQsFAAOCAQEACsMaXspbe1ky0l2Nu308K3qo14iHJ1opYktXH7/pOVsZ o1uZoSpG/JAhZRRqf+oijmBCibGpqhwvoriePbbZgjyRoM7gfwk6bQoUSZnnA0Cf yD85GUtlmT2P5w6G1e02F7j2G/MDUw27F6N5UX+VROWbhOfCSa/gar3ZDR7KZTfA ZKcS4POsd+4tiFizovsYJfLuOhVx9uo+spidUNGY3mvbiB6ekdF3piq78GBFegOx m8adHa6r+vsPZim0i2jkeX+hYmsQpaQ7lkmpEZgtS02bUDwR/ALiYdaVTLpm6H6d zQQ07k/aa7L+CVf+QkMFdolq4klqB2V3LYHATXtS2w== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GyQCwFlGp0DYghRpeoO bYLk1s4cmrIMM7N45g+eA9bHEkhYbK84lfLF2b2hEvcDuUQSMsot3Rd/7TgNhWXa PHXgmOasAKi8SnyJ4oFPBEcfA+Yrc4FH4aodX2eyvHvoz2O4o4wjIWv6EW2zfj0f hQO3IDt4w93O9kjeq3FQnYoa/0ghW9mwAxj9I+V526Kd5rTRbiPTXWecif5FWTDT 8yP8+aEl6qHFrrJH2I4ZzoKyPBDm5iky5rnaNQSlmGyxARPEfDjZg254aJ0Tj6fY dWf+tPMaAvoAyXziO36ZUUn+XcYqv32WZHrVn72V/0WwuVuHwOMRzm/jzaoOA9jS QQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 8129958468867523599932084577109686305 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-31 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-31 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CONTERN' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'CONTERN' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Champ Cargosystems' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.cargolux.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29340820998930499306584125674297169056992281700181459671902660023391655387964059132695742514958173418028707190627768510697320582453947733113930716341051023970017414588603961700495148575019164040922876515366712756174445716215404008027866735925324081056359879324488609463451053998468372958751593531248863611630750541081983449063664786560112961200338345783965444140050907005066010954688834828159015081817301138020184634844039886813257898921795157634111111072092877290602426118930553512512518555657169107518758758471506107838275122477789513410315197756850218809891358764972183249948783707830831491417291892232815478624833 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cargolux.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cargolux.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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