www.thancfoundation.org

Issued by Go Daddy Secure Certification Authority

About this certificate


This digital certificate with serial number 03:fa:ec:65:cc:54:b9 was issued on by GoDaddy.com, Inc. .

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

Cerificate errors/warnings *beta

  • ERROR: localityName or stateOrProvinceName is required if organizationName is set
  • ERROR: stateOrProvinceName is required if organizationName is set
  • ERROR: countryName is required if organizationName is set

www.thancfoundation.org

Organization: www.thancfoundation.org
Organization unit: Domain Control Validated

GoDaddy.com, Inc.

Company registration number: 07969287
Organization: GoDaddy.com, Inc.
Organization unit: http://certificates.godaddy.com/repository

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fa:ec:65:cc:54:b9
Serial Number (int): 1120318157247673
Serial Number lenght: 50 bits, 7 octets

SubjectKeyId: 30:19:61:7e:0d:9d:fd:55:3b:b0:17:43:5c:16:be:79:66:66:fb:ad
AuthorityKeyId: fd:ac:61:32:93:6c:45:d6:e2:ee:85:5f:9a:ba:e7:76:99:68:cc:e7

Fingerprint (sha1): e3:08:c9:c1:a0:43:cf:f7:ee:97:00:67:0a:e3:b9:3d:00:e6:b5:4c
Fingerprint (sha256): a5:41:ac:08:bb:29:8e:28:90:9d:1b:cd:e1:69:67:e0:56:e8:f5:cd:97:8f:0e:f4:c4:e0:f2:b1:71:e7:78:61

Issuing Certificate URL: http://certificates.godaddy.com/repository/gd_intermediate.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gds1-62.crl

Check the revocation status for the current certificate on www.thancfoundation.org
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

www.thancfoundation.org
thancfoundation.org

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGfzCCBWegAwIBAgIHA/rsZcxUuTANBgkqhkiG9w0BAQUFADCByjELMAkGA1UE BhMCVVMxEDAOBgNVBAgTB0FyaXpvbmExEzARBgNVBAcTClNjb3R0c2RhbGUxGjAY BgNVBAoTEUdvRGFkZHkuY29tLCBJbmMuMTMwMQYDVQQLEypodHRwOi8vY2VydGlm aWNhdGVzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkxMDAuBgNVBAMTJ0dvIERhZGR5 IFNlY3VyZSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTERMA8GA1UEBRMIMDc5Njky ODcwHhcNMTIwMTEyMTkxMDQ2WhcNMTUwMTEyMTkxMDQ2WjBnMSAwHgYDVQQKExd3 d3cudGhhbmNmb3VuZGF0aW9uLm9yZzEhMB8GA1UECxMYRG9tYWluIENvbnRyb2wg VmFsaWRhdGVkMSAwHgYDVQQDExd3d3cudGhhbmNmb3VuZGF0aW9uLm9yZzCCAiIw DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAJJxfAODKSaehDLy5i7Zlqlucm9V m+sHt9urJoqrw5LdIMCurhYZjooqfzW1B1EBTHVT0mCh7LSFHlpXcXHb/FC1Ze6/ LOa/sreHwm0rzuidCmesnRezjsKRiAomuDOmjtK9XRYa8Y6eNrTcVnPu2liBXop8 Gc67hW1Pd1oBqx8krj/rQJeZmKuElzUI3ZfNw3C2YjsSxKOT7UwJsUNTkuYy+6tr FiyNXMZ3pamzYHExfl3u52cK+7iNfYwihJCktY8qtzyxNHS/lU+y4MoZlOjwHMcl AHKkb7xpfZFYInXZPoLYomDFBWjUn4EAXd00dRa5AQWi1MoOTvMgD7qm9lMwsLbJ j4WcIBWEIPIZjGw6+A3eJRdU4nPtw4OS+C22MAEqwzVp1V+CdM8N0VtsGFHNS6G4 5z1gqXNknMcvjxoSi9wdDO2jcTn4tBswLq7KRut98Kqi1M/xBAt5+OnOVJkT9V19 +JtPVd26mUFRes2Bx/p5kWGf/+oGEaxfZLyImwa4pyjTkP6WtbCouEIzUKr/uaiG m0OJiOhheYrZ5hU89r+3Zl27ZDeIZdY6IUvwZk/wU+0sqelDGzEJVS0AO2lrPU9v VY7M8c+CNiCtspqw7cM9vmJh8IvvuuS7JxRlcjf5ztyl4gm66J0xpfbm+xJdSVCo 9BjlQY2+aJ+tcU2BAgMBAAGjggHKMIIBxjAPBgNVHRMBAf8EBTADAQEAMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAOBgNVHQ8BAf8EBAMCBaAwMwYDVR0f BCwwKjAooCagJIYiaHR0cDovL2NybC5nb2RhZGR5LmNvbS9nZHMxLTYyLmNybDBT BgNVHSAETDBKMEgGC2CGSAGG/W0BBxcBMDkwNwYIKwYBBQUHAgEWK2h0dHA6Ly9j ZXJ0aWZpY2F0ZXMuZ29kYWRkeS5jb20vcmVwb3NpdG9yeS8wgYAGCCsGAQUFBwEB BHQwcjAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZ29kYWRkeS5jb20vMEoGCCsG AQUFBzAChj5odHRwOi8vY2VydGlmaWNhdGVzLmdvZGFkZHkuY29tL3JlcG9zaXRv cnkvZ2RfaW50ZXJtZWRpYXRlLmNydDAfBgNVHSMEGDAWgBT9rGEyk2xF1uLuhV+a uud2mWjM5zA3BgNVHREEMDAughd3d3cudGhhbmNmb3VuZGF0aW9uLm9yZ4ITdGhh bmNmb3VuZGF0aW9uLm9yZzAdBgNVHQ4EFgQUMBlhfg2d/VU7sBdDXBa+eWZm+60w DQYJKoZIhvcNAQEFBQADggEBAIOd2eSi0zrDKxeAy46YBlMsrmTw4AdA3JgooZWG RcTtnZSIq8iZ4KNVvxdUpT4VvnFqXiidcAh3smOgdBvGZU/fMtjjj2ZxP2CUraR6 BnM9FqTls5uFmmQNhY1U86QmnbSe1u2eYVEMkZP9ck9I5RqHDTsxLBN+fK9UQZyK hWAzg1Whjl7QwHx7d7+jQlMWD8w42mYgpzdKTELcQAlVX7LRPt6715AX3F2KNgLR +2coJDmM91kzD7IqcKaRrv9IZVAAdeVBf/t/I6P4rZ6/usUW9iqFPnKJyZJkXhqP Bas4RVisQiITss7ob1L8mxSYlZ6YrKUEWQJVabm3Ltn0+hg= -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAknF8A4MpJp6EMvLmLtmW qW5yb1Wb6we326smiqvDkt0gwK6uFhmOiip/NbUHUQFMdVPSYKHstIUeWldxcdv8 ULVl7r8s5r+yt4fCbSvO6J0KZ6ydF7OOwpGICia4M6aO0r1dFhrxjp42tNxWc+7a WIFeinwZzruFbU93WgGrHySuP+tAl5mYq4SXNQjdl83DcLZiOxLEo5PtTAmxQ1OS 5jL7q2sWLI1cxnelqbNgcTF+Xe7nZwr7uI19jCKEkKS1jyq3PLE0dL+VT7LgyhmU 6PAcxyUAcqRvvGl9kVgiddk+gtiiYMUFaNSfgQBd3TR1FrkBBaLUyg5O8yAPuqb2 UzCwtsmPhZwgFYQg8hmMbDr4Dd4lF1Tic+3Dg5L4LbYwASrDNWnVX4J0zw3RW2wY Uc1LobjnPWCpc2Scxy+PGhKL3B0M7aNxOfi0GzAurspG633wqqLUz/EEC3n46c5U mRP1XX34m09V3bqZQVF6zYHH+nmRYZ//6gYRrF9kvIibBrinKNOQ/pa1sKi4QjNQ qv+5qIabQ4mI6GF5itnmFTz2v7dmXbtkN4hl1johS/BmT/BT7Syp6UMbMQlVLQA7 aWs9T29Vjszxz4I2IK2ymrDtwz2+YmHwi++65LsnFGVyN/nO3KXiCbronTGl9ub7 El1JUKj0GOVBjb5on61xTYECAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1120318157247673 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certificates.godaddy.com/repository' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certification Authority' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '07969287' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-01-12 19:10:46 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-12 19:10:46 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.thancfoundation.org' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.thancfoundation.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 597436534227527623362083733550620563255163350326694638661869881078510460344372531693610842631245843791041084690446435205470050008622141154866414345122078760807726169932659826575569354830907251282343301002184207958573817123836103530535518560610868370521566076813329693582158938691810032815714430052828686485865430011552030051590020342035344763127249674599330853953927136441810612680905359986865192063513250328279777846677883456992329956330159890855838028838355101591029916125674263092211003326411275287007026000910989488411568106948982845025907664962137564812046281829786511168585462829288915524157235203781060620030288497619601745005749084713211859637913994145263440203864647157272909901284436863343634413400028547106210241042545733324402004587801299883996887591733483845798057285858235458816810926109588182905378754398658782202465753065124026538691765360602411458568230291915875517799570453537955105347988766276055053016050294383637712585969095253122362851337309872588190008908242724353421121199904804746754399021355970611191058810372061609800602847301190778291114204555061330966777835254065395007259107422971801941519612960872190931044217466321120096729596189159206459173300880916242085617408296960100835473680226545180979496045953 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (5 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN false . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gds1-62.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gd_intermediate.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fdac6132936c45d6e2ee855f9abae7769968cce7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thancfoundation.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thancfoundation.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3019617e0d9dfd553bb017435c16be796666fbad . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00839dd9e4a2d33ac32b1780cb8e9806532cae64f0e00740dc9828a1958645c4ed9d9488abc899e0a355bf1754a53e15be716a5e289d700877b263a0741bc6654fdf32d8e38f66713f6094ada47a06733d16a4e5b39b859a640d858d54f3a4269db49ed6ed9e61510c9193fd724f48e51a870d3b312c137e7caf54419c8a8560338355a18e5ed0c07c7b77bfa34253160fcc38da6620a7374a4c42dc4009555fb2d13edebbd79017dc5d8a3602d1fb672824398cf759330fb22a70a691aeff4865500075e5417ffb7f23a3f8ad9ebfbac516f62a853e7289c992645e1a8f05ab384558ac422213b2cee86f52fc9b1498959e98aca50459025569b9b72ed9f4fa18