a7b71ae87e24b876d61c51c431ee7f99.bin - naps.exe

info
MZ
PE
resources
imports
foremost
version info
signature
hexdump
disasm
log
discuss
donate

filename	a7b71ae87e24b876d61c51c431ee7f99.bin
size	1096880 (0x10bcb0)
md5	a7b71ae87e24b876d61c51c431ee7f99

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xf8

Rich Header

lib id	version	times used
223	21005	38
147	30729	29
1	0	275
225	20806	2
131	30729	2
225	21005	137
224	21005	245
225	40629	69
219	21005	1
151	0	1
222	40629	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	6
TimeDateStamp	0x5ac37770
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x102
Magic	0x10b
LinkerVersion	12.0
SizeOfCode	0xcee00
SizeOfInitializedData	0x3fa00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x89e62
BaseOfCode	0x1000
BaseOfData	0xd0000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.1
ImageVersion	0.0
SubsystemVersion	5.1
Reserved1	0
SizeOfImage	0x113000
SizeOfHeaders	0x400
CheckSum	0x114791
Subsystem	2
DllCharacteristics	0x8140
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v8.0

Sections

name	va	vsize	raw size	flags
.text	0x1000	0xced2a	0xcee00	R-X CODE
.rdata	0xd0000	0x28b4e	0x28c00	R-- IDATA
.data	0xf9000	0xb1ac	0x6800	RW- IDATA
.tls	0x105000	2	0x200	RW- IDATA
.rsrc	0x106000	0x588	0x600	R-- IDATA
.reloc	0x107000	0xb3c8	0xb400	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0xf770c	0xdc
RESOURCE	0x106000	0x588
EXCEPTION	0	0
SECURITY	0x10a200	0x1ab0
BASERELOC	0x107000	0xb3c8
DEBUG	0xd0680	0x38
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0xe2298	0x18
LOAD_CONFIG	0xe2250	0x40
Bound_IAT	0	0
IAT	0xd0000	0x358
Delay_IAT	0	0
CLR_Header	0	0

TLS

raw start	raw end	index	callbks	zero fill	flags
0x505000	0x505001	0x5022a8	0x4d0654	0	0x100000

show previews

type	name	size	cp
VERSION	#1	700	0
MANIFEST	#1	548	0

module_name	hint	function_name
KERNEL32.dll	1043	ResumeThread
KERNEL32.dll	1273	WaitForSingleObject
KERNEL32.dll	831	LoadLibraryW
KERNEL32.dll	190	CreateToolhelp32Snapshot
KERNEL32.dll	918	Process32FirstW
KERNEL32.dll	920	Process32NextW
KERNEL32.dll	171	CreateSemaphoreA
KERNEL32.dll	533	GetModuleHandleA
KERNEL32.dll	1274	WaitForSingleObjectEx
KERNEL32.dll	232	DuplicateHandle
KERNEL32.dll	633	GetSystemTimeAsFileTime
KERNEL32.dll	1022	ReleaseSemaphore
KERNEL32.dll	391	GetCommandLineW
KERNEL32.dll	350	FormatMessageW
KERNEL32.dll	479	GetExitCodeProcess
KERNEL32.dll	168	CreateProcessW
KERNEL32.dll	611	GetStartupInfoW
KERNEL32.dll	221	DeviceIoControl
KERNEL32.dll	624	GetSystemDirectoryW
KERNEL32.dll	399	GetComputerNameW
KERNEL32.dll	1213	SystemTimeToFileTime
KERNEL32.dll	133	CreateEventW
KERNEL32.dll	453	GetCurrentThreadId
KERNEL32.dll	617	GetStringTypeW
KERNEL32.dll	452	GetCurrentThread
KERNEL32.dll	238	EnterCriticalSection
KERNEL32.dll	825	LeaveCriticalSection
KERNEL32.dll	234	EncodePointer
KERNEL32.dll	1202	Sleep
KERNEL32.dll	828	LoadLibraryA
KERNEL32.dll	616	GetStringTypeExW
KERNEL32.dll	813	LCMapStringW
KERNEL32.dll	667	GetUserDefaultLCID
KERNEL32.dll	476	GetEnvironmentVariableW
KERNEL32.dll	129	CreateDirectoryW
KERNEL32.dll	214	DeleteFileW
KERNEL32.dll	302	FindClose
KERNEL32.dll	313	FindFirstFileW
KERNEL32.dll	325	FindNextFileW
KERNEL32.dll	1027	RemoveDirectoryW
KERNEL32.dll	1107	SetEndOfFile
KERNEL32.dll	1127	SetFilePointerEx
KERNEL32.dll	1130	SetFileTime
KERNEL32.dll	687	GetWindowsDirectoryW
KERNEL32.dll	126	CreateDirectoryExW
KERNEL32.dll	117	CopyFileW
KERNEL32.dll	21	AreFileApisANSI
KERNEL32.dll	349	FormatMessageA
KERNEL32.dll	768	IsDebuggerPresent
KERNEL32.dll	906	OutputDebugStringW
KERNEL32.dll	1159	SetStdHandle
KERNEL32.dll	1110	SetEnvironmentVariableA
KERNEL32.dll	1243	UnregisterWaitEx
KERNEL32.dll	926	QueryDepthSList
KERNEL32.dll	750	InterlockedFlushSList
KERNEL32.dll	1216	TerminateProcess
KERNEL32.dll	354	FreeLibrary
KERNEL32.dll	676	GetVersionExW
KERNEL32.dll	369	GetBinaryTypeW
KERNEL32.dll	490	GetFileAttributesW
KERNEL32.dll	143	CreateFileW
KERNEL32.dll	1317	WriteFile
KERNEL32.dll	659	GetTickCount
KERNEL32.dll	1113	SetEvent
KERNEL32.dll	130	CreateEventA
KERNEL32.dll	448	GetCurrentProcess
KERNEL32.dll	840	LocalFree
KERNEL32.dll	1297	WideCharToMultiByte
KERNEL32.dll	871	MultiByteToWideChar
KERNEL32.dll	285	ExpandEnvironmentStringsW
KERNEL32.dll	532	GetModuleFileNameW
KERNEL32.dll	360	GetACP
KERNEL32.dll	536	GetModuleHandleW
KERNEL32.dll	1139	SetLastError
KERNEL32.dll	581	GetProcAddress
KERNEL32.dll	209	DeleteCriticalSection
KERNEL32.dll	739	InitializeCriticalSectionAndSpinCount
KERNEL32.dll	514	GetLastError
KERNEL32.dll	945	RaiseException
KERNEL32.dll	586	GetProcessHeap
KERNEL32.dll	724	HeapSize
KERNEL32.dll	719	HeapFree
KERNEL32.dll	722	HeapReAlloc
KERNEL32.dll	753	InterlockedPushEntrySList
KERNEL32.dll	752	InterlockedPopEntrySList
KERNEL32.dll	743	InitializeSListHead
KERNEL32.dll	1263	VirtualProtect
KERNEL32.dll	1260	VirtualFree
KERNEL32.dll	1257	VirtualAlloc
KERNEL32.dll	355	FreeLibraryAndExitThread
KERNEL32.dll	657	GetThreadTimes
KERNEL32.dll	664	GetTimeZoneInformation
KERNEL32.dll	567	GetOEMCP
KERNEL32.dll	778	IsValidCodePage
KERNEL32.dll	958	ReadConsoleW
KERNEL32.dll	960	ReadFile
KERNEL32.dll	428	GetConsoleMode
KERNEL32.dll	410	GetConsoleCP
KERNEL32.dll	343	FlushFileBuffers
KERNEL32.dll	353	FreeEnvironmentStringsW
KERNEL32.dll	474	GetEnvironmentStringsW
KERNEL32.dll	935	QueryPerformanceCounter
KERNEL32.dll	281	ExitProcess
KERNEL32.dll	271	EnumSystemLocalesW
KERNEL32.dll	780	IsValidLocale
KERNEL32.dll	518	GetLocaleInfoW
KERNEL32.dll	100	CompareStringW
KERNEL32.dll	663	GetTimeFormatW
KERNEL32.dll	456	GetDateFormatW
KERNEL32.dll	830	LoadLibraryExW
KERNEL32.dll	282	ExitThread
KERNEL32.dll	174	CreateSemaphoreW
KERNEL32.dll	1189	SetUnhandledExceptionFilter
KERNEL32.dll	1235	UnhandledExceptionFilter
KERNEL32.dll	1242	UnregisterWait
KERNEL32.dll	1013	RegisterWaitForSingleObject
KERNEL32.dll	1168	SetThreadAffinityMask
KERNEL32.dll	582	GetProcessAffinityMask
KERNEL32.dll	553	GetNumaHighestNodeNumber
KERNEL32.dll	218	DeleteTimerQueueTimer
KERNEL32.dll	72	ChangeTimerQueueTimer
KERNEL32.dll	189	CreateTimerQueueTimer
KERNEL32.dll	654	GetThreadPriority
KERNEL32.dll	1177	SetThreadPriority
KERNEL32.dll	181	CreateThread
KERNEL32.dll	1212	SwitchToThread
KERNEL32.dll	1200	SignalObjectAndWait
KERNEL32.dll	188	CreateTimerQueue
KERNEL32.dll	715	HeapAlloc
KERNEL32.dll	202	DecodePointer
KERNEL32.dll	82	CloseHandle
KERNEL32.dll	449	GetCurrentProcessId
KERNEL32.dll	896	OpenProcess
KERNEL32.dll	704	GlobalMemoryStatusEx
KERNEL32.dll	370	GetCPInfo
KERNEL32.dll	772	IsProcessorFeaturePresent
KERNEL32.dll	884	OpenEventA
KERNEL32.dll	1272	WaitForMultipleObjectsEx
KERNEL32.dll	1039	ResetEvent
KERNEL32.dll	1196	SetWaitableTimer
KERNEL32.dll	1221	TlsAlloc
KERNEL32.dll	1223	TlsGetValue
KERNEL32.dll	1224	TlsSetValue
KERNEL32.dll	1222	TlsFree
KERNEL32.dll	522	GetLogicalProcessorInformation
KERNEL32.dll	191	CreateWaitableTimerA
KERNEL32.dll	612	GetStdHandle
KERNEL32.dll	499	GetFileType
KERNEL32.dll	535	GetModuleHandleExW
KERNEL32.dll	1316	WriteConsoleW
KERNEL32.dll	1048	RtlUnwind
USER32.dll	506	LoadStringW
USER32.dll	819	wsprintfW
ADVAPI32.dll	569	RegCreateKeyExW
ADVAPI32.dll	638	RegSetValueExW
ADVAPI32.dll	609	RegOpenKeyExW
ADVAPI32.dll	622	RegQueryValueExW
ADVAPI32.dll	503	OpenProcessToken
ADVAPI32.dll	346	GetTokenInformation
ADVAPI32.dll	401	LookupAccountSidW
ADVAPI32.dll	193	CryptGenRandom
ADVAPI32.dll	196	CryptGetHashParam
ADVAPI32.dll	214	CryptVerifySignatureW
ADVAPI32.dll	182	CryptDestroyHash
ADVAPI32.dll	200	CryptHashData
ADVAPI32.dll	179	CryptCreateHash
ADVAPI32.dll	183	CryptDestroyKey
ADVAPI32.dll	203	CryptReleaseContext
ADVAPI32.dll	177	CryptAcquireContextW
ADVAPI32.dll	399	LookupAccountNameW
ADVAPI32.dll	288	FreeSid
ADVAPI32.dll	32	AllocateAndInitializeSid
ADVAPI32.dll	263	EqualSid
ADVAPI32.dll	108	ConvertSidToStringSidW
ADVAPI32.dll	560	RegCloseKey
ole32.dll	104	CoTaskMemFree
ole32.dll	376	StringFromCLSID
ole32.dll	15	CoCreateGuid
SHELL32.dll	195	SHGetFolderPathW
SHELL32.dll	6	CommandLineToArgvW
PSAPI.DLL	21	GetProcessMemoryInfo
WTSAPI32.dll	34	WTSQueryUserToken
WTSAPI32.dll	18	WTSFreeMemory
WTSAPI32.dll	17	WTSEnumerateSessionsW
VERSION.dll	6	GetFileVersionInfoW
VERSION.dll	14	VerQueryValueW
VERSION.dll	5	GetFileVersionInfoSizeW
WINHTTP.dll	7	WinHttpCloseHandle
WINHTTP.dll	27	WinHttpSetStatusCallback
WINHTTP.dll	16	WinHttpOpenRequest
WINHTTP.dll	4	WinHttpAddRequestHeaders
WINHTTP.dll	23	WinHttpSendRequest
WINHTTP.dll	22	WinHttpReceiveResponse
WINHTTP.dll	19	WinHttpQueryHeaders
WINHTTP.dll	15	WinHttpOpen
WINHTTP.dll	8	WinHttpConnect
WINHTTP.dll	21	WinHttpReadData
WINHTTP.dll	31	WinHttpWriteData
WINHTTP.dll	18	WinHttpQueryDataAvailable
WINHTTP.dll	26	WinHttpSetOption
CRYPT32.dll	131	CryptDecodeObjectEx
CRYPT32.dll	164	CryptImportPublicKeyInfo
CRYPT32.dll	216	CryptStringToBinaryA
CRYPT32.dll	125	CryptBinaryToStringW

StringTable 040904b0

CompanyName	Mail.Ru
FileDescription	Mail.Ru Naps
FileVersion	3.13.3.76
InternalName	naps
LegalCopyright	Copyright 2015
OriginalFilename	naps.exe
ProductName	Mail.Ru Naps
ProductVersion	3.13.3.76
Comments

VS_FIXEDFILEINFO

FileVersion	3.13.3.76
ProductVersion	3.13.3.76
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	4
FileType	2
FileSubtype	0

OpenSSL (terse)
ASN.1 (verbose)

Signers (1)

issuer: /C=US/O=thawte, Inc./CN=thawte SHA256 Code Signing CA

serial: 4A1DF2BD1234C8643B0D4988D4119242

Certificates (5)

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:1d:f2:bd:12:34:c8:64:3b:0d:49:88:d4:11:92:42
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=thawte, Inc., CN=thawte SHA256 Code Signing CA
        Validity
            Not Before: Jul 19 00:00:00 2017 GMT
            Not After : Oct 18 23:59:59 2019 GMT
        Subject: C=RU, ST=Moscow, L=Moscow, O=LLC Mail.Ru, CN=LLC Mail.Ru
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:aa:de:ce:4a:44:4d:90:be:d5:c6:df:1f:f1:
                    d5:ec:66:92:c5:85:08:6d:83:4a:80:d9:e5:2b:37:
                    87:0e:28:c4:d5:13:ff:3d:4e:73:77:25:c3:07:60:
                    7e:37:30:f9:18:2c:fd:d3:3d:b3:1b:40:fb:b4:cc:
                    bb:e0:67:f3:8c:34:2c:a8:e9:ca:b5:6a:0b:14:3b:
                    46:37:c9:8b:e8:55:ee:64:94:d1:55:aa:3d:c3:93:
                    09:5a:e9:9f:59:8d:2f:af:98:d8:f8:37:05:a1:3c:
                    e1:9c:9c:1d:e3:6d:90:e3:91:35:18:93:48:46:63:
                    e1:a2:ff:1e:46:d6:76:2b:8a:28:15:70:fd:4b:29:
                    4b:f2:0f:94:11:bb:49:d7:44:48:47:9a:12:6e:1d:
                    af:c3:f1:e3:7d:67:f0:bd:6a:bb:3c:08:71:6f:c1:
                    4e:60:89:08:48:14:0d:90:71:00:0f:a4:d8:37:09:
                    09:b6:e4:9c:b5:06:1a:58:b9:81:31:a6:31:1c:c6:
                    6e:ff:09:61:75:c5:ea:a1:41:e7:fe:3a:70:2f:f9:
                    f7:49:5f:c9:51:9e:6d:46:02:8a:5c:a4:d5:2a:fb:
                    32:87:66:74:06:84:ff:dc:21:88:2b:a8:30:63:bb:
                    34:c3:99:59:8e:c1:ae:68:4d:40:62:13:56:92:8b:
                    e5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 Authority Key Identifier: 
                keyid:57:86:9B:54:B8:BE:A6:29:8A:E4:F6:C2:E2:13:18:89:85:CD:DC:B7

            X509v3 Subject Key Identifier: 
                B5:04:75:31:C1:58:9A:B7:31:8D:6F:F3:05:6E:87:3F:83:A9:67:89
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://tl.symcb.com/tl.crl

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                Code Signing
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.4.1
                  CPS: https://www.thawte.com/cps
                  User Notice:
                    Explicit Text: https://www.thawte.com/repository

            Authority Information Access: 
                OCSP - URI:http://tl.symcd.com
                CA Issuers - URI:http://tl.symcb.com/tl.crt

    Signature Algorithm: sha256WithRSAEncryption
         0c:e2:5c:6f:da:da:87:f6:ac:86:6a:27:f6:b4:fa:22:25:f4:
         ac:c8:d0:51:fe:91:d9:8f:6c:64:e0:c3:c2:52:66:7a:bd:d1:
         86:fc:70:30:b5:52:11:b9:ab:75:ab:76:e9:8f:20:84:50:14:
         40:51:f3:21:ef:d8:49:7a:d9:92:97:3c:bd:ff:4e:20:8a:1d:
         44:67:5a:51:e3:8c:c6:26:c4:2e:d4:01:7b:41:19:18:c8:92:
         2c:6b:0c:7d:94:e7:5a:87:18:30:d6:6f:1e:9e:90:02:7a:11:
         8c:8d:89:c0:3d:e6:63:ce:ae:4a:cf:21:60:6c:0d:1d:42:8d:
         50:22:94:ad:ac:dc:f7:13:8b:46:db:fd:e1:ad:f6:64:43:d4:
         4f:b9:89:54:9b:6d:7f:1a:83:db:37:ba:c6:34:b1:51:29:28:
         07:de:f2:6b:a3:8a:09:ef:f6:63:16:b5:07:df:9e:a1:62:0d:
         34:88:3e:01:ff:a5:8f:1a:e4:66:ae:5c:b3:30:5a:31:bd:cf:
         54:5d:8e:8f:d2:7b:2c:d9:c3:64:7d:6b:43:e4:f5:1d:63:8f:
         60:ee:d0:dc:a8:c9:52:56:a8:fc:3b:9c:3e:2d:fe:3d:fb:6b:
         e0:70:62:5a:04:91:9a:40:a5:bc:aa:7b:fd:cb:98:49:3b:3f:
         65:53:8b:57

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:a0:b7:36:95:dd:b1:af:c2:3b:2b:9a:18:ee:54:cb
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA
        Validity
            Not Before: Dec 10 00:00:00 2013 GMT
            Not After : Dec  9 23:59:59 2023 GMT
        Subject: C=US, O=thawte, Inc., CN=thawte SHA256 Code Signing CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:55:02:4c:17:05:e9:d0:66:c3:fc:28:ad:d3:
                    c0:fe:ef:e0:e9:7e:d4:1e:f6:aa:1b:91:46:fd:f5:
                    16:ed:98:07:53:fa:ba:87:1b:7d:9e:1f:01:27:ab:
                    b9:d2:67:ca:b7:10:25:53:f4:e3:be:9b:90:b8:ed:
                    23:5c:42:ef:64:25:58:e5:88:22:1a:be:f5:c7:ae:
                    f5:be:8a:b1:11:11:93:1a:22:a9:74:69:c1:74:b6:
                    68:87:a7:83:30:f9:64:f1:b1:e3:38:3e:f4:d6:c1:
                    fc:12:fe:73:57:17:35:57:8a:dd:50:8d:03:f8:66:
                    cd:ca:76:83:13:c8:d7:0e:71:1d:e4:63:c9:ba:17:
                    f8:d1:b9:e4:88:d2:2c:28:c8:21:20:0d:41:b7:0b:
                    e2:2f:c2:80:e6:88:7b:53:6c:c3:44:63:81:7f:68:
                    47:8c:2b:2a:cf:5b:f4:8c:49:61:ba:69:85:fd:6b:
                    00:78:05:26:69:13:30:80:38:4e:f1:5a:55:c9:c5:
                    50:d6:aa:38:89:47:43:5c:fe:4d:73:a5:49:c5:93:
                    69:fe:77:96:9a:af:f3:8c:0e:57:ba:33:d9:0e:c6:
                    42:d3:03:77:c4:bb:39:ad:91:f9:f3:f7:96:5c:3a:
                    64:a6:ed:27:57:c1:e8:40:f3:53:f2:be:29:34:fe:
                    5f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            Authority Information Access: 
                OCSP - URI:http://t2.symcb.com

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://t1.symcb.com/ThawtePCA.crl

            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, Code Signing
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=SymantecPKI-1-568
            X509v3 Subject Key Identifier: 
                57:86:9B:54:B8:BE:A6:29:8A:E4:F6:C2:E2:13:18:89:85:CD:DC:B7
            X509v3 Authority Key Identifier: 
                keyid:7B:5B:45:CF:AF:CE:CB:7A:FD:31:92:1A:6A:B6:F3:46:EB:57:48:50

    Signature Algorithm: sha256WithRSAEncryption
         24:3b:f5:d7:a0:36:13:c7:43:fe:f0:09:87:68:d1:98:31:6e:
         12:e4:3f:1e:1f:96:7b:6b:4c:1e:87:9e:8b:c5:6c:a3:b1:0c:
         7b:50:92:d5:81:9c:b1:8f:2c:29:b7:ee:f9:91:05:b9:8e:41:
         f1:2c:f6:d0:59:2d:98:e0:b9:ea:80:01:47:40:95:b8:3d:9d:
         03:bd:79:bb:35:b6:ad:9c:4c:27:f6:67:45:10:c9:c5:bc:87:
         4e:55:7b:d2:87:bb:dd:dc:30:ef:c6:d4:6c:cc:99:35:6d:1c:
         e0:60:d3:cd:68:8f:29:59:4b:89:96:08:46:c9:8e:fc:75:4f:
         c5:dc:09:cc:4e:27:8b:44:cd:07:bc:ac:04:e0:b5:33:a5:87:
         9f:f4:dd:73:0c:91:ea:12:81:6f:e3:75:f0:1e:b5:93:6c:44:
         17:d5:3e:97:c9:bd:07:2c:56:77:1f:85:dd:46:e8:bf:de:2c:
         81:94:a3:f7:e5:b7:a7:c1:37:9f:75:ca:55:77:4d:5e:36:29:
         ca:85:d8:45:41:72:57:75:c0:79:5b:fa:34:10:06:6d:64:20:
         42:b7:3a:c8:1f:1d:46:64:02:5f:c6:47:be:f0:c4:3a:28:54:
         da:f6:1e:4f:9a:a2:19:43:a4:6f:49:f8:fc:5e:42:20:28:84:
         8b:47:20:6e

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:4e:d5:57:20:d5:ed:ec:49:f4:2f:ce:37:db:2b:6d
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA
        Validity
            Not Before: Nov 17 00:00:00 2006 GMT
            Not After : Jul 16 23:59:59 2036 GMT
        Subject: C=US, O=thawte, Inc., OU=Certification Services Division, OU=(c) 2006 thawte, Inc. - For authorized use only, CN=thawte Primary Root CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a0:f0:fb:80:59:d4:9c:c7:a4:cf:9d:a1:59:
                    73:09:10:45:0c:0d:2c:6e:68:f1:6c:5b:48:68:49:
                    59:37:fc:0b:33:19:c2:77:7f:cc:10:2d:95:34:1c:
                    e6:eb:4d:09:a7:1c:d2:b8:c9:97:36:02:b7:89:d4:
                    24:5f:06:c0:cc:44:94:94:8d:02:62:6f:eb:5a:dd:
                    11:8d:28:9a:5c:84:90:10:7a:0d:bd:74:66:2f:6a:
                    38:a0:e2:d5:54:44:eb:1d:07:9f:07:ba:6f:ee:e9:
                    fd:4e:0b:29:f5:3e:84:a0:01:f1:9c:ab:f8:1c:7e:
                    89:a4:e8:a1:d8:71:65:0d:a3:51:7b:ee:bc:d2:22:
                    60:0d:b9:5b:9d:df:ba:fc:51:5b:0b:af:98:b2:e9:
                    2e:e9:04:e8:62:87:de:2b:c8:d7:4e:c1:4c:64:1e:
                    dd:cf:87:58:ba:4a:4f:ca:68:07:1d:1c:9d:4a:c6:
                    d5:2f:91:cc:7c:71:72:1c:c5:c0:67:eb:32:fd:c9:
                    92:5c:94:da:85:c0:9b:bf:53:7d:2b:09:f4:8c:9d:
                    91:1f:97:6a:52:cb:de:09:36:a4:77:d8:7b:87:50:
                    44:d5:3e:6e:29:69:fb:39:49:26:1e:09:a5:80:7b:
                    40:2d:eb:e8:27:85:c9:fe:61:fd:7e:e6:7c:97:1d:
                    d5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Key Identifier: 
                7B:5B:45:CF:AF:CE:CB:7A:FD:31:92:1A:6A:B6:F3:46:EB:57:48:50
    Signature Algorithm: sha1WithRSAEncryption
         79:11:c0:4b:b3:91:b6:fc:f0:e9:67:d4:0d:6e:45:be:55:e8:
         93:d2:ce:03:3f:ed:da:25:b0:1d:57:cb:1e:3a:76:a0:4c:ec:
         50:76:e8:64:72:0c:a4:a9:f1:b8:8b:d6:d6:87:84:bb:32:e5:
         41:11:c0:77:d9:b3:60:9d:eb:1b:d5:d1:6e:44:44:a9:a6:01:
         ec:55:62:1d:77:b8:5c:8e:48:49:7c:9c:3b:57:11:ac:ad:73:
         37:8e:2f:78:5c:90:68:47:d9:60:60:e6:fc:07:3d:22:20:17:
         c4:f7:16:e9:c4:d8:72:f9:c8:73:7c:df:16:2f:15:a9:3e:fd:
         6a:27:b6:a1:eb:5a:ba:98:1f:d5:e3:4d:64:0a:9d:13:c8:61:
         ba:f5:39:1c:87:ba:b8:bd:7b:22:7f:f6:fe:ac:40:79:e5:ac:
         10:6f:3d:8f:1b:79:76:8b:c4:37:b3:21:18:84:e5:36:00:eb:
         63:20:99:b9:e9:fe:33:04:bb:41:c8:c1:02:f9:44:63:20:9e:
         81:ce:42:d3:d6:3f:2c:76:d3:63:9c:59:dd:8f:a6:e1:0e:a0:
         2e:41:f7:2e:95:47:cf:bc:fd:33:f3:f6:0b:61:7e:7e:91:2b:
         81:47:c2:27:30:ee:a7:10:5d:37:8f:5c:39:2b:e4:04:f0:7b:
         8d:56:8c:68

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Validity
            Not Before: Oct 18 00:00:00 2012 GMT
            Not After : Dec 29 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services Signer - G4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:0b:39:44:b8:bb:23:a7:44:49:bb:0e:ff:
                    a1:f0:61:0a:53:93:b0:98:db:ad:2c:0f:4a:c5:6e:
                    ff:86:3c:53:55:0f:15:ce:04:3f:2b:fd:a9:96:96:
                    d9:be:61:79:0b:5b:c9:4c:86:76:e5:e0:43:4b:22:
                    95:ee:c2:2b:43:c1:9f:d8:68:b4:8e:40:4f:ee:85:
                    38:b9:11:c5:23:f2:64:58:f0:15:32:6f:4e:57:a1:
                    ae:88:a4:02:d7:2a:1e:cd:4b:e1:dd:63:d5:17:89:
                    32:5b:b0:5e:99:5a:a8:9d:28:50:0e:17:ee:96:db:
                    61:3b:45:51:1d:cf:12:56:0b:92:47:fc:ab:ae:f6:
                    66:3d:47:ac:70:72:e7:92:e7:5f:cd:10:b9:c4:83:
                    64:94:19:bd:25:80:e1:e8:d2:22:a5:d0:ba:02:7a:
                    a1:77:93:5b:65:c3:ee:17:74:bc:41:86:2a:dc:08:
                    4c:8c:92:8c:91:2d:9e:77:44:1f:68:d6:a8:74:77:
                    db:0e:5b:32:8b:56:8b:33:bd:d9:63:c8:49:9d:3a:
                    c5:c5:ea:33:0b:d2:f1:a3:1b:f4:8b:be:d9:b3:57:
                    8b:3b:de:04:a7:7a:22:b2:24:ae:2e:c7:70:c5:be:
                    4e:83:26:08:fb:0b:bd:a9:4f:99:08:e1:10:28:72:
                    aa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: critical
                Time Stamping
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                OCSP - URI:http://ts-ocsp.ws.symantec.com
                CA Issuers - URI:http://ts-aia.ws.symantec.com/tss-ca-g2.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://ts-crl.ws.symantec.com/tss-ca-g2.crl

            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-2
            X509v3 Subject Key Identifier: 
                46:C6:69:A3:0E:4A:14:1E:D5:4C:DA:52:63:17:3F:5E:36:BC:0D:E6
            X509v3 Authority Key Identifier: 
                keyid:5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD

    Signature Algorithm: sha1WithRSAEncryption
         78:3b:b4:91:2a:00:4c:f0:8f:62:30:37:78:a3:84:27:07:6f:
         18:b2:de:25:dc:a0:d4:94:03:aa:86:4e:25:9f:9a:40:03:1c:
         dd:ce:e3:79:cb:21:68:06:da:b6:32:b4:6d:bf:f4:2c:26:63:
         33:e4:49:64:6d:0d:e6:c3:67:0e:f7:05:a4:35:6c:7c:89:16:
         c6:e9:b2:df:b2:e9:dd:20:c6:71:0f:cd:95:74:dc:b6:5c:de:
         bd:37:1f:43:78:e6:78:b5:cd:28:04:20:a3:aa:f1:4b:c4:88:
         29:91:0e:80:d1:11:fc:dd:5c:76:6e:4f:5e:0e:45:46:41:6e:
         0d:b0:ea:38:9a:b1:3a:da:09:71:10:fc:1c:79:b4:80:7b:ac:
         69:f4:fd:9c:b6:0c:16:2b:f1:7f:5b:09:3d:9b:5b:e2:16:ca:
         13:81:6d:00:2e:38:0d:a8:29:8f:2c:e1:b2:f4:5a:a9:01:af:
         15:9c:2c:2f:49:1b:db:22:bb:c3:fe:78:94:51:c3:86:b1:82:
         88:5d:f0:3d:b4:51:a1:79:33:2b:2e:7b:b9:dc:20:09:13:71:
         eb:6a:19:5b:cf:e8:a5:30:57:2c:89:49:3f:b9:cf:7f:c9:bf:
         3e:22:68:63:53:9a:bd:69:74:ac:c5:1d:3c:7f:92:e0:c3:bc:
         1c:d8:04:75

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=ZA, ST=Western Cape, L=Durbanville, O=Thawte, OU=Thawte Certification, CN=Thawte Timestamping CA
        Validity
            Not Before: Dec 21 00:00:00 2012 GMT
            Not After : Dec 30 23:59:59 2020 GMT
        Subject: C=US, O=Symantec Corporation, CN=Symantec Time Stamping Services CA - G2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:b3:49:54:4b:97:1c:12:0a:d8:25:79:91:
                    22:57:2a:6f:dc:b8:26:c4:43:73:6b:c2:bf:2e:50:
                    5a:fb:14:c2:76:8e:43:01:25:43:b4:a1:e2:45:f4:
                    e8:b7:7b:c3:74:cc:22:d7:b4:94:00:02:f7:4d:ed:
                    bf:b4:b7:44:24:6b:cd:5f:45:3b:d1:44:ce:43:12:
                    73:17:82:8b:69:b4:2b:cb:99:1e:ac:72:1b:26:4d:
                    71:1f:b1:31:dd:fb:51:61:02:53:a6:aa:f5:49:2c:
                    05:78:45:a5:2f:89:ce:e7:99:e7:fe:8c:e2:57:3f:
                    3d:c6:92:dc:4a:f8:7b:33:e4:79:0a:fb:f0:75:88:
                    41:9c:ff:c5:03:51:99:aa:d7:6c:9f:93:69:87:65:
                    29:83:85:c2:60:14:c4:c8:c9:3b:14:da:c0:81:f0:
                    1f:0d:74:de:92:22:ab:ca:f7:fb:74:7c:27:e6:f7:
                    4a:1b:7f:a7:c3:9e:2d:ae:8a:ea:a6:e6:aa:27:16:
                    7d:61:f7:98:71:11:bc:e2:50:a1:4b:e5:5d:fa:e5:
                    0e:a7:2c:9f:aa:65:20:d3:d8:96:e8:c8:7c:a5:4e:
                    48:44:ff:19:e2:44:07:92:0b:d7:68:84:80:5d:6a:
                    78:64:45:cd:60:46:7e:54:c1:13:7c:c5:79:f1:c9:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                5F:9A:F5:6E:5C:CC:CC:74:9A:D4:DD:7D:EF:3F:DB:EC:4C:80:2E:DD
            Authority Information Access: 
                OCSP - URI:http://ocsp.thawte.com

            X509v3 Basic Constraints: critical
                CA:TRUE, pathlen:0
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://crl.thawte.com/ThawteTimestampingCA.crl

            X509v3 Extended Key Usage: 
                Time Stamping
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Subject Alternative Name: 
                DirName:/CN=TimeStamp-2048-1
    Signature Algorithm: sha1WithRSAEncryption
         03:09:9b:8f:79:ef:7f:59:30:aa:ef:68:b5:fa:e3:09:1d:bb:
         4f:82:06:5d:37:5f:a6:52:9f:16:8d:ea:1c:92:09:44:6e:f5:
         6d:eb:58:7c:30:e8:f9:69:8d:23:73:0b:12:6f:47:a9:ae:39:
         11:f8:2a:b1:9b:b0:1a:c3:8e:eb:59:96:00:ad:ce:0c:4d:b2:
         d0:31:a6:08:5c:2a:7a:fc:e2:7a:1d:57:4c:a8:65:18:e9:79:
         40:62:25:96:6e:c7:c7:37:6a:83:21:08:8e:41:ea:dd:d9:57:
         3f:1d:77:49:87:2a:16:06:5e:a6:38:6a:22:12:a3:51:19:83:
         7e:b6

pkcs7-signedData

SHA1: nil

1.3.6.1.4.1.311.2.1.4

1.3.6.1.4.1.311.2.1.15

00 3c 00 3c 00 3c 00 4f  00 62 00 73 00 6f 00 6c  |.<.<.<.O.b.s.o.l|
00 65 00 74 00 65 00 3e  00 3e 00 3e              |.e.t.e.>.>.>    |

SHA1

69 1f d8 05 82 93 be 24 8b eb 96 30 7c df 6a 0c |i......$...0|.j.| 05 f2 4c 87 |..L. |

Certificates
- Certificate #0
  - 2
    - 4A:1D:F2:BD:12:34:C8:64:3B:0D:49:88:D4:11:92:42
    - RSA-SHA256: nil
    - Issuer
      - C: US
      - O: thawte, Inc.
      - CN: thawte SHA256 Code Signing CA
    - 2017-07-19 00:00:00 UTC: 2019-10-18 23:59:59 UTC
    - Subject
      - C: RU
      - ST: Moscow
      - L: Moscow
      - O: LLC Mail.Ru
      - CN: LLC Mail.Ru
    - #5
      - rsaEncryption: nil
      - C4:AA:DE:CE:4A:44:4D:90:BE:D5:C6:DF:1F:F1:D5:EC:
        66:92:C5:85:08:6D:83:4A:80:D9:E5:2B:37:87:0E:28:
        C4:D5:13:FF:3D:4E:73:77:25:C3:07:60:7E:37:30:F9:
        18:2C:FD:D3:3D:B3:1B:40:FB:B4:CC:BB:E0:67:F3:8C:
        34:2C:A8:E9:CA:B5:6A:0B:14:3B:46:37:C9:8B:E8:55:
        EE:64:94:D1:55:AA:3D:C3:93:09:5A:E9:9F:59:8D:2F:
        AF:98:D8:F8:37:05:A1:3C:E1:9C:9C:1D:E3:6D:90:E3:
        91:35:18:93:48:46:63:E1:A2:FF:1E:46:D6:76:2B:8A:
        28:15:70:FD:4B:29:4B:F2:0F:94:11:BB:49:D7:44:48:
        47:9A:12:6E:1D:AF:C3:F1:E3:7D:67:F0:BD:6A:BB:3C:
        08:71:6F:C1:4E:60:89:08:48:14:0D:90:71:00:0F:A4:
        D8:37:09:09:B6:E4:9C:B5:06:1A:58:B9:81:31:A6:31:
        1C:C6:6E:FF:09:61:75:C5:EA:A1:41:E7:FE:3A:70:2F:
        F9:F7:49:5F:C9:51:9E:6D:46:02:8A:5C:A4:D5:2A:FB:
        32:87:66:74:06:84:FF:DC:21:88:2B:A8:30:63:BB:34:
        C3:99:59:8E:C1:AE:68:4D:40:62:13:56:92:8B:E5:63: 0x010001
    - X509v3 extensions
      - basicConstraints
        nil
      - authorityKeyIdentifier:
        57 86 9b 54 b8 be a6 29 8a e4 f6 c2 e2 13 18 89 |W..T...)........| 85 cd dc b7 |.... |
      - subjectKeyIdentifier:
        b5 04 75 31 c1 58 9a b7 31 8d 6f f3 05 6e 87 3f |..u1.X..1.o..n.?| 83 a9 67 89 |..g. |
      - crlDistributionPoints: http://tl.symcb.com/tl.crl
      - keyUsage: true, 0x80
      - extendedKeyUsage: codeSigning
      - certificatePolicies
        2.23.140.1.4.1
        #0
        id-qt-cps: https://www.thawte.com/cps
        id-qt-unotice: https://www.thawte.com/repository
      - authorityInfoAccess
        #0
        OCSP: http://tl.symcd.com
        caIssuers: http://tl.symcb.com/tl.crt
  - RSA-SHA256:
```
0c e2 5c 6f da da 87 f6  ac 86 6a 27 f6 b4 fa 22  |..\o......j'..."|
25 f4 ac c8 d0 51 fe 91  d9 8f 6c 64 e0 c3 c2 52  |%....Q....ld...R|
66 7a bd d1 86 fc 70 30  b5 52 11 b9 ab 75 ab 76  |fz....p0.R...u.v|
e9 8f 20 84 50 14 40 51  f3 21 ef d8 49 7a d9 92  |.. .P.@Q.!..Iz..|
97 3c bd ff 4e 20 8a 1d  44 67 5a 51 e3 8c c6 26  |.<..N ..DgZQ...&|
c4 2e d4 01 7b 41 19 18  c8 92 2c 6b 0c 7d 94 e7  |....{A....,k.}..|
5a 87 18 30 d6 6f 1e 9e  90 02 7a 11 8c 8d 89 c0  |Z..0.o....z.....|
3d e6 63 ce ae 4a cf 21  60 6c 0d 1d 42 8d 50 22  |=.c..J.!`l..B.P"|
94 ad ac dc f7 13 8b 46  db fd e1 ad f6 64 43 d4  |.......F.....dC.|
4f b9 89 54 9b 6d 7f 1a  83 db 37 ba c6 34 b1 51  |O..T.m....7..4.Q|
29 28 07 de f2 6b a3 8a  09 ef f6 63 16 b5 07 df  |)(...k.....c....|
9e a1 62 0d 34 88 3e 01  ff a5 8f 1a e4 66 ae 5c  |..b.4.>......f.\|
b3 30 5a 31 bd cf 54 5d  8e 8f d2 7b 2c d9 c3 64  |.0Z1..T]...{,..d|
7d 6b 43 e4 f5 1d 63 8f  60 ee d0 dc a8 c9 52 56  |}kC...c.`.....RV|
a8 fc 3b 9c 3e 2d fe 3d  fb 6b e0 70 62 5a 04 91  |..;.>-.=.k.pbZ..|
9a 40 a5 bc aa 7b fd cb  98 49 3b 3f 65 53 8b 57  |.@...{...I;?eS.W|
```
- Certificate #1
  - 2
    - 71:A0:B7:36:95:DD:B1:AF:C2:3B:2B:9A:18:EE:54:CB
    - RSA-SHA256: nil
    - Issuer
      - C: US
      - O: thawte, Inc.
      - OU: Certification Services Division
      - OU: (c) 2006 thawte, Inc. - For authorized use only
      - CN: thawte Primary Root CA
    - 2013-12-10 00:00:00 UTC: 2023-12-09 23:59:59 UTC
    - Subject
      - C: US
      - O: thawte, Inc.
      - CN: thawte SHA256 Code Signing CA
    - #5
      - rsaEncryption: nil
      - 9B:55:02:4C:17:05:E9:D0:66:C3:FC:28:AD:D3:C0:FE:
        EF:E0:E9:7E:D4:1E:F6:AA:1B:91:46:FD:F5:16:ED:98:
        07:53:FA:BA:87:1B:7D:9E:1F:01:27:AB:B9:D2:67:CA:
        B7:10:25:53:F4:E3:BE:9B:90:B8:ED:23:5C:42:EF:64:
        25:58:E5:88:22:1A:BE:F5:C7:AE:F5:BE:8A:B1:11:11:
        93:1A:22:A9:74:69:C1:74:B6:68:87:A7:83:30:F9:64:
        F1:B1:E3:38:3E:F4:D6:C1:FC:12:FE:73:57:17:35:57:
        8A:DD:50:8D:03:F8:66:CD:CA:76:83:13:C8:D7:0E:71:
        1D:E4:63:C9:BA:17:F8:D1:B9:E4:88:D2:2C:28:C8:21:
        20:0D:41:B7:0B:E2:2F:C2:80:E6:88:7B:53:6C:C3:44:
        63:81:7F:68:47:8C:2B:2A:CF:5B:F4:8C:49:61:BA:69:
        85:FD:6B:00:78:05:26:69:13:30:80:38:4E:F1:5A:55:
        C9:C5:50:D6:AA:38:89:47:43:5C:FE:4D:73:A5:49:C5:
        93:69:FE:77:96:9A:AF:F3:8C:0E:57:BA:33:D9:0E:C6:
        42:D3:03:77:C4:BB:39:AD:91:F9:F3:F7:96:5C:3A:64:
        A6:ED:27:57:C1:E8:40:F3:53:F2:BE:29:34:FE:5F:F9: 0x010001
    - X509v3 extensions
      - authorityInfoAccess
        OCSP: http://t2.symcb.com
      - basicConstraints
        true
        true: 0
      - crlDistributionPoints: http://t1.symcb.com/ThawtePCA.crl
      - extendedKeyUsage
        clientAuth: codeSigning
      - keyUsage: true, 6
      - subjectAltName
        CN: SymantecPKI-1-568
      - subjectKeyIdentifier:
        57 86 9b 54 b8 be a6 29 8a e4 f6 c2 e2 13 18 89 |W..T...)........| 85 cd dc b7 |.... |
      - authorityKeyIdentifier:
        7b 5b 45 cf af ce cb 7a fd 31 92 1a 6a b6 f3 46 |{[E....z.1..j..F| eb 57 48 50 |.WHP |
  - RSA-SHA256:
```
24 3b f5 d7 a0 36 13 c7  43 fe f0 09 87 68 d1 98  |$;...6..C....h..|
31 6e 12 e4 3f 1e 1f 96  7b 6b 4c 1e 87 9e 8b c5  |1n..?...{kL.....|
6c a3 b1 0c 7b 50 92 d5  81 9c b1 8f 2c 29 b7 ee  |l...{P......,)..|
f9 91 05 b9 8e 41 f1 2c  f6 d0 59 2d 98 e0 b9 ea  |.....A.,..Y-....|
80 01 47 40 95 b8 3d 9d  03 bd 79 bb 35 b6 ad 9c  |..G@..=...y.5...|
4c 27 f6 67 45 10 c9 c5  bc 87 4e 55 7b d2 87 bb  |L'.gE.....NU{...|
dd dc 30 ef c6 d4 6c cc  99 35 6d 1c e0 60 d3 cd  |..0...l..5m..`..|
68 8f 29 59 4b 89 96 08  46 c9 8e fc 75 4f c5 dc  |h.)YK...F...uO..|
09 cc 4e 27 8b 44 cd 07  bc ac 04 e0 b5 33 a5 87  |..N'.D.......3..|
9f f4 dd 73 0c 91 ea 12  81 6f e3 75 f0 1e b5 93  |...s.....o.u....|
6c 44 17 d5 3e 97 c9 bd  07 2c 56 77 1f 85 dd 46  |lD..>....,Vw...F|
e8 bf de 2c 81 94 a3 f7  e5 b7 a7 c1 37 9f 75 ca  |...,........7.u.|
55 77 4d 5e 36 29 ca 85  d8 45 41 72 57 75 c0 79  |UwM^6)...EArWu.y|
5b fa 34 10 06 6d 64 20  42 b7 3a c8 1f 1d 46 64  |[.4..md B.:...Fd|
02 5f c6 47 be f0 c4 3a  28 54 da f6 1e 4f 9a a2  |._.G...:(T...O..|
19 43 a4 6f 49 f8 fc 5e  42 20 28 84 8b 47 20 6e  |.C.oI..^B (..G n|
```
- Certificate #2
  - 2
    - 34:4E:D5:57:20:D5:ED:EC:49:F4:2F:CE:37:DB:2B:6D
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: thawte, Inc.
      - OU: Certification Services Division
      - OU: (c) 2006 thawte, Inc. - For authorized use only
      - CN: thawte Primary Root CA
    - 2006-11-17 00:00:00 UTC: 2036-07-16 23:59:59 UTC
    - Subject
      - C: US
      - O: thawte, Inc.
      - OU: Certification Services Division
      - OU: (c) 2006 thawte, Inc. - For authorized use only
      - CN: thawte Primary Root CA
    - #5
      - rsaEncryption: nil
      - AC:A0:F0:FB:80:59:D4:9C:C7:A4:CF:9D:A1:59:73:09:
        10:45:0C:0D:2C:6E:68:F1:6C:5B:48:68:49:59:37:FC:
        0B:33:19:C2:77:7F:CC:10:2D:95:34:1C:E6:EB:4D:09:
        A7:1C:D2:B8:C9:97:36:02:B7:89:D4:24:5F:06:C0:CC:
        44:94:94:8D:02:62:6F:EB:5A:DD:11:8D:28:9A:5C:84:
        90:10:7A:0D:BD:74:66:2F:6A:38:A0:E2:D5:54:44:EB:
        1D:07:9F:07:BA:6F:EE:E9:FD:4E:0B:29:F5:3E:84:A0:
        01:F1:9C:AB:F8:1C:7E:89:A4:E8:A1:D8:71:65:0D:A3:
        51:7B:EE:BC:D2:22:60:0D:B9:5B:9D:DF:BA:FC:51:5B:
        0B:AF:98:B2:E9:2E:E9:04:E8:62:87:DE:2B:C8:D7:4E:
        C1:4C:64:1E:DD:CF:87:58:BA:4A:4F:CA:68:07:1D:1C:
        9D:4A:C6:D5:2F:91:CC:7C:71:72:1C:C5:C0:67:EB:32:
        FD:C9:92:5C:94:DA:85:C0:9B:BF:53:7D:2B:09:F4:8C:
        9D:91:1F:97:6A:52:CB:DE:09:36:A4:77:D8:7B:87:50:
        44:D5:3E:6E:29:69:FB:39:49:26:1E:09:A5:80:7B:40:
        2D:EB:E8:27:85:C9:FE:61:FD:7E:E6:7C:97:1D:D5:9D: 0x010001
    - X509v3 extensions
      - basicConstraints: true, true
      - keyUsage: true, 6
      - subjectKeyIdentifier:
        7b 5b 45 cf af ce cb 7a fd 31 92 1a 6a b6 f3 46 |{[E....z.1..j..F| eb 57 48 50 |.WHP |
  - RSA-SHA1:
```
79 11 c0 4b b3 91 b6 fc  f0 e9 67 d4 0d 6e 45 be  |y..K......g..nE.|
55 e8 93 d2 ce 03 3f ed  da 25 b0 1d 57 cb 1e 3a  |U.....?..%..W..:|
76 a0 4c ec 50 76 e8 64  72 0c a4 a9 f1 b8 8b d6  |v.L.Pv.dr.......|
d6 87 84 bb 32 e5 41 11  c0 77 d9 b3 60 9d eb 1b  |....2.A..w..`...|
d5 d1 6e 44 44 a9 a6 01  ec 55 62 1d 77 b8 5c 8e  |..nDD....Ub.w.\.|
48 49 7c 9c 3b 57 11 ac  ad 73 37 8e 2f 78 5c 90  |HI|.;W...s7./x\.|
68 47 d9 60 60 e6 fc 07  3d 22 20 17 c4 f7 16 e9  |hG.``...=" .....|
c4 d8 72 f9 c8 73 7c df  16 2f 15 a9 3e fd 6a 27  |..r..s|../..>.j'|
b6 a1 eb 5a ba 98 1f d5  e3 4d 64 0a 9d 13 c8 61  |...Z.....Md....a|
ba f5 39 1c 87 ba b8 bd  7b 22 7f f6 fe ac 40 79  |..9.....{"....@y|
e5 ac 10 6f 3d 8f 1b 79  76 8b c4 37 b3 21 18 84  |...o=..yv..7.!..|
e5 36 00 eb 63 20 99 b9  e9 fe 33 04 bb 41 c8 c1  |.6..c ....3..A..|
02 f9 44 63 20 9e 81 ce  42 d3 d6 3f 2c 76 d3 63  |..Dc ...B..?,v.c|
9c 59 dd 8f a6 e1 0e a0  2e 41 f7 2e 95 47 cf bc  |.Y.......A...G..|
fd 33 f3 f6 0b 61 7e 7e  91 2b 81 47 c2 27 30 ee  |.3...a~~.+.G.'0.|
a7 10 5d 37 8f 5c 39 2b  e4 04 f0 7b 8d 56 8c 68  |..]7.\9+...{.V.h|
```
- Certificate #3
  - 2
    - 0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
    - RSA-SHA1: nil
    - Issuer
      - C: US
      - O: Symantec Corporation
      - CN: Symantec Time Stamping Services CA - G2
    - 2012-10-18 00:00:00 UTC: 2020-12-29 23:59:59 UTC
    - Subject
      - C: US
      - O: Symantec Corporation
      - CN: Symantec Time Stamping Services Signer - G4
    - #5
      - rsaEncryption: nil
      - A2:63:0B:39:44:B8:BB:23:A7:44:49:BB:0E:FF:A1:F0:
        61:0A:53:93:B0:98:DB:AD:2C:0F:4A:C5:6E:FF:86:3C:
        53:55:0F:15:CE:04:3F:2B:FD:A9:96:96:D9:BE:61:79:
        0B:5B:C9:4C:86:76:E5:E0:43:4B:22:95:EE:C2:2B:43:
        C1:9F:D8:68:B4:8E:40:4F:EE:85:38:B9:11:C5:23:F2:
        64:58:F0:15:32:6F:4E:57:A1:AE:88:A4:02:D7:2A:1E:
        CD:4B:E1:DD:63:D5:17:89:32:5B:B0:5E:99:5A:A8:9D:
        28:50:0E:17:EE:96:DB:61:3B:45:51:1D:CF:12:56:0B:
        92:47:FC:AB:AE:F6:66:3D:47:AC:70:72:E7:92:E7:5F:
        CD:10:B9:C4:83:64:94:19:BD:25:80:E1:E8:D2:22:A5:
        D0:BA:02:7A:A1:77:93:5B:65:C3:EE:17:74:BC:41:86:
        2A:DC:08:4C:8C:92:8C:91:2D:9E:77:44:1F:68:D6:A8:
        74:77:DB:0E:5B:32:8B:56:8B:33:BD:D9:63:C8:49:9D:
        3A:C5:C5:EA:33:0B:D2:F1:A3:1B:F4:8B:BE:D9:B3:57:
        8B:3B:DE:04:A7:7A:22:B2:24:AE:2E:C7:70:C5:BE:4E:
        83:26:08:FB:0B:BD:A9:4F:99:08:E1:10:28:72:AA:CD: 0x010001
    - X509v3 extensions
      - basicConstraints
        true
        nil
      - extendedKeyUsage: true, timeStamping
      - keyUsage: true, 0x80
      - authorityInfoAccess
        #0
        OCSP: http://ts-ocsp.ws.symantec.com
        caIssuers: http://ts-aia.ws.symantec.com/tss-ca-g2.cer
      - crlDistributionPoints: http://ts-crl.ws.symantec.com/tss-ca-g2.crl
      - subjectAltName
        CN: TimeStamp-2048-2
      - subjectKeyIdentifier:
        46 c6 69 a3 0e 4a 14 1e d5 4c da 52 63 17 3f 5e |F.i..J...L.Rc.?^| 36 bc 0d e6 |6... |
      - authorityKeyIdentifier:
        5f 9a f5 6e 5c cc cc 74 9a d4 dd 7d ef 3f db ec |_..n\..t...}.?..| 4c 80 2e dd |L... |
  - RSA-SHA1:
```
78 3b b4 91 2a 00 4c f0  8f 62 30 37 78 a3 84 27  |x;..*.L..b07x..'|
07 6f 18 b2 de 25 dc a0  d4 94 03 aa 86 4e 25 9f  |.o...%.......N%.|
9a 40 03 1c dd ce e3 79  cb 21 68 06 da b6 32 b4  |.@.....y.!h...2.|
6d bf f4 2c 26 63 33 e4  49 64 6d 0d e6 c3 67 0e  |m..,&c3.Idm...g.|
f7 05 a4 35 6c 7c 89 16  c6 e9 b2 df b2 e9 dd 20  |...5l|......... |
c6 71 0f cd 95 74 dc b6  5c de bd 37 1f 43 78 e6  |.q...t..\..7.Cx.|
78 b5 cd 28 04 20 a3 aa  f1 4b c4 88 29 91 0e 80  |x..(. ...K..)...|
d1 11 fc dd 5c 76 6e 4f  5e 0e 45 46 41 6e 0d b0  |....\vnO^.EFAn..|
ea 38 9a b1 3a da 09 71  10 fc 1c 79 b4 80 7b ac  |.8..:..q...y..{.|
69 f4 fd 9c b6 0c 16 2b  f1 7f 5b 09 3d 9b 5b e2  |i......+..[.=.[.|
16 ca 13 81 6d 00 2e 38  0d a8 29 8f 2c e1 b2 f4  |....m..8..).,...|
5a a9 01 af 15 9c 2c 2f  49 1b db 22 bb c3 fe 78  |Z.....,/I.."...x|
94 51 c3 86 b1 82 88 5d  f0 3d b4 51 a1 79 33 2b  |.Q.....].=.Q.y3+|
2e 7b b9 dc 20 09 13 71  eb 6a 19 5b cf e8 a5 30  |.{.. ..q.j.[...0|
57 2c 89 49 3f b9 cf 7f  c9 bf 3e 22 68 63 53 9a  |W,.I?.....>"hcS.|
bd 69 74 ac c5 1d 3c 7f  92 e0 c3 bc 1c d8 04 75  |.it...<........u|
```
- Certificate #4
  - 2
    - 7E:93:EB:FB:7C:C6:4E:59:EA:4B:9A:77:D4:06:FC:3B
    - RSA-SHA1: nil
    - Issuer
      - C: ZA
      - ST: Western Cape
      - L: Durbanville
      - O: Thawte
      - OU: Thawte Certification
      - CN: Thawte Timestamping CA
    - 2012-12-21 00:00:00 UTC: 2020-12-30 23:59:59 UTC
    - Subject
      - C: US
      - O: Symantec Corporation
      - CN: Symantec Time Stamping Services CA - G2
    - #5
      - rsaEncryption: nil
      - B1:AC:B3:49:54:4B:97:1C:12:0A:D8:25:79:91:22:57:
        2A:6F:DC:B8:26:C4:43:73:6B:C2:BF:2E:50:5A:FB:14:
        C2:76:8E:43:01:25:43:B4:A1:E2:45:F4:E8:B7:7B:C3:
        74:CC:22:D7:B4:94:00:02:F7:4D:ED:BF:B4:B7:44:24:
        6B:CD:5F:45:3B:D1:44:CE:43:12:73:17:82:8B:69:B4:
        2B:CB:99:1E:AC:72:1B:26:4D:71:1F:B1:31:DD:FB:51:
        61:02:53:A6:AA:F5:49:2C:05:78:45:A5:2F:89:CE:E7:
        99:E7:FE:8C:E2:57:3F:3D:C6:92:DC:4A:F8:7B:33:E4:
        79:0A:FB:F0:75:88:41:9C:FF:C5:03:51:99:AA:D7:6C:
        9F:93:69:87:65:29:83:85:C2:60:14:C4:C8:C9:3B:14:
        DA:C0:81:F0:1F:0D:74:DE:92:22:AB:CA:F7:FB:74:7C:
        27:E6:F7:4A:1B:7F:A7:C3:9E:2D:AE:8A:EA:A6:E6:AA:
        27:16:7D:61:F7:98:71:11:BC:E2:50:A1:4B:E5:5D:FA:
        E5:0E:A7:2C:9F:AA:65:20:D3:D8:96:E8:C8:7C:A5:4E:
        48:44:FF:19:E2:44:07:92:0B:D7:68:84:80:5D:6A:78:
        64:45:CD:60:46:7E:54:C1:13:7C:C5:79:F1:C9:C1:71: 0x010001
    - #6
      - subjectKeyIdentifier:
        5f 9a f5 6e 5c cc cc 74 9a d4 dd 7d ef 3f db ec |_..n\..t...}.?..| 4c 80 2e dd |L... |
      - authorityInfoAccess
        OCSP: http://ocsp.thawte.com
      - basicConstraints
        true
        true: 0
      - crlDistributionPoints: http://crl.thawte.com/ThawteTimestampingCA.crl
      - extendedKeyUsage: timeStamping
      - keyUsage: true, 6
      - subjectAltName
        CN: TimeStamp-2048-1
  - RSA-SHA1:
```
03 09 9b 8f 79 ef 7f 59  30 aa ef 68 b5 fa e3 09  |....y..Y0..h....|
1d bb 4f 82 06 5d 37 5f  a6 52 9f 16 8d ea 1c 92  |..O..]7_.R......|
09 44 6e f5 6d eb 58 7c  30 e8 f9 69 8d 23 73 0b  |.Dn.m.X|0..i.#s.|
12 6f 47 a9 ae 39 11 f8  2a b1 9b b0 1a c3 8e eb  |.oG..9..*.......|
59 96 00 ad ce 0c 4d b2  d0 31 a6 08 5c 2a 7a fc  |Y.....M..1..\*z.|
e2 7a 1d 57 4c a8 65 18  e9 79 40 62 25 96 6e c7  |.z.WL.e..y@b%.n.|
c7 37 6a 83 21 08 8e 41  ea dd d9 57 3f 1d 77 49  |.7j.!..A...W?.wI|
87 2a 16 06 5e a6 38 6a  22 12 a3 51 19 83 7e b6  |.*..^.8j"..Q..~.|
```

Signer

1
unnamed
- #0
  - C: US
  - O: thawte, Inc.
  - CN: thawte SHA256 Code Signing CA
- 4A:1D:F2:BD:12:34:C8:64:3B:0D:49:88:D4:11:92:42
SHA1: nil

contentType: 1.3.6.1.4.1.311.2.1.4
signingTime: 2018-04-03 12:45:40 UTC
1.3.6.1.4.1.311.2.1.11: msCodeInd

messageDigest:

dd c7 e0 46 0e 74 24 e4  86 a6 5e 83 a9 36 53 74  |...F.t$...^..6St|
55 1e c1 9f                                       |U...            |

rsaEncryption:

93 3d 44 66 02 c0 f4 12  1d c9 8b 77 2f d2 34 4a  |.=Df.......w/.4J|
a2 50 64 5b 4a 58 b9 2e  59 3e 21 8b b9 72 7c d4  |.Pd[JX..Y>!..r|.|
fe 72 ec 97 81 3c 3f ac  9d 4b bf 3c d8 04 4a 92  |.r...countersignature1unnamed#0C: US
O: Symantec Corporation
CN: Symantec Time Stamping Services CA - G2
0E:CF:F4:38:C8:FE:BF:35:6E:04:D8:6A:98:1B:1A:50
SHA1: nil
#2contentType: pkcs7-data
signingTime: 2018-04-03 12:45:41 UTC
messageDigest: f8 d8 08 3f f5 c3 33 6d  75 57 9e fe de 15 d0 7d  |...?..3muW.....}|
c2 42 6c 6a                                       |.Blj            |
rsaEncryption: 7d 1e 06 b2 a3 10 7f 0b  23 53 86 0c 40 8b 99 d4  |}.......#S..@...|
52 f4 ca 4d 42 d3 03 31  5a 24 61 00 de c4 0e ac  |R..MB..1Z$a.....|
d2 06 9e 60 3d ad 19 21  25 c6 b8 4d e9 97 35 71  |...`=..!%..M..5q|
17 05 4a f0 43 c9 4c 28  56 b1 14 56 94 2c 72 68  |..J.C.L(V..V.,rh|
1b 23 39 7c bb 5e ef e8  0b 0f 24 97 97 ea 4f 06  |.#9|.^....$...O.|
0d d9 a7 7c d1 23 2e 57  e1 ae e0 0b b2 85 ef a4  |...|.#.W........|
b1 f4 db 8c 84 b0 e0 9c  4d e0 93 d5 32 a5 58 a2  |........M...2.X.|
0f 83 2c 75 48 c3 ae 70  34 2f de 9b 6e 6e 19 9b  |..,uH..p4/..nn..|
fc 86 56 c4 f2 e7 cb ec  e0 29 df f1 cd 0d a3 1e  |..V......)......|
0b af bb f7 22 07 c7 5b  51 ae 3d a1 ed db bd c3  |...."..[Q.=.....|
a2 82 e0 a9 83 3a 85 ed  56 84 30 5b 69 a3 13 79  |.....:..V.0[i..y|
2a 85 2a 1e 0b 61 01 46  44 8b 05 bf eb de c9 ca  |*.*..a.FD.......|
3f 9e c6 eb 8b 23 07 cc  94 d7 85 3c 11 d4 66 ea  |?....#.....<..f.|
f6 0d ed 3f 1c ae 1f 17  db 95 f3 cc 2c ef 8e 08  |...?........,...|
ff 2d cc 73 fe 29 7d 1b  73 cf 38 01 6a 80 26 df  |.-.s.)}.s.8.j.&.|
40 e7 93 55 31 ba 85 99  f8 1e e7 b8 9b fe 01 2c  |@..U1..........,|