gportal.corp.adobe.com

- Adobe Systems Incorporated -

Issued by VeriSign Class 3 International Server CA - G3

About this certificate

This digital certificate with serial number 57:36:4a:eb:f3:ed:70:5f:88:8d:82:e8:d3:3e:c7:59 was issued on by VeriSign, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

Adobe Systems Incorporated

Organization: Adobe Systems Incorporated
Organization unit: GPortal
Organization unit: For Intranet Use Only
State / Province: California
Locality: San Jose
Country: US

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 57:36:4a:eb:f3:ed:70:5f:88:8d:82:e8:d3:3e:c7:59
Serial Number (int): 115924739256069326183464519540152387417
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d7:9b:7c:d8:22:a0:15:f7:dd:ad:5f:ce:29:9b:58:c3:bc:46:00:b5

Fingerprint (sha1): 8d:f1:63:d7:e5:48:6b:8b:03:33:82:87:76:94:9f:e2:8e:e6:8c:14
Fingerprint (sha256): 01:79:51:4d:01:df:d7:2f:7a:9c:15:eb:f7:e5:5c:35:82:6c:db:74:ca:b6:84:a0:af:9a:b1:c0:0a:ed:31:a2

Issuing Certificate URL: http://SVRIntl-G3-aia.verisign.com/SVRIntlG3.cer

Revocation information

OCSP Server: http://ocsp.verisign.com
CRL Distribution Point: http://SVRIntl-G3-crl.verisign.com/SVRIntlG3.crl

Check the revocation status for certificate gportal.corp.adobe.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gportal.corp.adobe.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication
Netscape Server-Gated Cryptography
Microsoft Server-Gated Cryptography

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sj1gwm241.corp.adobe.com
gportal.corp.adobe.com

Other certificates including the domain name adobe.com

(limited to 100 certificates)
dublin-1-ext.vpn.adobe.com
*.dev.adobelogin.com
cert00023-azurecdn.akamaized.net
mc.corp.adobe.com
sa58gl.wpc.edgecastcdn.net
reportbuilder-stage.an.adobe.com
todds-plm-test-cert.corp.adobe.com
cert00037-azurecdn.akamaized.net
cert00050-azurecdn.akamaized.net
m2.shared.global.fastly.net
adsync-va6.identity.adobe.com
das.corp.adobe.com
aemforms.corp.adobe.com
sj1010005183081.corp.adobe.com
cert00059-azurecdn.akamaized.net
cert00091-azurecdn.akamaized.net
ims-na1-stg1.adobelogin.com
cert00080-azurecdn.akamaized.net
lams.corp.adobe.com
cert00059-azurecdn.akamaized.net
prospective.shared.global.fastly.net
*.publish.adobe.com
ox-d.adobe.com
cert00059-azurecdn.akamaized.net
or1010050161108.corp.adobe.com
or1d-sevone.corp.adobe.com
noida-inet-cp.corp.adobe.com
cert00009-azurecdn.akamaized.net
dashmonitor-stg.corp.adobe.com
distribute.adobe.com
*.campaign-sandbox.adobe.com
web-stage.corp.adobe.com
cert00037-azurecdn.akamaized.net
aemm.adobe.com
deletemeserver1.corp.adobe.com
sj1010010040073.corp.adobe.com
*.app-eu.fusion.adobe.com
*.s3-region1.s3-sj-lab.corp.adobe.com
butail-wx-4.corp.adobe.com
nitintest.corp.adobe.com
s7confucius.corp.adobe.com
cert00042-azurecdn.akamaized.net
or1010020030040.corp.adobe.com
edgewebfonts.adobe.com
cert00076-azurecdn.akamaized.net
secure08.lithium.com
cert00017-azurecdn.akamaized.net
aws-airflow.dev.cloud-automation.corp.adobe.com
staticanalysis.corp.adobe.com
redirect.adobe.com
ssl.adobe.com
testabc.corp.adobe.com
test78901.corp.adobe.com
or1010050072011.corp.adobe.com
secure.va.adobesignpreview.com
k2.shared.global.fastly.net
event.adobe.com
tyocmpub.pac.adobe.com
messages.adobe.com
lcforms.adobe.com
secure08.lithium.com
h2.shared.global.fastly.net
anuvaad65.dev.corp.adobe.com
or1010050166106.corp.adobe.com
prospective.shared.global.fastly.net
dns-vetting1l.map.fastly.net
cert00023-azurecdn.akamaized.net
cert00050-azurecdn.akamaized.net
cert00037-azurecdn.akamaized.net
exchange.adobe.com
emeaexpcore2.corp.adobe.com
saltit-dim.corp.adobe.com
primeapps-stage.adobe.com
or1010050165132.corp.adobe.com
b2bwmfix.corp.adobe.com
cert00023-azurecdn.akamaized.net
bast-linux-qa-hb-135.corp.adobe.com
cert00023-azurecdn.akamaized.net
dashboard-stg.k8s.or1.itcloud.corp.adobe.com
toddtestcert.corp.adobe.com
data.b2bmail.adobe.com
developers.adobe.com
cert00037-azurecdn.akamaized.net
cert00010-azurecdn.akamaized.net
cert00010-azurecdn.akamaized.net
asa-noida-1.adobe.com
cert00017-azurecdn.akamaized.net
gportal.corp.adobe.com
marketplace-stg2.magento.com
secure08.lithium.com
or1010050157209.corp.adobe.com
k2.shared.global.fastly.net
ims-na1-stg1.adobelogin.com
prospective.shared.global.fastly.net
cert00017-azurecdn.akamaized.net
cert00023-azurecdn.akamaized.net
experienceleague.adobe.com
contentauthenticity.adobe.com
cert00007-azurecdn.akamaized.net
dashboard.k8s-multiregion-dev.itcloud.corp.adobe.com

Certificate

The complete raw certificate details for gportal.corp.adobe.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFpjCCBI6gAwIBAgIQVzZK6/PtcF+IjYLo0z7HWTANBgkqhkiG9w0BAQUFADCB
vDELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQL
ExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1c2Ug
YXQgaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYSAoYykxMDE2MDQGA1UEAxMt
VmVyaVNpZ24gQ2xhc3MgMyBJbnRlcm5hdGlvbmFsIFNlcnZlciBDQSAtIEczMB4X
DTEzMDkyNjAwMDAwMFoXDTE1MDkyNzIzNTk1OVowga0xCzAJBgNVBAYTAlVTMRMw
EQYDVQQIEwpDYWxpZm9ybmlhMREwDwYDVQQHFAhTYW4gSm9zZTEjMCEGA1UEChQa
QWRvYmUgU3lzdGVtcyBJbmNvcnBvcmF0ZWQxEDAOBgNVBAsUB0dQb3J0YWwxHjAc
BgNVBAsUFUZvciBJbnRyYW5ldCBVc2UgT25seTEfMB0GA1UEAxQWZ3BvcnRhbC5j
b3JwLmFkb2JlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMMi
b4DkvUQBwZXAcC3Vw1OtihZaWbzrBbfEmIgol2xnGpGSCBgP5hRIC624YcsQiPgv
RqUZvtOoEjc1Us5mZkcwaohdCTmqpxMCVrWRyIJ7unGPPr6Oua+a/lOqZwzFEbWJ
tEpKVNqZBRazpSc8o9BCBoP3R3mFIHmzWOP8O7ndkePklP2Yrh6dx3V6wjFr+Xxw
5rj7ve5roxN1Tkwn2u2iOkQrwPGB7FxkmlWIXi7sOqiqu/f0SmoyLl7tKS/ujUY+
mVJRbXQiL9nGHzizI7lmRa6CaLx34tJQc7EuDCvRlDEVhBRPrP8AYwqw7SEB0T4m
dmZSYsLhMrt9BidXpF8CAwEAAaOCAa8wggGrMDsGA1UdEQQ0MDKCGHNqMWd3bTI0
MS5jb3JwLmFkb2JlLmNvbYIWZ3BvcnRhbC5jb3JwLmFkb2JlLmNvbTAJBgNVHRME
AjAAMA4GA1UdDwEB/wQEAwIFoDA0BgNVHSUELTArBggrBgEFBQcDAQYIKwYBBQUH
AwIGCWCGSAGG+EIEAQYKKwYBBAGCNwoDAzBDBgNVHSAEPDA6MDgGCmCGSAGG+EUB
BzYwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL2NwczAf
BgNVHSMEGDAWgBTXm3zYIqAV992tX84pm1jDvEYAtTBBBgNVHR8EOjA4MDagNKAy
hjBodHRwOi8vU1ZSSW50bC1HMy1jcmwudmVyaXNpZ24uY29tL1NWUkludGxHMy5j
cmwwcgYIKwYBBQUHAQEEZjBkMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC52ZXJp
c2lnbi5jb20wPAYIKwYBBQUHMAKGMGh0dHA6Ly9TVlJJbnRsLUczLWFpYS52ZXJp
c2lnbi5jb20vU1ZSSW50bEczLmNlcjANBgkqhkiG9w0BAQUFAAOCAQEAGrgu32x0
qUPIzjGZ+PF3L/KSDhh8EZM+BQC7hbZzLwB6ijTg6Zbo6PfuvAgG2M7OF9BcLrEm
vRdc93i//Led5FDK1XdXvSZ7IUASrSdUTNsrtLcrWUthrZqGG2qbHL5jJbiAdRaM
RIYbi1WCld2dI51Bp+SR860cr2vYONa4tDpmPYDDU1UQRKXgHV/5b2nqAyQsKF6a
fDkemKUAUwTNc+ZBTPFOEO4lGwAsYuoC8NwqHaz8hR2dn6FCFOktM07VxshU+Zq6
vrVcnlisEQErfMGhWCwKizMmrBYNB6TNsONOTfQqV+FxICqKR6JaUniwxnCfXyDK
W3OvG2afCynKvw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyJvgOS9RAHBlcBwLdXD
U62KFlpZvOsFt8SYiCiXbGcakZIIGA/mFEgLrbhhyxCI+C9GpRm+06gSNzVSzmZm
RzBqiF0JOaqnEwJWtZHIgnu6cY8+vo65r5r+U6pnDMURtYm0SkpU2pkFFrOlJzyj
0EIGg/dHeYUgebNY4/w7ud2R4+SU/ZiuHp3HdXrCMWv5fHDmuPu97mujE3VOTCfa
7aI6RCvA8YHsXGSaVYheLuw6qKq79/RKajIuXu0pL+6NRj6ZUlFtdCIv2cYfOLMj
uWZFroJovHfi0lBzsS4MK9GUMRWEFE+s/wBjCrDtIQHRPiZ2ZlJiwuEyu30GJ1ek
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 115924739256069326183464519540152387417
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)10'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 International Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-09-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'San Jose'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Adobe Systems Incorporated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'GPortal'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'For Intranet Use Only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'gportal.corp.adobe.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24633450276151755352500587037905988035457431553056000961182832521369176799791681595005629012128537586254602591340985958269745087625321008404568003308535702296534803729993903417037593556930311051875142471899615736629738951136514769444188330974407699561589936407439967360131535677165000164045002772166849394825679727614385341992235994014624312829936536773851047427085864534554326791188857774207965474719807276688776226122197395905253033196497368386987174448307695525304190763760484136877660384306101243437758829459963467230531765650811996438279530648985003079692326389873297853354866568493318401843481897201032639259743
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sj1gwm241.corp.adobe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gportal.corp.adobe.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.4.1 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.3 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d79b7cd822a015f7ddad5fce299b58c3bc4600b5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRIntl-G3-crl.verisign.com/SVRIntlG3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRIntl-G3-aia.verisign.com/SVRIntlG3.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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