stage-secure.sky.com

- British Sky Broadcasting Group Plc -

Issued by VeriSign Class 3 Extended Validation SSL SGC CA

About this certificate

This digital certificate with serial number 3d:64:ca:59:0b:fc:41:0e:34:94:6b:4e:a0:af:e0:12 was issued on by VeriSign, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

British Sky Broadcasting Group Plc

Company registration number: 02247735
Organization: British Sky Broadcasting Group Plc
Organization unit: IS
Address: Grant Way
Postal code: TW7 5QD
State / Province: Middlesex
Locality: Isleworth
Country: GB

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)06
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3d:64:ca:59:0b:fc:41:0e:34:94:6b:4e:a0:af:e0:12
Serial Number (int): 81606241530489044047379220519038476306
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: f9:d3:ec:d4:b6:3d:4c:4d:ca:55:58:5a:96:0e:a1:28:54:87:8c:3e
AuthorityKeyId: 4e:43:c8:1d:76:ef:37:53:7a:4f:f2:58:6f:94:f3:38:e2:d5:bd:df

Fingerprint (sha1): 9a:86:e4:54:df:5c:57:f9:ec:45:56:b7:00:b1:0d:d9:3f:c4:29:06
Fingerprint (sha256): 01:c5:a1:27:a1:57:7a:4e:81:a6:81:44:0f:61:86:a4:ff:7e:58:55:d6:5e:37:c7:d0:33:85:cb:c9:95:3d:89

Issuing Certificate URL: http://EVIntl-aia.verisign.com/EVIntl2006.cer

Revocation information

OCSP Server: http://EVIntl-ocsp.verisign.com
CRL Distribution Point: http://EVIntl-crl.verisign.com/EVIntl2006.crl

Check the revocation status for certificate stage-secure.sky.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stage-secure.sky.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication
Netscape Server-Gated Cryptography

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stage-secure.sky.com

Other certificates including the domain name sky.com

(limited to 100 certificates)
teachablemachine-api-ipt-73-2.cherry-ad-dev.aidisco.sky.com
secure03.stage.lithium.com
secure.suggest.search.sky.com
ssl.mobile-tv.sky.com
aspfiles2.sky.com
sky-tags-ingestor.data.sky.com
autodocs.sky.com
auth-ui.simm.aidisco.sky.com
staging.ingest.aidisco.sky.com
lightning.spex-3849.spex-dev.aidisco.sky.com
skyshare.sky.com
payments.sky.com
faspex.sky.com
access.isp.sky.com
skyidapp.sky.com
distributorreferrals.sky.com
www.nowtv.com
penfold.sns.sky.com
accessories.sky.com
stagefeeds.news.sky.com
stage-secure-my-offline.sky.com
cherry-app-release-chs-1502-api.cherry-ad-dev.aidisco.sky.com
pubfinder.sky.com
vmhorizon.drm.sot-dev.aidisco.sky.com
slo.oogwayintl.sky.com
isp-provisioning.isp.sky.com
stage-go.sky.com
skymail.sky.com
origin-proxy.video.sky.com
www.sky.com
stage-secure.sky.com
secure03.stage.lithium.com
internalcommscompetitions.sky.com
Secure.sky.com
secure-skynewsipad.stage.sky.com
webcamgames.sky.com
crm-ext.prd.p.ovp.sky.com
secure03.stage.lithium.com
testlauncher-1-13-2.cherry-ad-dev.aidisco.sky.com
sso-p.atlasottint.sky.com
contactus.sky.com
jobs.sky.com
hem.ogwam.sky.com
b2032.go.ingest-dev.aidisco.sky.com
internalcommscompetitions.sky.com
slo.stg2.idm.id.bskyb.sky.com
stark.sky.com
interest.sky.com
stage-archimedesretail-offline.sky.com
msh.ingest-dev.aidisco.sky.com
dev.app.sky.com
stg.cp.sky.com
www.stage.nowtv.com
www.nowtv.com
tp-vo-snsvpn.nme.enslo.sns.sky.com
cp.sky.com
services.stage.nowtv.com
f01.chtah.com
secure03.stage.lithium.com
sit-auth.iptv.interactive.sky.com
eurometer.news.sky.com
verify.sky.com
secure.mobile-gw.sky.com
*.data.sky.com
stg2.ogwam.sky.com
MOBILE-TV.SKY.COM
f01.chtah.com
stagefeeds.news.sky.com
contactus.sky.com
interest.sky.com
www.stage.nowtv.com
firmwareadmin.isp.sky.com

wifi.sky.com
vo-snsvpn.nme.bllon.sns.sky.com
stg.cp.sky.com
staging.intlott.sky.com
learning.sky.com
hkm-int.prd.p.ovp.sky.com
tx-snsvpn.nme.enslo.sns.sky.com
comeback.sky.com
staging.ott.sky.com
stg1.skyidapp.sky.com
secure03.stage.lithium.com
www.bigchristmaspresent.sky.com
go.sky.com
auth-ui-test.simm-dev.aidisco.sky.com
feeds.skynews.com
cs-cms-chcs-1932.cherry-ad-dev.aidisco.sky.com
avm-offline.sky.com
customerdata.adtech.sky.com
skyidapp.sky.com
www.sky.com
developers.sky.com
onboarding.1-14-0.cherry-ad.aidisco.sky.com
static.nowtv.it
bat-2189.idmapping-dev.aidisco.sky.com
interest.sky.com
origin-stage.proxy.video.sky.com
helpforum.sky.com

Certificate

The complete raw certificate details for stage-secure.sky.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CcLew2cUTOPWV+3RuoM
quhV75TdhshsfdIJC6Eg58txZoGnr3g6I+tVAoUzDcrTFq8jCnM13CARhL4yE9+Y
HKi/NhYtY2NGr/ZfiRb1jumigOyERgQ0NCeq9NK7jVumbw3AvG4I/X6f6ACafYor
IVTNSyotcTjZX4C7vymwTZizwK5JCuHuAXUEgyTpFf/KRGVE0gUoMOw/G/O+nXp3
e5b5/3BTxjTUQD5PE+v63EQvgaHx3KKiYRric/yQVOcjEZRTiLIrEebQkqyGNFtM
OpmbkAJHB82g+PDTOvDVwIYnJK1xOfdyuRooRGA/Tr0tGYIIy+8ckTcdOjSTD+NM
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 81606241530489044047379220519038476306
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)06'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 Extended Validation SSL SGC CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-02-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-02-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '02247735'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'TW7 5QD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Middlesex'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Isleworth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Grant Way'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'British Sky Broadcasting Group Plc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'IS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'stage-secure.sky.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26781774384156870916828093626137618325446933553330645239860158127308745203891832864502196929189463903898321790563315513932740653554764388374047500337677797170724391580990538299571307327890718505837060610924953563676556214123057056424460999602848481106893318855755593040555102868748139323322038543437456941748910690030858443400373678216838671920919131508844583776984508553283350603352459820618713996725574606737235130210032853285543085661445882837834823359087624860412955140517606719359362932598961498722702877585689173484002295375179023803619172291369571960496522170421740370520360801919084503684258126297861231692913
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-secure.sky.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.4.1 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.23.6 (VeriSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f9d3ecd4b63d4c4dca55585a960ea12854878c3e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4e43c81d76ef37537a4ff2586f94f338e2d5bddf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://EVIntl-crl.verisign.com/EVIntl2006.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://EVIntl-ocsp.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://EVIntl-aia.verisign.com/EVIntl2006.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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