pops-souscription-pp2-assurance.cardif.fr

- BNP PARIBAS -

Issued by VeriSign Class 3 Secure Server CA - G2

About this certificate

This digital certificate with serial number 51:8e:98:bc:95:fd:22:da:81:f6:a1:63:9f:7a:e7:d9 was issued on by VeriSign, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

BNP PARIBAS

Organization: BNP PARIBAS
Organization unit: ASSURANCE
State / Province: PARIS
Locality: PARIS
Country: FR

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)09
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 51:8e:98:bc:95:fd:22:da:81:f6:a1:63:9f:7a:e7:d9
Serial Number (int): 108407871680063728251018001912140851161
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: a5:ef:0b:11:ce:c0:41:03:a3:4a:65:90:48:b2:1c:e0:57:2d:7d:47

Fingerprint (sha1): 05:75:07:f8:ea:7d:1b:e9:10:7d:37:10:10:23:c9:a6:9b:34:04:bd
Fingerprint (sha256): 02:21:89:47:76:53:f7:d7:b3:89:b1:f0:a5:13:e7:b4:39:74:0f:a8:69:72:e1:df:7d:39:0a:41:78:c6:fb:f6

Issuing Certificate URL: http://SVRSecure-G2-aia.verisign.com/SVRSecureG2.cer

Revocation information

OCSP Server: http://ocsp.verisign.com
CRL Distribution Point: http://SVRSecure-G2-crl.verisign.com/SVRSecureG2.crl

Check the revocation status for certificate pops-souscription-pp2-assurance.cardif.fr

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pops-souscription-pp2-assurance.cardif.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name cardif.fr

(limited to 100 certificates)
simulationrentes-prod-assurance.cardif.fr
opportunitedecontact-pp-assurance.cardif.fr
bnp12b.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
bnp09b.bnpparibas.com
prevoyance-patrimoniale.cardif.fr
suivigiant-pp-assurance.cardif.fr
dsir-assurance.cardif.fr
assurance-credit.cardif.fr
pops-souscription-pp2-assurance.cardif.fr
plsir-pp-temp-assurance.cardif.fr
bnp07b.bnpparibas.com
bnp07b.bnpparibas.com
temp.cardif.fr
bnp09b.bnpparibas.com
beneficiaire-run.staging.cardif.fr
bnp09s.bnpparibas.com
iespub-assurance.cardif.fr
sfp-pp-temp-assurance.cardif.fr
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
opportunitedecontact-pp-assurance.cardif.fr
bnp19b.bnpparibas.com
bnp19b.bnpparibas.com
bnp23b.bnpparibas.com
bnp07b.bnpparibas.com
simulationrentes-pp-assurance.cardif.fr
www.cardif.fr
bnp09s.bnpparibas.com
bnp09s.bnpparibas.com
nowcl-temp-assurance.cardif.fr
bnp07b.bnpparibas.com
assurance-sante.cardif.fr
portail-relation-client-c01-rec.cardif.fr
portail-relation-client.cardif.fr
bnp09s.bnpparibas.com
bnp12b.bnpparibas.com
bnp09b.bnpparibas.com
bnp07b.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
bnp09b.bnpparibas.com
bnp15b.bnpparibas.com
alfin-prod-assurance.cardif.fr
finagora-pp.cardif.fr
bnp07b.bnpparibas.com
bnp09s.bnpparibas.com
cardif.fr
bnp09s.bnpparibas.com
simulationcapitalisationrppfrance-prod-assurance.cardif.fr
bnp09s.bnpparibas.com
opportunitedecontact-pp-assurance.cardif.fr
bnp09b.bnpparibas.com
espace-indemnisation-c02-rec.cardif.fr
suivigiant-prod-assurance.cardif.fr
bnp09s.bnpparibas.com
propositionarbitrage.cardif.fr
bnp12b.bnpparibas.com
tmp.cardif.fr
dsir-assurance.cardif.fr
bnp06b.bnpparibas.com
bnp09s.bnpparibas.com
alui-images-assurance.cardif.fr
document-information-cle-pp.cardif.fr
espace-client-c01-rec.cardif.fr
portail-relation-client.cardif.fr
bnp18b.bnpparibas.com
bnp07b.bnpparibas.com
demo-portail-c01.staging.cardif.fr
simulationcapitalisationrppfrance-prod-assurance.cardif.fr
bnp09s.bnpparibas.com
bnp04b.bnpparibas.com
bnp12b.bnpparibas.com
giant-prod-assurance.cardif.fr
sfp-pp-assurance.cardif.fr
bnp07b.bnpparibas.com
bnp12b.bnpparibas.com
bnp09b.bnpparibas.com
bnp09b.bnpparibas.com
alfin-pp-assurance.cardif.fr
finagora.cardif.fr
bnp12b.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
iespub-assurance.cardif.fr
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
bnp09s.bnpparibas.com
bnp19b.bnpparibas.com
bnp09s.bnpparibas.com
bnp04b.bnpparibas.com
shaker-pp-tmp-assurance.cardif.fr
bnp04b.bnpparibas.com
bnp04b.bnpparibas.com
portail-relation-client.cardif.fr
bnp07b.bnpparibas.com
canaldigital-assurance.cardif.fr
bnp07b.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
bnp12b.bnpparibas.com
comptes-run.staging.cardif.fr
bo-run-n2-client-portail.staging.cardif.fr
shaker.cardif.fr

Certificate

The complete raw certificate details for pops-souscription-pp2-assurance.cardif.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIQUY6YvJX9ItqB9qFjn3rn2TANBgkqhkiG9w0BAQUFADCB
tTELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQL
ExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1c2Ug
YXQgaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYSAoYykwOTEvMC0GA1UEAxMm
VmVyaVNpZ24gQ2xhc3MgMyBTZWN1cmUgU2VydmVyIENBIC0gRzIwHhcNMTAwMzE4
MDAwMDAwWhcNMTIwMzE3MjM1OTU5WjCBizELMAkGA1UEBhMCRlIxDjAMBgNVBAgT
BVBBUklTMQ4wDAYDVQQHFAVQQVJJUzEUMBIGA1UEChQLQk5QIFBBUklCQVMxEjAQ
BgNVBAsUCUFTU1VSQU5DRTEyMDAGA1UEAxQpcG9wcy1zb3VzY3JpcHRpb24tcHAy
LWFzc3VyYW5jZS5jYXJkaWYuZnIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC1qfE4a7GbD8PViapcle1BXScS3wiviYEmtWWf/L8IZFMswTVoV7fyNyDj
ISPAYWUg9WMRzmlliCzoj1/+wa5SsqvFBX19NOePzTIeMA3Jxu89qfVO70pCwSXS
rtzPUNpkGuw/a/wRSxqMlTyaYHyKlcTQj+dIsOBG/HdWUwiEZQKOLX8GFr2RUQIZ
P2EqRadJRFzOip0tBcNbuHz7LzMkWX0cKJ69y5nc2nZf0HzqkrMSSNqpURIZvKIN
WtyuzjCXWKtOEzx+MSei4O/2iy7LDHOJkY3FSvYup7uNHsGOsK53SR2SC06M5bWT
BdxwxT/EhzSsfXO9cfhtmssAdQopAgMBAAGjggHRMIIBzTAJBgNVHRMEAjAAMAsG
A1UdDwQEAwIFoDBFBgNVHR8EPjA8MDqgOKA2hjRodHRwOi8vU1ZSU2VjdXJlLUcy
LWNybC52ZXJpc2lnbi5jb20vU1ZSU2VjdXJlRzIuY3JsMEQGA1UdIAQ9MDswOQYL
YIZIAYb4RQEHFwMwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cudmVyaXNpZ24u
Y29tL3JwYTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHwYDVR0jBBgw
FoAUpe8LEc7AQQOjSmWQSLIc4FctfUcwdgYIKwYBBQUHAQEEajBoMCQGCCsGAQUF
BzABhhhodHRwOi8vb2NzcC52ZXJpc2lnbi5jb20wQAYIKwYBBQUHMAKGNGh0dHA6
Ly9TVlJTZWN1cmUtRzItYWlhLnZlcmlzaWduLmNvbS9TVlJTZWN1cmVHMi5jZXIw
bgYIKwYBBQUHAQwEYjBgoV6gXDBaMFgwVhYJaW1hZ2UvZ2lmMCEwHzAHBgUrDgMC
GgQUS2u5KJYGDLvQUjibKaxLB4shBRgwJhYkaHR0cDovL2xvZ28udmVyaXNpZ24u
Y29tL3ZzbG9nbzEuZ2lmMA0GCSqGSIb3DQEBBQUAA4IBAQB7oFC4rblRm/bguiW2
2D7Yo5x8cHXcq7p1OaVpnheCsc74q4ZajRMVTu4/tvlBS6y33Hh2j8Vf2GTQtSiD
B5N+eJV4dmXBI96xcv7Fn1vCKqIW6r8yuSS8pRm3+ztC2n5ISCihVGhtQ2e4BN77
hkluBt4vtt/7Gs/blnPmi2mhYesEJhiz7/R3SjzFE8GMifCACfls3U4ujLu4kE2v
rgLTiiw7obLaHFn3N/kgJrRZzDRy+X3UW34NXZI3slJNHUTM6rfz8FBW4kvTvW1Z
AMecVI668/vYTz+b99fCGhVW3DR3ScrBbHnzlT8cjuRdJ17P7P9BIzbdkCCjjsQa
e30T
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtanxOGuxmw/D1YmqXJXt
QV0nEt8Ir4mBJrVln/y/CGRTLME1aFe38jcg4yEjwGFlIPVjEc5pZYgs6I9f/sGu
UrKrxQV9fTTnj80yHjANycbvPan1Tu9KQsEl0q7cz1DaZBrsP2v8EUsajJU8mmB8
ipXE0I/nSLDgRvx3VlMIhGUCji1/Bha9kVECGT9hKkWnSURczoqdLQXDW7h8+y8z
JFl9HCievcuZ3Np2X9B86pKzEkjaqVESGbyiDVrcrs4wl1irThM8fjEnouDv9osu
ywxziZGNxUr2Lqe7jR7BjrCud0kdkgtOjOW1kwXccMU/xIc0rH1zvXH4bZrLAHUK
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 108407871680063728251018001912140851161
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)09'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 Secure Server CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2010-03-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-03-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'BNP PARIBAS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'ASSURANCE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'pops-souscription-pp2-assurance.cardif.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22932934854124280896822525949359053797886640122192322224131795518789301299185619143294780929638273631560120732101820252695207004593433484101594217722609707305823868713578143850015206500736938871414724696552145852906903223271716560367836627693528896296191599189959938970656263637879712909953498932606059608041808223071125674706854021953339402832856457705775303976406429647654000982343752782671944846024495079898323923894437562969015420160747514577325511071605992385428949520071776146322111805313310569519660839556141399749763467166817388444719487832247750158671099101913192203495127766843777954379392097914393290148393
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G2-crl.verisign.com/SVRSecureG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.23.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5ef0b11cec04103a34a659048b21ce0572d7d47
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G2-aia.verisign.com/SVRSecureG2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/gif'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															4b6bb92896060cbbd052389b29ac4b078b210518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://logo.verisign.com/vslogo1.gif'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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