selectnew.mercer.com

- Mercer US Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 04:ec:fb:43:fa:8e:c7:d6:e5:b4:50:39:b9:23:a8:af was issued on by DigiCert Inc.

With 39 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Mercer US Inc.

Organization: Mercer US Inc.
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ec:fb:43:fa:8e:c7:d6:e5:b4:50:39:b9:23:a8:af
Serial Number (int): 6547390312395151473742264998922791087
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: ff:f5:4a:b8:ea:a7:f4:44:e9:4b:22:48:5e:d3:2f:46:56:53:27:83
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): c2:72:2a:b6:e1:b2:4b:ea:c8:74:ed:ae:3b:dc:76:0f:36:46:b0:0a
Fingerprint (sha256): 02:b5:83:6b:8a:2d:66:68:d1:04:9e:43:aa:02:a6:2f:61:32:67:1b:39:17:8c:b3:09:62:fe:f7:81:55:bf:7f

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate selectnew.mercer.com

39

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for selectnew.mercer.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

selectnew.mercer.com
mijl.mercer.co.jp
www.oceanspraycignatrustedadvisor.mybenefitsolutions.com
www.workforce-analytics.mercer.com
www.cignacignatrustedadvisor.mybenefitsolutions.com
www.idacignatrustedadvisor.mybenefitsolutions.com
www.johnsoncignatrustedadvisor.mybenefitsolutions.com
www.aimcocignatrustedadvisor.mybenefitsolutions.com
www.alumniplans.com
www.democignatrustedadvisor.mybenefitsolutions.com
www.jennisoncignatrustedadvisor.mybenefitsolutions.com
www.dlccignatrustedadvisor.mybenefitsolutions.com
www.ajgcignatrustedadvisor.mybenefitsolutions.com
www.griffoncignatrustedadvisor.mybenefitsolutions.com
www.cornellretireecignatrustedadvisor.mybenefitsolutions.com
www.siteonecignatrustedadvisor.mybenefitsolutions.com
www.benecignatrustedadvisor.mybenefitsolutions.com
www.idtcignatrustedadvisor.mybenefitsolutions.com
www.lvhncignatrustedadvisor.mybenefitsolutions.com
www.mijl.mercer.co.jp
www.stanleycignatrustedadvisor.mybenefitsolutions.com
www.carouselcignatrustedadvisor.mybenefitsolutions.com
www.peoplesunitedcignatrustedadvisor.mybenefitsolutions.com
www.iagnrmasuper.com.au
www.mercer-digital.com
www.cignaretireecignatrustedadvisor.mybenefitsolutions.com
www.rimcignatrustedadvisor.mybenefitsolutions.com
www.segalcignatrustedadvisor.mybenefitsolutions.com
africa.mercer.com
www.lufthansacignatrustedadvisor.mybenefitsolutions.com
www.fluorcignatrustedadvisor.mybenefitsolutions.com
www.mercer.at
benefits-reimagined.mercer.com.cn
www.countycmamemberinsurance.com
cigna.cignatrustedadvisor.com
selfserve.mercer.com
benefits-reimagined.mercer.com
www.superiorcourtfresnocignatrustedadvisor.mybenefitsolutions.com
www.genesyscignatrustedadvisor.mybenefitsolutions.com

Other certificates including the domain name mercer.com

(limited to 100 certificates)
us-east-1.stage.awsapp.mercer.com
proliability.mercer.com
pre-merceroneview.mercer.com
ghrm-entitlementtool.mercer.com
mas-nms.mercer.com
passkeyservicedev.mercer.com
helplinechatbot-anz.dev.mercer.com
uat.beneflex.mercer.com
managementapi-apigee.on-dallas.prod.admin.mercer.com
benefitcenter.mercer.com
www.census.mercer.com
bi-dev.mercer.com
www.smartirlsit.mercer.com
benefitsuite.mercer.com
tbo-ftp.mercer.com
selectnew.mercer.com
matomo.us-east-1.prod.ext.mercer.com
investor.mercer.com
dr.eprism.win.mercer.com
kroger-ua.mercer.com
mas-ipos.mercer.com
employeesurveys.mercer.com
hbcognos.mercer.com
fe.bclifecycle.mercer.com
canadadcrkdatabase.mercer.com
selectnew.mercer.com
uat.roleprofilebuilder.mercer.com
ncfu-otr-uat.mercer.com
enhance-operations-auth.us-east-1.dev.awsadmin.mercer.com
qa.comptryx.mercer.com
uat.workforce.mercer.com
proliability.mercer.com
bsuitecognos.dr.mercer.com
msso1-uat.mercer.com
www.assurant-uat.mercer.com
remportal.mercer.com
passkeyservicepre.mercer.com
helplinechatbot-anz.dev.mercer.com
api.mmp.us-east-1.dev.int.mercer.com
consumerone.mercer.com
uat.benefitsmonitor.mercer.com
associationlh-moso.mercer.com
uat.recomposicionsalarial.mercer.com
selectnew.mercer.com
common.mercer.com
www.krogerng-auth.mercer.com
admin.bi-analytics-int.us-east-1.stage.int.mercer.com
febe.nifi01.kf.euwt1.prd.oss2.mercer.com
hli.na.qa.app.mercer.com
dashboard.pndb.euwt1.prd.app.mercer.com
be.warrenmt.usinternal.stage.admin.mercer.com
bsuitesp.uat.mercer.com
selectnew.mercer.com
www.apigee.apac.prod.app.mercer.com
stg-entitlement-api.mobility.mercer.com
san-7-s7.tlsprovisioning.exacttarget.com
ad-uat.mercer.com
www.cswebr2uat.mercer.com
stg-internal-europe-nexus.mercer.com
bhips.mercer.com
uat-admin.employeeinsight.mercer.com
uat.mercergold.mercer.com
www.mas-bamboo.mercer.com
historiasclinicas.mercer.com
www.cswebr2uat.mercer.com
historiasclinicas.mercer.com
stg.tx.mercerharmonise.mercer.com
home.ap.mercer.com
common.mercer.com
beneflex.uat.mercer.com
securestg.mercer.com
be.image.mobile.euwt1.stg.oss2.mercer.com
app-v010-harmonise.mercer.com
mercer.com
www.mags.mercer.com
hrbauat.mercer.com
main.digicon.ext.prd.aws-uset1-dmz.mosedge.mercer.com
mags.mercer.com
image.livy01.kf.euwt1.prd.oss2.mercer.com
connectweb4.mercer.com
api.main.mobile.euwt1.stg.oss2.mercer.com
helplinechatbot-anz.dev.mercer.com
apigee.on-dallas.prod.admin.mercer.com
select.mercer.com
common.mercer.com
psa-mbses.mercer.com
www.auth-qa.mercer.com
selectnew.mercer.com
admin.puat-mbm.mercer.com
www.mercerapploginirlsit.mercer.com
emea.analytics.benefitsuite.mercer.com
mfa-admin.mercer.com
channel4.flexsite.mercer.com
apps.mercer.com
mas-vdi.mercer.com
san-7-s7.tlsprovisioning.exacttarget.com
main.pndb.euwt1.dev.int.mercer.com
hli-drupal.emea.prod.admin.mercer.com
cator11db31cn3.mercer.com
consumer.mercer.com

Certificate

The complete raw certificate details for selectnew.mercer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj5KFOA6qu88I5WsLDGK
T8UxcLVj77Qpyr4YSTTjdV3ShgYPxtBrJqg3EpPmh+BJXtTeXF7OMMOd6Xgf+9Xx
d6nL46e3SUvavcmka1oJJSxtElTolvGiZW+RQmnN2ica/EODnD8nOCZk1CbrrgHd
rbwNfq54+ZS+6bvYj+1HXcFjbK5kltN45o8quIVEnKfb2geQ0fR4sLPcv/f7NxWt
Tu4dqXXbPwHqSl6mGQ9KjjpCsuowgHqUJKNYiDJl9Tc1eXJ3yHfA2aBWCEpM3skL
DQH7ZjxlhPk9sib1CqG79sOfSqaXBv9mbwjDVuMvjnfRwZv/MSzW2s6TE+iifvhT
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6547390312395151473742264998922791087
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-29 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mercer US Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'selectnew.mercer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22501134322552129319501658628859433584319330030468275576629695544274738063315024385526912574969322956659422376050165183906507660139777644401391889260884844850004316528355169430316089100699869462028899595830477280709655472089831555769024828387677438156322565283074128010643301232958344381091372950373332027302747706894826471756308099081115189224218173899682328729615781165121042577366373533780558697427347238062724447131380488906711986659075248261474853191581609141804918124459823658169986810555461723370525912970206220627599646707289496575205475193790177451616280372969166388649643176571448183331485968501444412199873
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fff54ab8eaa7f444e94b22485ed32f4656532783
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1737 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selectnew.mercer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mijl.mercer.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oceanspraycignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.workforce-analytics.mercer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cignacignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idacignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnsoncignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aimcocignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumniplans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.democignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jennisoncignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dlccignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ajgcignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.griffoncignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornellretireecignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.siteonecignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benecignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idtcignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lvhncignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mijl.mercer.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanleycignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carouselcignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peoplesunitedcignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iagnrmasuper.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercer-digital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cignaretireecignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rimcignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.segalcignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'africa.mercer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lufthansacignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fluorcignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercer.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefits-reimagined.mercer.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.countycmamemberinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cigna.cignatrustedadvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selfserve.mercer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefits-reimagined.mercer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.superiorcourtfresnocignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.genesyscignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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