portale-esercenti.ubibanca.com

- Unione di Banche Italiane scpa -

Issued by VeriSign Class 3 Extended Validation SSL SGC CA

About this certificate

This digital certificate with serial number 0e:94:29:16:3f:30:66:45:6f:c7:c8:a9:a8:3a:37:47 was issued on by VeriSign, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

Unione di Banche Italiane scpa

Company registration number: 03053920165
Organization: Unione di Banche Italiane scpa
Organization unit: Sistemi Informativi - Operations
Address: PIAZZA VITTORIO VENETO 8
Postal code: 24122
State / Province: Bergamo
Locality: Bergamo
Country: IT

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)06
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:94:29:16:3f:30:66:45:6f:c7:c8:a9:a8:3a:37:47
Serial Number (int): 19378485217421368762326083605309830983
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 2f:72:9c:d0:c8:3e:4c:d7:df:59:b5:42:d1:64:be:b2:b0:2f:d5:50
AuthorityKeyId: 4e:43:c8:1d:76:ef:37:53:7a:4f:f2:58:6f:94:f3:38:e2:d5:bd:df

Fingerprint (sha1): 82:c1:e3:0d:45:da:9c:42:e6:01:33:fe:53:15:60:9f:83:c7:85:d3
Fingerprint (sha256): 04:10:d8:96:f1:83:75:60:d1:44:d5:af:29:75:88:37:97:14:0e:20:67:27:98:e2:00:65:b9:93:75:73:7d:fb

Issuing Certificate URL: http://EVIntl-aia.verisign.com/EVIntl2006.cer

Revocation information

OCSP Server: http://EVIntl-ocsp.verisign.com
CRL Distribution Point: http://EVIntl-crl.verisign.com/EVIntl2006.crl

Check the revocation status for certificate portale-esercenti.ubibanca.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portale-esercenti.ubibanca.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication
Netscape Server-Gated Cryptography

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portale-esercenti.ubibanca.com

Other certificates including the domain name ubibanca.com

(limited to 100 certificates)
servizi-bg.ubibanca.com
enjoyjuve.ubibanca.com
consulente-mutuo.ubibanca.com
calcolo_rata_mutuo.ubibanca.com
portale-esercenti.ubibanca.com
enjoynba.ubibanca.com
www.raccoltapunti.ubibanca.com
login.ubibanca.com
ubi1000.ubibanca.com
ip.ubibanca.com
surroga-mutuo.ubibanca.com
www.ubibanca.com
remotedesk.ubibanca.com
remotedesk.ubibanca.com
webextms01.ubibanca.com
www.pagamentionline.ubibanca.com
enjoyski.ubibanca.com
portal.ubibanca.com
mailms.ubibanca.com
login.ubibanca.com
webextms01.ubibanca.com
ognicosaatuotempo.ubibanca.com
mailms.ubibanca.com
portal.ubibanca.com
ubirent.ubibanca.com
www.ubibanca.com
www.ubiconfidiweb.ubibanca.com
portale-esercenti.ubibanca.com
www.ubiconfidiweb.ubibanca.com
mobile.ubibanca.com
board.ubibanca.com
ubiturnbg.ubibanca.com
remotedesk.ubibanca.com
www.ubiconfidiweb.ubibanca.com
surroga-mutuo.ubibanca.com
officewebapps.ubibanca.com
UBIRENT.UBIBANCA.COM
portale-esercenti.ubibanca.com
www.pagamentionline.ubibanca.com
ubiturnbg.ubibanca.com
mbl.ubibanca.com
arte.ubibanca.com
pubblicita.ubibanca.com
areariservata.clubino.ubibanca.com
mbl1.ubibanca.com
webextms01.ubibanca.com
ip.ubibanca.com
enjoynba.ubibanca.com
www.cartedicredito.ubibanca.com
ip-cert.ubibanca.com
portal.ubibanca.com
pianiubipramerica.ubibanca.com
www.ubibanca.com
stsms.ubibanca.com
www.pagamentionline.ubibanca.com
ubivideo.ubibanca.com
consulente_mutuo.ubibanca.com
enjoyski.ubibanca.com
servizi.ubibanca.com
www.cartedicredito.ubibanca.com
cnbd.quiubi.it
www.easycity.ubibanca.com
sf.ubibanca.com
cnbd.quiubi.it
ognicosaatuotempo.ubibanca.com
mbl2.ubibanca.com
www.pagamentionline.ubibanca.com
mdm.ubibanca.com
ubiturnbs.ubibanca.com
www.ubiconfidiweb.ubibanca.com
www.ubibanca.com
enjoyski.ubibanca.com
mbl2.ubibanca.com
www.welcome-privati.ubibanca.com
areariservata.clubino.ubibanca.com
redirect.intesasanpaolo.com
enjoyjuve.ubibanca.com
redirect.intesasanpaolo.com
enjoynba.ubibanca.com
login.ubibanca.com
mailms.ubibanca.com
openbanking.ubibanca.com
ip-cert.ubibanca.com
webextms01.ubibanca.com
remotedesk.ubibanca.com
enjoynba.ubibanca.com
mbl.ubibanca.com
www.raccoltapunti.ubibanca.com
ip-cert.ubibanca.com
consulente-mutuo.ubibanca.com
ubivideo.ubibanca.com
servizi.ubibanca.com
consulente-mutuo.ubibanca.com
enjoyjuve.ubibanca.com
www.cartedicredito.ubibanca.com
mbl2.ubibanca.com
mobile.ubibanca.com
3dscrypto.ubibanca.com
www.ubibanca.com
mobile.ubibanca.com

Certificate

The complete raw certificate details for portale-esercenti.ubibanca.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0OS4O1+RAb+tUW26JUG
vicoRMmOFIM0UOEamLLFRQ5r6qNMVyaCJklW0gL20mCWf6XvDbVva1MX3vJek0gF
76M8hCygsu5Rss24QMHNnGDjRG5YFLHmVr0raNM8WyTBzBSypEG2mfZ9yBntTJnm
dnFbyn30iVvwQu2phtM5FtW0RPUGhyKUdy7jmp5Wpwvqs2RAEgdGgs9ecA2RF/HI
w7DVIxw0xLMt4LvINXYd3xd7zQ6B6o5xmas+4IEbwNWYkoTS/CzjBwS2HD21zG+9
1VaHGRgrMbKC+Ql8Z9z/IdtNmGGstFmVytW1dNK3PyoEACHL4r3S4kVCBhVr3kaO
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19378485217421368762326083605309830983
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)06'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 Extended Validation SSL SGC CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-07-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-07-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '03053920165'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '24122'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'PIAZZA VITTORIO VENETO 8'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Unione di Banche Italiane scpa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Sistemi Informativi - Operations'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'portale-esercenti.ubibanca.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26164650983371009030941076406992656161842658112777818637453919581290113511533621687462483334481616056539175934563357416480118607259857402643460843685655923399818790889015273189785982580160581238098235775815696166361779179890407860926504910923726969407549606722732457349340746535248696206098808999403602704798363233239798014699618245671407889959844406031500076779357449015312777523904330968001196994808321971511855645043892869159645462533797811869632219099326619057598429656713436988143414143037982433445091371190062890672291616577291534270203996911716123982470694825391408267538791341662158091483261561373649998876201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portale-esercenti.ubibanca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.4.1 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.23.6 (VeriSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f729cd0c83e4cd7df59b542d164beb2b02fd550
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4e43c81d76ef37537a4ff2586f94f338e2d5bddf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://EVIntl-crl.verisign.com/EVIntl2006.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://EVIntl-ocsp.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://EVIntl-aia.verisign.com/EVIntl2006.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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