www.securepgp.aon.co.uk
- Aon Limited -
Issued by VeriSign Class 3 International Server CA - G3
About this certificate
This digital certificate with serial number 1c:3f:54:a2:86:a8:a3:2c:75:0a:27:8f:8c:3b:d6:dd was issued on by VeriSign, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
- Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)
Aon Limited
Organization:
Aon Limited
Organization unit: Aon Limited
Organization unit: Aon Limited
State / Province:
London
Locality: London
Country: GB
Locality: London
Country: GB
VeriSign, Inc.
Organization:
VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 1c:3f:54:a2:86:a8:a3:2c:75:0a:27:8f:8c:3b:d6:ddSerial Number (int): 37547215183109234052624861335371110109
Serial Number lenght: 125 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: d7:9b:7c:d8:22:a0:15:f7:dd:ad:5f:ce:29:9b:58:c3:bc:46:00:b5
Fingerprint (sha1): 99:07:71:d0:26:ea:20:61:cb:11:43:4b:21:99:54:46:1d:60:cd:f0
Fingerprint (sha256): 05:0c:e5:bc:10:c7:85:ba:c2:5b:1a:9d:bd:89:2b:41:6f:74:0a:77:2a:4b:a8:a3:5a:c0:c1:87:fd:0f:08:78
Issuing Certificate URL: http://SVRIntl-G3-aia.verisign.com/SVRIntlG3.cer
Revocation information
OCSP Server: http://ocsp.verisign.comCRL Distribution Point: http://SVRIntl-G3-crl.verisign.com/SVRIntlG3.crl
Check the revocation status for certificate www.securepgp.aon.co.uk
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.securepgp.aon.co.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Netscape Server-Gated Cryptography
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.securepgp.aon.co.uk
Other certificates including the domain name aon.co.uk
(limited to 100 certificates)
www.staging-acl.aon.co.uk
staging-secure.aon.co.uk
www.che.aon.co.uk
www.maintenance.aon.co.uk
www.securepgp.aon.co.uk
www.staging-cashreceiptpreload.aon.co.uk
www.bi.aon.co.uk
caggateway1.aon.co.uk
staging-acrash.aon.co.uk
ipse.aon.co.uk
www.securepgp.aon.co.uk
insurance.aon.co.uk
maven.aon.co.uk
www.maintenance.aon.co.uk
www.soap.aon.co.uk
www.aviationcertificates.aon.co.uk
www.cashreceiptpreload.aon.co.uk
staging-mediaandentertainment.secureaffinity.aon.co.uk
www.dataextraction.aon.co.uk
aoncentre-roombooking.aon.co.uk
secure.aon.co.uk
acrash.aon.co.uk
acrash.aon.co.uk
www.riskmaps.aon.co.uk
www.bi.aon.co.uk
myview.aon.co.uk
acrash.aon.co.uk
www.staging-soap.aon.co.uk
www.bi.aon.co.uk
drpax.secureaffinity.aon.co.uk
www.staging-cargonet.aon.co.uk
www.dataextraction.aon.co.uk
staging.applyonline.aon.co.uk
www.prionestop.aon.co.uk
insurance.aon.co.uk
www.staging-riskmaps.aon.co.uk
www.riskmaps.aon.co.uk
www.uat-ecm.aon.co.uk
www.cashreceiptpreload.aon.co.uk
www.ecmws.aon.co.uk
accountantspi.secureaffinity.aon.co.uk
insurance.aon.co.uk
acrashreporting.aon.co.uk
act.aon.co.uk
www.staging-gauss-web.aon.co.uk
uat.cm.insurance.aon.co.uk
www.securepgp.aon.co.uk
valiant.aon.co.uk
www.staging-dataextraction.aon.co.uk
www.staging-globe-web.aon.co.uk
www.staging-aviationcertificates.aon.co.uk
www.staging-clientarrival.aon.co.uk
www.uat-ecmws.aon.co.uk
uat-aoncentre-roombooking.aon.co.uk
www.staging-cashreceiptpreload.aon.co.uk
www.docex.aon.co.uk
www.docex-link.aon.co.uk
oscar.aon.co.uk
accountantspi.secureaffinity.aon.co.uk
www.dataextraction.aon.co.uk
www.ecm.aon.co.uk
www.staging-bi.aon.co.uk
maven.aon.co.uk
www.staging-acl.aon.co.uk
www.securepgp.aon.co.uk
insurance.aon.co.uk
www.bi.aon.co.uk
www.apr.aon.co.uk
www.riskmaps.aon.co.uk
www.cargonet.aon.co.uk
www.grc.aon.co.uk
uat-aoncentre-roombooking.aon.co.uk
www.aviationcertificates.aon.co.uk
staging-act.aon.co.uk
www.prionestop.aon.co.uk
www.staging-cargonet.aon.co.uk
www.staging-dataextraction.aon.co.uk
www.staging-bankreconutility.aon.co.uk
www.apr.aon.co.uk
staging-aoncarrierlink.aon.co.uk
act.aon.co.uk
www.staging-grc.aon.co.uk
www.staging-service.aon.co.uk
acrash.aon.co.uk
www.prionestop.aon.co.uk
www.globe-web.aon.co.uk
www.staging-securepgp.aon.co.uk
valiant.aon.co.uk
www.docex-link.aon.co.uk
tradesman.secureaffinity.aon.co.uk
www.staging-globe-web.aon.co.uk
staging-secure.aon.co.uk
secure.aon.co.uk
www.staging-gauss-web.aon.co.uk
insolvencyandrestructuring.aon.co.uk
www.maintenance.aon.co.uk
www.staging-aviationcertificates.aon.co.uk
pax.secureaffinity.aon.co.uk
www.staging-soap.aon.co.uk
emeaapps1.aon.co.uk
staging-secure.aon.co.uk
www.che.aon.co.uk
www.maintenance.aon.co.uk
www.securepgp.aon.co.uk
www.staging-cashreceiptpreload.aon.co.uk
www.bi.aon.co.uk
caggateway1.aon.co.uk
staging-acrash.aon.co.uk
ipse.aon.co.uk
www.securepgp.aon.co.uk
insurance.aon.co.uk
maven.aon.co.uk
www.maintenance.aon.co.uk
www.soap.aon.co.uk
www.aviationcertificates.aon.co.uk
www.cashreceiptpreload.aon.co.uk
staging-mediaandentertainment.secureaffinity.aon.co.uk
www.dataextraction.aon.co.uk
aoncentre-roombooking.aon.co.uk
secure.aon.co.uk
acrash.aon.co.uk
acrash.aon.co.uk
www.riskmaps.aon.co.uk
www.bi.aon.co.uk
myview.aon.co.uk
acrash.aon.co.uk
www.staging-soap.aon.co.uk
www.bi.aon.co.uk
drpax.secureaffinity.aon.co.uk
www.staging-cargonet.aon.co.uk
www.dataextraction.aon.co.uk
staging.applyonline.aon.co.uk
www.prionestop.aon.co.uk
insurance.aon.co.uk
www.staging-riskmaps.aon.co.uk
www.riskmaps.aon.co.uk
www.uat-ecm.aon.co.uk
www.cashreceiptpreload.aon.co.uk
www.ecmws.aon.co.uk
accountantspi.secureaffinity.aon.co.uk
insurance.aon.co.uk
acrashreporting.aon.co.uk
act.aon.co.uk
www.staging-gauss-web.aon.co.uk
uat.cm.insurance.aon.co.uk
www.securepgp.aon.co.uk
valiant.aon.co.uk
www.staging-dataextraction.aon.co.uk
www.staging-globe-web.aon.co.uk
www.staging-aviationcertificates.aon.co.uk
www.staging-clientarrival.aon.co.uk
www.uat-ecmws.aon.co.uk
uat-aoncentre-roombooking.aon.co.uk
www.staging-cashreceiptpreload.aon.co.uk
www.docex.aon.co.uk
www.docex-link.aon.co.uk
oscar.aon.co.uk
accountantspi.secureaffinity.aon.co.uk
www.dataextraction.aon.co.uk
www.ecm.aon.co.uk
www.staging-bi.aon.co.uk
maven.aon.co.uk
www.staging-acl.aon.co.uk
www.securepgp.aon.co.uk
insurance.aon.co.uk
www.bi.aon.co.uk
www.apr.aon.co.uk
www.riskmaps.aon.co.uk
www.cargonet.aon.co.uk
www.grc.aon.co.uk
uat-aoncentre-roombooking.aon.co.uk
www.aviationcertificates.aon.co.uk
staging-act.aon.co.uk
www.prionestop.aon.co.uk
www.staging-cargonet.aon.co.uk
www.staging-dataextraction.aon.co.uk
www.staging-bankreconutility.aon.co.uk
www.apr.aon.co.uk
staging-aoncarrierlink.aon.co.uk
act.aon.co.uk
www.staging-grc.aon.co.uk
www.staging-service.aon.co.uk
acrash.aon.co.uk
www.prionestop.aon.co.uk
www.globe-web.aon.co.uk
www.staging-securepgp.aon.co.uk
valiant.aon.co.uk
www.docex-link.aon.co.uk
tradesman.secureaffinity.aon.co.uk
www.staging-globe-web.aon.co.uk
staging-secure.aon.co.uk
secure.aon.co.uk
www.staging-gauss-web.aon.co.uk
insolvencyandrestructuring.aon.co.uk
www.maintenance.aon.co.uk
www.staging-aviationcertificates.aon.co.uk
pax.secureaffinity.aon.co.uk
www.staging-soap.aon.co.uk
emeaapps1.aon.co.uk
Certificate
The complete raw certificate details for www.securepgp.aon.co.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgIQHD9Uooaooyx1CiePjDvW3TANBgkqhkiG9w0BAQUFADCB vDELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQL ExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1c2Ug YXQgaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYSAoYykxMDE2MDQGA1UEAxMt VmVyaVNpZ24gQ2xhc3MgMyBJbnRlcm5hdGlvbmFsIFNlcnZlciBDQSAtIEczMB4X DTEzMDYyODAwMDAwMFoXDTE1MDYyOTIzNTk1OVowfTELMAkGA1UEBhMCR0IxDzAN BgNVBAgTBkxvbmRvbjEPMA0GA1UEBxQGTG9uZG9uMRQwEgYDVQQKFAtBb24gTGlt aXRlZDEUMBIGA1UECxQLQW9uIExpbWl0ZWQxIDAeBgNVBAMUF3d3dy5zZWN1cmVw Z3AuYW9uLmNvLnVrMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lyd qCHkfoDoQfkhqZnI7iynxq6OvbKcoPzyDNasPwso4Vmd2MsJmVyKApdIkyABwAtg gr7BQgY44zywIiTIjxGQAYMrcKW4Fum+oCfj/boCeL7VsSQl+pMFZtdamQMe3xyx 131YqDpkhJRrRWKm147b7H3YTkr7rYjAn+dmkkLsYr6OV+BiJaWbHuz57yQnEJ3N inxUbJPZsy3nywRF1C25nDARJJGwUHqNK54QDSGtl+MHT/JiMKuoChh5m/bjEnXR s/MvNiBjB5ofgmYHSmdaZw5OwXNVEAr32GPjEKu67RooiuMAUh5iPT+0lLkTFoB/ mWtc7GQuV5PW+wFECQIDAQABo4IBijCCAYYwIgYDVR0RBBswGYIXd3d3LnNlY3Vy ZXBncC5hb24uY28udWswCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwKAYDVR0l BCEwHwYIKwYBBQUHAwEGCCsGAQUFBwMCBglghkgBhvhCBAEwQwYDVR0gBDwwOjA4 BgpghkgBhvhFAQc2MCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LnZlcmlzaWdu LmNvbS9jcHMwHwYDVR0jBBgwFoAU15t82CKgFffdrV/OKZtYw7xGALUwQQYDVR0f BDowODA2oDSgMoYwaHR0cDovL1NWUkludGwtRzMtY3JsLnZlcmlzaWduLmNvbS9T VlJJbnRsRzMuY3JsMHIGCCsGAQUFBwEBBGYwZDAkBggrBgEFBQcwAYYYaHR0cDov L29jc3AudmVyaXNpZ24uY29tMDwGCCsGAQUFBzAChjBodHRwOi8vU1ZSSW50bC1H My1haWEudmVyaXNpZ24uY29tL1NWUkludGxHMy5jZXIwDQYJKoZIhvcNAQEFBQAD ggEBADWX6VmvYskVQovTb73cMEfOGBmBE1Y0/3cq3OKz+OJiWaJI2QtGdwSgDapM +rR3Qj3GVe9TD1yhglWQHS5RoU9smPsNmHv5MuNFeQW6MRzy4vbQ2QrtQjQAVvSm VOtL100/SPY8ZvekgtjbJUX1/5D4uVZHgD7Uln7s8eLJ9zXz2mKx/w+VGlY2tiRY sGQ73hG6Z1jBgONG4NRtDs5/Jogq1KqCS36p19dRBhjISNl5M4Lf6soZMEHFQzj5 XA5NZD7O+H6MPqW6/rI+vptXQT2Z57aQn63ZsNtmvsB+hS8B/J5bL6QUhFNijvt6 ZahjQm/Ju4zsh0GOTMLiOWXATpA= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lydqCHkfoDoQfkhqZnI 7iynxq6OvbKcoPzyDNasPwso4Vmd2MsJmVyKApdIkyABwAtggr7BQgY44zywIiTI jxGQAYMrcKW4Fum+oCfj/boCeL7VsSQl+pMFZtdamQMe3xyx131YqDpkhJRrRWKm 147b7H3YTkr7rYjAn+dmkkLsYr6OV+BiJaWbHuz57yQnEJ3NinxUbJPZsy3nywRF 1C25nDARJJGwUHqNK54QDSGtl+MHT/JiMKuoChh5m/bjEnXRs/MvNiBjB5ofgmYH SmdaZw5OwXNVEAr32GPjEKu67RooiuMAUh5iPT+0lLkTFoB/mWtc7GQuV5PW+wFE CQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 37547215183109234052624861335371110109 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)10' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 International Server CA - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-06-28 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-06-29 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'London' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Aon Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Aon Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'www.securepgp.aon.co.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26555714619068801732302295581012520817089157072137597346172001903696544440456649789646749312708624264525875174909760079355121913981588733921046052324680496221672830411669734995968593388062119685299446574939867458760592994447659986711919735435681121716133703337664221902298837343197854815975041945303248035066200448704233118432896144395798585009632974351547810182385644745064660999612257494256903730795226649463348937036802754166321557745532528786421509025503107968386203906546923655782422995501668647189702560600699897892815835422254209460023764756440023967016964383660922831716594088457580655897594936897099509351433 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.securepgp.aon.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.4.1 (serverGatedCrypto) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/cps' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d79b7cd822a015f7ddad5fce299b58c3bc4600b5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRIntl-G3-crl.verisign.com/SVRIntlG3.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.verisign.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRIntl-G3-aia.verisign.com/SVRIntlG3.cer' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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