smcpint.ny.ssmb.com

- Citigroup Inc. -

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 06:9a:55:33:aa:22:f6:69:5e:cc:c9:d5:3b:41:7e:72 was issued on by DigiCert Inc.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Citigroup Inc.

Company registration number: 2154254
Organization: Citigroup Inc.
Organization unit: Web Hosting Group
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:9a:55:33:aa:22:f6:69:5e:cc:c9:d5:3b:41:7e:72
Serial Number (int): 8776709789031176105073320983334583922
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: a5:ed:5b:e6:04:6a:e7:e8:15:3d:34:25:6d:98:e6:3c:d2:f3:dc:19
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): 2d:83:e4:d3:1b:82:2a:c6:3c:1c:11:96:06:e4:18:47:bb:ad:86:2e
Fingerprint (sha256): 05:7e:fc:95:1c:82:48:5b:c1:32:2d:34:62:f1:01:50:db:13:0b:b6:7a:04:92:dc:08:9e:2b:4e:1c:c9:68:74

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate smcpint.ny.ssmb.com

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for smcpint.ny.ssmb.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

smcpint.ny.ssmb.com
gmwgtdcpsp08p.nam.nsroot.net
gmwgtdcpsp44p.nam.nsroot.net
gmwgtdcpsp45p.nam.nsroot.net
gmwmwdcpsp46p.nam.nsroot.net
gmwmwdcpsp47p.nam.nsroot.net
gmwmwdcpsp08p.nam.nsroot.net

Other certificates including the domain name ssmb.com

(limited to 100 certificates)
camstr-sit.gsrena.ssmb.com
sps-stg-tmp.webbank.ssmb.com
esales1.nj.ssmb.com
taxtti-uat.gsrena.ssmb.com
esales1.nj.ssmb.com
camstste-sit.gsrena.ssmb.com
icgcabo.nj.ssmb.com
smcpint.ny.ssmb.com
oweb-stg.webbank.ssmb.com
rapport.ny.ssmb.com
Rapportdev.ny.ssmb.com
smcpint-stg.ny.ssmb.com
esales.nj.ssmb.com
taxoperationsdocumentmgmtuat.ssmb.com
etfs-stg.webbank.ssmb.com
esales3-uat.gsrena.ssmb.com
gbmstr-sit.gsrena.ssmb.com
mfssb.es.ssmb.com
camstr-uat.gsrena2b.ssmb.com
ybgitta06.ny.ssmb.com
gbmstr-sit.gsrena.ssmb.com
gbmstr.nj.ssmb.com
saldev.es.ssmb.com
mfcpug.es.ssmb.com
gbmstr-uat.gsrena.ssmb.com
totcomp-sit.gsrena.ssmb.com
mfssb.es.ssmb.com
tdu-uat.gsrena2b.ssmb.com
esales2.nj.ssmb.com
tdu-uat.gsrena.ssmb.com
camstste-uat.gsrena.ssmb.com
salprod.es.ssmb.com
opobcor-uat.gsrena.ssmb.com
gbmstr-uat.gsrena.ssmb.com
olidev-stg.webbank.ssmb.com
nam-hrms.nj.ssmb.com
esales2.nj.ssmb.com
esales-sit.gsrena2b.ssmb.com
sfadmin-sit.gsrena2b.ssmb.com
crer-dev.webbank.ssmb.com
stfin-uat.gsrena.ssmb.com
sfadmin-sit.gsrena.ssmb.com
uat.citigroup.com
citiwebmail.apac.nsroot.net
citiwebmail.jpn.nsroot.net
esales.nj.ssmb.com
tenb51-uat.gsrena2b.ssmb.com
westhrms-dev.webbank.ssmb.com
smcpext-stg.webbank.ssmb.com
olidev-stg.webbank.ssmb.com
itpaqs-uat.gsrena.ssmb.com
citiwebmail.apac.nsroot.net
gdw.nj.ssmb.com
sfadmin-uat.gsrena2b.ssmb.com
cdts-dev.webbank.ssmb.com
esales.nj.ssmb.com
ybgitta06.ny.ssmb.com
www.gqr.ssmb.com
itpu-uat.gsrena.ssmb.com
ssgsm-stg.webbank.ssmb.com
tdu-dev.webbank.ssmb.com
cri4-dev.webbank.ssmb.com
esales2.nj.ssmb.com
esales.nj.ssmb.com
esales1.nj.ssmb.com
cmstreamuat.ny.ssmb.com
easthrms.nj.ssmb.com
gbboste.nj.ssmb.com
gbboste.nj.ssmb.com
aris-stg.webbank.ssmb.com
ilrouter-dev-tmp.webbank.ssmb.com
gfar2-dev.webbank.ssmb.com
frs2-stg.webbank.ssmb.com
ybriweb33.ny.ssmb.com
smcpint-dev.nj.ssmb.com
glads-dev.webbank.ssmb.com
edelext-dev.webbank.ssmb.com
camstr.nj.ssmb.com
olrxml-stg.webbank.ssmb.com
ccas-uat.gsrena.ssmb.com
saldev.es.ssmb.com
stfin-sit.gsrena2b.ssmb.com
frs2-stg.webbank.ssmb.com
esales2.nj.ssmb.com
tdu-sit.gsrena2b.ssmb.com
uam1-uat.gsrena.ssmb.com
esales1.nj.ssmb.com
tenb51.nj.ssmb.com
fhwone.nj.ssmb.com
ilrouter.nj.ssmb.com
smcpext-dev.webbank.ssmb.com
camstste-uat.gsrena.ssmb.com
gbmstr-uat.gsrena.ssmb.com
tdu-uat.gsrena.ssmb.com
camstr.nj.ssmb.com
mfcpug.es.ssmb.com
cmstreamuat.ny.ssmb.com
esales3-sit.gsrena.ssmb.com
gsm-uat.gsrena.ssmb.com
mfzmqj.es.ssmb.com

Certificate

The complete raw certificate details for smcpint.ny.ssmb.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGXjCCBUagAwIBAgIQBppVM6oi9mlezMnVO0F+cjANBgkqhkiG9w0BAQsFADBE
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMR4wHAYDVQQDExVE
aWdpQ2VydCBHbG9iYWwgQ0EgRzIwHhcNMTkxMjI0MDAwMDAwWhcNMjExMjI0MTIw
MDAwWjCB5zEdMBsGA1UEDwwUUHJpdmF0ZSBPcmdhbml6YXRpb24xEzARBgsrBgEE
AYI3PAIBAxMCVVMxGTAXBgsrBgEEAYI3PAIBAhMIRGVsYXdhcmUxEDAOBgNVBAUT
BzIxNTQyNTQxCzAJBgNVBAYTAlVTMREwDwYDVQQIEwhOZXcgWW9yazERMA8GA1UE
BxMITmV3IFlvcmsxFzAVBgNVBAoTDkNpdGlncm91cCBJbmMuMRowGAYDVQQLExFX
ZWIgSG9zdGluZyBHcm91cDEcMBoGA1UEAxMTc21jcGludC5ueS5zc21iLmNvbTCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPKgJGTTeCfFHtJyjavMek8V
tiY2bgaXd2XaXcYvH50nX2jw6B2CuXS1Nz+dkYW4Eo/HWl4sqOFRNbR0l6Fwh1IC
snzRFFe7ovIihmKVW/Rb10FnaXDMePEzWErhI1jVyXOoE+om/vdGMVqtB4ewyAAn
pFkL2RfRSmKV8TZYpRYGLOpLYhuYSEl4r8j74c2wJ+DIjThx+0AzU1CxYefmUQIQ
h54wj3tgksRrGdwoWMzwGFt4KyFwiLG6/WE60/gADqvKftTMQ7rJrV6LluacUZ1d
GlsB2GcWHdQp/0n5FxpI3uDKrrqsjtdL85evXHncHPd+kggLvklMl4LcaEVXl2cC
AwEAAaOCAqYwggKiMB8GA1UdIwQYMBaAFCRuKy3QapJRUSVpAaqaR6aJ50AgMB0G
A1UdDgQWBBSl7VvmBGrn6BU9NCVtmOY80vPcGTCB1AYDVR0RBIHMMIHJghNzbWNw
aW50Lm55LnNzbWIuY29tghxnbXdndGRjcHNwMDhwLm5hbS5uc3Jvb3QubmV0ghxn
bXdndGRjcHNwNDRwLm5hbS5uc3Jvb3QubmV0ghxnbXdndGRjcHNwNDVwLm5hbS5u
c3Jvb3QubmV0ghxnbXdtd2RjcHNwNDZwLm5hbS5uc3Jvb3QubmV0ghxnbXdtd2Rj
cHNwNDdwLm5hbS5uc3Jvb3QubmV0ghxnbXdtd2RjcHNwMDhwLm5hbS5uc3Jvb3Qu
bmV0MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH
AwIwdwYDVR0fBHAwbjA1oDOgMYYvaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0Rp
Z2lDZXJ0R2xvYmFsQ0FHMi5jcmwwNaAzoDGGL2h0dHA6Ly9jcmw0LmRpZ2ljZXJ0
LmNvbS9EaWdpQ2VydEdsb2JhbENBRzIuY3JsMEsGA1UdIAREMEIwNwYJYIZIAYb9
bAIBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMw
BwYFZ4EMAQEwdAYIKwYBBQUHAQEEaDBmMCQGCCsGAQUFBzABhhhodHRwOi8vb2Nz
cC5kaWdpY2VydC5jb20wPgYIKwYBBQUHMAKGMmh0dHA6Ly9jYWNlcnRzLmRpZ2lj
ZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbENBRzIuY3J0MAkGA1UdEwQCMAAwEwYKKwYB
BAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAHkF2KCPxjtpd/fQ7peq
UdzwrBSryk5/cpa998UMKOi405i6DVOIVsTDlSIPNiGSquHQF1nkjcChP769uN9I
6+rhAbyD0JVWkYbKIWtecdIVJAeAdTsi8KikYir+UTCHjcPT/m/AdXJWcQoFtMqV
WUe4fgDo9gheSVUYMWqfGqfCWB9d4VCL1qfkUcM3bnOiCtED7c6dohedHK86wE0n
Sm2HIFaDaBV1iWjtf/JcHFznBdycrBZfDpAHaYZIx3xzXfU7mP1RHNW9crM+p+ib
IaJehpq/4FgUPn2Br+a4tGLaelAS9Mv0WjzPKXskd6IOCJYJvJMfzBVqqKCvusQH
jCo=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8qAkZNN4J8Ue0nKNq8x6
TxW2JjZuBpd3Zdpdxi8fnSdfaPDoHYK5dLU3P52RhbgSj8daXiyo4VE1tHSXoXCH
UgKyfNEUV7ui8iKGYpVb9FvXQWdpcMx48TNYSuEjWNXJc6gT6ib+90YxWq0Hh7DI
ACekWQvZF9FKYpXxNlilFgYs6ktiG5hISXivyPvhzbAn4MiNOHH7QDNTULFh5+ZR
AhCHnjCPe2CSxGsZ3ChYzPAYW3grIXCIsbr9YTrT+AAOq8p+1MxDusmtXouW5pxR
nV0aWwHYZxYd1Cn/SfkXGkje4MquuqyO10vzl69cedwc936SCAu+SUyXgtxoRVeX
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8776709789031176105073320983334583922
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-24 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2154254'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Citigroup Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Web Hosting Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'smcpint.ny.ssmb.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30628638845816458897987998352451985256645197458122452272113602267008621933243409098379933851371760951430866147722336941698829068659962788901201063910690328198412842245505611507175092660253289861426909354954959620663886863858976955955929825403987955372142136146123914541764245610594351697323307466243092784851696043422874563148815237733960703251680531656551505296890597019481266446988180977950139999779174268521266814920718752716549210356371234391518015778712822285833112752912780357166993939835084385999938102854220694462996807453678038979191523138357638709095882713272101330789676262766526755562226579980897849153383
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a5ed5be6046ae7e8153d34256d98e63cd2f3dc19
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (204 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smcpint.ny.ssmb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmwgtdcpsp08p.nam.nsroot.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmwgtdcpsp44p.nam.nsroot.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmwgtdcpsp45p.nam.nsroot.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmwmwdcpsp46p.nam.nsroot.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmwmwdcpsp47p.nam.nsroot.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmwmwdcpsp08p.nam.nsroot.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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