nac.lexisnexis.com

- RELX Inc. -

Issued by Trustwave OV SHA256 Pre-Certificate CA

About this certificate

This digital certificate with serial number 07:04:df:5b:de:83:87:bc:c9:3d:37:b6:b2:b4:a7:20:2a:e1:5e was issued on by Trustwave Holdings, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

RELX Inc.

Organization: RELX Inc.
State / Province: New York
Locality: New York City
Country: US

Trustwave Holdings, Inc.

Organization: Trustwave Holdings, Inc.
State / Province: Illinois
Locality: Chicago
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:04:df:5b:de:83:87:bc:c9:3d:37:b6:b2:b4:a7:20:2a:e1:5e
Serial Number (int): 156529670616370041163247846581906611859284318
Serial Number lenght: 147 bits, 19 octets

SubjectKeyId: 12:a2:72:90:aa:5e:cf:66:ea:b5:5c:40:ac:d2:6e:44:a0:08:94:25
AuthorityKeyId: c0:ce:4c:b0:06:48:21:0b:4d:f4:a5:ac:f7:6b:f7:ba:dd:4e:04:4f

Fingerprint (sha1): 98:a7:b3:cb:1a:a9:85:87:a0:14:72:bd:8b:49:0c:81:5e:32:a1:ec
Fingerprint (sha256): 05:95:8d:cc:4b:5f:a4:2d:bc:e3:a6:bc:0b:34:8d:e6:eb:ed:25:23:22:4a:f3:68:70:dd:ae:87:13:ee:fc:71

Issuing Certificate URL: http://ssl.trustwave.com/issuers/OVCA2_L1.crt

Revocation information

OCSP Server: http://ocsp.trustwave.com/
CRL Distribution Point: http://crl.trustwave.com/OVCA2_L1.crl

Check the revocation status for certificate nac.lexisnexis.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nac.lexisnexis.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nac.lexisnexis.com
nac2.lexisnexis.com

Other certificates including the domain name lexisnexis.com

(limited to 100 certificates)
dev-clientshare.lexisnexis.com
insurancesolutions.lexisnexis.com
mfa.lexisnexis.com
personalreports.lexisnexis.com
*.product-aws-prod.nl.lexis.com
collectionsolutions.lexisnexis.com
cdn.insurancesolutions.lexisnexis.com
isit.lexisnexis.com
healthcareportal.lexisnexisrisk.com
dmvpre.alirts.lexisnexis.com
staging.identitymanagement.lexisnexis.com
apply.insurancelink.lexisnexis.com
sni.cloudflaressl.com
batchwebgateway.lexisnexis.com
uat.progressive.lexisnexis.com
risk.lexisnexis.com
RISK-OUT02.rsi.lexisnexis.com
images.solutions.lexisnexis.com
bender.lexisnexis.com
ukcrm.plcert.lexisnexis.com
bis.lexisnexis.com
idms.lexisnexis.com
docshare.lexisnexis.com
updatesxg.bridgerinsight.lexisnexis.com
gma.lexisnexis.com
equifaxconsumers.lexisnexis.com
mfaweb.lexisnexis.com
orders.paymentsolutions.lexisnexis.com
eo.lexisnexis.com
*.business.aws.lexis.com
san-005.ceros.com
risk.lexisnexis.com
demo.avcccert.lexisnexis.com
cdnfp.accurint.com
sni.cloudflaressl.com
test.telematics.lexisnexis.com
*.lexisnexis.com
*.content.aws.lexis.com
midex.lexisnexis.com
jprc.lexisnexis.com
espsso-sign-prd.risk.lexisnexis.com
Bridgerstaging.lexisnexis.com
pm.lexisnexis.com
BridgerDirect.LexisNexis.com
starsdocshare.risk.lexisnexis.com
sf.insurview.lexisnexis.com
dev.mobiledataprefill.lexisnexis.com
invoice.risk.lexisnexis.com
reporting-stg.identitymanagement.lexisnexis.com
link2.lexisnexis.com
professional.lexisnexis.com
*.midex.lexisnexis.com
recordsretrieval.lexisnexis.com
pas.campaignview.lexisnexis.com
solutions.risk.lexisnexis.com
optout.lexisnexis.com
global.lexisnexis.com
siris.lexisnexis.com
jiradev.rsi.lexisnexis.com
uw.insurancesolutions.lexisnexis.com
gma.lexisnexis.com
induservpn.risk.lexisnexis.com
wcoresearchtraining.risk.lexisnexis.com
WcoEditorialSearchQA.risk.lexisnexis.com
api-caseanalyser.lexisnexis.com
nac.lexisnexis.com
san-005.ceros.com
trial.mapview.lexisnexis.com
r3.lexisnexis.com
forms.consumer.risk.lexisnexis.com
erie.lexisnexis.com
cdnfp.accurint.com
bis.lexisnexis.com
apply.insurancelink.lexisnexis.com
track.risk.lexisnexis.com
*.lexisai.aws.lexis.com
*.issdev.lexisnexis.com
san-005.ceros.com
lexismarkettracker.lexisnexis.com
*.lexisnexis.com
gewpasp.iss.lexisnexis.com
altauth.courtlink.lexisnexis.com
healthcareportal.lexisnexis.com
paymentsolutions.lexisnexis.com
healthcareportaluat.lexisnexis.com
Bridgerstaging.lexisnexis.com
*.lexisnexis.com
sat.lexisnexis.com
social.lexisnexis.com
salesportal.lexisnexis.com
wcoaudit.risk.lexisnexis.com
riskauth.lexisnexis.com
risk.lexisnexis.com
transfer.lexisnexis.com
ride.lexisnexis.com
marketplace.lexisnexis.com
mapview.lexisnexis.com
*.b2b.lexisnexis.com
insurancesolutions.lexisnexis.com
*.content.aws.lexis.com

Certificate

The complete raw certificate details for nac.lexisnexis.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgITBwTfW96Dh7zJPTe2srSnICrhXjANBgkqhkiG9w0BAQsF
ADCBhjEvMC0GA1UEAxMmVHJ1c3R3YXZlIE9WIFNIQTI1NiBQcmUtQ2VydGlmaWNh
dGUgQ0ExITAfBgNVBAoTGFRydXN0d2F2ZSBIb2xkaW5ncywgSW5jLjEQMA4GA1UE
BxMHQ2hpY2FnbzERMA8GA1UECBMISWxsaW5vaXMxCzAJBgNVBAYTAlVTMB4XDTE5
MDgwODE0MzgyNloXDTIwMDgwNzIwMzgyNlowaTEbMBkGA1UEAxMSbmFjLmxleGlz
bmV4aXMuY29tMRIwEAYDVQQKEwlSRUxYIEluYy4xFjAUBgNVBAcTDU5ldyBZb3Jr
IENpdHkxETAPBgNVBAgTCE5ldyBZb3JrMQswCQYDVQQGEwJVUzCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBAMEd0ivVGqFUodk2it61VUWfttfVEzEdVOFZ
bXuzhJaWlxP2F+g4HFwsQY9c+vnCU7bmIyYmXk+qvvpCPKyFWTTMCSfzNDttRZKm
u/15mkQuPmdQlb/4fYrfQDIjCUm/cGjus5WdcPvCinIxcldA1qo91kzXzINjAVew
EjTNW6KUww0inb7r4SFFPc9v2NmnZsRHx/2nQ7v+r/iEFXJLTj+yPI2yTnKGBGSY
aFw7e9ayJxOK8zefnZ9JEGeIkSWcb2Egz8uRAzEQbzfTnNg08yGJm+GyottEvIcm
kOcb0wcXlfRWn+oYzoQLjDi+RMmJycq89CfrocRe6kl5TlUODLMCAwEAAaOCAbYw
ggGyMAwGA1UdEwEB/wQCMAAwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
AQUFBwMCBggrBgEFBQcDATAdBgNVHQ4EFgQUEqJykKpez2bqtVxArNJuRKAIlCUw
HwYDVR0jBBgwFoAUwM5MsAZIIQtN9KWs92v3ut1OBE8wPwYDVR0gBDgwNjA0BgZn
gQwBAgIwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly9zc2wudHJ1c3R3YXZlLmNvbS9D
QTAyBgNVHREEKzApghJuYWMubGV4aXNuZXhpcy5jb22CE25hYzIubGV4aXNuZXhp
cy5jb20wNgYDVR0fBC8wLTAroCmgJ4YlaHR0cDovL2NybC50cnVzdHdhdmUuY29t
L09WQ0EyX0wxLmNybDBxBggrBgEFBQcBAQRlMGMwJgYIKwYBBQUHMAGGGmh0dHA6
Ly9vY3NwLnRydXN0d2F2ZS5jb20vMDkGCCsGAQUFBzAChi1odHRwOi8vc3NsLnRy
dXN0d2F2ZS5jb20vaXNzdWVycy9PVkNBMl9MMS5jcnQwEwYKKwYBBAHWeQIEAwEB
/wQCBQAwDQYJKoZIhvcNAQELBQADggEBADyOrtATmiN1rmWxpIZed/2oLRLolHqh
iIAq6F9Ul/TQVAe+kuO3qT+NPiVY3qIwG+evMRlLHb1GXo2pRA6jaKSRRjCVNsvy
YU8LOa/8z4XqWvBEuu9jDZu2r1Yk2D/gFRYGJohdzZkYyeKwVIX0k8VxdGyHcLMg
zJ16mYjYjMw7BrLoBHCmp74OJZteCI8DYedeJqUAhq0BL2JyaxL1RGZyk4h4Z5uX
Y/85qA/kZ6G4IkndEP48UfAreanfyiq1qJ0mEC8ofaIGwe/OXPc6a8v85ItH5vTb
H1sDQ2sCFA6MEK5GgpUUJNshZ8hEpe5ZjyhePqYOF1vpvtjrkpFgh8o=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwR3SK9UaoVSh2TaK3rVV
RZ+219UTMR1U4Vlte7OElpaXE/YX6DgcXCxBj1z6+cJTtuYjJiZeT6q++kI8rIVZ
NMwJJ/M0O21Fkqa7/XmaRC4+Z1CVv/h9it9AMiMJSb9waO6zlZ1w+8KKcjFyV0DW
qj3WTNfMg2MBV7ASNM1bopTDDSKdvuvhIUU9z2/Y2admxEfH/adDu/6v+IQVcktO
P7I8jbJOcoYEZJhoXDt71rInE4rzN5+dn0kQZ4iRJZxvYSDPy5EDMRBvN9Oc2DTz
IYmb4bKi20S8hyaQ5xvTBxeV9Faf6hjOhAuMOL5EyYnJyrz0J+uhxF7qSXlOVQ4M
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 156529670616370041163247846581906611859284318
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trustwave OV SHA256 Pre-Certificate CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trustwave Holdings, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-08 14:38:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-07 20:38:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nac.lexisnexis.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RELX Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24378698132416163704949967886402428906658165614128142826160136877369632347771759082370117650268535053674957287437657599571615311759071983639364967865141241176010138423026996158535270602788720750600094882799398080405123084824202503934458984750918460189667994916583160516103523265758821205059010791172989943654918001721785969688176146205739487231933485586506552620381135435555796791591918673528880693438418759489379844991714269321954472261449680206554938029777432623585581316788065630218076678734516380373341162190158877329572390830270795911487904826561779509957489271670869994938637888077661233553931357343507507186867
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							12a27290aa5ecf66eab55c40acd26e44a0089425
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c0ce4cb00648210b4df4a5acf76bf7badd4e044f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://ssl.trustwave.com/CA'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nac.lexisnexis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nac2.lexisnexis.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.trustwave.com/OVCA2_L1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.trustwave.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl.trustwave.com/issuers/OVCA2_L1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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