selectnew.mercer.com

- Mercer US Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0a:ba:24:69:0e:34:80:4a:6f:07:a0:d4:8b:83:25:b2 was issued on by DigiCert Inc.

With 46 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Mercer US Inc.

Organization: Mercer US Inc.
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:ba:24:69:0e:34:80:4a:6f:07:a0:d4:8b:83:25:b2
Serial Number (int): 14258785663635692241923652889306408370
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a2:3d:87:35:79:a4:b9:9e:19:e6:1d:bf:c4:41:d4:60:63:a0:2b:35
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 64:1c:12:8c:bb:3c:df:91:68:c0:55:9c:ff:e6:97:c1:13:1e:4b:16
Fingerprint (sha256): 05:ed:c5:81:82:91:75:3b:a7:25:55:3c:8f:3c:f1:1b:39:e9:c7:0a:10:67:d1:07:00:13:dd:ad:25:7c:f4:5c

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate selectnew.mercer.com

46

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for selectnew.mercer.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

selectnew.mercer.com
www.benecignatrustedadvisor.mybenefitsolutions.com
www.idtcignatrustedadvisor.mybenefitsolutions.com
www.dlccignatrustedadvisor.mybenefitsolutions.com
www.fluorcignatrustedadvisor.mybenefitsolutions.com
www.griffoncignatrustedadvisor.mybenefitsolutions.com
www.lufthansacignatrustedadvisor.mybenefitsolutions.com
selfserve.mercer.com
www.mijl.mercer.co.jp
www.lvhncignatrustedadvisor.mybenefitsolutions.com
cigna.cignatrustedadvisor.com
www.bohenhancedbenefits.com
www.workforce-analytics.mercer.com
www.democignatrustedadvisor.mybenefitsolutions.com
www.rimcignatrustedadvisor.mybenefitsolutions.com
www.segalcignatrustedadvisor.mybenefitsolutions.com
www.coamemberinsurance.com
voiceongrowth.mercer.com
www.genesyscignatrustedadvisor.mybenefitsolutions.com
www.cignaretireecignatrustedadvisor.mybenefitsolutions.com
www.aimcocignatrustedadvisor.mybenefitsolutions.com
www.mercer-digital.com
www.bgclubsinsurance.com
www.stanleycignatrustedadvisor.mybenefitsolutions.com
www.superiorcourtfresnocignatrustedadvisor.mybenefitsolutions.com
www.cornellretireecignatrustedadvisor.mybenefitsolutions.com
benefits-reimagined.mercer.com.cn
www.peoplesunitedcignatrustedadvisor.mybenefitsolutions.com
www.countycmamemberinsurance.com
mijl.mercer.co.jp
www.siteonecignatrustedadvisor.mybenefitsolutions.com
www.carouselcignatrustedadvisor.mybenefitsolutions.com
www.aanpinsurance.com
africa.mercer.com
www.cignacignatrustedadvisor.mybenefitsolutions.com
www.ajgcignatrustedadvisor.mybenefitsolutions.com
benefits-reimagined.mercer.com
www.idacignatrustedadvisor.mybenefitsolutions.com
www.oceanspraycignatrustedadvisor.mybenefitsolutions.com
www.johnsoncignatrustedadvisor.mybenefitsolutions.com
www.cphamemberinsurance.com
www.iagnrmasuper.com.au
www.alumniplans.com
www.jennisoncignatrustedadvisor.mybenefitsolutions.com
voice-on-growth.mercer.com
www.mercer.at

Other certificates including the domain name mercer.com

(limited to 100 certificates)
us-east-1.stage.awsapp.mercer.com
proliability.mercer.com
pre-merceroneview.mercer.com
ghrm-entitlementtool.mercer.com
mas-nms.mercer.com
passkeyservicedev.mercer.com
helplinechatbot-anz.dev.mercer.com
uat.beneflex.mercer.com
managementapi-apigee.on-dallas.prod.admin.mercer.com
benefitcenter.mercer.com
www.census.mercer.com
bi-dev.mercer.com
www.smartirlsit.mercer.com
benefitsuite.mercer.com
tbo-ftp.mercer.com
selectnew.mercer.com
matomo.us-east-1.prod.ext.mercer.com
investor.mercer.com
dr.eprism.win.mercer.com
kroger-ua.mercer.com
mas-ipos.mercer.com
employeesurveys.mercer.com
hbcognos.mercer.com
fe.bclifecycle.mercer.com
canadadcrkdatabase.mercer.com
selectnew.mercer.com
uat.roleprofilebuilder.mercer.com
ncfu-otr-uat.mercer.com
enhance-operations-auth.us-east-1.dev.awsadmin.mercer.com
qa.comptryx.mercer.com
uat.workforce.mercer.com
proliability.mercer.com
bsuitecognos.dr.mercer.com
msso1-uat.mercer.com
www.assurant-uat.mercer.com
remportal.mercer.com
passkeyservicepre.mercer.com
helplinechatbot-anz.dev.mercer.com
api.mmp.us-east-1.dev.int.mercer.com
consumerone.mercer.com
uat.benefitsmonitor.mercer.com
associationlh-moso.mercer.com
uat.recomposicionsalarial.mercer.com
selectnew.mercer.com
common.mercer.com
www.krogerng-auth.mercer.com
admin.bi-analytics-int.us-east-1.stage.int.mercer.com
febe.nifi01.kf.euwt1.prd.oss2.mercer.com
hli.na.qa.app.mercer.com
dashboard.pndb.euwt1.prd.app.mercer.com
be.warrenmt.usinternal.stage.admin.mercer.com
bsuitesp.uat.mercer.com
selectnew.mercer.com
www.apigee.apac.prod.app.mercer.com
stg-entitlement-api.mobility.mercer.com
san-7-s7.tlsprovisioning.exacttarget.com
ad-uat.mercer.com
www.cswebr2uat.mercer.com
stg-internal-europe-nexus.mercer.com
bhips.mercer.com
uat-admin.employeeinsight.mercer.com
uat.mercergold.mercer.com
www.mas-bamboo.mercer.com
historiasclinicas.mercer.com
www.cswebr2uat.mercer.com
historiasclinicas.mercer.com
stg.tx.mercerharmonise.mercer.com
home.ap.mercer.com
common.mercer.com
beneflex.uat.mercer.com
securestg.mercer.com
be.image.mobile.euwt1.stg.oss2.mercer.com
app-v010-harmonise.mercer.com
mercer.com
www.mags.mercer.com
hrbauat.mercer.com
main.digicon.ext.prd.aws-uset1-dmz.mosedge.mercer.com
mags.mercer.com
image.livy01.kf.euwt1.prd.oss2.mercer.com
connectweb4.mercer.com
api.main.mobile.euwt1.stg.oss2.mercer.com
helplinechatbot-anz.dev.mercer.com
apigee.on-dallas.prod.admin.mercer.com
select.mercer.com
common.mercer.com
psa-mbses.mercer.com
www.auth-qa.mercer.com
selectnew.mercer.com
admin.puat-mbm.mercer.com
www.mercerapploginirlsit.mercer.com
emea.analytics.benefitsuite.mercer.com
mfa-admin.mercer.com
channel4.flexsite.mercer.com
apps.mercer.com
mas-vdi.mercer.com
san-7-s7.tlsprovisioning.exacttarget.com
main.pndb.euwt1.dev.int.mercer.com
hli-drupal.emea.prod.admin.mercer.com
cator11db31cn3.mercer.com
consumer.mercer.com

Certificate

The complete raw certificate details for selectnew.mercer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwOHMcRV/pp0GzdhoM/e
YUisCMXmynOfLCCZSIaerGPTIr/ZNTHYflW56xnDc3/SzwTLb8Z3l2j5tc+qc0ln
7h16RU84iFwoLkR8QnG4mVIpqQNxWUNQenD11KZ8WadvOnYzcf7/Mg8ky1k4TixN
6NoMRStm6P2BHgkr2d3oUnyG5oFKiH0s2t8wD0pplUfFlVKvPwgOhJo06X7Gsd5d
Aw9HwbOBz00W0R2fCNt/N5z92sULXuqJVm1Tb7pn7ceNPl35MBjr83S5L97D6tk/
U2poELGw/h4sTrKqlSZ6RLi7yzC4Fkt2u4a1PdZUEG1FFwyKXXdpztOvgUAa+8TY
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14258785663635692241923652889306408370
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-29 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mercer US Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'selectnew.mercer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26133068900471323011849096835973349958477926577562904003110919496788821606071707875123895370651956652893603076472633536966763951573729689657014364233699231000764357868380009181346207318780968456551462795840011404425628818354443613599952037288502354584681857158813941005185894803519060014716752990830973202012947515555895123634612655391312069434020941099431194271749394809539897900845312140711718942030375389515687948894000573976531347497830037887406668181975397172486726591125800791744678475609511845036263736475166142396674105947869934706901341859471305430472163805927529714137924424147600344520557567590892046702841
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a23d873579a4b99e19e61dbfc441d46063a02b35
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1926 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selectnew.mercer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benecignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idtcignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dlccignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fluorcignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.griffoncignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lufthansacignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selfserve.mercer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mijl.mercer.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lvhncignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cigna.cignatrustedadvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bohenhancedbenefits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.workforce-analytics.mercer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.democignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rimcignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.segalcignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coamemberinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voiceongrowth.mercer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.genesyscignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cignaretireecignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aimcocignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercer-digital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bgclubsinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanleycignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.superiorcourtfresnocignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornellretireecignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefits-reimagined.mercer.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peoplesunitedcignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.countycmamemberinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mijl.mercer.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.siteonecignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carouselcignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aanpinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'africa.mercer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cignacignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ajgcignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefits-reimagined.mercer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.idacignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oceanspraycignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.johnsoncignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cphamemberinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iagnrmasuper.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alumniplans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jennisoncignatrustedadvisor.mybenefitsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voice-on-growth.mercer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercer.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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