webmail.xerox.org

- Xerox Corp -

Issued by USERTrust Legacy Secure Server CA

About this certificate

This digital certificate with serial number ab:93:31:72:b5:65:80:14:16:2f:13:70:c2:05:1d:cd was issued on by The USERTRUST Network.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

Xerox Corp

Organization: Xerox Corp
Organization unit: Corporate Messaging
Organization unit: Issued through Xerox Corporation E-PKI Manager
Organization unit: Unified Communications
Address: 2828 Haskel Ave
Postal code: 75204
State / Province: Texas
Locality: Dallas
Country: US

The USERTRUST Network

Organization: The USERTRUST Network
State / Province: UT
Locality: Salt Lake City
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ab:93:31:72:b5:65:80:14:16:2f:13:70:c2:05:1d:cd
Serial Number (int): 228062257843645832604817990890018905549
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: f3:f4:7f:fc:15:6b:60:f3:36:8f:6d:79:5b:a7:44:9c:c0:05:9d:95
AuthorityKeyId: af:a4:40:af:9f:16:fe:ab:31:fd:fb:d5:97:8b:f5:91:a3:24:86:16

Fingerprint (sha1): e6:42:e3:99:5e:65:6a:fd:c4:05:43:88:82:02:95:51:03:82:59:f1
Fingerprint (sha256): 06:5a:19:dc:57:e9:d4:d6:c7:49:02:9a:9c:2f:75:0f:fc:e1:b9:57:82:63:35:97:ac:13:82:b0:c4:92:d2:89

Issuing Certificate URL: http://crt.usertrust.com/USERTrustLegacySecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/USERTrustLegacySecureServerCA.crl

Check the revocation status for certificate webmail.xerox.org

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.xerox.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.xerox.org
autodiscover.xerox.org
autodiscoverdr.xerox.org
imap-server.xerox.org
imap-serverdr.xerox.org
legacyowa.xerox.org
legacyowadr.xerox.org
pop-server.mail.xerox.org
pop-serverdr.mail.xerox.org
remotemail.xerox.org
remotemaildr.xerox.org
syncmail.xerox.org
syncmaildr.xerox.org
webmaildr.xerox.org
www.webmail.xerox.org
www.webmaildr.xerox.org

Other certificates including the domain name xerox.org

(limited to 100 certificates)
usa7061rf010.na.xerox.org
win2016-ds7.na.xerox.org
xde0200eudc002.eu.xerox.org
xde37061nadc022.na.xde3.xerox.org
xde0200vs030.na.xerox.org
xde7061eudc021.eu.xerox.org
xde30200dc001.xde3.xerox.org
webmail.xerox.org
usa7061rf011.na.xerox.org
xde0200nadc001.na.xerox.org
Xde3owa.na.xde3.xerox.org
xde0300ns001.na.xerox.org
win2012r2-es-hv.na.xerox.org
sdi-scom2012.sdi.na.xde3.xerox.org
sts.corp.xerox.org
sdi-vclab1-vcs2.sdi.na.xde3.xerox.org
eastgw.mail.xerox.org
xde7061vm1831.na.xerox.org
xde0300vs033.na.xerox.org
usa1042vm000663.na.xerox.org
xde0300nadc022.na.xerox.org
vcsa-sys-mgmt-01.na.xerox.org
chn-xerox-dns1.gdc.hcl.vend.xerox.org
xde0300nadc002.na.xerox.org
xcm-axigen.na.xerox.org
sdi-ca.sdi.na.xde3.xerox.org
webmail.xerox.org
vcsa-sys-mgmt-01.na.xerox.org
sdi-vclab1-vcs2.sdi.na.xde3.xerox.org
xde0200ns001.na.xerox.org
cennisvmx3.sdi.na.xde3.xerox.org
sts.corp.xerox.org
xde30300dc003.xde3.xerox.org
xde7061dc023.xerox.org
westgw.mail.xerox.org
xde7061dc023.xerox.org
USA7109XD001.na.xerox.net
xde3sdidc002.sdi.na.xde3.xerox.org
xde30300dc023.xde3.xerox.org
xde0200rf005.na.xerox.org
xde3sdidc001.sdi.na.xde3.xerox.org
jean.sdi.na.xde3.xerox.org
xcm-w12r2-tar.na.xerox.org
xde30300nadc003.na.xde3.xerox.org
xde7061dc022.xerox.org
win2016-jpn.na.xerox.org
xde0300dc022.xerox.org
chn-xerox-dhcp4.gdc.hcl.vend.xerox.org
sdi-tfsapp.sdi.na.xde3.xerox.org
xerox.org
xcm-win7-rhyde.na.xerox.org
sdi-vclab1-vss1.sdi.na.xde3.xerox.org
xcm-w16-dev.na.xerox.org
xcm-win7-rhyde.na.xerox.org
xde0200namfa002.na.xerox.org
xde30200sm001.na.xde3.xerox.org
xde3sdidc003.sdi.na.xde3.xerox.org
xde7061vm2070.na.xerox.org
win2016eng.na.xerox.org
sdi-tfsapp.sdi.na.xde3.xerox.org
chn-xerox-dhcp4.gdc.hcl.vend.xerox.org
xde3sdidc003.sdi.na.xde3.xerox.org
xde30200nadc001.na.xde3.xerox.org
xde0300ns002.na.xerox.org
vcsa-sys-mgmt-01.na.xerox.org
xde0300dc002.xerox.org
xcm-w12r2-tar.na.xerox.org
xde30300dc002.xde3.xerox.org
xde0200vs031.na.xerox.org
xde30300dc022.xde3.xerox.org
jetboy.na.xerox.org
xde0300dc022.xerox.org
xde1069nadc021.na.xerox.org
xmen.sdi.na.xde3.xerox.org
sdi-ca.sdi.na.xde3.xerox.org
webmail.xerox.org
sdi-vclab1-vcs2.sdi.na.xde3.xerox.org
xwstest1.sdi.na.xde3.xerox.org
xde0200rf006.na.xerox.org
mtgreleaseservices.sdi.na.xde3.xerox.org
xde0200rf006.na.xerox.org
win10-pro-2013.na.xerox.org
xde3sdidc001.sdi.na.xde3.xerox.org
xde0200dc001.xerox.org
xde7061ns002.na.xerox.org
sdi-vclab1-vcs1.sdi.na.xde3.xerox.org
xde7061vm0110.na.xerox.org
xde37061nadc021.na.xde3.xerox.org
usa1042vm000663.na.xerox.org
sdi-vclab1-vcs1.sdi.na.xde3.xerox.org
mail.xerox.org
xde0300vm1817.na.xerox.org
xde0200as002.na.xerox.org
xdebetanadc001.na.xdebeta.xerox.org
xde0200nadc002.na.xerox.org
win2012r2-eng.na.xerox.org
xde0300dc002.xerox.org
*.na.xde3.xerox.org
sdi-es3.sdi.na.xde3.xerox.org
xde0300ns002.na.xerox.org

Certificate

The complete raw certificate details for webmail.xerox.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbvSYo2tLvHhNkyMdL5z
oO9n3GHm8/7jcdR9GkTQ7apu9Qzz3W6IB2v01KulE/bhz65BqBY4sp5mui+yl/4o
6xX1DAkG7LYSaARtuXiNbxkixudjZUeZQww5yGiYms2SWx3UqNR5wrjtXe30MGft
+i88de622bAOSkvNHJOQHZjfJXdNER0Nh3WpKU7EPHiuiydjSEK+kumzxOfWOUfJ
sUSbwnXgSPpD6kCIJJ4SN//DRzW4D7VKpMLUiSZzdiLcB3DrMmYv6uOzZvYbflhb
BcTEopvp4Dr2K3zg4sJMNJnpRUxGKTaOMCyHBD7NEfOC2Sw8UiGahaBOqPZ13ERf
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 228062257843645832604817990890018905549
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salt Lake City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The USERTRUST Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'USERTrust Legacy Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-10-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-10-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '75204'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dallas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2828 Haskel Ave'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Xerox Corp'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corporate Messaging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Issued through Xerox Corporation E-PKI Manager'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unified Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.xerox.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18397172609633593715202403386537996982838084035533347267150816906358661607668500111321141149048135175103470533513747207798383439165696650506604153810071686937359414906233937530822924224886819025081585470307431568452953286865486884481863503187141158839606938926113534763927082514591061893034684580004967023295273187695560038755978384549298217386169183564498196251638240724651239158546863300883830547735808093254841552051295214836252615597794663750973466117750887464088960853690557573250228274961891914539400256318624841989224912409256843635509083607567673356298723281043884413341212865328445081107359519505048605581169
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName afa440af9f16feab31fdfbd5978bf591a3248616
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f3f47ffc156b60f3368f6d795ba7449cc0059d95
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/USERTrustLegacySecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/USERTrustLegacySecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (378 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.xerox.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.xerox.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscoverdr.xerox.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imap-server.xerox.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imap-serverdr.xerox.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacyowa.xerox.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacyowadr.xerox.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pop-server.mail.xerox.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pop-serverdr.mail.xerox.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remotemail.xerox.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remotemaildr.xerox.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syncmail.xerox.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syncmaildr.xerox.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmaildr.xerox.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webmail.xerox.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webmaildr.xerox.org'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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