mft.sfg.bnymellon.com

- The Bank of New York Mellon -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0e:04:8c:c6:1c:12:6a:1a:45:7a:14:7b:4a:88:47:77 was issued on by DigiCert Inc.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Bank of New York Mellon

Organization: The Bank of New York Mellon
Organization unit: SFG
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:04:8c:c6:1c:12:6a:1a:45:7a:14:7b:4a:88:47:77
Serial Number (int): 18632816361631492584585208769943193463
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a0:89:e4:87:a3:6e:27:01:d6:9d:e9:3f:62:f9:1f:c0:85:2b:2e:b0
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 8d:8d:56:2b:e6:d9:77:1e:89:41:ba:4e:08:4d:0d:01:d8:af:18:5c
Fingerprint (sha256): 06:84:58:27:a8:23:79:07:9a:f5:34:5e:da:e6:4c:16:78:d5:a9:e9:3e:6a:c9:f7:0a:d2:0e:a1:82:9e:2c:b8

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate mft.sfg.bnymellon.com

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mft.sfg.bnymellon.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gf-sfx-as2.sfg.bnymellon.com
gf-sfx-as2.sfg.pershing.com
gf-sfx-vpn-as2.sfg.bnymellon.com
gf-sfx-vpn-as2.sfg.pershing.com
gf-sfx-ext-as2.sfg.bnymellon.com
gf-sfx-ext-as2.sfg.pershing.com
gf-sfx-plat-as2.sfg.bnymellon.com
gf-sfx-plat-as2.sfg.pershing.com
gf-sfx-mfgw.sfg.bnymellon.com
gf-sfx-https.sfg.bnymellon.com
gf-sfx-https.sfg.pershing.com
gf-sfx-vpn-https.sfg.bnymellon.com
gf-sfx-vpn-https.sfg.pershing.com
gf-sfx-ext-https.sfg.bnymellon.com
gf-sfx-ext-https.sfg.pershing.com
gf-sfx-plat-https.sfg.bnymellon.com
gf-sfx-plat-https.sfg.pershing.com
gf-sfx-ftps-e.sfg.bnymellon.com
gf-sfx-ftps-e.sfg.pershing.com
gf-sfx-vpn-ftps-e.sfg.bnymellon.com
gf-sfx-vpn-ftps-e.sfg.pershing.com
gf-sfx-ext-ftps-e.sfg.bnymellon.com
gf-sfx-ext-ftps-e.sfg.pershing.com
gf-sfx-plat-ftps-e.sfg.bnymellon.com
gf-sfx-plat-ftps-e.sfg.pershing.com
gf-sfx-ndms.sfg.bnymellon.com
gf-sfx-ndms.sfg.pershing.com
gf-sfx-vpn-ndms.sfg.bnymellon.com
gf-sfx-vpn-ndms.sfg.pershing.com
gf-sfx-ext-ndms.sfg.bnymellon.com
gf-sfx-ext-ndms.sfg.pershing.com
gf-sfx-plat-ndms.sfg.bnymellon.com
gf-sfx-plat-ndms.sfg.pershing.com
gf-sfx-myfilegateway-sfg.bnymellon.net
gf-sfx-filegateway-sfg.bnymellon.net
gf-sfx-dashboard-sfg.bnymellon.net
gf-sfx-sfgroutes-sfg.bnymellon.net
gf-sfx-configmgr-sfg.bnymellon.net
gf-sfx-seas-sfg.bnymellon.net
gf-sfx-api-sfg.bnymellon.net
gf-sfx-mft.sfg.bnymellon.com
gf-sfx-mfgw.sfg.pershing.com
as2.sfg.bnymellon.com
as2.sfg.pershing.com
vpn-as2.sfg.bnymellon.com
vpn-as2.sfg.pershing.com
ext-as2.sfg.bnymellon.com
ext-as2.sfg.pershing.com
adhoc-as2.sfg.bnymellon.com
adhoc-as2.sfg.pershing.com
xcpt-as2.sfg.bnymellon.com
xcpt-as2.sfg.pershing.com
plat-as2.sfg.bnymellon.com
plat-as2.sfg.pershing.com
mfgw.sfg.bnymellon.com
https.sfg.bnymellon.com
https.sfg.pershing.com
vpn-https.sfg.bnymellon.com
vpn-https.sfg.pershing.com
ext-https.sfg.bnymellon.com
ext-https.sfg.pershing.com
plat-https.sfg.bnymellon.com
plat-https.sfg.pershing.com
ftps-e.sfg.bnymellon.com
ftps-e.sfg.pershing.com
vpn-ftps-e.sfg.bnymellon.com
vpn-ftps-e.sfg.pershing.com
ext-ftps-e.sfg.bnymellon.com
ext-ftps-e.sfg.pershing.com
plat-ftps-e.sfg.bnymellon.com
plat-ftps-e.sfg.pershing.com
ndms.sfg.bnymellon.com
ndms.sfg.pershing.com
vpn-ndms.sfg.bnymellon.com
vpn-ndms.sfg.pershing.com
ext-ndms.sfg.bnymellon.com
ext-ndms.sfg.pershing.com
plat-ndms.sfg.bnymellon.com
plat-ndms.sfg.pershing.com
myfilegateway-sfg.bnymellon.net
filegateway-sfg.bnymellon.net
dashboard-sfg.bnymellon.net
sfgroutes-sfg.bnymellon.net
configmgr-sfg.bnymellon.net
seas-sfg.bnymellon.net
api-sfg.bnymellon.net
mft.sfg.bnymellon.com
mfgw.sfg.pershing.com

Other certificates including the domain name bnymellon.com

(limited to 100 certificates)
demo-directbizmonitor.qa.bnymellon.com
billpayadvantage.bnymellon.com
csd.bnymellon.com
M-DCAT.BNYMELLON.COM
supplier.qa.bnymellon.com
xat-res-netx360.bnymellon.com
connectfiletransfer.bnymellon.com
brms.bnymellon.com
dev-marketprofiles.bnymellon.com
*.bnymellon.com
wm-proxyin-uat.qa.bnymellon.com
lionremote-bxp2.qa.bnymellon.com
ecommerce.bnymellon.com
xat-sagepointfinancial-netxinvestor.bnymellon.com
xat-jefferies-netxinvestor.bnymellon.com
BENPAY.DEMO.BNYMELLON.COM
xuat-syndicatedcapital-netxinvestor.bnymellon.com
xuat-harris-netxinvestor.bnymellon.com
debitcard-api.bnymellon.com
uat-connectaisapp.bnymellon.com
cumulus-migration-for-michelle-dmz1.qa.bnymellon.com
iaw.bnymellon.com
ecommerce-dev.bnymellon.com
xat-searleco-netxinvestor.bnymellon.com
ppc.bnymellon.com
authenticate.bnymellon.com
xuat-henley-netxinvestor.bnymellon.com
xuat-juliusbaer-netxinvestor.bnymellon.com
jpass10.bnymellon.com
ae-routing-demo.qa.bnymellon.com
dcat-ciservices.qa.bnymellon.com
remote2.bnymellon.com
awh-ds.bnymellon.com
StructuredCreditConnection.BNYMellon.com
rj101nsgw.bnymellon.com
netxservices.bnymellon.com
remote.bnymellon.com
xat-test-netxinvestor.bnymellon.com
vdsna.bnymellon.com
gm-fxanalytics.bnymellon.com
design.dev.bnymellon.com
xat-gmers2-static.bnymellon.com
odb.bnymellon.com
topsdcat.bnymellon.com
m-privatebanking.bnymellon.com
wbcrparam.bnymellon.com
shaffi-testing5.qa.bnymellon.com
xat-wbcrparam.bnymellon.com
xat-app-liquiditydirect.bnymellon.com
esfsf.qa.bnymellon.com
ccenter.pershing.com
xat-tic-netxinvestor.bnymellon.com
QSEPROD.bnymellon.com
appstudio-api-legacy.bnymellon.com
compliance.bnymellon.com
cctcfindm.mar2020.bnymellon.com
fxanalytics-demo.bnymellon.com
xat-nexen.bnymellon.com
ngej1cs.bnymellon.com
connectais.qa.bnymellon.com
surpasisvc.bnymellon.com
SecuritiesDirectPlus-UAT.bnymellon.com
wca.bnymellon.com
dgtools-mapping.bnymellon.com
bpmconnect.bnymellon.com
fcs-dashboard-1.qa.bnymellon.com
xat-connectfiletransfer.bnymellon.com
eanalytics-demo.qa.bnymellon.com
IFXCLIENT2.DEV.BNYMELLON.COM
shareowners.bnymellon.com
marketplace.bnymellon.com
im.bnymellon.com
design.bnymellon.com
xat-gmsgroup-netxinvestor.bnymellon.com
xuat-saturna-netxinvestor.bnymellon.com
treasuryedge.bnymellon.com
my360-cata.qa.bnymellon.com
ddcship.bnymellon.com
im-user-service.bnymellon.com
xat-hewittfs-netxinvestor.bnymellon.com
firstcitizens-xat-netxinvestor.qa.bnymellon.com
ctdataservices.bnymellon.com
ers2-static.bnymellon.com
bnymdesktop.qa.bnymellon.com
fundadmin.bnymellon.com
structuredsolutions.bnymellon.com
ebi42.qa.bnymellon.com
wvr.bnymellon.com
lionremote-bxp.qa.bnymellon.com
filetransfer.qa.bnymellon.com
mobius.bnymellon.com
connectapp.bnymellon.com
xat-ssi-netxinvestor.bnymellon.com
fundpricing.qa.bnymellon.com
nexenapp.bnymellon.com
xuat-nmis-netxinvestor.bnymellon.com
bds-bdcdrin-xb.bnymellon.com
connectapp-dcat.bnymellon.com
ClientCentral.bnymellon.com
opd2.qa.bnymellon.com

Certificate

The complete raw certificate details for mft.sfg.bnymellon.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPvDCCDqSgAwIBAgIQDgSMxhwSahpFehR7SohHdzANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTkwNzI1MDAwMDAwWhcN
MjEwODMxMTIwMDAwWjCBhzELMAkGA1UEBhMCVVMxETAPBgNVBAgTCE5ldyBZb3Jr
MREwDwYDVQQHEwhOZXcgWW9yazEkMCIGA1UEChMbVGhlIEJhbmsgb2YgTmV3IFlv
cmsgTWVsbG9uMQwwCgYDVQQLEwNTRkcxHjAcBgNVBAMTFW1mdC5zZmcuYm55bWVs
bG9uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALnH/U0Seegd
pifVR1CyulVu6x5iw4JlMOzT8yicWnK8LIanCt2gRK00ypQH5JnZ8mQ2DD7+3WrW
TlFcgM4KwHvkfNgWEdsmUzmfrOq1ZHdx5rmenw8pm0ZuaFnG+o9Ar8pd4eMvjpLi
ZDR9Cn6OaI5Ik+K6Ct/GvYzscjEe/baiil+vVbXwDNFUNo3/k6wff6lfZ5bTFmCb
E9SZM6cKT/ZIpZHalEp/QrSs0aSTu3Dv7eIo6udxsNhCOT8+hm/5KDiCZvZsurXW
STuUSXdnaFqfw6rzVSqPYgUTOJA1O2+v/zg5aN45fvaP/L4TY+VK6cJ9O3lYJ24A
ON8wfQlOYskCAwEAAaOCDFswggxXMB8GA1UdIwQYMBaAFA+AYRyCMWHVLyjnjUY4
tCzhxtniMB0GA1UdDgQWBBSgieSHo24nAdad6T9i+R/AhSsusDCCCosGA1UdEQSC
CoIwggp+ghxnZi1zZngtYXMyLnNmZy5ibnltZWxsb24uY29tghtnZi1zZngtYXMy
LnNmZy5wZXJzaGluZy5jb22CIGdmLXNmeC12cG4tYXMyLnNmZy5ibnltZWxsb24u
Y29tgh9nZi1zZngtdnBuLWFzMi5zZmcucGVyc2hpbmcuY29tgiBnZi1zZngtZXh0
LWFzMi5zZmcuYm55bWVsbG9uLmNvbYIfZ2Ytc2Z4LWV4dC1hczIuc2ZnLnBlcnNo
aW5nLmNvbYIhZ2Ytc2Z4LXBsYXQtYXMyLnNmZy5ibnltZWxsb24uY29tgiBnZi1z
ZngtcGxhdC1hczIuc2ZnLnBlcnNoaW5nLmNvbYIdZ2Ytc2Z4LW1mZ3cuc2ZnLmJu
eW1lbGxvbi5jb22CHmdmLXNmeC1odHRwcy5zZmcuYm55bWVsbG9uLmNvbYIdZ2Yt
c2Z4LWh0dHBzLnNmZy5wZXJzaGluZy5jb22CImdmLXNmeC12cG4taHR0cHMuc2Zn
LmJueW1lbGxvbi5jb22CIWdmLXNmeC12cG4taHR0cHMuc2ZnLnBlcnNoaW5nLmNv
bYIiZ2Ytc2Z4LWV4dC1odHRwcy5zZmcuYm55bWVsbG9uLmNvbYIhZ2Ytc2Z4LWV4
dC1odHRwcy5zZmcucGVyc2hpbmcuY29tgiNnZi1zZngtcGxhdC1odHRwcy5zZmcu
Ym55bWVsbG9uLmNvbYIiZ2Ytc2Z4LXBsYXQtaHR0cHMuc2ZnLnBlcnNoaW5nLmNv
bYIfZ2Ytc2Z4LWZ0cHMtZS5zZmcuYm55bWVsbG9uLmNvbYIeZ2Ytc2Z4LWZ0cHMt
ZS5zZmcucGVyc2hpbmcuY29tgiNnZi1zZngtdnBuLWZ0cHMtZS5zZmcuYm55bWVs
bG9uLmNvbYIiZ2Ytc2Z4LXZwbi1mdHBzLWUuc2ZnLnBlcnNoaW5nLmNvbYIjZ2Yt
c2Z4LWV4dC1mdHBzLWUuc2ZnLmJueW1lbGxvbi5jb22CImdmLXNmeC1leHQtZnRw
cy1lLnNmZy5wZXJzaGluZy5jb22CJGdmLXNmeC1wbGF0LWZ0cHMtZS5zZmcuYm55
bWVsbG9uLmNvbYIjZ2Ytc2Z4LXBsYXQtZnRwcy1lLnNmZy5wZXJzaGluZy5jb22C
HWdmLXNmeC1uZG1zLnNmZy5ibnltZWxsb24uY29tghxnZi1zZngtbmRtcy5zZmcu
cGVyc2hpbmcuY29tgiFnZi1zZngtdnBuLW5kbXMuc2ZnLmJueW1lbGxvbi5jb22C
IGdmLXNmeC12cG4tbmRtcy5zZmcucGVyc2hpbmcuY29tgiFnZi1zZngtZXh0LW5k
bXMuc2ZnLmJueW1lbGxvbi5jb22CIGdmLXNmeC1leHQtbmRtcy5zZmcucGVyc2hp
bmcuY29tgiJnZi1zZngtcGxhdC1uZG1zLnNmZy5ibnltZWxsb24uY29tgiFnZi1z
ZngtcGxhdC1uZG1zLnNmZy5wZXJzaGluZy5jb22CJmdmLXNmeC1teWZpbGVnYXRl
d2F5LXNmZy5ibnltZWxsb24ubmV0giRnZi1zZngtZmlsZWdhdGV3YXktc2ZnLmJu
eW1lbGxvbi5uZXSCImdmLXNmeC1kYXNoYm9hcmQtc2ZnLmJueW1lbGxvbi5uZXSC
ImdmLXNmeC1zZmdyb3V0ZXMtc2ZnLmJueW1lbGxvbi5uZXSCImdmLXNmeC1jb25m
aWdtZ3Itc2ZnLmJueW1lbGxvbi5uZXSCHWdmLXNmeC1zZWFzLXNmZy5ibnltZWxs
b24ubmV0ghxnZi1zZngtYXBpLXNmZy5ibnltZWxsb24ubmV0ghxnZi1zZngtbWZ0
LnNmZy5ibnltZWxsb24uY29tghxnZi1zZngtbWZndy5zZmcucGVyc2hpbmcuY29t
ghVhczIuc2ZnLmJueW1lbGxvbi5jb22CFGFzMi5zZmcucGVyc2hpbmcuY29tghl2
cG4tYXMyLnNmZy5ibnltZWxsb24uY29tghh2cG4tYXMyLnNmZy5wZXJzaGluZy5j
b22CGWV4dC1hczIuc2ZnLmJueW1lbGxvbi5jb22CGGV4dC1hczIuc2ZnLnBlcnNo
aW5nLmNvbYIbYWRob2MtYXMyLnNmZy5ibnltZWxsb24uY29tghphZGhvYy1hczIu
c2ZnLnBlcnNoaW5nLmNvbYIaeGNwdC1hczIuc2ZnLmJueW1lbGxvbi5jb22CGXhj
cHQtYXMyLnNmZy5wZXJzaGluZy5jb22CGnBsYXQtYXMyLnNmZy5ibnltZWxsb24u
Y29tghlwbGF0LWFzMi5zZmcucGVyc2hpbmcuY29tghZtZmd3LnNmZy5ibnltZWxs
b24uY29tghdodHRwcy5zZmcuYm55bWVsbG9uLmNvbYIWaHR0cHMuc2ZnLnBlcnNo
aW5nLmNvbYIbdnBuLWh0dHBzLnNmZy5ibnltZWxsb24uY29tghp2cG4taHR0cHMu
c2ZnLnBlcnNoaW5nLmNvbYIbZXh0LWh0dHBzLnNmZy5ibnltZWxsb24uY29tghpl
eHQtaHR0cHMuc2ZnLnBlcnNoaW5nLmNvbYIccGxhdC1odHRwcy5zZmcuYm55bWVs
bG9uLmNvbYIbcGxhdC1odHRwcy5zZmcucGVyc2hpbmcuY29tghhmdHBzLWUuc2Zn
LmJueW1lbGxvbi5jb22CF2Z0cHMtZS5zZmcucGVyc2hpbmcuY29tghx2cG4tZnRw
cy1lLnNmZy5ibnltZWxsb24uY29tght2cG4tZnRwcy1lLnNmZy5wZXJzaGluZy5j
b22CHGV4dC1mdHBzLWUuc2ZnLmJueW1lbGxvbi5jb22CG2V4dC1mdHBzLWUuc2Zn
LnBlcnNoaW5nLmNvbYIdcGxhdC1mdHBzLWUuc2ZnLmJueW1lbGxvbi5jb22CHHBs
YXQtZnRwcy1lLnNmZy5wZXJzaGluZy5jb22CFm5kbXMuc2ZnLmJueW1lbGxvbi5j
b22CFW5kbXMuc2ZnLnBlcnNoaW5nLmNvbYIadnBuLW5kbXMuc2ZnLmJueW1lbGxv
bi5jb22CGXZwbi1uZG1zLnNmZy5wZXJzaGluZy5jb22CGmV4dC1uZG1zLnNmZy5i
bnltZWxsb24uY29tghlleHQtbmRtcy5zZmcucGVyc2hpbmcuY29tghtwbGF0LW5k
bXMuc2ZnLmJueW1lbGxvbi5jb22CGnBsYXQtbmRtcy5zZmcucGVyc2hpbmcuY29t
gh9teWZpbGVnYXRld2F5LXNmZy5ibnltZWxsb24ubmV0gh1maWxlZ2F0ZXdheS1z
ZmcuYm55bWVsbG9uLm5ldIIbZGFzaGJvYXJkLXNmZy5ibnltZWxsb24ubmV0ghtz
Zmdyb3V0ZXMtc2ZnLmJueW1lbGxvbi5uZXSCG2NvbmZpZ21nci1zZmcuYm55bWVs
bG9uLm5ldIIWc2Vhcy1zZmcuYm55bWVsbG9uLm5ldIIVYXBpLXNmZy5ibnltZWxs
b24ubmV0ghVtZnQuc2ZnLmJueW1lbGxvbi5jb22CFW1mZ3cuc2ZnLnBlcnNoaW5n
LmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMGsGA1UdHwRkMGIwL6AtoCuGKWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9z
c2NhLXNoYTItZzYuY3JsMC+gLaArhilodHRwOi8vY3JsNC5kaWdpY2VydC5jb20v
c3NjYS1zaGEyLWc2LmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBATAqMCgGCCsG
AQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjB8
BggrBgEFBQcBAQRwMG4wJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0
LmNvbTBGBggrBgEFBQcwAoY6aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0Rp
Z2lDZXJ0U0hBMlNlY3VyZVNlcnZlckNBLmNydDAJBgNVHRMEAjAAMBMGCisGAQQB
1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBD+d88SGZiAZPA6DCPU2sr
do+G230rj5/AayJPVtMOx3K+ixoa5ZFjfPql+tWkA9Ce0rJ04GBqCvb44vlrQiu3
+pt2kWPGfL5ImRmJ2DvIB4FdqHvVRbne86ht2oxJrphBxcx03wAffnwVTJns1DMy
WSouVZvsbOUE3lDM3tFArMSkH57SJ2D2nA/Duqii0Jjw20GFc6oSQAwr8DvtB+m+
7fBUo09ph7pAvbNJN4ZoVnfuUXdVc1uBfK4CALflvzLAASb0MZTjPnabVXK8BJgB
A/5jESb9TP5A6WPymLyTpp5jaH/uhh6DbX6pDFbLMzHXI7nRssexQz1YMzacdWSa
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucf9TRJ56B2mJ9VHULK6
VW7rHmLDgmUw7NPzKJxacrwshqcK3aBErTTKlAfkmdnyZDYMPv7datZOUVyAzgrA
e+R82BYR2yZTOZ+s6rVkd3HmuZ6fDymbRm5oWcb6j0Cvyl3h4y+OkuJkNH0Kfo5o
jkiT4roK38a9jOxyMR79tqKKX69VtfAM0VQ2jf+TrB9/qV9nltMWYJsT1JkzpwpP
9kilkdqUSn9CtKzRpJO7cO/t4ijq53Gw2EI5Pz6Gb/koOIJm9my6tdZJO5RJd2do
Wp/DqvNVKo9iBRM4kDU7b6//ODlo3jl+9o/8vhNj5Urpwn07eVgnbgA43zB9CU5i
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18632816361631492584585208769943193463
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-31 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Bank of New York Mellon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SFG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mft.sfg.bnymellon.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23452704895665610261782377309015656574846909230862836290619044972906799214434421004571318450580932842450883126425310008818649220911122583625552556699924378448236801108036293752266586854987603770400216444395110208985118878711332701792138273174950840606546723840216815420624374714915036670879118843404537829674483913258367221117251624398864750822389092028248791996567783550204375065675191556104465511439659939627882555741402174257372660978921872446995692104490163723429658597302720518747502418863057714184876191540348841540649860852588994197825175942185457480339948481786529959877487804837489426996279653464890825138889
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a089e487a36e2701d69de93f62f91fc0852b2eb0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2690 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gf-sfx-as2.sfg.bnymellon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gf-sfx-as2.sfg.pershing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gf-sfx-vpn-as2.sfg.bnymellon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gf-sfx-vpn-as2.sfg.pershing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gf-sfx-ext-as2.sfg.bnymellon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gf-sfx-ext-as2.sfg.pershing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gf-sfx-plat-as2.sfg.bnymellon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gf-sfx-plat-as2.sfg.pershing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gf-sfx-mfgw.sfg.bnymellon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gf-sfx-https.sfg.bnymellon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gf-sfx-https.sfg.pershing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gf-sfx-vpn-https.sfg.bnymellon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gf-sfx-vpn-https.sfg.pershing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gf-sfx-ext-https.sfg.bnymellon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gf-sfx-ext-https.sfg.pershing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gf-sfx-plat-https.sfg.bnymellon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gf-sfx-plat-https.sfg.pershing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gf-sfx-ftps-e.sfg.bnymellon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gf-sfx-ftps-e.sfg.pershing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gf-sfx-vpn-ftps-e.sfg.bnymellon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gf-sfx-vpn-ftps-e.sfg.pershing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gf-sfx-ext-ftps-e.sfg.bnymellon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gf-sfx-ext-ftps-e.sfg.pershing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gf-sfx-plat-ftps-e.sfg.bnymellon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gf-sfx-plat-ftps-e.sfg.pershing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gf-sfx-ndms.sfg.bnymellon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gf-sfx-ndms.sfg.pershing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gf-sfx-vpn-ndms.sfg.bnymellon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gf-sfx-vpn-ndms.sfg.pershing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gf-sfx-ext-ndms.sfg.bnymellon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gf-sfx-ext-ndms.sfg.pershing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gf-sfx-plat-ndms.sfg.bnymellon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gf-sfx-plat-ndms.sfg.pershing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gf-sfx-myfilegateway-sfg.bnymellon.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gf-sfx-filegateway-sfg.bnymellon.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gf-sfx-dashboard-sfg.bnymellon.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gf-sfx-sfgroutes-sfg.bnymellon.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gf-sfx-configmgr-sfg.bnymellon.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gf-sfx-seas-sfg.bnymellon.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gf-sfx-api-sfg.bnymellon.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gf-sfx-mft.sfg.bnymellon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gf-sfx-mfgw.sfg.pershing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'as2.sfg.bnymellon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'as2.sfg.pershing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn-as2.sfg.bnymellon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn-as2.sfg.pershing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ext-as2.sfg.bnymellon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ext-as2.sfg.pershing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adhoc-as2.sfg.bnymellon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adhoc-as2.sfg.pershing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xcpt-as2.sfg.bnymellon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xcpt-as2.sfg.pershing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plat-as2.sfg.bnymellon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plat-as2.sfg.pershing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfgw.sfg.bnymellon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'https.sfg.bnymellon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'https.sfg.pershing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn-https.sfg.bnymellon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn-https.sfg.pershing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ext-https.sfg.bnymellon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ext-https.sfg.pershing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plat-https.sfg.bnymellon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plat-https.sfg.pershing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftps-e.sfg.bnymellon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftps-e.sfg.pershing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn-ftps-e.sfg.bnymellon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn-ftps-e.sfg.pershing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ext-ftps-e.sfg.bnymellon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ext-ftps-e.sfg.pershing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plat-ftps-e.sfg.bnymellon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plat-ftps-e.sfg.pershing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ndms.sfg.bnymellon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ndms.sfg.pershing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn-ndms.sfg.bnymellon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn-ndms.sfg.pershing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ext-ndms.sfg.bnymellon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ext-ndms.sfg.pershing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plat-ndms.sfg.bnymellon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plat-ndms.sfg.pershing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfilegateway-sfg.bnymellon.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filegateway-sfg.bnymellon.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard-sfg.bnymellon.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfgroutes-sfg.bnymellon.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configmgr-sfg.bnymellon.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seas-sfg.bnymellon.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-sfg.bnymellon.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mft.sfg.bnymellon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mfgw.sfg.pershing.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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