usa0300ns003.eu.xerox.net

- Xerox Corporation -

Issued by COMODO RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 17:cf:ab:67:4e:a5:5c:00:75:38:bf:f4:83:41:c1:e4 was issued on by COMODO CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Xerox Corporation

Organization: Xerox Corporation
Organization unit: XIM / IAS
Organization unit: InstantSSL
Address: 45 Glover Avenue
Postal code: 06850
State / Province: Connecticut
Locality: Norwalk
Country: US

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 17:cf:ab:67:4e:a5:5c:00:75:38:bf:f4:83:41:c1:e4
Serial Number (int): 31650525829652475793227107581340795364
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 08:a9:e8:97:bc:9a:aa:d6:cb:80:0a:37:f8:b3:94:73:57:0a:cd:a5
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24

Fingerprint (sha1): 90:3f:b2:9d:7a:1b:dc:41:3a:67:2a:47:9e:fb:7f:35:d8:df:19:fa
Fingerprint (sha256): 08:ff:df:39:74:13:59:48:44:83:4d:2d:f6:d2:12:2f:f1:c4:57:5f:95:79:88:d7:76:9a:c1:18:fe:18:fe:42

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate usa0300ns003.eu.xerox.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for usa0300ns003.eu.xerox.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

usa0300ns003.eu.xerox.net
www.usa0300ns003.eu.xerox.net

Other certificates including the domain name xerox.net

(limited to 100 certificates)
usa0300vm1074.na.xerox.net
usa7061vm6179.na.xerox.net
gbrwgc07vm6013.eu.xerox.net
usa7061vm1826.na.xerox.net
usa0300aa452.na.xerox.net
gbrend01nadc021.na.xerox.net
usa0300av6067.na.xerox.net
can6851lx400.na.xerox.net
usa0300vm2023.na.xerox.net
usa0300nadc004.na.xerox.net
usaesm1vm6072.na.xerox.net
usa0300txe330.na.xerox.net
usa7061ns003.na.xerox.net
usa0300vm1852.na.xerox.net
usa7061as407.na.xerox.net
usa0300cw001.na.xerox.net
gbrtef01st068.eu.xerox.net
polwaw05as002.eu.xerox.net
gbrtef01st403.eu.xerox.net
server2k8.na.xerox.net
usa7061vm2046.na.xerox.net
usa0300as487.na.xerox.net
usa7061br5038.na.xerox.net
usa0105xw000.na.xerox.net
usa0300vm1298.na.xerox.net
usa0300av6053.na.xerox.net
dev-ags.directory.xerox.com
spfedgw.directory.xerox.com
nagios.corp.xerox.com
usa7061vm1651.na.xerox.net
usa7061txw334.na.xerox.net
usa7061vm6227.na.xerox.net
usa0300aa451.na.xerox.net
usa7061vm6170.na.xerox.net
gbrlon05vm142.eu.xerox.net
gbrlon05nadc022.na.xerox.net
usa0300vm1064.na.xerox.net
usa7061nadc006.na.xerox.net
clearquestrep2.na.xerox.net
usa0300ns003.eu.xerox.net
usa7061aa651.na.xerox.net
mysplo44xd5005.eu.xerox.net
usa0300vm1850.na.xerox.net
lynx.wvdc.xerox.net
usa0300cw001.na.xerox.net
usa0300vm2859.na.xerox.net
usa0300tle100.na.xerox.net
usa0300txe336.na.xerox.net
usa0300vm6685.na.xerox.net
rusapbcm.eu.xerox.net
usa0300vm1835.na.xerox.net
spfedgw.directory.xerox.com
usa7061vm1093.na.xerox.net
lynx.wvdc.xerox.net
usa0300as562.na.xerox.net
usa0300vm6434.na.xerox.net
gbrlon05eudc005.eu.xerox.net
usa7061vm392.na.xerox.net
ukriev01vm02.eu.xerox.net
usaesm1vm6055.na.xerox.net
gbrend01vm1419.eu.xerox.net
qa-userapp.directory.xerox.com
usa0300test81.na.xerox.net
usa7061vm1093.na.xerox.net
usa01068nadc021.na.xerox.net
vclpin.eu.xerox.net
usa0300nadc025.na.xerox.net
usa0300eudc005.eu.xerox.net
gbrlon05ucs01vm2-ext.epn.uksouthgw.xerox.com
xcm-u16-git.na.xerox.net
usa0300av6224.na.xerox.net
usa7061tqw302.na.xerox.net
usa0105xw000.na.xerox.net
usa0300va6474.na.xerox.net
gbrtef01dv035.eu.xerox.net
indmaa04xd5051.na.xerox.net
usa0300as842.na.xerox.net
usa0300vm7081.na.xerox.net
usa0300vm509.na.xerox.net
gbrlon05eudc007.eu.xerox.net
xerox.net
usa0300vm3945.na.xerox.net
lwsdp.corp.xerox.com
usa7063er02.na.xerox.net
gbrlon05xw000.eu.xerox.net
usa0300aa652.na.xerox.net
usa0300vm1299.na.xerox.net
*.na.xerox.net
turist01as07.eu.xerox.net
usaesm1vm6055.na.xerox.net
usa0300llv1281.na.xerox.net
ecmwh.corp.xerox.com
usa0300pdsvcs01.na.xerox.net
dev-ags.directory.xerox.com
ukriev01vm01.eu.xerox.net
userapp.directory.xerox.com
usa7061dc023.xerox.net
ukriev01vm02.eu.xerox.net
usa0300txe330.na.xerox.net
gbrlon05nadc022.na.xerox.net

Certificate

The complete raw certificate details for usa0300ns003.eu.xerox.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58ACByNdbh0mWL1SgE4O
J8x4cB6vOpclSNBokPPQDb2XJUmmMEWNJ0Bl5aqaQasQrNHzOYKA9h52FVUVG6cn
HIjR4l6oDSgfTRqSaHADjIhEgR/27xwsCYOmR6BeeFyNuS6vASrsWi50YZc1CQWB
FdI5AIeIr/UDW6daBffPwKxD2/ToHDO87wDAdG3bmNrvz8Fxw62c/06sWb8KcmXM
NRewSfNxzUxkirnXg8vtqgUZ/aGSo11yLS3ImHmlnwCYSHQnMQ0u75UmqexdVGhZ
W+nvPV/Y494uyC29XTis7DLY+4Koe6BUQq0C+9kkggs4bKhoaeix7pqw25aHnZD+
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 31650525829652475793227107581340795364
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '06850'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Connecticut'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Norwalk'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '45 Glover Avenue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Xerox Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'XIM / IAS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InstantSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'usa0300ns003.eu.xerox.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29255731082081597255061072336716220817110021208463031529604309913058364848079114518338463389664388060935088764522935253733654818499713096899385140334777069476368513050126215858264496829165718059079139616258582022525366569955020522970603949252852549888624891728556153106197851064202093773006931729185368998714328972078258263859834533575333467536203637960652241576128853947814396835080529654838927369030165870049153556339747862857309927127599212086907501615753706811263636118039427498425013816746564114513354671823475883664203969336473379456126724919564188000427063366444028076660746146104169478207314600216557926809331
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							08a9e897bc9aaad6cb800a37f8b39473570acda5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usa0300ns003.eu.xerox.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usa0300ns003.eu.xerox.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016533e86ebe00000403004730450220639f924c898b3cac2f2b285c00dc07b684681ded0f8f1380e1b3db0bfa9c4016022100b3edf1849eda9849d8e45679e939cc9af1acafb00da6dfff9d0707816de0433a007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016533e86f010000040300463044022010c4557b52f92281c012e8d586d697c2779b2fd1434445a21edc9f5c22a83d5b0220310d67f82f2effebd30a1edf382a364643b57af0e4a663906761231395b5b808
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00515f1e618b994608010bb162142ab6a0b7301010eecafa6ae3b1a2d1d636cc0eb8bef046ea85f78419517c0a723e36599797958cb7ee49ab9a1a143755bee518c666ab6ed176c04e316d84435c3dbe98b6e72d66bcc08af5b67faf84b2b5ff12b980cfdcc08871c263c4c9a8867f1c62683fc7bb0732f98043fa5f2b6b42ad62b497dc6247d85a64a52b7d49e3e0d733af20dadc558407126c8f89b94287f6dd708d9b2571e14fdde17a30ff9e25b4d337976352801bb5ab0096ac71fd5157cada6f95ce6e2c62b66d2d85b3e0dcec59284dda98294efb68c8c490a2b7722a036d1f9f9fdd94e5a67a2e9d0d92e866141ea5e335db6c7cb1381b2f16fcea136f