mags.mercer.com
- Mercer -
Issued by Digi-Sign CA Digi-SSL
About this certificate
This digital certificate with serial number 0c:a7:98:65:14:fc:74:9d:c7:08:bb:62:fe:d0:97:33 was issued on by Digi-Sign Limited.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Mercer
Organization:
Mercer
Organization unit: Mercer
Organization unit: Provided by Digi-Sign Limited
Organization unit: Digi-SSL Xp
Organization unit: Mercer
Organization unit: Provided by Digi-Sign Limited
Organization unit: Digi-SSL Xp
State / Province:
IOWA
Locality: Urbandale
Country: US
Locality: Urbandale
Country: US
Digi-Sign Limited
Organization:
Digi-Sign Limited
State / Province:
County Dublin
Locality: Dublin
Country: IE
Locality: Dublin
Country: IE
This certificate has expire since
Certificate Details
Serial Number (hex): 0c:a7:98:65:14:fc:74:9d:c7:08:bb:62:fe:d0:97:33Serial Number (int): 16820940459593375891375353965461935923
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 11:9d:ea:d0:32:fb:99:45:b1:95:e7:9c:5f:48:43:54:21:3f:60:93
AuthorityKeyId: 78:29:0f:ae:cd:90:2c:c0:dc:d2:7a:d4:9b:5f:9c:45:e0:88:a8:2c
Fingerprint (sha1): c9:e4:c9:14:6f:1f:ef:94:71:c8:7d:05:b0:a5:5e:59:fa:be:9c:43
Fingerprint (sha256): 09:92:56:05:c6:11:16:72:c8:e6:ec:a5:a3:1e:76:f8:2c:7f:f3:02:5b:b5:80:98:43:b9:0d:59:4f:db:0f:d4
Issuing Certificate URL: http://crt.usertrust.com/DigiSignCADigiSSL.crt
Revocation information
OCSP Server: http://ocsp.usertrust.comCRL Distribution Point: http://crl.usertrust.com/DigiSignCADigiSSL.crl
Check the revocation status for certificate mags.mercer.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mags.mercer.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mags.mercer.com
www.mags.mercer.com
www.mags.mercer.com
Other certificates including the domain name mercer.com
(limited to 100 certificates)
us-east-1.stage.awsapp.mercer.com
proliability.mercer.com
pre-merceroneview.mercer.com
ghrm-entitlementtool.mercer.com
mas-nms.mercer.com
passkeyservicedev.mercer.com
helplinechatbot-anz.dev.mercer.com
uat.beneflex.mercer.com
managementapi-apigee.on-dallas.prod.admin.mercer.com
benefitcenter.mercer.com
www.census.mercer.com
bi-dev.mercer.com
www.smartirlsit.mercer.com
benefitsuite.mercer.com
tbo-ftp.mercer.com
selectnew.mercer.com
matomo.us-east-1.prod.ext.mercer.com
investor.mercer.com
dr.eprism.win.mercer.com
kroger-ua.mercer.com
mas-ipos.mercer.com
employeesurveys.mercer.com
hbcognos.mercer.com
fe.bclifecycle.mercer.com
canadadcrkdatabase.mercer.com
selectnew.mercer.com
uat.roleprofilebuilder.mercer.com
ncfu-otr-uat.mercer.com
enhance-operations-auth.us-east-1.dev.awsadmin.mercer.com
qa.comptryx.mercer.com
uat.workforce.mercer.com
proliability.mercer.com
bsuitecognos.dr.mercer.com
msso1-uat.mercer.com
www.assurant-uat.mercer.com
remportal.mercer.com
passkeyservicepre.mercer.com
helplinechatbot-anz.dev.mercer.com
api.mmp.us-east-1.dev.int.mercer.com
consumerone.mercer.com
uat.benefitsmonitor.mercer.com
associationlh-moso.mercer.com
uat.recomposicionsalarial.mercer.com
selectnew.mercer.com
common.mercer.com
www.krogerng-auth.mercer.com
admin.bi-analytics-int.us-east-1.stage.int.mercer.com
febe.nifi01.kf.euwt1.prd.oss2.mercer.com
hli.na.qa.app.mercer.com
dashboard.pndb.euwt1.prd.app.mercer.com
be.warrenmt.usinternal.stage.admin.mercer.com
bsuitesp.uat.mercer.com
selectnew.mercer.com
www.apigee.apac.prod.app.mercer.com
stg-entitlement-api.mobility.mercer.com
san-7-s7.tlsprovisioning.exacttarget.com
ad-uat.mercer.com
www.cswebr2uat.mercer.com
stg-internal-europe-nexus.mercer.com
bhips.mercer.com
uat-admin.employeeinsight.mercer.com
uat.mercergold.mercer.com
www.mas-bamboo.mercer.com
historiasclinicas.mercer.com
www.cswebr2uat.mercer.com
historiasclinicas.mercer.com
stg.tx.mercerharmonise.mercer.com
home.ap.mercer.com
common.mercer.com
beneflex.uat.mercer.com
securestg.mercer.com
be.image.mobile.euwt1.stg.oss2.mercer.com
app-v010-harmonise.mercer.com
mercer.com
www.mags.mercer.com
hrbauat.mercer.com
main.digicon.ext.prd.aws-uset1-dmz.mosedge.mercer.com
mags.mercer.com
image.livy01.kf.euwt1.prd.oss2.mercer.com
connectweb4.mercer.com
api.main.mobile.euwt1.stg.oss2.mercer.com
helplinechatbot-anz.dev.mercer.com
apigee.on-dallas.prod.admin.mercer.com
select.mercer.com
common.mercer.com
psa-mbses.mercer.com
www.auth-qa.mercer.com
selectnew.mercer.com
admin.puat-mbm.mercer.com
www.mercerapploginirlsit.mercer.com
emea.analytics.benefitsuite.mercer.com
mfa-admin.mercer.com
channel4.flexsite.mercer.com
apps.mercer.com
mas-vdi.mercer.com
san-7-s7.tlsprovisioning.exacttarget.com
main.pndb.euwt1.dev.int.mercer.com
hli-drupal.emea.prod.admin.mercer.com
cator11db31cn3.mercer.com
consumer.mercer.com
proliability.mercer.com
pre-merceroneview.mercer.com
ghrm-entitlementtool.mercer.com
mas-nms.mercer.com
passkeyservicedev.mercer.com
helplinechatbot-anz.dev.mercer.com
uat.beneflex.mercer.com
managementapi-apigee.on-dallas.prod.admin.mercer.com
benefitcenter.mercer.com
www.census.mercer.com
bi-dev.mercer.com
www.smartirlsit.mercer.com
benefitsuite.mercer.com
tbo-ftp.mercer.com
selectnew.mercer.com
matomo.us-east-1.prod.ext.mercer.com
investor.mercer.com
dr.eprism.win.mercer.com
kroger-ua.mercer.com
mas-ipos.mercer.com
employeesurveys.mercer.com
hbcognos.mercer.com
fe.bclifecycle.mercer.com
canadadcrkdatabase.mercer.com
selectnew.mercer.com
uat.roleprofilebuilder.mercer.com
ncfu-otr-uat.mercer.com
enhance-operations-auth.us-east-1.dev.awsadmin.mercer.com
qa.comptryx.mercer.com
uat.workforce.mercer.com
proliability.mercer.com
bsuitecognos.dr.mercer.com
msso1-uat.mercer.com
www.assurant-uat.mercer.com
remportal.mercer.com
passkeyservicepre.mercer.com
helplinechatbot-anz.dev.mercer.com
api.mmp.us-east-1.dev.int.mercer.com
consumerone.mercer.com
uat.benefitsmonitor.mercer.com
associationlh-moso.mercer.com
uat.recomposicionsalarial.mercer.com
selectnew.mercer.com
common.mercer.com
www.krogerng-auth.mercer.com
admin.bi-analytics-int.us-east-1.stage.int.mercer.com
febe.nifi01.kf.euwt1.prd.oss2.mercer.com
hli.na.qa.app.mercer.com
dashboard.pndb.euwt1.prd.app.mercer.com
be.warrenmt.usinternal.stage.admin.mercer.com
bsuitesp.uat.mercer.com
selectnew.mercer.com
www.apigee.apac.prod.app.mercer.com
stg-entitlement-api.mobility.mercer.com
san-7-s7.tlsprovisioning.exacttarget.com
ad-uat.mercer.com
www.cswebr2uat.mercer.com
stg-internal-europe-nexus.mercer.com
bhips.mercer.com
uat-admin.employeeinsight.mercer.com
uat.mercergold.mercer.com
www.mas-bamboo.mercer.com
historiasclinicas.mercer.com
www.cswebr2uat.mercer.com
historiasclinicas.mercer.com
stg.tx.mercerharmonise.mercer.com
home.ap.mercer.com
common.mercer.com
beneflex.uat.mercer.com
securestg.mercer.com
be.image.mobile.euwt1.stg.oss2.mercer.com
app-v010-harmonise.mercer.com
mercer.com
www.mags.mercer.com
hrbauat.mercer.com
main.digicon.ext.prd.aws-uset1-dmz.mosedge.mercer.com
mags.mercer.com
image.livy01.kf.euwt1.prd.oss2.mercer.com
connectweb4.mercer.com
api.main.mobile.euwt1.stg.oss2.mercer.com
helplinechatbot-anz.dev.mercer.com
apigee.on-dallas.prod.admin.mercer.com
select.mercer.com
common.mercer.com
psa-mbses.mercer.com
www.auth-qa.mercer.com
selectnew.mercer.com
admin.puat-mbm.mercer.com
www.mercerapploginirlsit.mercer.com
emea.analytics.benefitsuite.mercer.com
mfa-admin.mercer.com
channel4.flexsite.mercer.com
apps.mercer.com
mas-vdi.mercer.com
san-7-s7.tlsprovisioning.exacttarget.com
main.pndb.euwt1.dev.int.mercer.com
hli-drupal.emea.prod.admin.mercer.com
cator11db31cn3.mercer.com
consumer.mercer.com
Certificate
The complete raw certificate details for mags.mercer.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgIQDKeYZRT8dJ3HCLti/tCXMzANBgkqhkiG9w0BAQsFADBy MQswCQYDVQQGEwJJRTEWMBQGA1UECBMNQ291bnR5IER1YmxpbjEPMA0GA1UEBxMG RHVibGluMRowGAYDVQQKExFEaWdpLVNpZ24gTGltaXRlZDEeMBwGA1UEAxMVRGln aS1TaWduIENBIERpZ2ktU1NMMB4XDTE3MDIwMjAwMDAwMFoXDTIwMDIwMjIzNTk1 OVowgaoxCzAJBgNVBAYTAlVTMQ0wCwYDVQQIEwRJT1dBMRIwEAYDVQQHEwlVcmJh bmRhbGUxDzANBgNVBAoTBk1lcmNlcjEPMA0GA1UECxMGTWVyY2VyMSYwJAYDVQQL Ex1Qcm92aWRlZCBieSBEaWdpLVNpZ24gTGltaXRlZDEUMBIGA1UECxMLRGlnaS1T U0wgWHAxGDAWBgNVBAMTD21hZ3MubWVyY2VyLmNvbTCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBAKrY6v/rVsHNR4dM0ZrCJkoyWVWPi70i6ieqexQrJO1r hwC2SXfLVmsRZwfKVKu36zO5sMwv3YUgkwmeUl8P0J/TeTgifTtqKuVv3ShjD4cc OxUXI3j2Z4L3Wel/SPMWXaOHuAV/maXpEsYmf4DLo3SLgQEmE+taOmlHruPPuWkL 2jzH0dcKtlbk/nui4jgcXNkRHzxKk7Y7KdVwWvvqTKfKWBO9sUilR8nhRfwW0ahD Y05itrIhA3iZsZQas1FkqSxjAMxmdZvPxrYhoJvt/q9HUdW+X0tMpQNVh9s5UJy4 MO4FzW9PTJ8uzyFFFocxwS5/K+omfkEhx3GpaGjO4R0CAwEAAaOCAbMwggGvMB8G A1UdIwQYMBaAFHgpD67NkCzA3NJ61JtfnEXgiKgsMB0GA1UdDgQWBBQRnerQMvuZ RbGV55xfSENUIT9gkzAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSwYDVR0gBEQwQjA2BgsrBgEEAbIx AQICCTAnMCUGCCsGAQUFBwIBFhlodHRwczovL2Nwcy51c2VydHJ1c3QuY29tMAgG BmeBDAECAjA/BgNVHR8EODA2MDSgMqAwhi5odHRwOi8vY3JsLnVzZXJ0cnVzdC5j b20vRGlnaVNpZ25DQURpZ2lTU0wuY3JsMHEGCCsGAQUFBwEBBGUwYzA6BggrBgEF BQcwAoYuaHR0cDovL2NydC51c2VydHJ1c3QuY29tL0RpZ2lTaWduQ0FEaWdpU1NM LmNydDAlBggrBgEFBQcwAYYZaHR0cDovL29jc3AudXNlcnRydXN0LmNvbTAvBgNV HREEKDAmgg9tYWdzLm1lcmNlci5jb22CE3d3dy5tYWdzLm1lcmNlci5jb20wDQYJ KoZIhvcNAQELBQADggEBAGfO0wvoLkNTD/pU/xpd0JaXSGM12OQOSXNJ40C102fk KA6MXey4NjMC0zmSKt2JGevIOssA1psasKIhqSvf6WXaIuxbMWjq8weLZTD156Qj r8CP/iRxP3oNTPTRND6n8fLYG0cFXlWdcGewuNyYn4o+zE0Ce3oBt8l4kN112hvN +bsiWxUKKkcaNtvHocCW34W0lkg9UPzw0pEocIPz5P6RbedQOnr6AK9+dxRjxJnQ 85+AvvYuMrvL3mmzVpqZmYszpa9To+yfe4cb5Hy9SEoX7t3X07RHWfELf+kfhZYg rGj45FNRfwM6AAtbx9DWSe0r7afx0oSk8lIqRsn5WGU= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtjq/+tWwc1Hh0zRmsIm SjJZVY+LvSLqJ6p7FCsk7WuHALZJd8tWaxFnB8pUq7frM7mwzC/dhSCTCZ5SXw/Q n9N5OCJ9O2oq5W/dKGMPhxw7FRcjePZngvdZ6X9I8xZdo4e4BX+ZpekSxiZ/gMuj dIuBASYT61o6aUeu48+5aQvaPMfR1wq2VuT+e6LiOBxc2REfPEqTtjsp1XBa++pM p8pYE72xSKVHyeFF/BbRqENjTmK2siEDeJmxlBqzUWSpLGMAzGZ1m8/GtiGgm+3+ r0dR1b5fS0ylA1WH2zlQnLgw7gXNb09Mny7PIUUWhzHBLn8r6iZ+QSHHcaloaM7h HQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16820940459593375891375353965461935923 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'County Dublin' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dublin' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Digi-Sign Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Digi-Sign CA Digi-SSL' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-02 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-02 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IOWA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Urbandale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mercer' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mercer' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Provided by Digi-Sign Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Digi-SSL Xp' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mags.mercer.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21567478080699568417455002207512316842797014739277790835935201939688844567516804202514011301140467346137024301596901166750403921210964156972878341913910125657954574428199628606294189891024085706438958899961184832435242237486966893367460664072055154054744534935265631896245630280674115575044682448750209749764902074249287109079312083715874220160781588517731784545868378629206522348615593226689698255651496109065185353694250674027488295939997659755522290640827262293636613372269813990524430701871698184476043199116367273006123558555263187245504516104979849091439068362838868458926001751101857796982729766023386991878429 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 78290faecd902cc0dcd27ad49b5f9c45e088a82c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 119dead032fb9945b195e79c5f484354213f6093 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.9 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/DigiSignCADigiSSL.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/DigiSignCADigiSSL.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mags.mercer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mags.mercer.com' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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