fra.lra.sdn.eds.com

- Hewlett-Packard -

Issued by VeriSign Class 3 Secure Server CA - G3

About this certificate

This digital certificate with serial number 35:22:0a:5e:dc:b5:94:ec:d0:49:a5:ca:7f:14:c4:18 was issued on by VeriSign, Inc..

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Hewlett-Packard

Organization: Hewlett-Packard
State / Province: Hessen
Locality: Frankfurt
Country: DE

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 35:22:0a:5e:dc:b5:94:ec:d0:49:a5:ca:7f:14:c4:18
Serial Number (int): 70625832209640259273549722961038328856
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 0d:44:5c:16:53:44:c1:82:7e:1d:20:ab:25:f4:01:63:d8:be:79:a5

Fingerprint (sha1): 9b:0a:35:78:d3:61:3f:e6:c0:7d:ca:b7:ff:04:7f:e0:09:a0:ee:8c
Fingerprint (sha256): 0a:91:76:f0:13:35:95:c8:36:f6:6e:21:ce:1b:0a:ce:6e:20:f7:d5:2b:8f:12:65:9a:ea:fc:e2:87:b4:68:cd

Issuing Certificate URL: http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer

Revocation information

OCSP Server: http://ocsp.verisign.com
CRL Distribution Point: http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl

Check the revocation status for certificate fra.lra.sdn.eds.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fra.lra.sdn.eds.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fra.blazent.sdn.eds.com
frankfurt.my-id.sdn.eds.com
cmdb.emea.edssdn.com
emea.itoaa.sdn.eds.com
frankfurt.experience.eds.com
reports.frade.emea.sdn.eds.com
emea.reportmanager.sdn.eds.com
opsportal.emea.sdn.eds.com
reports32.frade.emea.sdn.eds.com
fra.lra.sdn.eds.com

Other certificates including the domain name eds.com

(limited to 100 certificates)
servicedesk1.za.eds.com
netitne1.dygnn1a.sys.eds.com
netiftp.saipc1a.sys.eds.com
WEP10B1.PLIPC3E.SYS.EDS.COM
delphi.eds.com
TEST.CH28AS.SYS.EDS.COM
QUT3CHIN.UKIPC1G.SYS.EDS.COM
NETIFTPI.DYIPC1D.SYS.EDS.COM
www.ah.dwweb.eds.com
www.pl.dwweb-eds.com
usrnwcwst407.folsom.calwin.eds.com
QUT3CHIN.UKIPC1G.SYS.EDS.COM
voap.be.eds.com
pcmddv10.edev.elabs.eds.com
www.bes.ca.eds.com
NDMZ.IBM309G2.UK.EDS.COM
netiftp.chgnn1a.sys.eds.com
ADFSTokenDecrypting.edsdomokxix.eds.com
netitne.chgnn1a.sys.eds.com
adm.aldea.svcs.hp.com
blackandveatch.aldea.svcs.hp.com
aaservicerequest.sea.eds.com
netiftp.chgnn1b.sys.eds.com
odm-cert.bes.svcs.hpe.com
JES2S002.DADNN3A.SYS.EDS.COM
lcscwa.eds.com
ahold.aldea.svcs.hp.com
netiftp.ahipc1k.sys.eds.com
NETIFTP.PLIPC3C.SYS.EDS.COM
hptest.wellmark.eds.com
QUT3CHIN.UKIPC1G.SYS.EDS.COM
usahselit103.svcs.entsvcs.net
voap.be.eds.com
dwcitrix.bw200.apac.sdn.eds.com
NETITNE.OKIPC1B.SYS.EDS.COM
ahold.aldea.svcs.hp.com
rtp.aldea.svcs.hp.com
QAQCICC1.CHIPC1A.SYS.EDS.COM
dwcitrix.frade.emea.sdn.eds.com
NETISFT.BOCT.SYS.EDS.COM
eonpl.iweb.eds.com
rdi.eds.com
FTPROXSE.DYIPC1D.SYS.EDS.COM
usrnbcwst405.folsom.calwin.eds.com
fra.lra.sdn.eds.com
pcmddv01.edev.elabs.eds.com
jes2s002.boct.sys.eds.com
netiftp.plipc3e.sys.eds.com
ip.aldea.svcs.hp.com
kraft.aldea.svcs.hp.com
pwb.alxix.slg.eds.com
usahselit103.svcs.entsvcs.net
usrnwcwpr407.folsom.calwin.eds.com
pcmddv10.edev.elabs.eds.com
QUT3CHIN.UKIPC1G.SYS.EDS.COM
ddrt.cert.sea.eds.com
odm-prod.bes.svcs.hpe.com
mb.aldea.svcs.hp.com
QUT3CHIN.UKIPC1G.SYS.EDS.COM
QUT3CHIN.UKIPC1G.SYS.EDS.COM
ausyzlvrcua001o-preprod-rcuwebportal.au.eds.com
delphi.eds.com
netitne.plipc1c.sys.eds.com
aqt.aldea.svcs.hp.com
aasus.amer.eds.com
mo.openbillexpress.eds.com
hpwsmm06.airservices.eds.com
CPA0CWFP.OKIPC1B.SYS.EDS.COM
ddrt.sea.eds.com
www.ah.dwweb.eds.com
pawaux04.poca.uk.eds.com
QUT3CHIN.UKIPC1G.SYS.EDS.COM
sharesprovpv.airservices.eds.com
CICSMMN.CHIPC1A.SYS.EDS.COM
*.edsdomokxix.eds.com
hpwsmp01.airservices.eds.com
cardinal.aldea.svcs.hp.com
sharesas.eds.com
apl.aldea.svcs.hp.com
am.aldea.svcs.hp.com
netitne.plipc1c.sys.eds.com
client-HPE-3DS-proda.caas.rcu.au.eds.com
pro.alxix.slg.eds.com
QUT3CHIN.UKIPC1G.SYS.EDS.COM
hsc.cert.sea.eds.com
ftp.elit.eds.com
netiftp.chgnn1b.sys.eds.com
qsa6chin.dyipc1b.sys.eds.com
intvm.sys.eds.com
sha.sys.eds.com
IPVSRV.PLIPC3C.SYS.EDS.COM
QST7CHIN.OKIPC1B.SYS.EDS.COM
pln-sdn.dwweb.eds.com
zasmreporting.za.eds.com
JES2S002.DADNN3A.SYS.EDS.COM
TCPFTP.ENGBLUE.SYS.EDS.COM
bwd.lra.sdn.eds.com
access.staging.ecsuc.elabs.eds.com
lync-web-ext.Ecsuc.elabs.eds.com
am-training.aries.svcs.hp.com

Certificate

The complete raw certificate details for fra.lra.sdn.eds.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGozCCBYugAwIBAgIQNSIKXty1lOzQSaXKfxTEGDANBgkqhkiG9w0BAQUFADCB
tTELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQL
ExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1c2Ug
YXQgaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYSAoYykxMDEvMC0GA1UEAxMm
VmVyaVNpZ24gQ2xhc3MgMyBTZWN1cmUgU2VydmVyIENBIC0gRzMwHhcNMTExMjMx
MDAwMDAwWhcNMTIxMjMxMjM1OTU5WjBqMQswCQYDVQQGEwJERTEPMA0GA1UECBMG
SGVzc2VuMRIwEAYDVQQHFAlGcmFua2Z1cnQxGDAWBgNVBAoUD0hld2xldHQtUGFj
a2FyZDEcMBoGA1UEAxQTZnJhLmxyYS5zZG4uZWRzLmNvbTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANquv5pOCl4zpNOlpwRWojtGPHq5AX51ztXlwSNT
FbtkjAftK0iWjt8m3hUoeDH/RnRQG9q+1IWXmQZqhOYSkEj3FGxfi+42Vbe04qHx
Lai/7BGfnjtsEpW/PFkeWmjtMfMtm2Er33/BqJGt16AHgJSHtcmJIB0/5aSGKokU
M4CPayIWT0b9y2vauS8UiNYEwi4Tp3uQ/LpXlwrvidlI0Xj0WL7lxOJylMGFBHww
exvCaHJU+0if4txDVb7+knU/573dJUEFIgrN962ry/u2XcFZZ2YnQ0GiCokmE0iB
2LR5BdxDOvje9ePYiIJEF7Gi8BPRFdsLCvUZlkmBen2rKIkCAwEAAaOCAvcwggLz
MIIBIgYDVR0RBIIBGTCCARWCF2ZyYS5ibGF6ZW50LnNkbi5lZHMuY29tghtmcmFu
a2Z1cnQubXktaWQuc2RuLmVkcy5jb22CFGNtZGIuZW1lYS5lZHNzZG4uY29tghZl
bWVhLml0b2FhLnNkbi5lZHMuY29tghxmcmFua2Z1cnQuZXhwZXJpZW5jZS5lZHMu
Y29tgh5yZXBvcnRzLmZyYWRlLmVtZWEuc2RuLmVkcy5jb22CHmVtZWEucmVwb3J0
bWFuYWdlci5zZG4uZWRzLmNvbYIab3BzcG9ydGFsLmVtZWEuc2RuLmVkcy5jb22C
IHJlcG9ydHMzMi5mcmFkZS5lbWVhLnNkbi5lZHMuY29tghNmcmEubHJhLnNkbi5l
ZHMuY29tMAkGA1UdEwQCMAAwCwYDVR0PBAQDAgWgMEUGA1UdHwQ+MDwwOqA4oDaG
NGh0dHA6Ly9TVlJTZWN1cmUtRzMtY3JsLnZlcmlzaWduLmNvbS9TVlJTZWN1cmVH
My5jcmwwRAYDVR0gBD0wOzA5BgtghkgBhvhFAQcXAzAqMCgGCCsGAQUFBwIBFhxo
dHRwczovL3d3dy52ZXJpc2lnbi5jb20vcnBhMB0GA1UdJQQWMBQGCCsGAQUFBwMB
BggrBgEFBQcDAjAfBgNVHSMEGDAWgBQNRFwWU0TBgn4dIKsl9AFj2L55pTB2Bggr
BgEFBQcBAQRqMGgwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLnZlcmlzaWduLmNv
bTBABggrBgEFBQcwAoY0aHR0cDovL1NWUlNlY3VyZS1HMy1haWEudmVyaXNpZ24u
Y29tL1NWUlNlY3VyZUczLmNlcjBuBggrBgEFBQcBDARiMGChXqBcMFowWDBWFglp
bWFnZS9naWYwITAfMAcGBSsOAwIaBBRLa7kolgYMu9BSOJsprEsHiyEFGDAmFiRo
dHRwOi8vbG9nby52ZXJpc2lnbi5jb20vdnNsb2dvMS5naWYwDQYJKoZIhvcNAQEF
BQADggEBAAGze5Teqt7KNWr+7cXjaWzNbwPc08IAss/qW5JI3xqgCqO8CdljBum9
7EjUK4t9D79W/n7l63qZVDRTkKAFOr1q01q6syfWbvpRJN37uf9trOsxYJ77SaQ5
m4sOzM6s+lvpWhZozLNZxn4JXHMdjoeN8EsANQBKT1Gx3PtD02JSgRWfN+9TIp75
nEhwJIoi4wDz5J/IPkS2BpQOsocKjf8xfQdxYq5ogsngvbd4gd+PvZPbTGhmCJ3j
sg0HrBqRp0txdGscnCPQa4Y1Q3Bixp7+D0noV9DqkI4VIsbFqmVvVsBbNxYomsSP
LZVZ0IYcuu2qmJR7zXmBfRWwVU9DCmE=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2q6/mk4KXjOk06WnBFai
O0Y8erkBfnXO1eXBI1MVu2SMB+0rSJaO3ybeFSh4Mf9GdFAb2r7UhZeZBmqE5hKQ
SPcUbF+L7jZVt7TiofEtqL/sEZ+eO2wSlb88WR5aaO0x8y2bYSvff8Goka3XoAeA
lIe1yYkgHT/lpIYqiRQzgI9rIhZPRv3La9q5LxSI1gTCLhOne5D8uleXCu+J2UjR
ePRYvuXE4nKUwYUEfDB7G8JoclT7SJ/i3ENVvv6SdT/nvd0lQQUiCs33ravL+7Zd
wVlnZidDQaIKiSYTSIHYtHkF3EM6+N7149iIgkQXsaLwE9EV2wsK9RmWSYF6faso
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 70625832209640259273549722961038328856
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)10'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 Secure Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-12-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-12-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Frankfurt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Hewlett-Packard'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'fra.lra.sdn.eds.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27606122154097544521592026045257714881335042511085400356902124818750919694457214769138274442570250222969876245328990030796366379776182313520653197037215746374211882583090237661028541611655484118037971267521579930166956949067078053190190401739017336440068266637539240794969193297479558773908454568455972142279783098957685852567816070680542519985033697857884423884160728224898546332581688192950015700471284596185347806827225821897554351877496392694021852424483615356158316196162028518004542195746629218875216399419045327061096130878147299809300901217895618629678104497863445324814169810615507395389294318662943874164873
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (281 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fra.blazent.sdn.eds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frankfurt.my-id.sdn.eds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmdb.emea.edssdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emea.itoaa.sdn.eds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frankfurt.experience.eds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reports.frade.emea.sdn.eds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emea.reportmanager.sdn.eds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opsportal.emea.sdn.eds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reports32.frade.emea.sdn.eds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fra.lra.sdn.eds.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.23.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d445c165344c1827e1d20ab25f40163d8be79a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/gif'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															4b6bb92896060cbbd052389b29ac4b078b210518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://logo.verisign.com/vslogo1.gif'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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