select.mercer.com
- Mercer US Inc. -
Issued by GeoTrust SSL CA - G3
About this certificate
This digital certificate with serial number 70:65:39:31:38:51:5b:64:ea:31:b8:2c:3f:ba:a6:95 was issued on by GeoTrust Inc..
With 57 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Mercer US Inc.
Organization:
Mercer US Inc.
State / Province:
New York
Locality: New York
Country: US
Locality: New York
Country: US
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 70:65:39:31:38:51:5b:64:ea:31:b8:2c:3f:ba:a6:95Serial Number (int): 149399117507579481838158607056956466837
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c
Fingerprint (sha1): 43:56:9f:70:6f:43:77:fb:43:3b:c5:29:39:3b:db:2c:1c:5d:2f:cf
Fingerprint (sha256): 0a:e3:2b:8c:54:aa:d8:f2:2e:b9:a0:55:5d:a7:cc:1a:ee:e0:ae:24:9e:0a:52:0e:e5:87:a6:55:9d:2f:dd:1d
Issuing Certificate URL: http://gn.symcb.com/gn.crt
Revocation information
OCSP Server: http://gn.symcd.comCRL Distribution Point: http://gn.symcb.com/gn.crl
Check the revocation status for certificate select.mercer.com
57
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for select.mercer.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
securestg.mercer.com
stg.mercer.dk
stg.mercer.de
stg.mercer.ch
stg.mercer.it
www.mercer.ie
www.mercer.com
stg.mercer.com.tw
stg.mercer.be
stg.elect.es
www.mercer.com.au
stg.mercer.co.nz
www.mercer.dk
www.mercer.co.kr
stg.latam.mercer.com
www.mercer.co.nz
stg.mercer.ca
www.mercer.com.tw
www.mercer.com.br
www.mercer.com.hk
www.mercer.it
stg.mercer.com.br
stg.mercer.pt
www.mercer.pt
stg.mercer.co.in
stg.se.mercer.com
stg.mercer.es
www.cn.mercer.com
stg.cn.mercer.com
www.latam.mercer.com
stg.mercer.com.au
www.asean.mercer.com
stg.mercer.us
stg.mercer.ie
www.mercer.es
www.mercer.com.tr
stg.mercer.co.kr
static.select.mercer.com
www.mercer.de
stg.mercer.fr
www.mercer.fr
stg.mercer.com
stg.me.mercer.com
www.mercer.co.in
secure.mercer.com
www.mercer.be
www.mercer.ch
stg.mercer.com.tr
www.se.mercer.com
www.elect.es
stg.asean.mercer.com
stg.mercer.com.hk
www.me.mercer.com
www.uk.mercer.com
www.mercer.us
www.mercer.ca
select.mercer.com
stg.mercer.dk
stg.mercer.de
stg.mercer.ch
stg.mercer.it
www.mercer.ie
www.mercer.com
stg.mercer.com.tw
stg.mercer.be
stg.elect.es
www.mercer.com.au
stg.mercer.co.nz
www.mercer.dk
www.mercer.co.kr
stg.latam.mercer.com
www.mercer.co.nz
stg.mercer.ca
www.mercer.com.tw
www.mercer.com.br
www.mercer.com.hk
www.mercer.it
stg.mercer.com.br
stg.mercer.pt
www.mercer.pt
stg.mercer.co.in
stg.se.mercer.com
stg.mercer.es
www.cn.mercer.com
stg.cn.mercer.com
www.latam.mercer.com
stg.mercer.com.au
www.asean.mercer.com
stg.mercer.us
stg.mercer.ie
www.mercer.es
www.mercer.com.tr
stg.mercer.co.kr
static.select.mercer.com
www.mercer.de
stg.mercer.fr
www.mercer.fr
stg.mercer.com
stg.me.mercer.com
www.mercer.co.in
secure.mercer.com
www.mercer.be
www.mercer.ch
stg.mercer.com.tr
www.se.mercer.com
www.elect.es
stg.asean.mercer.com
stg.mercer.com.hk
www.me.mercer.com
www.uk.mercer.com
www.mercer.us
www.mercer.ca
select.mercer.com
Other certificates including the domain name mercer.com
(limited to 100 certificates)
us-east-1.stage.awsapp.mercer.com
proliability.mercer.com
pre-merceroneview.mercer.com
ghrm-entitlementtool.mercer.com
mas-nms.mercer.com
passkeyservicedev.mercer.com
helplinechatbot-anz.dev.mercer.com
uat.beneflex.mercer.com
managementapi-apigee.on-dallas.prod.admin.mercer.com
benefitcenter.mercer.com
www.census.mercer.com
bi-dev.mercer.com
www.smartirlsit.mercer.com
benefitsuite.mercer.com
tbo-ftp.mercer.com
selectnew.mercer.com
matomo.us-east-1.prod.ext.mercer.com
investor.mercer.com
dr.eprism.win.mercer.com
kroger-ua.mercer.com
mas-ipos.mercer.com
employeesurveys.mercer.com
hbcognos.mercer.com
fe.bclifecycle.mercer.com
canadadcrkdatabase.mercer.com
selectnew.mercer.com
uat.roleprofilebuilder.mercer.com
ncfu-otr-uat.mercer.com
enhance-operations-auth.us-east-1.dev.awsadmin.mercer.com
qa.comptryx.mercer.com
uat.workforce.mercer.com
proliability.mercer.com
bsuitecognos.dr.mercer.com
msso1-uat.mercer.com
www.assurant-uat.mercer.com
remportal.mercer.com
passkeyservicepre.mercer.com
helplinechatbot-anz.dev.mercer.com
api.mmp.us-east-1.dev.int.mercer.com
consumerone.mercer.com
uat.benefitsmonitor.mercer.com
associationlh-moso.mercer.com
uat.recomposicionsalarial.mercer.com
selectnew.mercer.com
common.mercer.com
www.krogerng-auth.mercer.com
admin.bi-analytics-int.us-east-1.stage.int.mercer.com
febe.nifi01.kf.euwt1.prd.oss2.mercer.com
hli.na.qa.app.mercer.com
dashboard.pndb.euwt1.prd.app.mercer.com
be.warrenmt.usinternal.stage.admin.mercer.com
bsuitesp.uat.mercer.com
selectnew.mercer.com
www.apigee.apac.prod.app.mercer.com
stg-entitlement-api.mobility.mercer.com
san-7-s7.tlsprovisioning.exacttarget.com
ad-uat.mercer.com
www.cswebr2uat.mercer.com
stg-internal-europe-nexus.mercer.com
bhips.mercer.com
uat-admin.employeeinsight.mercer.com
uat.mercergold.mercer.com
www.mas-bamboo.mercer.com
historiasclinicas.mercer.com
www.cswebr2uat.mercer.com
historiasclinicas.mercer.com
stg.tx.mercerharmonise.mercer.com
home.ap.mercer.com
common.mercer.com
beneflex.uat.mercer.com
securestg.mercer.com
be.image.mobile.euwt1.stg.oss2.mercer.com
app-v010-harmonise.mercer.com
mercer.com
www.mags.mercer.com
hrbauat.mercer.com
main.digicon.ext.prd.aws-uset1-dmz.mosedge.mercer.com
mags.mercer.com
image.livy01.kf.euwt1.prd.oss2.mercer.com
connectweb4.mercer.com
api.main.mobile.euwt1.stg.oss2.mercer.com
helplinechatbot-anz.dev.mercer.com
apigee.on-dallas.prod.admin.mercer.com
select.mercer.com
common.mercer.com
psa-mbses.mercer.com
www.auth-qa.mercer.com
selectnew.mercer.com
admin.puat-mbm.mercer.com
www.mercerapploginirlsit.mercer.com
emea.analytics.benefitsuite.mercer.com
mfa-admin.mercer.com
channel4.flexsite.mercer.com
apps.mercer.com
mas-vdi.mercer.com
san-7-s7.tlsprovisioning.exacttarget.com
main.pndb.euwt1.dev.int.mercer.com
hli-drupal.emea.prod.admin.mercer.com
cator11db31cn3.mercer.com
consumer.mercer.com
proliability.mercer.com
pre-merceroneview.mercer.com
ghrm-entitlementtool.mercer.com
mas-nms.mercer.com
passkeyservicedev.mercer.com
helplinechatbot-anz.dev.mercer.com
uat.beneflex.mercer.com
managementapi-apigee.on-dallas.prod.admin.mercer.com
benefitcenter.mercer.com
www.census.mercer.com
bi-dev.mercer.com
www.smartirlsit.mercer.com
benefitsuite.mercer.com
tbo-ftp.mercer.com
selectnew.mercer.com
matomo.us-east-1.prod.ext.mercer.com
investor.mercer.com
dr.eprism.win.mercer.com
kroger-ua.mercer.com
mas-ipos.mercer.com
employeesurveys.mercer.com
hbcognos.mercer.com
fe.bclifecycle.mercer.com
canadadcrkdatabase.mercer.com
selectnew.mercer.com
uat.roleprofilebuilder.mercer.com
ncfu-otr-uat.mercer.com
enhance-operations-auth.us-east-1.dev.awsadmin.mercer.com
qa.comptryx.mercer.com
uat.workforce.mercer.com
proliability.mercer.com
bsuitecognos.dr.mercer.com
msso1-uat.mercer.com
www.assurant-uat.mercer.com
remportal.mercer.com
passkeyservicepre.mercer.com
helplinechatbot-anz.dev.mercer.com
api.mmp.us-east-1.dev.int.mercer.com
consumerone.mercer.com
uat.benefitsmonitor.mercer.com
associationlh-moso.mercer.com
uat.recomposicionsalarial.mercer.com
selectnew.mercer.com
common.mercer.com
www.krogerng-auth.mercer.com
admin.bi-analytics-int.us-east-1.stage.int.mercer.com
febe.nifi01.kf.euwt1.prd.oss2.mercer.com
hli.na.qa.app.mercer.com
dashboard.pndb.euwt1.prd.app.mercer.com
be.warrenmt.usinternal.stage.admin.mercer.com
bsuitesp.uat.mercer.com
selectnew.mercer.com
www.apigee.apac.prod.app.mercer.com
stg-entitlement-api.mobility.mercer.com
san-7-s7.tlsprovisioning.exacttarget.com
ad-uat.mercer.com
www.cswebr2uat.mercer.com
stg-internal-europe-nexus.mercer.com
bhips.mercer.com
uat-admin.employeeinsight.mercer.com
uat.mercergold.mercer.com
www.mas-bamboo.mercer.com
historiasclinicas.mercer.com
www.cswebr2uat.mercer.com
historiasclinicas.mercer.com
stg.tx.mercerharmonise.mercer.com
home.ap.mercer.com
common.mercer.com
beneflex.uat.mercer.com
securestg.mercer.com
be.image.mobile.euwt1.stg.oss2.mercer.com
app-v010-harmonise.mercer.com
mercer.com
www.mags.mercer.com
hrbauat.mercer.com
main.digicon.ext.prd.aws-uset1-dmz.mosedge.mercer.com
mags.mercer.com
image.livy01.kf.euwt1.prd.oss2.mercer.com
connectweb4.mercer.com
api.main.mobile.euwt1.stg.oss2.mercer.com
helplinechatbot-anz.dev.mercer.com
apigee.on-dallas.prod.admin.mercer.com
select.mercer.com
common.mercer.com
psa-mbses.mercer.com
www.auth-qa.mercer.com
selectnew.mercer.com
admin.puat-mbm.mercer.com
www.mercerapploginirlsit.mercer.com
emea.analytics.benefitsuite.mercer.com
mfa-admin.mercer.com
channel4.flexsite.mercer.com
apps.mercer.com
mas-vdi.mercer.com
san-7-s7.tlsprovisioning.exacttarget.com
main.pndb.euwt1.dev.int.mercer.com
hli-drupal.emea.prod.admin.mercer.com
cator11db31cn3.mercer.com
consumer.mercer.com
Certificate
The complete raw certificate details for select.mercer.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIxjCCB66gAwIBAgIQcGU5MThRW2TqMbgsP7qmlTANBgkqhkiG9w0BAQsFADBE MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTYxMTI4MDAwMDAwWhcNMTcwNjE1MjM1 OTU5WjBoMQswCQYDVQQGEwJVUzERMA8GA1UECAwITmV3IFlvcmsxETAPBgNVBAcM CE5ldyBZb3JrMRcwFQYDVQQKDA5NZXJjZXIgVVMgSW5jLjEaMBgGA1UEAwwRc2Vs ZWN0Lm1lcmNlci5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO dvQplkmEbMehz/b73oO7IfvGafPdPcdH7s8L3oKHBgTHg9aIwXLIPTute7vBPmPi E/NsCTWTcpNscCHJQ3Vq3IPkSSZ+ACM9O9/9P2uRgLKjA8hnmsUFOXjXhbttQMLk fQAEH3g8m/bgkPeeK3WHpPj7N6/Y9cMG44rjHyiYDl9JvYM6Aw6MqS3nn8KtKXWx Ef3tv8KEp4+A9xO8foJIcjHTcTmwTy2iVazSuBWtMfv91TiayjzJ8mz2mS87b2ox 3G3LMsiY1+hgGXf2BFujFOkAuRuB+9R6W66vKh/bKC5dVPxHGe0e8ze87ohn8nmz +TPhFPm65MV42oiXKmaBAgMBAAGjggWOMIIFijCCA/AGA1UdEQSCA+cwggPjghRz ZWN1cmVzdGcubWVyY2VyLmNvbYINc3RnLm1lcmNlci5ka4INc3RnLm1lcmNlci5k ZYINc3RnLm1lcmNlci5jaIINc3RnLm1lcmNlci5pdIINd3d3Lm1lcmNlci5pZYIO d3d3Lm1lcmNlci5jb22CEXN0Zy5tZXJjZXIuY29tLnR3gg1zdGcubWVyY2VyLmJl ggxzdGcuZWxlY3QuZXOCEXd3dy5tZXJjZXIuY29tLmF1ghBzdGcubWVyY2VyLmNv Lm56gg13d3cubWVyY2VyLmRrghB3d3cubWVyY2VyLmNvLmtyghRzdGcubGF0YW0u bWVyY2VyLmNvbYIQd3d3Lm1lcmNlci5jby5ueoINc3RnLm1lcmNlci5jYYIRd3d3 Lm1lcmNlci5jb20udHeCEXd3dy5tZXJjZXIuY29tLmJyghF3d3cubWVyY2VyLmNv bS5oa4INd3d3Lm1lcmNlci5pdIIRc3RnLm1lcmNlci5jb20uYnKCDXN0Zy5tZXJj ZXIucHSCDXd3dy5tZXJjZXIucHSCEHN0Zy5tZXJjZXIuY28uaW6CEXN0Zy5zZS5t ZXJjZXIuY29tgg1zdGcubWVyY2VyLmVzghF3d3cuY24ubWVyY2VyLmNvbYIRc3Rn LmNuLm1lcmNlci5jb22CFHd3dy5sYXRhbS5tZXJjZXIuY29tghFzdGcubWVyY2Vy LmNvbS5hdYIUd3d3LmFzZWFuLm1lcmNlci5jb22CDXN0Zy5tZXJjZXIudXOCDXN0 Zy5tZXJjZXIuaWWCDXd3dy5tZXJjZXIuZXOCEXd3dy5tZXJjZXIuY29tLnRyghBz dGcubWVyY2VyLmNvLmtyghhzdGF0aWMuc2VsZWN0Lm1lcmNlci5jb22CDXd3dy5t ZXJjZXIuZGWCDXN0Zy5tZXJjZXIuZnKCDXd3dy5tZXJjZXIuZnKCDnN0Zy5tZXJj ZXIuY29tghFzdGcubWUubWVyY2VyLmNvbYIQd3d3Lm1lcmNlci5jby5pboIRc2Vj dXJlLm1lcmNlci5jb22CDXd3dy5tZXJjZXIuYmWCDXd3dy5tZXJjZXIuY2iCEXN0 Zy5tZXJjZXIuY29tLnRyghF3d3cuc2UubWVyY2VyLmNvbYIMd3d3LmVsZWN0LmVz ghRzdGcuYXNlYW4ubWVyY2VyLmNvbYIRc3RnLm1lcmNlci5jb20uaGuCEXd3dy5t ZS5tZXJjZXIuY29tghF3d3cudWsubWVyY2VyLmNvbYINd3d3Lm1lcmNlci51c4IN d3d3Lm1lcmNlci5jYYIRc2VsZWN0Lm1lcmNlci5jb20wCQYDVR0TBAIwADAOBgNV HQ8BAf8EBAMCBaAwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL2duLnN5bWNiLmNv bS9nbi5jcmwwgZ0GA1UdIASBlTCBkjCBjwYGZ4EMAQICMIGEMD8GCCsGAQUFBwIB FjNodHRwczovL3d3dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL3JlcG9zaXRvcnkv bGVnYWwwQQYIKwYBBQUHAgIwNQwzaHR0cHM6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jl c291cmNlcy9yZXBvc2l0b3J5L2xlZ2FsMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjAfBgNVHSMEGDAWgBTSb/eW9IU/cjwwfSPahXibo3xafDBXBggrBgEF BQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9nbi5zeW1jZC5jb20wJgYIKwYB BQUHMAKGGmh0dHA6Ly9nbi5zeW1jYi5jb20vZ24uY3J0MBMGCisGAQQB1nkCBAMB Af8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCzMQAMsujNKlqHFGuy9lfWQfp/lgom Y9vGv2/g7vFUJkJrr6/rREfePXHJaXDdCZNQVsHmGr5b/8+2oP198hsjf26H3Ehj zMXU3vqwxld+sn+HiOvXrqp38T4lnlp6/lSdQJmdQU++mcNTJUlvDN/ZZ2A08ILF TuO7K5JkRZts/DeK2QOMJNIatouRbjiLcuA4nI+R2A3ZZ8Sb2/VoMtGU3vArb4uY IQIK8XNGqpFb8McFkfHdop5JPX4c6bqHwIUkUu4HbzA6EdhSEjnmZ1pJPBD8vkqf lTOe3sQafOukrwBM42V9PhiWh+rJkHeLnvv/mVePfWqJ/buKwRpQWCRu -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznb0KZZJhGzHoc/2+96D uyH7xmnz3T3HR+7PC96ChwYEx4PWiMFyyD07rXu7wT5j4hPzbAk1k3KTbHAhyUN1 atyD5EkmfgAjPTvf/T9rkYCyowPIZ5rFBTl414W7bUDC5H0ABB94PJv24JD3nit1 h6T4+zev2PXDBuOK4x8omA5fSb2DOgMOjKkt55/CrSl1sRH97b/ChKePgPcTvH6C SHIx03E5sE8tolWs0rgVrTH7/dU4mso8yfJs9pkvO29qMdxtyzLImNfoYBl39gRb oxTpALkbgfvUeluuryof2yguXVT8RxntHvM3vO6IZ/J5s/kz4RT5uuTFeNqIlypm gQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 149399117507579481838158607056956466837 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-28 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-15 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Mercer US Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'select.mercer.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26063749108075362405885632400179479901503525929623009986654769545749700257797269792189119177503808928170775052934526028373154326003591803442577929954909974521533131329169520085557204089449267245018701845130877318749841742732136612067275165324360559528853493792289663950758026030896565475252034592643949271316767134572837714427405672333458502266257510387896861072837289297763153819503103711319287273007471075155737322908113730688783880737555203198864641776325613144585881523335631955358965317545636277076415609211795507530015971075671180555998709241903652724725238448395617235489111658232160418726544753316234063931009 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (999 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securestg.mercer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.mercer.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.mercer.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.mercer.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.mercer.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercer.ie' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.mercer.com.tw' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.mercer.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.elect.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercer.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.mercer.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercer.dk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercer.co.kr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.latam.mercer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercer.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.mercer.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercer.com.tw' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercer.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercer.com.hk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercer.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.mercer.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.mercer.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercer.pt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.mercer.co.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.se.mercer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.mercer.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cn.mercer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.cn.mercer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.latam.mercer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.mercer.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asean.mercer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.mercer.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.mercer.ie' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercer.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercer.com.tr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.mercer.co.kr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.select.mercer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercer.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.mercer.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercer.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.mercer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.me.mercer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercer.co.in' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.mercer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercer.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercer.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.mercer.com.tr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.se.mercer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elect.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.asean.mercer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.mercer.com.hk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.me.mercer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uk.mercer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercer.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mercer.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'select.mercer.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00b331000cb2e8cd2a5a87146bb2f657d641fa7f960a2663dbc6bf6fe0eef15426426bafafeb4447de3d71c96970dd09935056c1e61abe5bffcfb6a0fd7df21b237f6e87dc4863ccc5d4defab0c6577eb27f8788ebd7aeaa77f13e259e5a7afe549d40999d414fbe99c35325496f0cdfd9676034f082c54ee3bb2b9264459b6cfc378ad9038c24d21ab68b916e388b72e0389c8f91d80dd967c49bdbf56832d194def02b6f8b9821020af17346aa915bf0c70591f1dda29e493d7e1ce9ba87c0852452ee076f303a11d8521239e6675a493c10fcbe4a9f95339edec41a7ceba4af004ce3657d3e189687eac990778b9efbff99578f7d6a89fdbb8ac11a5058246e