qa.verisigndns.com

- Verisign, Inc -

Issued by VeriSign Class 3 Secure Server CA - G3

About this certificate

This digital certificate with serial number 16:ac:88:7a:7f:c9:af:34:0a:53:47:fd:2d:dd:0c:cc was issued on by VeriSign, Inc..

With 48 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Verisign, Inc

Organization: Verisign, Inc
Organization unit: Network Intelligence and Availability
State / Province: Virginia
Locality: Sterling
Country: US

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 16:ac:88:7a:7f:c9:af:34:0a:53:47:fd:2d:dd:0c:cc
Serial Number (int): 30138859080026480634580419662470515916
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 0d:44:5c:16:53:44:c1:82:7e:1d:20:ab:25:f4:01:63:d8:be:79:a5

Fingerprint (sha1): 3f:ac:b6:df:c0:dc:a5:bc:1e:aa:3c:cf:92:44:30:1c:79:32:4a:92
Fingerprint (sha256): 0a:ef:7f:0d:f1:1a:9b:ce:61:70:54:df:a4:b2:7c:1f:3b:08:ec:71:e1:b8:29:34:ae:90:72:9b:3f:24:04:88

Issuing Certificate URL: http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer

Revocation information

OCSP Server: http://ocsp.verisign.com
CRL Distribution Point: http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl

Check the revocation status for certificate qa.verisigndns.com

48

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qa.verisigndns.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

qa1.verisigndns.com
qa2.verisigndns.com
qa3.verisigndns.com
qa.dnsassurance.com
qa1.dnsassurance.com
qa2.dnsassurance.com
qa3.dnsassurance.com
qa-mdns.verisign.com
qa1-mdns.verisign.com
qa2-mdns.verisign.com
qa3-mdns.verisign.com
qa-trial.verisigninc.com
qa1-trial.verisigninc.com
qa2-trial.verisigninc.com
qa3-trial.verisigninc.com
qa.dnsassurancesolutions.com
qa1.dnsassurancesolutions.com
qa2.dnsassurancesolutions.com
qa3.dnsassurancesolutions.com
qa-wfwp.dnsassurance.com
qa1-wfwp.dnsassurance.com
qa2-wfwp.dnsassurance.com
qa3-wfwp.dnsassurance.com
qa.dns-tool.com
qa1.dns-tool.com
qa2.dns-tool.com
qa3.dns-tool.com
qa-api.dns-tool.com
qa1-api.dns-tool.com
qa2-api.dns-tool.com
qa3-api.dns-tool.com
qa.ons-registration.com
qa1.ons-registration.com
qa2.ons-registration.com
qa3.ons-registration.com
qa-api.ons-registration.com
qa1-api.ons-registration.com
qa2-api.ons-registration.com
qa3-api.ons-registration.com
qa-api.verisigndns.com
qa1-api.verisigndns.com
qa2-api.verisigndns.com
qa3-api.verisigndns.com
qa-ote.verisigndns.com
qa1-ote.verisigndns.com
qa2-ote.verisigndns.com
qa3-ote.verisigndns.com
qa.verisigndns.com

Other certificates including the domain name verisigndns.com

(limited to 100 certificates)
www.verisigndns.com
qa.verisigndns.com
verisigndns.com
www.verisigndns.com
www.verisigndns.com
ote.verisigndns.com
mdns.verisign.com
www.verisigndns.com
mdns.verisign.com
ote.verisigndns.com
rdap.verisign.com
download.verisigndns.com
qa.verisigndns.com
mdns.verisign.com
ote.verisigndns.com
download.verisigndns.com
mdns.verisign.com
mdns.verisign.com
WWW.DNS-TOOL.COM
www.verisigndns.com
rdap.verisign.com
rdap.verisign.com
qa3-mdns.verisign.com
qa.verisigndns.com
mdns.verisign.com
www.verisigndns.com
rdap.verisign.com
qa2-mdns.verisign.com
verisigndns.com
qa1-mdns.verisign.com
verisigndns.com
WWW.DNS-TOOL.COM
ote.verisigndns.com
www.verisigndns.com
www.verisigndns.com
mdns.verisign.com
mdns.verisign.com

Certificate

The complete raw certificate details for qa.verisigndns.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKVTCCCT2gAwIBAgIQFqyIen/JrzQKU0f9Ld0MzDANBgkqhkiG9w0BAQUFADCB
tTELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQL
ExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1c2Ug
YXQgaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYSAoYykxMDEvMC0GA1UEAxMm
VmVyaVNpZ24gQ2xhc3MgMyBTZWN1cmUgU2VydmVyIENBIC0gRzMwHhcNMTExMDI4
MDAwMDAwWhcNMTMxMDI4MjM1OTU5WjCBmDELMAkGA1UEBhMCVVMxETAPBgNVBAgT
CFZpcmdpbmlhMREwDwYDVQQHFAhTdGVybGluZzEWMBQGA1UEChQNVmVyaXNpZ24s
IEluYzEuMCwGA1UECxQlTmV0d29yayBJbnRlbGxpZ2VuY2UgYW5kIEF2YWlsYWJp
bGl0eTEbMBkGA1UEAxQScWEudmVyaXNpZ25kbnMuY29tMIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEAzVkgKM8WyoXTmQRZ3qZYZkqppg8/xMJlnA8qFXlb
j4H85CabHH6gK0lEJqsCYUVgaFT0dq0pU4GfZHenwfTqLJiiLJznW9vVn9ev6RUN
mC2Mmgzh3FD1QWUEUs28luZrGaqveLfuPh3d2fxKzsIYUulZubq/ifASrubh0Cai
OAKN+F3v91hop0QEtmqX3JrHIxKm4uKpoJFwxyhqJJS1SbTI6lvugk6KnN2XtaKR
Hxt/o3qTdvbTPRLKjbnumFmNV5qSknqqQYTnwnJ09pnC2YU5XcFVprNK4Gegg+/c
rjN8/iQf3RFiXDbNe07mZf/X3G0kKTQI0IyfbzDsEidn5wIDAQABo4IGejCCBnYw
ggSlBgNVHREEggScMIIEmIITcWExLnZlcmlzaWduZG5zLmNvbYITcWEyLnZlcmlz
aWduZG5zLmNvbYITcWEzLnZlcmlzaWduZG5zLmNvbYITcWEuZG5zYXNzdXJhbmNl
LmNvbYIUcWExLmRuc2Fzc3VyYW5jZS5jb22CFHFhMi5kbnNhc3N1cmFuY2UuY29t
ghRxYTMuZG5zYXNzdXJhbmNlLmNvbYIUcWEtbWRucy52ZXJpc2lnbi5jb22CFXFh
MS1tZG5zLnZlcmlzaWduLmNvbYIVcWEyLW1kbnMudmVyaXNpZ24uY29tghVxYTMt
bWRucy52ZXJpc2lnbi5jb22CGHFhLXRyaWFsLnZlcmlzaWduaW5jLmNvbYIZcWEx
LXRyaWFsLnZlcmlzaWduaW5jLmNvbYIZcWEyLXRyaWFsLnZlcmlzaWduaW5jLmNv
bYIZcWEzLXRyaWFsLnZlcmlzaWduaW5jLmNvbYIccWEuZG5zYXNzdXJhbmNlc29s
dXRpb25zLmNvbYIdcWExLmRuc2Fzc3VyYW5jZXNvbHV0aW9ucy5jb22CHXFhMi5k
bnNhc3N1cmFuY2Vzb2x1dGlvbnMuY29tgh1xYTMuZG5zYXNzdXJhbmNlc29sdXRp
b25zLmNvbYIYcWEtd2Z3cC5kbnNhc3N1cmFuY2UuY29tghlxYTEtd2Z3cC5kbnNh
c3N1cmFuY2UuY29tghlxYTItd2Z3cC5kbnNhc3N1cmFuY2UuY29tghlxYTMtd2Z3
cC5kbnNhc3N1cmFuY2UuY29tgg9xYS5kbnMtdG9vbC5jb22CEHFhMS5kbnMtdG9v
bC5jb22CEHFhMi5kbnMtdG9vbC5jb22CEHFhMy5kbnMtdG9vbC5jb22CE3FhLWFw
aS5kbnMtdG9vbC5jb22CFHFhMS1hcGkuZG5zLXRvb2wuY29tghRxYTItYXBpLmRu
cy10b29sLmNvbYIUcWEzLWFwaS5kbnMtdG9vbC5jb22CF3FhLm9ucy1yZWdpc3Ry
YXRpb24uY29tghhxYTEub25zLXJlZ2lzdHJhdGlvbi5jb22CGHFhMi5vbnMtcmVn
aXN0cmF0aW9uLmNvbYIYcWEzLm9ucy1yZWdpc3RyYXRpb24uY29tghtxYS1hcGku
b25zLXJlZ2lzdHJhdGlvbi5jb22CHHFhMS1hcGkub25zLXJlZ2lzdHJhdGlvbi5j
b22CHHFhMi1hcGkub25zLXJlZ2lzdHJhdGlvbi5jb22CHHFhMy1hcGkub25zLXJl
Z2lzdHJhdGlvbi5jb22CFnFhLWFwaS52ZXJpc2lnbmRucy5jb22CF3FhMS1hcGku
dmVyaXNpZ25kbnMuY29tghdxYTItYXBpLnZlcmlzaWduZG5zLmNvbYIXcWEzLWFw
aS52ZXJpc2lnbmRucy5jb22CFnFhLW90ZS52ZXJpc2lnbmRucy5jb22CF3FhMS1v
dGUudmVyaXNpZ25kbnMuY29tghdxYTItb3RlLnZlcmlzaWduZG5zLmNvbYIXcWEz
LW90ZS52ZXJpc2lnbmRucy5jb22CEnFhLnZlcmlzaWduZG5zLmNvbTAJBgNVHRME
AjAAMAsGA1UdDwQEAwIFoDBFBgNVHR8EPjA8MDqgOKA2hjRodHRwOi8vU1ZSU2Vj
dXJlLUczLWNybC52ZXJpc2lnbi5jb20vU1ZSU2VjdXJlRzMuY3JsMEQGA1UdIAQ9
MDswOQYLYIZIAYb4RQEHFwMwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cudmVy
aXNpZ24uY29tL3JwYTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHwYD
VR0jBBgwFoAUDURcFlNEwYJ+HSCrJfQBY9i+eaUwdgYIKwYBBQUHAQEEajBoMCQG
CCsGAQUFBzABhhhodHRwOi8vb2NzcC52ZXJpc2lnbi5jb20wQAYIKwYBBQUHMAKG
NGh0dHA6Ly9TVlJTZWN1cmUtRzMtYWlhLnZlcmlzaWduLmNvbS9TVlJTZWN1cmVH
My5jZXIwbgYIKwYBBQUHAQwEYjBgoV6gXDBaMFgwVhYJaW1hZ2UvZ2lmMCEwHzAH
BgUrDgMCGgQUS2u5KJYGDLvQUjibKaxLB4shBRgwJhYkaHR0cDovL2xvZ28udmVy
aXNpZ24uY29tL3ZzbG9nbzEuZ2lmMA0GCSqGSIb3DQEBBQUAA4IBAQCFMPe83BCI
myxyAkzNUn6hm8VuSVk9CFhTih/EO7Z9OmJpMxIOsvexqVbDZmWVQey/Rd8nY1Lv
BiE9c1gbbFFsiqQmSXulTIA4UctsuI0nBSoU8duA6pH/heA64XjKM4pptoNC87Fe
LloNu5WPg+hLCHfC33AAepfAff8BZTGoS92YSj2n4d7qOYEwzNsUvxtXUSXyFoM+
HcKkzRInx3CxNrGo3W7/wRKBp0JwhouxXLDiwJYfh/aLCYmyD1qU9bEP6IzUegta
tS/PNOckd+6uNXXfD1txLd1DwJWolKUrANMVpqGCiPerlfGIw+E2LP9OFptuJXjo
5Jrku2OF4Hdq
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVkgKM8WyoXTmQRZ3qZY
Zkqppg8/xMJlnA8qFXlbj4H85CabHH6gK0lEJqsCYUVgaFT0dq0pU4GfZHenwfTq
LJiiLJznW9vVn9ev6RUNmC2Mmgzh3FD1QWUEUs28luZrGaqveLfuPh3d2fxKzsIY
UulZubq/ifASrubh0CaiOAKN+F3v91hop0QEtmqX3JrHIxKm4uKpoJFwxyhqJJS1
SbTI6lvugk6KnN2XtaKRHxt/o3qTdvbTPRLKjbnumFmNV5qSknqqQYTnwnJ09pnC
2YU5XcFVprNK4Gegg+/crjN8/iQf3RFiXDbNe07mZf/X3G0kKTQI0IyfbzDsEidn
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 30138859080026480634580419662470515916
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)10'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 Secure Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-10-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-10-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Virginia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Sterling'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Verisign, Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Network Intelligence and Availability'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'qa.verisigndns.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25922802000612584470275893463809589145251291686421410218126105078543829171555337604043773485303974908904491550149493144239807031663594720452667071581083025615575882976362125739966022076700257382098146320067749302919939455388967323563846415737838490896932748589632407575168211990571754043794224392582906000794025032392168563840159118307363694177416772336423660097820318510127780753105580314584534049939593324745234821323560701566817814730042637960093115261390015243901494991097934686328648069379134278868836874497265904259400880047755266203249761522661873157785052154261913133702451163392372647914828226530262387222503
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1180 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa1.verisigndns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa2.verisigndns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa3.verisigndns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.dnsassurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa1.dnsassurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa2.dnsassurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa3.dnsassurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-mdns.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa1-mdns.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa2-mdns.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa3-mdns.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-trial.verisigninc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa1-trial.verisigninc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa2-trial.verisigninc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa3-trial.verisigninc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.dnsassurancesolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa1.dnsassurancesolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa2.dnsassurancesolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa3.dnsassurancesolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-wfwp.dnsassurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa1-wfwp.dnsassurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa2-wfwp.dnsassurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa3-wfwp.dnsassurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.dns-tool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa1.dns-tool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa2.dns-tool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa3.dns-tool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-api.dns-tool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa1-api.dns-tool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa2-api.dns-tool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa3-api.dns-tool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.ons-registration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa1.ons-registration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa2.ons-registration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa3.ons-registration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-api.ons-registration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa1-api.ons-registration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa2-api.ons-registration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa3-api.ons-registration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-api.verisigndns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa1-api.verisigndns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa2-api.verisigndns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa3-api.verisigndns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-ote.verisigndns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa1-ote.verisigndns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa2-ote.verisigndns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa3-ote.verisigndns.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.verisigndns.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.23.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d445c165344c1827e1d20ab25f40163d8be79a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/gif'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															4b6bb92896060cbbd052389b29ac4b078b210518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://logo.verisign.com/vslogo1.gif'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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