www02710.ntrs.com

- Northern Trust Corporation -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 21:3a:df:ce:5a:ac:74:b8:f2:33:a5:91:cc:cb:c5:34 was issued on by GeoTrust Inc..

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Northern Trust Corporation

Organization: Northern Trust Corporation
Organization unit: Operations and Technology
State / Province: Illinois
Locality: Chicago
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 21:3a:df:ce:5a:ac:74:b8:f2:33:a5:91:cc:cb:c5:34
Serial Number (int): 44170216405102473400298656154734282036
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 3c:c4:d2:46:47:48:5e:d1:5b:dd:6d:92:62:b2:c0:ff:7c:92:b5:ed
Fingerprint (sha256): 0b:3f:cb:17:1c:f6:42:4e:f9:7c:4a:5b:98:5e:15:a5:52:db:1a:48:6b:b7:b4:ef:51:b3:82:59:1f:ea:a2:7b

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate www02710.ntrs.com

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www02710.ntrs.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.retirement.northerntrust.com
wwwptlpsi2ssl.ntrs.com
www04010.ntrs.com
www.northerntrust.jp
www2183.ntrs.com
www0883.ntrs.com
wwwptl02.ntrs.com
www.retirement.ntrs.com
nwa83.ntrs.com
web-xp2b-pws.ntrs.com
wwwptlpsissl.ntrs.com
www8683.ntrs.com
www03910.ntrs.com
www8783.ntrs.com
www.northern-funds.com
www21710.ntrs.com
web-xp2k-pws.ntrs.com
web-xp2a-pws.ntrs.com
wwwptl14-r5.npc.ntrs.com
wwwesi83a.ntrs.com
www15010.ntrs.com
www1083.ntrs.com
business.northerntrust.com
nmr83.ntrs.com
www3683.ntrs.com
www03410.ntrs.com
wwwptl14-r5.wpc.ntrs.com
web-xp2b-pws.wpc.ntrs.com
www.riskandperformance.ntrs.com
125.ntrs.com
www3383.ntrs.com
www50583.ntrs.com
www0283.ntrs.com
www8583.ntrs.com
web-xp2b-pws.northerntrust.com
www14610.ntrs.com
www.northernmutualfunds.com
www3083.ntrs.com
wwwptl04.ntrs.com
m.privatepassport.ntrs.com
riskandperformance.northerntrust.com
institutional.northernfunds.com
www06210.ntrs.com
www.50southcapital.com
www9283.ntrs.com
www.fiftysouthcapital.com
www20310.ntrs.com
125.northerntrust.com
www05510.ntrs.com
www07010.ntrs.com
web-xp2e-pws.ntrs.com
www2283.ntrs.com
web-xp2f-pws.ntrs.com
ohs-xaptl10l-ww12-r5.ntrs.com
wealthadvisor.northerntrust.com
wwwptl14-exl.ntrs.com
web-xp2d-pws.ntrs.com
www.business.northerntrust.com
web-xp2b-pws.npc.ntrs.com
wwwptl00.ntrs.com
www.northerntrustfunds.com
individual.northernfunds.com
www03310.ntrs.com
retirement.northerntrust.com
www01510.ntrs.com
utc.ntrs.com
retirement.ntrs.com
wwwptl12-r5.ntrs.com
www.riskandperformance.northerntrust.com
www20010.ntrs.com
wwwsecuridesi83a.ntrs.com
m.northerntrustopen.com
www.northerntrustopen.com
advisors.northernfunds.com
wwwptl14-r5.ntrs.com
www.northerntrustbank.com
northerninstitutionalfunds.ntrs.com
web-xp2c-pws.ntrs.com
myhrhelp.ntrs.com
www.ntrs.com
wwwptl07.ntrs.com
northernfunds.ntrs.com
riskandperformance.ntrs.com
www02710.ntrs.com

Other certificates including the domain name ntrs.com

(limited to 100 certificates)
up12149.ntrs.com
wwwdam.ntrs.com
www4083.ntrs.com
www9783.ntrs.com
www15010.ntrs.com
wwwsecuridesi83a.ntrs.com
int02011.ntrs.com
npc1dnhfsn02.ent.ad.ntrs.com
int01011.ntrs.com
www04510.ntrs.com
www3683.ntrs.com
pandora-npc-prod1.ntrs.com
www0483.ntrs.com
inttsp.ntrs.com
wwwsry.ntrs.com
nia-uat.ntrs.com
ut61082.lux.ntrs.com
sdcwmap03.ent.ad.ntrs.com
ipl-aj83s-nmr.ntrs.com
www.northernfunds.com
www08210.ntrs.com
int04511.ntrs.com
api-cashdash-csint.ntrs.com
bca-doc-dev.ntrs.com
tct-t020-ipo7ls.ntrs.com
up85133.ntrs.com
www02810.ntrs.com
wpclncupool2.entuat.aduat.ntrs.com
ohs-iaj11l-c044.ntrs.com
www00710.ntrs.com
appwpcuprsa04.ntrs.com
wwwp02.ntrs.com
uat.northerntrust.com
UNJSPZ8.ntrs.com
idf.ntrs.com
UKRCVPSSL01.ntrs.com
gfb-uat.ntrs.com
ws-caguat2-ssl.wpc.ntrs.com
gfb-pcf-dev.ntrs.com
www0383.ntrs.com
grr-uat.ntrs.com
wwwwca11.ntrs.com
nespdp-uat.ntrs.com
ohs-xaj11l-w075.ntrs.com
DQT_WAS_PRD.ntrs.com
ohs-iaj11l-t102.ntrs.com
wpc02pnnutn101.ent.ad.ntrs.com
ohs-iaj11l-w217.ntrs.com
fgc-sys.ent.ad.ntrs.com
nwa-asym-ja.ntrs.com
wwwsry.ntrs.com
web-ipn45-gpi.ntrs.com
ipl-xaj83s-ww04.ntrs.com
appnpcupctd02.ntrs.com
TEST-ignore.ntrs.com
qcdashboard-csprod.ntrs.com
sys.fos.amzext.ntrs.com
mrr83.ntrs.com
nam.ntrs.com
MYAPPS.NTRS.COM
ohsiintw15.ntrs.com
gpe-encryption.jtgprod.ntrs.com
WPCAMERCER01.ntrs.com
ohs-xaj83l-ww88.ntrs.com
sdcavsu10.ent.ad.ntrs.com
servicesuat.ntrs.com
officewebapp-p.ntrs.com
intt041.ntrs.com
ohs-iaj11l-w203.ntrs.com
sdcavsu10.ent.ad.ntrs.com
sgsgvpn01.remote.ntrs.com
ohs-xap11l-t14.ntrs.com
www4183.ntrs.com
up13843.ntrs.com
wwwsry.ntrs.com
*.dev2.src.amzext.ntrs.com
ohs-xaj11l-w031.ntrs.com
ohs-xaj10l-w098.ntrs.com
ohs-iaj11l-t098.ntrs.com
ut87072.ntrs.com
services.ntrs.com
int04807.ntrs.com
idf-uat.lux.ntrs.com
fmz-sys.ntrs.com
ohs-iaj10l-t080.ntrs.com
www0383.ntrs.com
wls-w146-iaj11ls.appzone.wpc.ntrs.com
awp-uat.ntrs.com
prismukpcvdi.ent.ad.ntrs.com
ohs-iaj11l-dcc2.ntrs.com
up12149.ntrs.com
wwwp09.ntrs.com
ohs-xap10l-w00.ntrs.com
mrr83.ntrs.com
ohs-iaj11l-t012.ntrs.com
awp-prod.ntrs.com
txh-osj.ntrs.com
irl-icon10uat-dev.ntrs.com
ohs-iap10l-admint.ntrs.com
ciscouc-apac.ntrs.com

Certificate

The complete raw certificate details for www02710.ntrs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINnDCCDISgAwIBAgIQITrfzlqsdLjyM6WRzMvFNDANBgkqhkiG9w0BAQsFADBE
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU
R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTcwMzA3MDAwMDAwWhcNMTcwOTIxMjM1
OTU5WjCBlzELMAkGA1UEBhMCVVMxETAPBgNVBAgMCElsbGlub2lzMRAwDgYDVQQH
DAdDaGljYWdvMSMwIQYDVQQKDBpOb3J0aGVybiBUcnVzdCBDb3Jwb3JhdGlvbjEi
MCAGA1UECwwZT3BlcmF0aW9ucyBhbmQgVGVjaG5vbG9neTEaMBgGA1UEAwwRd3d3
MDI3MTAubnRycy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa
Kdb6xH6oP8VNO9plV2AZdXzoRn4NjUbZMyg1liFAHnmtbzrXJp8yQU3ywvI4FyQX
FL8K+bbQaECDe+PJxhSS5bw1uK1qPalVSEjWUhZw2pNTp9xBLtNKLnNfG4nIoLan
3i6Vgs7QKnitfSKFatkDF4L5kQSxiZ0wkvrsGhV0RVeAnkooO+hnVxvh2drLRahQ
yGuht0Bsc41At1K34fUNXCJtgJW+Aw6D9PDlZG10iIqV2Ef97ZofDnRv7vguATzN
B0zHhUuTMJ7LI+6IWZnSqL7k9U78ro1FvwWHwSaBdTT+kZiSrvjafg3J3xhpmXfU
kRKQ5ZgBrwXBLBjKBTIlAgMBAAGjggo0MIIKMDCCB6MGA1UdEQSCB5owggeWgiB3
d3cucmV0aXJlbWVudC5ub3J0aGVybnRydXN0LmNvbYIWd3d3cHRscHNpMnNzbC5u
dHJzLmNvbYIRd3d3MDQwMTAubnRycy5jb22CFHd3dy5ub3J0aGVybnRydXN0Lmpw
ghB3d3cyMTgzLm50cnMuY29tghB3d3cwODgzLm50cnMuY29tghF3d3dwdGwwMi5u
dHJzLmNvbYIXd3d3LnJldGlyZW1lbnQubnRycy5jb22CDm53YTgzLm50cnMuY29t
ghV3ZWIteHAyYi1wd3MubnRycy5jb22CFXd3d3B0bHBzaXNzbC5udHJzLmNvbYIQ
d3d3ODY4My5udHJzLmNvbYIRd3d3MDM5MTAubnRycy5jb22CEHd3dzg3ODMubnRy
cy5jb22CFnd3dy5ub3J0aGVybi1mdW5kcy5jb22CEXd3dzIxNzEwLm50cnMuY29t
ghV3ZWIteHAyay1wd3MubnRycy5jb22CFXdlYi14cDJhLXB3cy5udHJzLmNvbYIY
d3d3cHRsMTQtcjUubnBjLm50cnMuY29tghJ3d3dlc2k4M2EubnRycy5jb22CEXd3
dzE1MDEwLm50cnMuY29tghB3d3cxMDgzLm50cnMuY29tghpidXNpbmVzcy5ub3J0
aGVybnRydXN0LmNvbYIObm1yODMubnRycy5jb22CEHd3dzM2ODMubnRycy5jb22C
EXd3dzAzNDEwLm50cnMuY29tghh3d3dwdGwxNC1yNS53cGMubnRycy5jb22CGXdl
Yi14cDJiLXB3cy53cGMubnRycy5jb22CH3d3dy5yaXNrYW5kcGVyZm9ybWFuY2Uu
bnRycy5jb22CDDEyNS5udHJzLmNvbYIQd3d3MzM4My5udHJzLmNvbYIRd3d3NTA1
ODMubnRycy5jb22CEHd3dzAyODMubnRycy5jb22CEHd3dzg1ODMubnRycy5jb22C
HndlYi14cDJiLXB3cy5ub3J0aGVybnRydXN0LmNvbYIRd3d3MTQ2MTAubnRycy5j
b22CG3d3dy5ub3J0aGVybm11dHVhbGZ1bmRzLmNvbYIQd3d3MzA4My5udHJzLmNv
bYIRd3d3cHRsMDQubnRycy5jb22CGm0ucHJpdmF0ZXBhc3Nwb3J0Lm50cnMuY29t
giRyaXNrYW5kcGVyZm9ybWFuY2Uubm9ydGhlcm50cnVzdC5jb22CH2luc3RpdHV0
aW9uYWwubm9ydGhlcm5mdW5kcy5jb22CEXd3dzA2MjEwLm50cnMuY29tghZ3d3cu
NTBzb3V0aGNhcGl0YWwuY29tghB3d3c5MjgzLm50cnMuY29tghl3d3cuZmlmdHlz
b3V0aGNhcGl0YWwuY29tghF3d3cyMDMxMC5udHJzLmNvbYIVMTI1Lm5vcnRoZXJu
dHJ1c3QuY29tghF3d3cwNTUxMC5udHJzLmNvbYIRd3d3MDcwMTAubnRycy5jb22C
FXdlYi14cDJlLXB3cy5udHJzLmNvbYIQd3d3MjI4My5udHJzLmNvbYIVd2ViLXhw
MmYtcHdzLm50cnMuY29tgh1vaHMteGFwdGwxMGwtd3cxMi1yNS5udHJzLmNvbYIf
d2VhbHRoYWR2aXNvci5ub3J0aGVybnRydXN0LmNvbYIVd3d3cHRsMTQtZXhsLm50
cnMuY29tghV3ZWIteHAyZC1wd3MubnRycy5jb22CHnd3dy5idXNpbmVzcy5ub3J0
aGVybnRydXN0LmNvbYIZd2ViLXhwMmItcHdzLm5wYy5udHJzLmNvbYIRd3d3cHRs
MDAubnRycy5jb22CGnd3dy5ub3J0aGVybnRydXN0ZnVuZHMuY29tghxpbmRpdmlk
dWFsLm5vcnRoZXJuZnVuZHMuY29tghF3d3cwMzMxMC5udHJzLmNvbYIccmV0aXJl
bWVudC5ub3J0aGVybnRydXN0LmNvbYIRd3d3MDE1MTAubnRycy5jb22CDHV0Yy5u
dHJzLmNvbYITcmV0aXJlbWVudC5udHJzLmNvbYIUd3d3cHRsMTItcjUubnRycy5j
b22CKHd3dy5yaXNrYW5kcGVyZm9ybWFuY2Uubm9ydGhlcm50cnVzdC5jb22CEXd3
dzIwMDEwLm50cnMuY29tghl3d3dzZWN1cmlkZXNpODNhLm50cnMuY29tghdtLm5v
cnRoZXJudHJ1c3RvcGVuLmNvbYIZd3d3Lm5vcnRoZXJudHJ1c3RvcGVuLmNvbYIa
YWR2aXNvcnMubm9ydGhlcm5mdW5kcy5jb22CFHd3d3B0bDE0LXI1Lm50cnMuY29t
ghl3d3cubm9ydGhlcm50cnVzdGJhbmsuY29tgiNub3J0aGVybmluc3RpdHV0aW9u
YWxmdW5kcy5udHJzLmNvbYIVd2ViLXhwMmMtcHdzLm50cnMuY29tghFteWhyaGVs
cC5udHJzLmNvbYIMd3d3Lm50cnMuY29tghF3d3dwdGwwNy5udHJzLmNvbYIWbm9y
dGhlcm5mdW5kcy5udHJzLmNvbYIbcmlza2FuZHBlcmZvcm1hbmNlLm50cnMuY29t
ghF3d3cwMjcxMC5udHJzLmNvbTAJBgNVHRMEAjAAMA4GA1UdDwEB/wQEAwIFoDAr
BgNVHR8EJDAiMCCgHqAchhpodHRwOi8vZ24uc3ltY2IuY29tL2duLmNybDCBnQYD
VR0gBIGVMIGSMIGPBgZngQwBAgIwgYQwPwYIKwYBBQUHAgEWM2h0dHBzOi8vd3d3
Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvcmVwb3NpdG9yeS9sZWdhbDBBBggrBgEF
BQcCAjA1DDNodHRwczovL3d3dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL3JlcG9z
aXRvcnkvbGVnYWwwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB8GA1Ud
IwQYMBaAFNJv95b0hT9yPDB9I9qFeJujfFp8MFcGCCsGAQUFBwEBBEswSTAfBggr
BgEFBQcwAYYTaHR0cDovL2duLnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDov
L2duLnN5bWNiLmNvbS9nbi5jcnQwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgDd
6x0reg1PpiCLga2BaHB+Lo6dAdVciI09EcTNtuy+zAAAAVqp21WPAAAEAwBHMEUC
IEOVdYED7qADVkCH5ptkJgu9tcUuNSrk8zZ9hgY55AMlAiEA2tzyfJ0vwBJpr/Un
NHmqfqhYikd/MM6vVM3L0MyKeAIAdgCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jj
d80OyA3cEAAAAVqp21WrAAAEAwBHMEUCICfRc8Bd9k/avlZep6mHoRb0VCvXUCBb
wS0swel+/kkwAiEAsYQds2FTutQ4WHpdqaB/XXI/3JwrUDykOi0ve/arfAowDQYJ
KoZIhvcNAQELBQADggEBANExX+owY9DILqn3LCxz3stfgEghW4PVm7id1tIYEGYM
irRtaaIgiLMI/6tfeeNl6hSpnDEB955v96F3unDumIuVTeRF39le87HLBgV1aauN
LMKMMbSB9usbPtrfkH166466UNp2UdFdLIuAobbZLspw6Tvu5zGJmr1S84VnSqHo
7Tuypf0CNeN9pqboPlJgvODOTJ7zHBD/ivpTq/L3OPs6VV0NmEFjtrpfll/t5rYe
Z3h0dAoyfJ+HH7zHb/QwZIMHdklte16x3O7UuT6diEqk7UYONJw8hV5RjhNXAf+k
6N4NmMfiif8RpEawiM6rDiZP0PdhiKOhHpMbYLiSqcY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2inW+sR+qD/FTTvaZVdg
GXV86EZ+DY1G2TMoNZYhQB55rW861yafMkFN8sLyOBckFxS/Cvm20GhAg3vjycYU
kuW8Nbitaj2pVUhI1lIWcNqTU6fcQS7TSi5zXxuJyKC2p94ulYLO0Cp4rX0ihWrZ
AxeC+ZEEsYmdMJL67BoVdEVXgJ5KKDvoZ1cb4dnay0WoUMhrobdAbHONQLdSt+H1
DVwibYCVvgMOg/Tw5WRtdIiKldhH/e2aHw50b+74LgE8zQdMx4VLkzCeyyPuiFmZ
0qi+5PVO/K6NRb8Fh8EmgXU0/pGYkq742n4Nyd8YaZl31JESkOWYAa8FwSwYygUy
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 44170216405102473400298656154734282036
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Northern Trust Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Operations and Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www02710.ntrs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27540582439147989711076365558944744761282775929268579620829451763499385114417387407716045977798828313139352331616482743356074417824789223698813849359190835764930668327494303696783976170226674654126888143893758458632479653864935597125105237986067403675700075710078351460309238310041157376845743200024248910808503515452440586820585949825409232329188690164518658258609471287386327873180538544510012623873596872010955715910364696929887752978677431696463202734680371255761747958047651767738477442930401495678897865118919335631762983669936936882332898965501014933899686392547822798753693253534823765228021837397841047532069
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1946 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.retirement.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptlpsi2ssl.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www04010.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrust.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2183.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www0883.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl02.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.retirement.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nwa83.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2b-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptlpsissl.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www8683.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www03910.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www8783.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northern-funds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www21710.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2k-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2a-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl14-r5.npc.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwesi83a.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www15010.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1083.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmr83.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3683.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www03410.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl14-r5.wpc.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2b-pws.wpc.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riskandperformance.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '125.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3383.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www50583.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www0283.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www8583.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2b-pws.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www14610.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northernmutualfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3083.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl04.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.privatepassport.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riskandperformance.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'institutional.northernfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www06210.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.50southcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www9283.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fiftysouthcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www20310.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '125.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www05510.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www07010.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2e-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2283.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2f-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohs-xaptl10l-ww12-r5.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wealthadvisor.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl14-exl.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2d-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.business.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2b-pws.npc.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl00.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrustfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'individual.northernfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www03310.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirement.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www01510.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utc.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirement.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl12-r5.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riskandperformance.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www20010.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwsecuridesi83a.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.northerntrustopen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrustopen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisors.northernfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl14-r5.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrustbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northerninstitutionalfunds.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2c-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhrhelp.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl07.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northernfunds.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riskandperformance.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www02710.ntrs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015aa9db558f000004030047304502204395758103eea003564087e69b64260bbdb5c52e352ae4f3367d860639e40325022100dadcf27c9d2fc01269aff5273479aa7ea8588a477f30ceaf54cdcbd0cc8a7802007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015aa9db55ab0000040300473045022027d173c05df64fdabe565ea7a987a116f4542bd750205bc12d2cc1e97efe4930022100b1841db36153bad438587a5da9a07f5d723fdc9c2b503ca43a2d2f7bf6ab7c0a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00d1315fea3063d0c82ea9f72c2c73decb5f8048215b83d59bb89dd6d21810660c8ab46d69a22088b308ffab5f79e365ea14a99c3101f79e6ff7a177ba70ee988b954de445dfd95ef3b1cb06057569ab8d2cc28c31b481f6eb1b3edadf907d7aeb8eba50da7651d15d2c8b80a1b6d92eca70e93beee731899abd52f385674aa1e8ed3bb2a5fd0235e37da6a6e83e5260bce0ce4c9ef31c10ff8afa53abf2f738fb3a555d0d984163b6ba5f965fede6b61e677874740a327c9f871fbcc76ff43064830776496d7b5eb1dceed4b93e9d884aa4ed460e349c3c855e518e135701ffa4e8de0d98c7e289ff11a446b088ceab0e264fd0f76188a3a11e931b60b892a9c6