mlx.ml.com

Issued by VeriSign Class 3 Secure Server CA - G3

About this certificate


This digital certificate with serial number 6b:97:31:19:78:cd:15:5b:c1:8e:8b:21:8c:f7:61:45 was issued on by VeriSign, Inc. .

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

Cerificate errors/warnings *beta

  • WARNING: Using depricated TeletexString for '[Charlotte]'
  • WARNING: Using depricated TeletexString for '[Bank of America Corporation]'
  • WARNING: Using depricated TeletexString for '[Network Services]'
  • WARNING: Using depricated TeletexString for '[mlx.ml.com]'

Bank of America Corporation

Organization: Bank of America Corporation
Organization unit: Network Services
State / Province: North Carolina
Locality: Charlotte
Country: US

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
State / Province: North Carolina
Locality: Charlotte
Country: US

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 6b:97:31:19:78:cd:15:5b:c1:8e:8b:21:8c:f7:61:45
Serial Number (int): 143012428230785530994954169919756263749
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 0d:44:5c:16:53:44:c1:82:7e:1d:20:ab:25:f4:01:63:d8:be:79:a5

Fingerprint (sha1): 52:40:57:6f:d9:67:38:59:f2:27:bb:5d:60:d9:67:f3:9d:30:36:fc
Fingerprint (sha256): 12:40:41:57:ec:63:3a:1a:c5:64:6e:ab:ca:ed:1d:9c:be:83:1a:21:84:90:01:34:a1:5d:9a:d7:62:ae:52:00

Issuing Certificate URL: http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer

Revocation information

OCSP Server: http://ocsp.verisign.com
CRL Distribution Point: http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl

Check the revocation status for the current certificate on mlx.ml.com
30
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

www.mlx.ml.com
www-s.mlx.ml.com
www-p.mlx.ml.com
www.baml.ml.com
www-s.baml.ml.com
www-p.baml.ml.com
baml.ml.com
www.broadcort.com
broadcort.com
www.ecitation.com
ecitation.com
broadcortcustomerportal.ml.com
www.broadcortcustomerportal.ml.com
repo.ml.com
www.repo.ml.com
bofacapital.bankofamerica.com
bofacapital-prd-amrs.bankofamerica.com
bofacapital-prd-emea.bankofamerica.com
bofacapital-prd-apac.bankofamerica.com
bofacapital-pp.bankofamerica.com
bofacapital-pp-amrs.bankofamerica.com
bofacapital-pp-emea.bankofamerica.com
bofacapital-pp-apac.bankofamerica.com
www.mlabsreports.ml.com
mlabsreports.ml.com
staticpools.ml.com
www.staticpools.ml.com
bamlservice-uk.bankofamerica.com
bamlservice.bankofamerica.com
mlx.ml.com

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIIOjCCByKgAwIBAgIQa5cxGXjNFVvBjoshjPdhRTANBgkqhkiG9w0BAQUFADCB tTELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQL ExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1c2Ug YXQgaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYSAoYykxMDEvMC0GA1UEAxMm VmVyaVNpZ24gQ2xhc3MgMyBTZWN1cmUgU2VydmVyIENBIC0gRzMwHhcNMTMwMTEx MDAwMDAwWhcNMTQwMTI4MjM1OTU5WjCBkDELMAkGA1UEBhMCVVMxFzAVBgNVBAgT Dk5vcnRoIENhcm9saW5hMRIwEAYDVQQHFAlDaGFybG90dGUxJDAiBgNVBAoUG0Jh bmsgb2YgQW1lcmljYSBDb3Jwb3JhdGlvbjEZMBcGA1UECxQQTmV0d29yayBTZXJ2 aWNlczETMBEGA1UEAxQKbWx4Lm1sLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMtnCmiY9nopszDbCBUAWeVMIOwEj9eT27yeeCkaGP9iaKN+0tkA qhO85bepPyq3xRKEby0AIzeH0wA7zgQDuhSQgGnyIQk1prTX6NOtOv1UMBOGnPot Vh7fGICYSJrRbQyC/3MH6bIlbMI2DEA0ZJgsnW45ph8EYBqPL4Drg6e8ocsWCh7S Q02yKoz47oJFHKnk8Ml1FtP3UsA9WqLl46G6uPoNX0rU4nKvBh0vUIkmM7jUVjFz 7ylrAafb8dVLP69F9TOGkBe0tCuMDBymuBb3x0tVuFjD4/Fgqj4yU/GTooAgkNmJ NeVoCJ5CQA877RL09yQGPrbZIro0A3A4p1kCAwEAAaOCBGcwggRjMIIDAAYDVR0R BIIC9zCCAvOCDnd3dy5tbHgubWwuY29tghB3d3ctcy5tbHgubWwuY29tghB3d3ct cC5tbHgubWwuY29tgg93d3cuYmFtbC5tbC5jb22CEXd3dy1zLmJhbWwubWwuY29t ghF3d3ctcC5iYW1sLm1sLmNvbYILYmFtbC5tbC5jb22CEXd3dy5icm9hZGNvcnQu Y29tgg1icm9hZGNvcnQuY29tghF3d3cuZWNpdGF0aW9uLmNvbYINZWNpdGF0aW9u LmNvbYIeYnJvYWRjb3J0Y3VzdG9tZXJwb3J0YWwubWwuY29tgiJ3d3cuYnJvYWRj b3J0Y3VzdG9tZXJwb3J0YWwubWwuY29tggtyZXBvLm1sLmNvbYIPd3d3LnJlcG8u bWwuY29tgh1ib2ZhY2FwaXRhbC5iYW5rb2ZhbWVyaWNhLmNvbYImYm9mYWNhcGl0 YWwtcHJkLWFtcnMuYmFua29mYW1lcmljYS5jb22CJmJvZmFjYXBpdGFsLXByZC1l bWVhLmJhbmtvZmFtZXJpY2EuY29tgiZib2ZhY2FwaXRhbC1wcmQtYXBhYy5iYW5r b2ZhbWVyaWNhLmNvbYIgYm9mYWNhcGl0YWwtcHAuYmFua29mYW1lcmljYS5jb22C JWJvZmFjYXBpdGFsLXBwLWFtcnMuYmFua29mYW1lcmljYS5jb22CJWJvZmFjYXBp dGFsLXBwLWVtZWEuYmFua29mYW1lcmljYS5jb22CJWJvZmFjYXBpdGFsLXBwLWFw YWMuYmFua29mYW1lcmljYS5jb22CF3d3dy5tbGFic3JlcG9ydHMubWwuY29tghNt bGFic3JlcG9ydHMubWwuY29tghJzdGF0aWNwb29scy5tbC5jb22CFnd3dy5zdGF0 aWNwb29scy5tbC5jb22CIGJhbWxzZXJ2aWNlLXVrLmJhbmtvZmFtZXJpY2EuY29t gh1iYW1sc2VydmljZS5iYW5rb2ZhbWVyaWNhLmNvbYIKbWx4Lm1sLmNvbTAJBgNV HRMEAjAAMA4GA1UdDwEB/wQEAwIFoDBFBgNVHR8EPjA8MDqgOKA2hjRodHRwOi8v U1ZSU2VjdXJlLUczLWNybC52ZXJpc2lnbi5jb20vU1ZSU2VjdXJlRzMuY3JsMEMG A1UdIAQ8MDowOAYKYIZIAYb4RQEHNjAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3 dy52ZXJpc2lnbi5jb20vY3BzMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjAfBgNVHSMEGDAWgBQNRFwWU0TBgn4dIKsl9AFj2L55pTB2BggrBgEFBQcBAQRq MGgwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLnZlcmlzaWduLmNvbTBABggrBgEF BQcwAoY0aHR0cDovL1NWUlNlY3VyZS1HMy1haWEudmVyaXNpZ24uY29tL1NWUlNl Y3VyZUczLmNlcjANBgkqhkiG9w0BAQUFAAOCAQEAi8KYnB/UN928y97mdYXBxP0U 5g1lumhwixU5bazs6htVt7rThpOgmMtP/XQKVj/oWqHNnU0knXlD8DfVl7SwZ8Vk tlpCZ0LeuWtO9yiU/OvZh4CgpkQjIT8fCqzknMm6L7MyxYEy5PHhlP2dHzmoFYqy qO8KPpVAw7Xzm+FY/4MjyzVe183iqSJghgaa99qcEY+fZjuKguQOMewxRxTCHNLZ cMI6t8zYkD+SpLWy6QZtBuPeGWyw2omknP14c/P9jvyoPC8JAUSow4s8/wFwsdiZ M7gDXQeztG+u2Q4hzHXFCmpkE5J+Wnzfz12dmRuqVfYg/pDSHaZ0w1lSk7hCRg== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2cKaJj2eimzMNsIFQBZ 5Uwg7ASP15PbvJ54KRoY/2Joo37S2QCqE7zlt6k/KrfFEoRvLQAjN4fTADvOBAO6 FJCAafIhCTWmtNfo0606/VQwE4ac+i1WHt8YgJhImtFtDIL/cwfpsiVswjYMQDRk mCydbjmmHwRgGo8vgOuDp7yhyxYKHtJDTbIqjPjugkUcqeTwyXUW0/dSwD1aouXj obq4+g1fStTicq8GHS9QiSYzuNRWMXPvKWsBp9vx1Us/r0X1M4aQF7S0K4wMHKa4 FvfHS1W4WMPj8WCqPjJT8ZOigCCQ2Yk15WgInkJADzvtEvT3JAY+ttkiujQDcDin WQIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 143012428230785530994954169919756263749 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)10' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 Secure Server CA - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-01-11 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-01-28 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'North Carolina' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Charlotte' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Bank of America Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Network Services' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'mlx.ml.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25677187150592653533985203841952460873145151147131129825172332127551047947277360816053987015625120480793903934973012765722627270958113676123384345199803463714012769515211650641277282845891280410687736828832944937413416620914593465763083555571436068287466962938664491615853171591908067451464894104301706196925943988709129340100473542526264725859411811321510031676044425203620084958773202193442666653096919429564524864203719944518876956652710245012198595204169831261287361087552536149747780309339093788737522348765441652224117829052163489946420186602573534246373253964018144229364866147497213340032940179458653756630873 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (759 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mlx.ml.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-s.mlx.ml.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-p.mlx.ml.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baml.ml.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-s.baml.ml.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-p.baml.ml.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baml.ml.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.broadcort.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broadcort.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecitation.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecitation.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broadcortcustomerportal.ml.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.broadcortcustomerportal.ml.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repo.ml.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.repo.ml.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bofacapital.bankofamerica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bofacapital-prd-amrs.bankofamerica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bofacapital-prd-emea.bankofamerica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bofacapital-prd-apac.bankofamerica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bofacapital-pp.bankofamerica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bofacapital-pp-amrs.bankofamerica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bofacapital-pp-emea.bankofamerica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bofacapital-pp-apac.bankofamerica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mlabsreports.ml.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mlabsreports.ml.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staticpools.ml.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staticpools.ml.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bamlservice-uk.bankofamerica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bamlservice.bankofamerica.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mlx.ml.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/cps' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d445c165344c1827e1d20ab25f40163d8be79a5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.verisign.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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