atped34.tdwaterhouse.ca

- The Toronto Dominion Bank -

Issued by VeriSign Class 3 Secure Server CA - G2

About this certificate

This digital certificate with serial number 1f:7d:50:3f:d2:59:04:ac:61:ed:7a:8e:a2:a7:97:a3 was issued on by VeriSign, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • In a validity period ending on or before 31 Dec 2013, subscriber certificates using RSA public key algorithm MUST use a 1024 bit modulus (BRs: 6.1.5)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

The Toronto Dominion Bank

Organization: The Toronto Dominion Bank
Organization unit: eBSS
State / Province: Ontario
Locality: Toronto
Country: CA

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)09
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1f:7d:50:3f:d2:59:04:ac:61:ed:7a:8e:a2:a7:97:a3
Serial Number (int): 41856732625891244575662024612783822755
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: a5:ef:0b:11:ce:c0:41:03:a3:4a:65:90:48:b2:1c:e0:57:2d:7d:47

Fingerprint (sha1): d7:c1:45:49:68:b6:ca:cf:17:67:ec:a7:65:42:3c:52:11:3e:2b:cf
Fingerprint (sha256): 0f:76:9d:2c:69:9c:db:54:d5:65:d9:4e:92:ef:85:6c:d4:85:79:dd:21:1b:79:91:76:32:b6:d6:10:3c:3d:e8

Issuing Certificate URL: http://SVRSecure-G2-aia.verisign.com/SVRSecureG2.cer

Revocation information

OCSP Server: http://ocsp.verisign.com
CRL Distribution Point: http://SVRSecure-G2-crl.verisign.com/SVRSecureG2.crl

Check the revocation status for certificate atped34.tdwaterhouse.ca

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for atped34.tdwaterhouse.ca

Public Key Algorithm

RSA

Key Size

1023

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name tdwaterhouse.ca

(limited to 100 certificates)
fibondoneextagent.prod37.tdwaterhouse.ca
wcm.sys1.td.com
fibondoneintagent2.dev.tdwaterhouse.ca
wcm1.pat.td.com
webbroker3-03.pat.tdwaterhouse.ca
courtierwebtest1.pat.tdwaterhouse.ca
wcmstg1.pat.td.com
financialplanners.tdwaterhouse.ca
courtierweb80.sys.tdwaterhouse.ca
www.soc.tdwaterhouse.ca
?.?.tdwaterhouse.ca
globaltrading.tdwaterhouse.ca
lobdata.tdwaterhouse.ca
wcmstg1.pat.td.com
courtierweb61.sys.tdwaterhouse.ca
wcmstg2.pat.td.com
technicals.tdwaterhouse.ca
fibondoneintagent1.dev.tdwaterhouse.ca
research.tdwaterhouse.ca
wcm.td.com
mobile.tdinsurance.com
atp1.test.tdwaterhouse.ca
www.test.tdwaterhouse.ca
trade.tdwaterhouse.ca
webbroker.pilot.tdwaterhouse.ca
dcx.tdbank.com
wcm.dev1.td.com
testresearch.tdwaterhouse.ca
webbrokerpat.tdwaterhouse.ca
ispat.tdwaterhouse.ca
streaming.tdwaterhouse.ca
courtierwebtest3.pat.tdwaterhouse.ca
isreports.tdwaterhouse.ca
www.tdwis.tdwaterhouse.ca
wcm.td.com
webbroker01.cpo.tdwaterhouse.ca
push.trade.tdwaterhouse.ca
webbroker19.soc.tdwaterhouse.ca
ads.tdwaterhouse.ca
webbroker70.sys.tdwaterhouse.ca
courtierweb61.dev.tdwaterhouse.ca
tisales.h62cor.tdwaterhouse.ca
financialplanners.td.com
?.tdbank.com
testresearch.tdwaterhouse.ca
financialplanners.tdwaterhouse.ca
webbroker15.soc.tdwaterhouse.ca
www.tdwaterhouse.ca
wmservices7.dev.tdwaterhouse.ca
www.test3.tdwaterhouse.ca
courtierweb.pilot.tdwaterhouse.ca
webbroker.tdwaterhouse.ca
wealthmaintenance1.dev.tdwaterhouse.ca
secure.soc.tdwaterhouse.ca
wmservices10.sys.tdwaterhouse.ca
fibondoneintagent.prod34.tdwaterhouse.ca
atped34.tdwaterhouse.ca
webbroker60.dev.tdwaterhouse.ca
marketsandresearch.td.com
www.tdwis.tdwaterhouse.ca
financialplanners.tdwaterhouse.ca
www.tdwaterhouse.ca
ATSTREAMER.TDWATERHOUSE.CA
webbroker7.sys.tdwaterhouse.ca
www.tdwaterhouse.ca
push.trade-beta.tdwaterhouse.ca
webbroker1.pat.tdwaterhouse.ca
wcmproxysoc.tdwaterhouse.ca
webbroker03.soc.tdwaterhouse.ca
w3cpo.tdwaterhouse.ca
atweb.tdwaterhouse.ca
wealthservices.SOC.tdwaterhouse.ca
research.tdwaterhouse.ca
courtierweb60.dev.tdwaterhouse.ca
secure.w10.dev.tdwaterhouse.ca
webbroker3-04.pat.tdwaterhouse.ca
www.test3.tdwaterhouse.ca
fibondoneselfserve.tdwaterhouse.ca
www.stgsoc.tdwaterhouse.ca
webbroker6.sys.tdwaterhouse.ca
fibondoneintagent.prod33.tdwaterhouse.ca
webbroker3-20.pat.tdwaterhouse.ca
secure.pat.tdwaterhouse.ca
wbhelpdesk1.sys.tdwaterhouse.ca
webbroker.pilot.tdwaterhouse.ca
webbrokertest3.pat.tdwaterhouse.ca
ads.tdwaterhouse.ca
w3.webbroker.helpdesk.tdwaterhouse.ca
eappsoc.tdwaterhouse.ca
wmservices5.dev.tdwaterhouse.ca
www.stgcpo.tdwaterhouse.ca
trade-beta.tdwaterhouse.ca
fibondonedovs1.dev.tdwaterhouse.ca
wcmproxysoc.tdwaterhouse.ca
webbroker2-17.pat.tdwaterhouse.ca
webbroker20.pat.tdwaterhouse.ca
www.test3.tdwaterhouse.ca
fibondoneextagent.pat27.tdwaterhouse.ca
w3.webbroker.pat.helpdesk.tdwaterhouse.ca
courtierweb.tdwaterhouse.ca

Certificate

The complete raw certificate details for atped34.tdwaterhouse.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIGeMA0GCSqGSIb3DQEBAQUAA4GMADCBiAKBgE1b3+BBL0ErwYW+ij76cIbYqKsZ
OgtFyx85HJ1QhvER8RvRwYCDTfqcBhEzL+xjeRtVN2+x+1+m3arMNaie3WeSNADS
UHda8oA3mzAo/P8Y/GdtZVwFdybd8XN9IwdSktdnkvJ/LI2u4P+ElZhYLJnI2wgB
Ti2gybcJdL7EZf3nAgMBAAE=
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 41856732625891244575662024612783822755
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)09'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 Secure Server CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2009-09-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2010-11-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Toronto'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'The Toronto Dominion Bank'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'eBSS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'atped34.tdwaterhouse.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1112 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 54323256317712677260129897647475783009573308874646360972342435517633575786499455791474046120680306741734945404121202797221664135386308133627231766268982687670771119177028618867434025534937830723231085932768797913344693535863150859970558581055458791267208330669038360014613833710048931125469011405079010737639
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G2-crl.verisign.com/SVRSecureG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.23.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5ef0b11cec04103a34a659048b21ce0572d7d47
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G2-aia.verisign.com/SVRSecureG2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/gif'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															4b6bb92896060cbbd052389b29ac4b078b210518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://logo.verisign.com/vslogo1.gif'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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