bizlinkb10.tgms.gxs.com
- GXS -
Issued by VeriSign Class 3 Secure Server CA - G3
About this certificate
This digital certificate with serial number 1e:38:52:e3:82:ad:ae:42:bf:ea:74:4d:ad:d7:96:d9 was issued on by VeriSign, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
GXS
Organization:
GXS
Organization unit: Operations
Organization unit: Operations
State / Province:
Maryland
Locality: Gaithersburg
Country: US
Locality: Gaithersburg
Country: US
VeriSign, Inc.
Organization:
VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 1e:38:52:e3:82:ad:ae:42:bf:ea:74:4d:ad:d7:96:d9Serial Number (int): 40169289680448835075941628459244558041
Serial Number lenght: 125 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 0d:44:5c:16:53:44:c1:82:7e:1d:20:ab:25:f4:01:63:d8:be:79:a5
Fingerprint (sha1): fb:69:1e:2e:5f:4c:06:df:8a:7c:74:85:fa:77:83:10:62:d6:1c:cc
Fingerprint (sha256): 11:87:70:44:3c:1b:6d:50:a7:a6:70:d6:2e:a3:6a:cf:cd:51:d6:a7:b2:67:7c:a8:11:28:a4:f2:49:4f:88:20
Issuing Certificate URL: http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer
Revocation information
OCSP Server: http://ocsp.verisign.comCRL Distribution Point: http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl
Check the revocation status for certificate bizlinkb10.tgms.gxs.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for bizlinkb10.tgms.gxs.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bizlinkb10.tgms.gxs.com
Other certificates including the domain name gxs.com
(limited to 100 certificates)
betagrid-eu.gxs.com
peztrade.ms.gxs.com
bsmg-nesao.ms.gxs.com
web-modp.p12smgws.tgms.gxs.com
pbwipap.eu.gxs.com
test.b2b.rbs.gxs.com
stpws-uat.gxs.com
web.smg.ms1.eu.gxs.com
viewsslt.dcts.us.gxs.com
as2bizlinkp12.ics.eu.gxs.com
vpn-prep-ftf.cp.gxs.com
www.gxs.com
viewssl.dcts.us.gxs.com
smg.ms.gxs.com
ws-vpn-pe2-ftf.cp.gxs.com
bas2-jpn.ms.gxs.com
pauth-citi.ms.gxs.com
elitelibrary-pre.ypa.us.gxs.com
pci.betagrid.eu.gxs.com
pweb-nesam.ms.gxs.com
p12ftps.tgms.gxs.com
b2b2-ca.rbs.gxs.com
b2b.rbs.gxs.com
as2bizlinkp11.tgms.gxs.com
elitelibrary.ypa.us.gxs.com
naesb.peco.us.gxs.com
as2b.bmomft.gxs.com
www.gxs.com
*.gxs.com
*.gxs.com
b2b.accessbulkchannel.abnamro.gxs.com
account.rs.gxs.com
as2p.bmomft.gxs.com
p10csrrest.tgms.gxs.com
uweb-citi.ms.gxs.com
p11csrrest.tgms.gxs.com
bronet-jpctr.ms.gxs.com
viewssl-test.dcts.us.gxs.com
b11csrrest.tgms.gxs.com
b10csrrest-d.tgms.gxs.com
crm-adamdev.internal.gxs.com
cas2-citi.ms.gxs.com
gxs.com
ROSETTANET_PREPROD.ECSC.US.GXS.COM
b10ftps.tgms.gxs.com
pweb-nesrt.ms.gxs.com
elitelibrary-pre.ypa.us.gxs.com
pciportal.gxs.com
bizlinkp11.tgms.gxs.com
discover-wam-cert.dfs.eu.gxs.com
pweb-citi.ms.gxs.com
nestlemobile.gxs.com
*.rs.cp.gxs.com
beta.mercportals.db.eu.gxs.com
dcts.staging.glaxo.eu.gxs.com
wam.ypima.us.gxs.com
bdcts01.eu.gxs.com
vpn-prod-ftf.cp.gxs.com
ssl2.tradinggrid.gxs.com
viewssl-test.dcts.us.gxs.com
icnet.gxs.com
novartis.gxs.com
intel.ma.smg.tradinggrid.gxs.com
bizlinkb.nestlemft.gxs.com
bizlinkb10.tgms.gxs.com
bdcts01.eu.gxs.com
bweb.smg.ms.eu.gxs.com
beta-smg-ca.tradinggrid.gxs.com
cataloguebeta.gxs.com
staging.dafne.eu.gxs.com
staging.oilex.eu.gxs.com
impmq.gxs.com
orderapp.ms.gxs.com
bweb-jpctr.ms.gxs.com
betagrid.gxs.com
as2bizlinkp12.tgms.gxs.com
b12csrrest-d.tgms.gxs.com
b12oftp.tgms.gxs.com
b11csrrest-d.tgms.gxs.com
as2b.nestlemft.gxs.com
vendorportal.gxs.com
ebics.baml.gxs.com
lv.gxs.com
as2bizlinkp11.tgms.gxs.com
p14ronet.ms.gxs.com
as2.rbs.gxs.com
as2bizlinkp12.ics.eu.gxs.com
campbells.gxs.com
vendorportal.gxs.com
lvbeta.gxs.com
as2.rbs.gxs.com
*.gxs.com
viewssl.dcts.us.gxs.com
pbwipap.eu.gxs.com
www.arla.eu.gxs.com
test.ebics.rbs.gxs.com
bizlinkb12.ics.eu.gxs.com
as2sslauthtgbizp12.app.gxs.com
rdgw.opentext.com
nestlemobile.gxs.com
peztrade.ms.gxs.com
bsmg-nesao.ms.gxs.com
web-modp.p12smgws.tgms.gxs.com
pbwipap.eu.gxs.com
test.b2b.rbs.gxs.com
stpws-uat.gxs.com
web.smg.ms1.eu.gxs.com
viewsslt.dcts.us.gxs.com
as2bizlinkp12.ics.eu.gxs.com
vpn-prep-ftf.cp.gxs.com
www.gxs.com
viewssl.dcts.us.gxs.com
smg.ms.gxs.com
ws-vpn-pe2-ftf.cp.gxs.com
bas2-jpn.ms.gxs.com
pauth-citi.ms.gxs.com
elitelibrary-pre.ypa.us.gxs.com
pci.betagrid.eu.gxs.com
pweb-nesam.ms.gxs.com
p12ftps.tgms.gxs.com
b2b2-ca.rbs.gxs.com
b2b.rbs.gxs.com
as2bizlinkp11.tgms.gxs.com
elitelibrary.ypa.us.gxs.com
naesb.peco.us.gxs.com
as2b.bmomft.gxs.com
www.gxs.com
*.gxs.com
*.gxs.com
b2b.accessbulkchannel.abnamro.gxs.com
account.rs.gxs.com
as2p.bmomft.gxs.com
p10csrrest.tgms.gxs.com
uweb-citi.ms.gxs.com
p11csrrest.tgms.gxs.com
bronet-jpctr.ms.gxs.com
viewssl-test.dcts.us.gxs.com
b11csrrest.tgms.gxs.com
b10csrrest-d.tgms.gxs.com
crm-adamdev.internal.gxs.com
cas2-citi.ms.gxs.com
gxs.com
ROSETTANET_PREPROD.ECSC.US.GXS.COM
b10ftps.tgms.gxs.com
pweb-nesrt.ms.gxs.com
elitelibrary-pre.ypa.us.gxs.com
pciportal.gxs.com
bizlinkp11.tgms.gxs.com
discover-wam-cert.dfs.eu.gxs.com
pweb-citi.ms.gxs.com
nestlemobile.gxs.com
*.rs.cp.gxs.com
beta.mercportals.db.eu.gxs.com
dcts.staging.glaxo.eu.gxs.com
wam.ypima.us.gxs.com
bdcts01.eu.gxs.com
vpn-prod-ftf.cp.gxs.com
ssl2.tradinggrid.gxs.com
viewssl-test.dcts.us.gxs.com
icnet.gxs.com
novartis.gxs.com
intel.ma.smg.tradinggrid.gxs.com
bizlinkb.nestlemft.gxs.com
bizlinkb10.tgms.gxs.com
bdcts01.eu.gxs.com
bweb.smg.ms.eu.gxs.com
beta-smg-ca.tradinggrid.gxs.com
cataloguebeta.gxs.com
staging.dafne.eu.gxs.com
staging.oilex.eu.gxs.com
impmq.gxs.com
orderapp.ms.gxs.com
bweb-jpctr.ms.gxs.com
betagrid.gxs.com
as2bizlinkp12.tgms.gxs.com
b12csrrest-d.tgms.gxs.com
b12oftp.tgms.gxs.com
b11csrrest-d.tgms.gxs.com
as2b.nestlemft.gxs.com
vendorportal.gxs.com
ebics.baml.gxs.com
lv.gxs.com
as2bizlinkp11.tgms.gxs.com
p14ronet.ms.gxs.com
as2.rbs.gxs.com
as2bizlinkp12.ics.eu.gxs.com
campbells.gxs.com
vendorportal.gxs.com
lvbeta.gxs.com
as2.rbs.gxs.com
*.gxs.com
viewssl.dcts.us.gxs.com
pbwipap.eu.gxs.com
www.arla.eu.gxs.com
test.ebics.rbs.gxs.com
bizlinkb12.ics.eu.gxs.com
as2sslauthtgbizp12.app.gxs.com
rdgw.opentext.com
nestlemobile.gxs.com
Certificate
The complete raw certificate details for bizlinkb10.tgms.gxs.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgIQHjhS44KtrkK/6nRNrdeW2TANBgkqhkiG9w0BAQUFADCB tTELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQL ExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1c2Ug YXQgaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYSAoYykxMDEvMC0GA1UEAxMm VmVyaVNpZ24gQ2xhc3MgMyBTZWN1cmUgU2VydmVyIENBIC0gRzMwHhcNMTIwODIz MDAwMDAwWhcNMTUwODIzMjM1OTU5WjB8MQswCQYDVQQGEwJVUzERMA8GA1UECBMI TWFyeWxhbmQxFTATBgNVBAcUDEdhaXRoZXJzYnVyZzEMMAoGA1UEChQDR1hTMRMw EQYDVQQLFApPcGVyYXRpb25zMSAwHgYDVQQDFBdiaXpsaW5rYjEwLnRnbXMuZ3hz LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANMmQam8VM1tRA8o 7YVQgQa0ONPbsLlOJX4nOjArHHCQz5nIEz+fyn9dYl/Qcj0w25yDcgMM9U/5GMi/ kIVP0KqV0uuiChAZHtDPgTDWwIBfuA3GAxcpfhbfeXIuXw00kNCbHgxBXx+jxIZq onmzoebru35K++46Csapkjo7/uhaXY18d/PCNDgTdSNBxKyQk4xLIBMRc7iE4x57 gWH5CZzg+S6tP7Qb1THvIYTtG5nuXZZLIRX+W6G3hlv8ERA4QZ8sG7htkZ1zp6CJ /yvfrLjRBl0nKHKb43nYaDfux0x+ROyPO4ccxUwgz5n3BL8OA5S8pT0HiDghboXC CzbVIwkCAwEAAaOCAYcwggGDMCIGA1UdEQQbMBmCF2JpemxpbmtiMTAudGdtcy5n eHMuY29tMAkGA1UdEwQCMAAwDgYDVR0PAQH/BAQDAgWgMEUGA1UdHwQ+MDwwOqA4 oDaGNGh0dHA6Ly9TVlJTZWN1cmUtRzMtY3JsLnZlcmlzaWduLmNvbS9TVlJTZWN1 cmVHMy5jcmwwQwYDVR0gBDwwOjA4BgpghkgBhvhFAQc2MCowKAYIKwYBBQUHAgEW HGh0dHBzOi8vd3d3LnZlcmlzaWduLmNvbS9jcHMwHQYDVR0lBBYwFAYIKwYBBQUH AwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFA1EXBZTRMGCfh0gqyX0AWPYvnmlMHYG CCsGAQUFBwEBBGowaDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AudmVyaXNpZ24u Y29tMEAGCCsGAQUFBzAChjRodHRwOi8vU1ZSU2VjdXJlLUczLWFpYS52ZXJpc2ln bi5jb20vU1ZSU2VjdXJlRzMuY2VyMA0GCSqGSIb3DQEBBQUAA4IBAQAYqvCrCu7+ e1AXOMxylEMJYe66jL7ks48DpHJaK0yncLAZpxPdUhT3o4ArI7Ze5UhGPCE9na3P dDTHRRwb+Vm9qQFBPteXGPHTlF7HZcZziXT/tCDaSgctGIcUSzrRuzAuaQdT5LR3 1Ww/+c0n63e07qSW/KwvThpBBGRAUUfuOt5r3F4bNUw0vSLVs5G2WBlYwJzs8h+w dl2Ma9ONVetlkj8E821pt7zQTdnrw9ujl7B31BdiqLCNXHdsB2HxI9aRoGQ7Wcv1 ZNHObaLk721aceyaH29TQSjdxmKXOxawdMclL9pXxuT02QtbgnfpWXls6KWhW3rT tz1bSbF6rHIx -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yZBqbxUzW1EDyjthVCB BrQ409uwuU4lfic6MCsccJDPmcgTP5/Kf11iX9ByPTDbnINyAwz1T/kYyL+QhU/Q qpXS66IKEBke0M+BMNbAgF+4DcYDFyl+Ft95ci5fDTSQ0JseDEFfH6PEhmqiebOh 5uu7fkr77joKxqmSOjv+6FpdjXx388I0OBN1I0HErJCTjEsgExFzuITjHnuBYfkJ nOD5Lq0/tBvVMe8hhO0bme5dlkshFf5bobeGW/wREDhBnywbuG2RnXOnoIn/K9+s uNEGXScocpvjedhoN+7HTH5E7I87hxzFTCDPmfcEvw4DlLylPQeIOCFuhcILNtUj CQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 40169289680448835075941628459244558041 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)10' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 Secure Server CA - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-08-23 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-08-23 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maryland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Gaithersburg' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'GXS' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Operations' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'bizlinkb10.tgms.gxs.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26655147329227384815111349233651373081005783250422472087115360745170623121536666953976264817187117132178940067156998719009204329735620189533089936852805036305813178457304325320502264106401556059332935819278390774353366791214902899793266965583612731615610178059207490316337322235391300752545757803246187760543407218198159107353112683433117396921962862662730092953247008294110776574710995380699434354671888657965057855799605387786270029326068814959430562547840648685530576501905764503551413777670206350463260950267634133388285370844525873139114195799986919538806797358533373477982618955031459625778387070380258169791241 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bizlinkb10.tgms.gxs.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/cps' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d445c165344c1827e1d20ab25f40163d8be79a5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.verisign.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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