usa0300vm509.na.xerox.net

- Xerox Corporation -

Issued by COMODO RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number da:a5:51:b9:0f:b2:b2:24:c0:88:c8:fd:e8:99:5b:55 was issued on by COMODO CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Xerox Corporation

Organization: Xerox Corporation
Organization unit: PSIP DCI
Organization unit: InstantSSL
Address: 45 Glover Avenue
Postal code: 06850
State / Province: Connecticut
Locality: Norwalk
Country: US

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): da:a5:51:b9:0f:b2:b2:24:c0:88:c8:fd:e8:99:5b:55
Serial Number (int): 290630089600016172978346142687752182613
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: b9:af:3d:5f:27:f3:f5:8b:63:d5:94:13:ca:60:1a:9d:8b:0b:7f:db
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24

Fingerprint (sha1): 41:e5:78:cf:10:74:93:91:53:37:91:81:1a:fa:2e:06:dd:4e:61:24
Fingerprint (sha256): 12:a2:93:d0:c8:6c:c5:8d:45:91:36:14:ad:29:9d:58:28:20:2d:be:3c:07:fd:59:4c:2c:a4:f0:4b:8f:ea:8f

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate usa0300vm509.na.xerox.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for usa0300vm509.na.xerox.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

usa0300vm509.na.xerox.net
www.usa0300vm509.na.xerox.net

Other certificates including the domain name xerox.net

(limited to 100 certificates)
usa0300vm1074.na.xerox.net
usa7061vm6179.na.xerox.net
gbrwgc07vm6013.eu.xerox.net
usa7061vm1826.na.xerox.net
usa0300aa452.na.xerox.net
gbrend01nadc021.na.xerox.net
usa0300av6067.na.xerox.net
can6851lx400.na.xerox.net
usa0300vm2023.na.xerox.net
usa0300nadc004.na.xerox.net
usaesm1vm6072.na.xerox.net
usa0300txe330.na.xerox.net
usa7061ns003.na.xerox.net
usa0300vm1852.na.xerox.net
usa7061as407.na.xerox.net
usa0300cw001.na.xerox.net
gbrtef01st068.eu.xerox.net
polwaw05as002.eu.xerox.net
gbrtef01st403.eu.xerox.net
server2k8.na.xerox.net
usa7061vm2046.na.xerox.net
usa0300as487.na.xerox.net
usa7061br5038.na.xerox.net
usa0105xw000.na.xerox.net
usa0300vm1298.na.xerox.net
usa0300av6053.na.xerox.net
dev-ags.directory.xerox.com
spfedgw.directory.xerox.com
nagios.corp.xerox.com
usa7061vm1651.na.xerox.net
usa7061txw334.na.xerox.net
usa7061vm6227.na.xerox.net
usa0300aa451.na.xerox.net
usa7061vm6170.na.xerox.net
gbrlon05vm142.eu.xerox.net
gbrlon05nadc022.na.xerox.net
usa0300vm1064.na.xerox.net
usa7061nadc006.na.xerox.net
clearquestrep2.na.xerox.net
usa0300ns003.eu.xerox.net
usa7061aa651.na.xerox.net
mysplo44xd5005.eu.xerox.net
usa0300vm1850.na.xerox.net
lynx.wvdc.xerox.net
usa0300cw001.na.xerox.net
usa0300vm2859.na.xerox.net
usa0300tle100.na.xerox.net
usa0300txe336.na.xerox.net
usa0300vm6685.na.xerox.net
rusapbcm.eu.xerox.net
usa0300vm1835.na.xerox.net
spfedgw.directory.xerox.com
usa7061vm1093.na.xerox.net
lynx.wvdc.xerox.net
usa0300as562.na.xerox.net
usa0300vm6434.na.xerox.net
gbrlon05eudc005.eu.xerox.net
usa7061vm392.na.xerox.net
ukriev01vm02.eu.xerox.net
usaesm1vm6055.na.xerox.net
gbrend01vm1419.eu.xerox.net
qa-userapp.directory.xerox.com
usa0300test81.na.xerox.net
usa7061vm1093.na.xerox.net
usa01068nadc021.na.xerox.net
vclpin.eu.xerox.net
usa0300nadc025.na.xerox.net
usa0300eudc005.eu.xerox.net
gbrlon05ucs01vm2-ext.epn.uksouthgw.xerox.com
xcm-u16-git.na.xerox.net
usa0300av6224.na.xerox.net
usa7061tqw302.na.xerox.net
usa0105xw000.na.xerox.net
usa0300va6474.na.xerox.net
gbrtef01dv035.eu.xerox.net
indmaa04xd5051.na.xerox.net
usa0300as842.na.xerox.net
usa0300vm7081.na.xerox.net
usa0300vm509.na.xerox.net
gbrlon05eudc007.eu.xerox.net
xerox.net
usa0300vm3945.na.xerox.net
lwsdp.corp.xerox.com
usa7063er02.na.xerox.net
gbrlon05xw000.eu.xerox.net
usa0300aa652.na.xerox.net
usa0300vm1299.na.xerox.net
*.na.xerox.net
turist01as07.eu.xerox.net
usaesm1vm6055.na.xerox.net
usa0300llv1281.na.xerox.net
ecmwh.corp.xerox.com
usa0300pdsvcs01.na.xerox.net
dev-ags.directory.xerox.com
ukriev01vm01.eu.xerox.net
userapp.directory.xerox.com
usa7061dc023.xerox.net
ukriev01vm02.eu.xerox.net
usa0300txe330.na.xerox.net
gbrlon05nadc022.na.xerox.net

Certificate

The complete raw certificate details for usa0300vm509.na.xerox.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxZCef7nXLM0zn2tqLUQ
qXDEwaFdANHsYRFLDk7qeNC/wElPGQwaeVpfMHwLRBrwVA+jhxtjQRgqWt7f5L5x
Qh5izK8KFwx+FAgVstUZio9aw0jrR3Njuyz/UbEp4F4qvrTUTcTRDVGd7dG0xfrb
jHlBkW0Foo1JEXkX9omVjsAaZsMYTH631In4+URfCnCF/1f2OrV7vBbUDEoRm+Dl
cYkpuaQvHMEFOcQOpwJFtNUrdWRfxDZadFvNEBrUDfWwBGaWatMn1tOUyiTZFGDi
G1WyOQlqwfnQQFULC8N0dMnogi1hlNtK2VDWeHr/uV7vFUrmRz79g60aWvbBeSwv
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290630089600016172978346142687752182613
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '06850'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Connecticut'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Norwalk'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '45 Glover Avenue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Xerox Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PSIP DCI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InstantSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'usa0300vm509.na.xerox.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22607633243282818332174589106673881814382868600226901428122842943102473125834996667991144104143572859155478384580025128676982300152976889546581267758715727251831612695655067122138669983002806929252192527862630089977812352718597310151845971534802520622153330201281740202447115927965627944948196952660591811594054276689187684862977482212114831163013772903461198697128180474235089192800243182429575135750894748263632471710873831547431239455378656967441889467531636583300137947085509082575578701500155059575262225119005159433009043022511897229676233008969847895939578742195196153590129677735870564687089283364732055334771
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b9af3d5f27f3f58b63d59413ca601a9d8b0b7fdb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usa0300vm509.na.xerox.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usa0300vm509.na.xerox.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016558f2c5b30000040300473045022022ddd691345e41c9d0124f5d41851ea6d01b9128b4fdbbde526efa59245d98a0022100ce2b8f82a0438ed636f73a92113d1236c008c6ee699ccac468949ae7fd023247007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016558f2c60a00000403004630440220016ed36616704339a7f4c0838546527a6b59c83b3e93e132b5244c7d57d8b8fd0220338e8638fd4664b45abfe968e80352e1d4e7d184a7cde64937ad254557e90bbf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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