webmail.xerox.org

- XeroxCorp -

Issued by USERTrust Legacy Secure Server CA

About this certificate

This digital certificate with serial number 66:3a:35:d5:82:fa:9a:c3:b3:1e:3e:53:80:09:7a:85 was issued on by The USERTRUST Network.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

XeroxCorp

Organization: XeroxCorp
Organization unit: Corporate Messaging
Organization unit: Issued through Xerox Corporation E-PKI Manager
Organization unit: Unified Communications
Address: 2828 Haskel Ave
Postal code: 75204
State / Province: Texas
Locality: Dallas
Country: US

The USERTRUST Network

Organization: The USERTRUST Network
State / Province: UT
Locality: Salt Lake City
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 66:3a:35:d5:82:fa:9a:c3:b3:1e:3e:53:80:09:7a:85
Serial Number (int): 135883500671700061701618260201934781061
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 9a:53:3c:1e:69:74:28:f9:fd:22:a9:de:7a:39:a1:74:99:ac:e9:df
AuthorityKeyId: af:a4:40:af:9f:16:fe:ab:31:fd:fb:d5:97:8b:f5:91:a3:24:86:16

Fingerprint (sha1): 97:c9:cd:d6:0d:0f:59:66:5d:71:be:18:69:62:fe:4d:f7:80:e5:8c
Fingerprint (sha256): 13:27:8d:9a:cb:ca:e0:54:a2:9a:6e:9d:68:09:d7:2d:f6:0f:26:27:3e:b6:d8:d9:ed:79:07:44:88:92:dd:88

Issuing Certificate URL: http://crt.usertrust.com/USERTrustLegacySecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/USERTrustLegacySecureServerCA.crl

Check the revocation status for certificate webmail.xerox.org

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.xerox.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.xerox.org
autodiscover.xerox.org
ewsmail.xerox.org
ewsmaildr.xerox.org
imap-server.xerox.org
imap-serverdr.xerox.org
legacyowa.xerox.org
pop-server.mail.xerox.org
pop-serverdr.mail.xerox.org
remotemail.xerox.org
remotemaildr.xerox.org
syncmail.xerox.org
syncmaildr.xerox.org
webmaildr.xerox.org
www.webmail.xerox.org
www.webmaildr.xerox.org

Other certificates including the domain name xerox.org

(limited to 100 certificates)
usa7061rf010.na.xerox.org
win2016-ds7.na.xerox.org
xde0200eudc002.eu.xerox.org
xde37061nadc022.na.xde3.xerox.org
xde0200vs030.na.xerox.org
xde7061eudc021.eu.xerox.org
xde30200dc001.xde3.xerox.org
webmail.xerox.org
usa7061rf011.na.xerox.org
xde0200nadc001.na.xerox.org
Xde3owa.na.xde3.xerox.org
xde0300ns001.na.xerox.org
win2012r2-es-hv.na.xerox.org
sdi-scom2012.sdi.na.xde3.xerox.org
sts.corp.xerox.org
sdi-vclab1-vcs2.sdi.na.xde3.xerox.org
eastgw.mail.xerox.org
xde7061vm1831.na.xerox.org
xde0300vs033.na.xerox.org
usa1042vm000663.na.xerox.org
xde0300nadc022.na.xerox.org
vcsa-sys-mgmt-01.na.xerox.org
chn-xerox-dns1.gdc.hcl.vend.xerox.org
xde0300nadc002.na.xerox.org
xcm-axigen.na.xerox.org
sdi-ca.sdi.na.xde3.xerox.org
webmail.xerox.org
vcsa-sys-mgmt-01.na.xerox.org
sdi-vclab1-vcs2.sdi.na.xde3.xerox.org
xde0200ns001.na.xerox.org
cennisvmx3.sdi.na.xde3.xerox.org
sts.corp.xerox.org
xde30300dc003.xde3.xerox.org
xde7061dc023.xerox.org
westgw.mail.xerox.org
xde7061dc023.xerox.org
USA7109XD001.na.xerox.net
xde3sdidc002.sdi.na.xde3.xerox.org
xde30300dc023.xde3.xerox.org
xde0200rf005.na.xerox.org
xde3sdidc001.sdi.na.xde3.xerox.org
jean.sdi.na.xde3.xerox.org
xcm-w12r2-tar.na.xerox.org
xde30300nadc003.na.xde3.xerox.org
xde7061dc022.xerox.org
win2016-jpn.na.xerox.org
xde0300dc022.xerox.org
chn-xerox-dhcp4.gdc.hcl.vend.xerox.org
sdi-tfsapp.sdi.na.xde3.xerox.org
xerox.org
xcm-win7-rhyde.na.xerox.org
sdi-vclab1-vss1.sdi.na.xde3.xerox.org
xcm-w16-dev.na.xerox.org
xcm-win7-rhyde.na.xerox.org
xde0200namfa002.na.xerox.org
xde30200sm001.na.xde3.xerox.org
xde3sdidc003.sdi.na.xde3.xerox.org
xde7061vm2070.na.xerox.org
win2016eng.na.xerox.org
sdi-tfsapp.sdi.na.xde3.xerox.org
chn-xerox-dhcp4.gdc.hcl.vend.xerox.org
xde3sdidc003.sdi.na.xde3.xerox.org
xde30200nadc001.na.xde3.xerox.org
xde0300ns002.na.xerox.org
vcsa-sys-mgmt-01.na.xerox.org
xde0300dc002.xerox.org
xcm-w12r2-tar.na.xerox.org
xde30300dc002.xde3.xerox.org
xde0200vs031.na.xerox.org
xde30300dc022.xde3.xerox.org
jetboy.na.xerox.org
xde0300dc022.xerox.org
xde1069nadc021.na.xerox.org
xmen.sdi.na.xde3.xerox.org
sdi-ca.sdi.na.xde3.xerox.org
webmail.xerox.org
sdi-vclab1-vcs2.sdi.na.xde3.xerox.org
xwstest1.sdi.na.xde3.xerox.org
xde0200rf006.na.xerox.org
mtgreleaseservices.sdi.na.xde3.xerox.org
xde0200rf006.na.xerox.org
win10-pro-2013.na.xerox.org
xde3sdidc001.sdi.na.xde3.xerox.org
xde0200dc001.xerox.org
xde7061ns002.na.xerox.org
sdi-vclab1-vcs1.sdi.na.xde3.xerox.org
xde7061vm0110.na.xerox.org
xde37061nadc021.na.xde3.xerox.org
usa1042vm000663.na.xerox.org
sdi-vclab1-vcs1.sdi.na.xde3.xerox.org
mail.xerox.org
xde0300vm1817.na.xerox.org
xde0200as002.na.xerox.org
xdebetanadc001.na.xdebeta.xerox.org
xde0200nadc002.na.xerox.org
win2012r2-eng.na.xerox.org
xde0300dc002.xerox.org
*.na.xde3.xerox.org
sdi-es3.sdi.na.xde3.xerox.org
xde0300ns002.na.xerox.org

Certificate

The complete raw certificate details for webmail.xerox.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxavMvx/R1COnAFAgQe5
vxpznMa/y8Qc9T7MVq5yoXTAhEGsc8jP8+IZQIk5PQxPlAAoT0qV0/ecgJ9S/iO7
zz+bgimirZNsU5lTHuOsJ3EBN2OwMZVpVXSBTYipx9AOUfCPj97AhojIEzOwv2uz
GDFjcLeb6GnoWcPvuje6xoUAW9Q+LmzPuZVvn15IoYxH7tkgJFA7ScAfXFiqEe1w
cRD7av2Q2oLJMdYQ0Z5D09+NcLnVAcSKI44KDebjy/WQTGkGzOJt+E7wMOXDDNln
qY+mOBP8Xjn5GSYI15TwFOc6Z0TSPR7L8EhPINyYNn9f4vNi1IjyqSxD2zWC+vmc
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 135883500671700061701618260201934781061
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salt Lake City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The USERTRUST Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'USERTrust Legacy Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-06-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-06-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '75204'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dallas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2828 Haskel Ave'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'XeroxCorp'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corporate Messaging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Issued through Xerox Corporation E-PKI Manager'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unified Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.xerox.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26142515208589795495959805349581532941787275168901055409990736377939895545151354020777202621680611818000142530071048394346774497152015049472437389063912641437837157618998203539420750631088917833384631132850750917184892119857332608845070083092007861376356168575691509502822893898907350952746900053332944004090231411045814568560268110661211151030173063577450401179035842010033489361523011772379848247025925866771516614549054168940210314355630782224689545432100835778360398044166405842111904730953404948135753751009907883886189481375451307055912175745860813556801816950974912272638772966418544735136911864792203163966547
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName afa440af9f16feab31fdfbd5978bf591a3248616
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9a533c1e697428f9fd22a9de7a39a17499ace9df
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/USERTrustLegacySecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/USERTrustLegacySecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.xerox.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.xerox.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ewsmail.xerox.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ewsmaildr.xerox.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imap-server.xerox.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imap-serverdr.xerox.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacyowa.xerox.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pop-server.mail.xerox.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pop-serverdr.mail.xerox.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remotemail.xerox.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remotemaildr.xerox.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syncmail.xerox.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syncmaildr.xerox.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmaildr.xerox.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webmail.xerox.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webmaildr.xerox.org'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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