acs.th.nissan.biz

- NISSAN MOTOR (THAILAND) CO LTD -

Issued by VeriSign Class 3 International Server CA - G3

About this certificate

This digital certificate with serial number 45:52:9d:38:33:ae:ea:27:19:3f:bd:67:6b:2f:82:7d was issued on by VeriSign, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

NISSAN MOTOR (THAILAND) CO LTD

Organization: NISSAN MOTOR (THAILAND) CO LTD
Organization unit: SCM Production Control Division
Organization unit: Terms of use at www.verisign.com.sg/rpa (c) 04
Organization unit: Authenticated by VeriSign Australia Pty Ltd
Organization unit: Member, VeriSign Trust Network
State / Province: Samut Prakan
Locality: Samut Prakan
Country: TH

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 45:52:9d:38:33:ae:ea:27:19:3f:bd:67:6b:2f:82:7d
Serial Number (int): 92145688842639119555462588194626699901
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d7:9b:7c:d8:22:a0:15:f7:dd:ad:5f:ce:29:9b:58:c3:bc:46:00:b5

Fingerprint (sha1): f7:23:9f:a9:7e:2f:c6:94:59:68:c2:06:fc:1e:6e:89:9d:2e:80:21
Fingerprint (sha256): 13:b3:3e:07:4b:7a:ca:ed:00:2c:31:62:ae:a0:b8:68:9f:e3:ae:ab:21:51:e7:00:75:76:b5:80:02:9e:17:47

Issuing Certificate URL: http://SVRIntl-G3-aia.verisign.com/SVRIntlG3.cer

Revocation information

OCSP Server: http://ocsp.verisign.com
CRL Distribution Point: http://SVRIntl-G3-crl.verisign.com/SVRIntlG3.crl

Check the revocation status for certificate acs.th.nissan.biz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for acs.th.nissan.biz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication
Netscape Server-Gated Cryptography

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acs.th.nissan.biz

Other certificates including the domain name nissan.biz

(limited to 100 certificates)
JP.NISSAN.BIZ
nlife.nna.na.nissan.biz
grcdev.na.nissan.biz
eroom4.w1.nissan.biz
*.qa.s.jp.nissan.biz
clm.na.nissan.biz
nna-portal.acp.na.nissan.biz
SJ022040.jp.nissan.biz
nna-uc-edgpool1.nmcorp.nissan.biz
atlassian.na.nissan.biz
gidp.eu.nissan.biz
acs.th.nissan.biz
scmpops.sp.stage.na.nissan.biz
eu.nissan.biz
qa.eu.nissan.biz
acs2.th.nissan.biz
JP-NML-SJ022736.jp.nissan.biz
clarity.qa.na.nissan.biz
wm.jp.nissan.biz
qa.jp.nissan.biz
JP-NML-SJ016654.commproxy.jp.nissan.biz
sj014493.jp.nissan.biz
dev.eu.nissan.biz
eu.nissan.biz
w1.nissan.biz
GDAUTH.JP.NISSAN.BIZ
jp.nissan.biz
gdauth.qa.jp.nissan.biz
scmmqcentral.dev.na.nissan.biz
webmail2.jp.nissan.biz
S4HDA4.na.nissan.biz
eroom4.w1.nissan.biz
eroom1.stage.w1.nissan.biz
qa.jp.nissan.biz
b2bws3.na.nissan.biz
search-collab.share.jp.nissan.biz
th.nissan.biz
jatco.nmcorp.nissan.biz
login.qa.eu.nissan.biz
dlr.eu.nissan.biz
Sipaccess.jp.nissan.biz
bo.stg.na.nissan.biz
data.qa.jp.nissan.biz
Test.eu.nissan.biz
nero2.eu.nissan.biz
tfeportal.eu.nissan.biz
bitbucket.dev.na.nissan.biz
www.portal.uat.azul.ap.na.nissan.biz
*.dealer.jp.nissan.biz
QA.JP.NISSAN.BIZ
gd.intra.jp.nissan.biz
th.nissan.biz
auth.qa.jp.nissan.biz
smart-ts.na.nissan.biz
dlrsys.na.nissan.biz
dev.vims.na.nissan.biz
tableau.stg.nnanet.com
txirv-qa-fin01.nmcorp.nissan.biz
sj014493.jp.nissan.biz
JP-NML-SJ016250.JPQA.NMCorp.Nissan.Biz
usesncvw644.nmcorp.nissan.biz
qa.dealer.eipp.na.nissan.biz
th.nissan.biz
soa.eu.nissan.biz
QA.JP.NISSAN.BIZ
nlife.v9.stage.na.nissan.biz
politemail.na.nissan.biz
lgs.na.nissan.biz
dlrsys.dev.na.nissan.biz
acs.th.nissan.biz
ishare.na.nissan.biz
intra.qa.jp.nissan.biz
dm.spin.na.nissan.biz
*.dealer.qa.jp.nissan.biz
th.nissan.biz
GDAUTH.JP.NISSAN.BIZ
JP-NML-SJ013903.ocs.jp.nissan.biz
plugins.stage.w1.nissan.biz
JP.NISSAN.BIZ
search-collab.share.qa.jp.nissan.biz
nna-uc-fepool1.nmcorp.nissan.biz
w1.nissan.biz
jp-nml-sj016255.nmcorp.nissan.biz
GD.JP.NISSAN.BIZ
www.portal.uat.azul.ap.na.nissan.biz
sj014493.jp.nissan.biz
auth365.jp.nissan.biz
auth.jp.nissan.biz
SJ015030.jp.nissan.biz
qa.jp.nissan.biz
dm.spin.na.nissan.biz
wm.jp.nissan.biz
old1.nnanet.com
p1.jp.nissan.biz
JP-NML-SJ013904.webcomm.jp.nissan.biz
eroom4.w1.nissan.biz
saml.jp.nissan.biz
hppc.dev.na.nissan.biz
eu.nissan.biz
entutilws.dev.na.nissan.biz

Certificate

The complete raw certificate details for acs.th.nissan.biz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunlwcx03lLTKS9q5pXHQ
FCw3nQy3uOFb5cFD+EGBlRTAfB+bDxkB/ZbAMr+3sQ9OvyvjM1+MFRU8Hl8K27Kh
tAT8sXyBJ15Ac2DcLQLdvDk8aqKTR9FfUhqi0/M0eDpQqh+XQBTtbBNpeCIGZEXp
4r92G9ldRgxeltJzxQz+HiDJEVpOn6NJq0BwD7YiALqmMKb7C7pam6Ov73Xc5cDq
+682AG1pmH7hxyTzH+GHgGq5MTzLN1Ew+l8SxMABMS5FU6Uf/SqrN/K6/7MhlEM6
JeKB388Lr4qmcDDLzD26qGtmo+li2AY42q86bTsOHhwgXq3RiWm7KnbeUc3qXtU2
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 92145688842639119555462588194626699901
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)10'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 International Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Samut Prakan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Samut Prakan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'NISSAN MOTOR (THAILAND) CO LTD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'SCM Production Control Division'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at www.verisign.com.sg/rpa (c) 04'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Authenticated by VeriSign Australia Pty Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Member, VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'acs.th.nissan.biz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23540208652972756829903103988295322265205739467043820250468552514488187232603586478122974657079879342345620469985059606481002918220247535123630951476269392554649992214722557605800271478345210886273438735157822662405095340504665977958263930558712869569098781861739980678247252420398589353103341625407268153398713013356498364988050445107822471725701506321237210568027845926262926611365376040325002176983076614438956204196614508464143075783607088351940008853092098833788745434334614111875518560987623614594342642978198657295309499876800768812780211892263529891767674810054685820913409773291460659885632757073865633773157
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acs.th.nissan.biz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRIntl-G3-crl.verisign.com/SVRIntlG3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.4.1 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d79b7cd822a015f7ddad5fce299b58c3bc4600b5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRIntl-G3-aia.verisign.com/SVRIntlG3.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0040428d1b6b8e02ba3d5e3d4cb918c78cdbf89255235829f45c7e014a06ea121a233941e1a5a35d92759c121f03ff679f92ebbe7b5542c82602cb92089a40ee4db04d383ca5d8dfb72a3a8e4b6e065f5e62e1f8ceca94eb526a10cce8df74d359c30b4c73264df6de9cde42d71e8d65474464c1bf58395ac3bd9b59d6857797003e1670ee8cb35f28e99f49f2b0cdad526bfc3101edf2b90afb5202b28452e0205495ebb1775489d2694a8889c63a6c555725d3334de9955ada6ec13c2321a461718b26e7382c660db67b12b77ace9f95f690814cba5e5fe689c94a864d4ba37f7516e4220a69bf30f3d5df156ef5931a78b39e4e36ca1e68eec469ff422f1a9a