r3.lexisnexis.com

- LexisNexis Risk Solutions FL Inc. -

Issued by Trustwave Organization Validation SHA256 CA, Level 1

About this certificate

This digital certificate with serial number 07:84:02:f4:a2:98:db:e4:23:8a:ad:89:38:34:7d:e6:76:9e:26 was issued on by Trustwave Holdings, Inc..

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

LexisNexis Risk Solutions FL Inc.

Organization: LexisNexis Risk Solutions FL Inc.
State / Province: Georgia
Locality: Alpharetta
Country: US

Trustwave Holdings, Inc.

Organization: Trustwave Holdings, Inc.
State / Province: Illinois
Locality: Chicago
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:84:02:f4:a2:98:db:e4:23:8a:ad:89:38:34:7d:e6:76:9e:26
Serial Number (int): 167605043873323966860041582239582937928867366
Serial Number lenght: 147 bits, 19 octets

SubjectKeyId: c2:39:69:12:ed:23:fe:1c:5b:92:eb:0a:a5:c5:f3:54:a8:69:84:17
AuthorityKeyId: ca:ce:1d:18:03:77:1e:1c:f3:7c:58:b2:9a:70:a8:08:80:16:f4:ae

Fingerprint (sha1): ef:1b:2c:39:f9:b1:26:1c:4a:f8:59:22:fb:6a:68:59:d5:ea:dd:40
Fingerprint (sha256): 14:6c:f7:ed:1e:c7:ae:59:dc:f6:b4:88:32:55:21:b7:59:13:a8:3f:d8:a0:31:c4:5a:d9:99:9a:89:fb:94:97

Issuing Certificate URL: http://certs.securetrust.com/issuers/OVCA2_L1.crt

Revocation information

OCSP Server: http://ocsp.securetrust.com/
CRL Distribution Point: http://crl.securetrust.com/OVCA2_L1.crl

Check the revocation status for certificate r3.lexisnexis.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for r3.lexisnexis.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

r3.lexisnexis.com
prod.r3.lexisnexis.com
dr.r3.lexisnexis.com
r3.lexis.com
prod.r3.lexis.com
dr.r3.lexis.com
r3.nexis.com
prod.r3.nexis.com
dr.r3.nexis.com

Other certificates including the domain name lexisnexis.com

(limited to 100 certificates)
dev-clientshare.lexisnexis.com
insurancesolutions.lexisnexis.com
mfa.lexisnexis.com
personalreports.lexisnexis.com
*.product-aws-prod.nl.lexis.com
collectionsolutions.lexisnexis.com
cdn.insurancesolutions.lexisnexis.com
isit.lexisnexis.com
healthcareportal.lexisnexisrisk.com
dmvpre.alirts.lexisnexis.com
staging.identitymanagement.lexisnexis.com
apply.insurancelink.lexisnexis.com
sni.cloudflaressl.com
batchwebgateway.lexisnexis.com
uat.progressive.lexisnexis.com
risk.lexisnexis.com
RISK-OUT02.rsi.lexisnexis.com
images.solutions.lexisnexis.com
bender.lexisnexis.com
ukcrm.plcert.lexisnexis.com
bis.lexisnexis.com
idms.lexisnexis.com
docshare.lexisnexis.com
updatesxg.bridgerinsight.lexisnexis.com
gma.lexisnexis.com
equifaxconsumers.lexisnexis.com
mfaweb.lexisnexis.com
orders.paymentsolutions.lexisnexis.com
eo.lexisnexis.com
*.business.aws.lexis.com
san-005.ceros.com
risk.lexisnexis.com
demo.avcccert.lexisnexis.com
cdnfp.accurint.com
sni.cloudflaressl.com
test.telematics.lexisnexis.com
*.lexisnexis.com
*.content.aws.lexis.com
midex.lexisnexis.com
jprc.lexisnexis.com
espsso-sign-prd.risk.lexisnexis.com
Bridgerstaging.lexisnexis.com
pm.lexisnexis.com
BridgerDirect.LexisNexis.com
starsdocshare.risk.lexisnexis.com
sf.insurview.lexisnexis.com
*.content.aws.lexis.com
dev.mobiledataprefill.lexisnexis.com
invoice.risk.lexisnexis.com
reporting-stg.identitymanagement.lexisnexis.com
link2.lexisnexis.com
professional.lexisnexis.com
*.midex.lexisnexis.com
recordsretrieval.lexisnexis.com
pas.campaignview.lexisnexis.com
solutions.risk.lexisnexis.com
optout.lexisnexis.com
global.lexisnexis.com
siris.lexisnexis.com
jiradev.rsi.lexisnexis.com
uw.insurancesolutions.lexisnexis.com
gma.lexisnexis.com
induservpn.risk.lexisnexis.com
wcoresearchtraining.risk.lexisnexis.com
WcoEditorialSearchQA.risk.lexisnexis.com
api-caseanalyser.lexisnexis.com
nac.lexisnexis.com
san-005.ceros.com
trial.mapview.lexisnexis.com
r3.lexisnexis.com
forms.consumer.risk.lexisnexis.com
erie.lexisnexis.com
cdnfp.accurint.com
bis.lexisnexis.com
apply.insurancelink.lexisnexis.com
track.risk.lexisnexis.com
*.lexisai.aws.lexis.com
*.issdev.lexisnexis.com
san-005.ceros.com
lexismarkettracker.lexisnexis.com
*.lexisnexis.com
gewpasp.iss.lexisnexis.com
altauth.courtlink.lexisnexis.com
healthcareportal.lexisnexis.com
paymentsolutions.lexisnexis.com
healthcareportaluat.lexisnexis.com
Bridgerstaging.lexisnexis.com
*.lexisnexis.com
sat.lexisnexis.com
social.lexisnexis.com
salesportal.lexisnexis.com
wcoaudit.risk.lexisnexis.com
riskauth.lexisnexis.com
risk.lexisnexis.com
transfer.lexisnexis.com
ride.lexisnexis.com
marketplace.lexisnexis.com
mapview.lexisnexis.com
*.b2b.lexisnexis.com
insurancesolutions.lexisnexis.com

Certificate

The complete raw certificate details for r3.lexisnexis.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvizEo+LrS9Pej0II8s/
m+MAqxqMJKfdIqeTaChgyp67ATOi7DCDyYwLv6ytVXUZsfEqCguz1JLWO97xC4hR
kDJM2rncyY6k6Cn3+rXHK/Ny9kls9FemBnNrbt/C8HQCalodHqhOwG7dkXpPe3eb
dwqfswrcboWHA4GDbtN84WP0/B3+2+62zs+fps+X8HcvUfxV1m9/QgN/qapWUmjX
6GORxJJ1Tw461o0WkZ9VPuqezQMT8otwzbAJ4px74GdyJYGKp3TAfrfGHdws/LqS
H1O0al/QSB1lEc7UjgdE67MF8WV4JYBHA3Qi7Qcm7IipLmzJQcOfK+qwe5+dMaRV
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 167605043873323966860041582239582937928867366
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trustwave Holdings, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trustwave Organization Validation SHA256 CA, Level 1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-10 11:33:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 11:32:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'r3.lexisnexis.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LexisNexis Risk Solutions FL Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Alpharetta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Georgia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24107916238761537050156085038467143363701028973292253056650289634765471059418399560381712913422691095151317419992491409697391489728606670577506119736486024125452030607093043284857438063155604442665233244518822090398980847287574519636612392029315279297016750298011729207079840108508209817962064515259477190567277434879143330864265522436949873695303026762330225861356347925201520253051918374421316255421563189487054108687935848168376885252697645608187018487122500098174891071154260942339324328373484237134672586305908620977387679906316275958731365256327629611571333011959016965790874427460281177770636649308627822466357
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c2396912ed23fe1c5b92eb0aa5c5f354a8698417
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName cace1d1803771e1cf37c58b29a70a8088016f4ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://certs.securetrust.com/CA'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (168 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r3.lexisnexis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.r3.lexisnexis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dr.r3.lexisnexis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r3.lexis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.r3.lexis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dr.r3.lexis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r3.nexis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.r3.nexis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dr.r3.nexis.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.securetrust.com/OVCA2_L1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.securetrust.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.securetrust.com/issuers/OVCA2_L1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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