www02710.ntrs.com

- Northern Trust Corporation -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 05:ac:d9:8d:8a:30:d7:c5:21:ed:fc:93:35:1e:92:ed was issued on by DigiCert Inc.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Northern Trust Corporation

Organization: Northern Trust Corporation
State / Province: Illinois
Locality: Chicago
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:ac:d9:8d:8a:30:d7:c5:21:ed:fc:93:35:1e:92:ed
Serial Number (int): 7543627535415455380314286974075572973
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: f7:99:42:47:a3:85:81:7d:b2:da:98:7d:23:be:f1:0f:4c:b2:9f:66
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): a5:db:08:2f:97:6e:3a:1c:90:7b:b9:13:dc:5c:66:a3:92:c2:ea:3a
Fingerprint (sha256): 16:6a:bc:bc:f9:8f:90:ec:2a:cf:28:99:e1:72:e5:c2:b3:3d:77:aa:98:03:14:6a:8b:5c:07:41:3d:3e:e3:13

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www02710.ntrs.com

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www02710.ntrs.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wwwwca11.ntrs.com
wwwt891.ntrs.com
wwwsecuridesi83a.ntrs.com
wwwptlpsissl.ntrs.com
wwwptlpsi2ssl.ntrs.com
wwwptl14-r5.wpc.ntrs.com
wwwptl14-r5.ntrs.com
wwwptl14-r5.npc.ntrs.com
wwwptl14-exl.ntrs.com
wwwptl12-r5.ntrs.com
wwwptl07.ntrs.com
wwwptl04.ntrs.com
wwwptl02.ntrs.com
wwwptl00.ntrs.com
wwwp14.ntrs.com
wwwesi83a.ntrs.com
wwwdcc2.ntrs.com
wwwdcc.ntrs.com
wwwc080.ntrs.com
wwwc078.ntrs.com
wwwc.ntrs.com
www3383.ntrs.com
www22511.ntrs.com
www21710.ntrs.com
www20310.ntrs.com
www20010.ntrs.com
www15010.ntrs.com
www14610.ntrs.com
www07010.ntrs.com
www06210.ntrs.com
www05510.ntrs.com
www04010.ntrs.com
www03910.ntrs.com
www03410.ntrs.com
www03310.ntrs.com
www02710.ntrs.com
www01510.ntrs.com
www.riskandperformance.ntrs.com
www.riskandperformance.northerntrust.com
www.retirement.ntrs.com
www.retirement.northerntrust.com
www.reliabilityinvestment.ntrs.com
www.ntrs.com
www.northerntrustopen.com
www.northerntrustfunds.com
www.northerntrustbank.com
www.northerntrust.jp
www.northernmutualfunds.com
www.northern-funds.com
www.fiftysouthcapital.com
www.business.northerntrust.com
www.benefitnow.ntrs.com
www.beladv.com
www.aviatelive.com
www.50southcapital.com
web-xp2k-pws.ntrs.com
web-xp2f-pws.ntrs.com
web-xp2e-pws.ntrs.com
web-xp2d-pws.ntrs.com
web-xp2c-pws.ntrs.com
web-xp2b-pws.wpc.ntrs.com
web-xp2b-pws.ntrs.com
web-xp2b-pws.npc.ntrs.com
web-xp2b-pws.northerntrust.com
web-xp2a-pws.ntrs.com
wealthadvisor.northerntrust.com
wealth.ntrs.com
utc.ntrs.com
us.aviatelive.com
rxpext.ntrs.com
riskandperformance.ntrs.com
riskandperformance.northerntrust.com
retirement.ntrs.com
retirement.northerntrust.com
omniumaccess.omnium.com
northerntrust.com
northerninstitutionalfunds.ntrs.com
northernfunds.ntrs.com
m.privatepassport.ntrs.com
m.northerntrustopen.com
login.ntrs.com
live.ntrs.com
live.northerntrust.com
investorportal.ntrs.com
investor.omnium.com
institutional.northernfunds.com
individual.northernfunds.com
europe.aviatelive.com
business.northerntrust.com
asia.aviatelive.com
ark03.omnium.com
advisors.northernfunds.com
125.ntrs.com
125.northerntrust.com

Other certificates including the domain name ntrs.com

(limited to 100 certificates)
up12149.ntrs.com
wwwdam.ntrs.com
www4083.ntrs.com
www9783.ntrs.com
www15010.ntrs.com
wwwsecuridesi83a.ntrs.com
int02011.ntrs.com
npc1dnhfsn02.ent.ad.ntrs.com
int01011.ntrs.com
www04510.ntrs.com
www3683.ntrs.com
pandora-npc-prod1.ntrs.com
www0483.ntrs.com
inttsp.ntrs.com
wwwsry.ntrs.com
nia-uat.ntrs.com
ut61082.lux.ntrs.com
sdcwmap03.ent.ad.ntrs.com
ipl-aj83s-nmr.ntrs.com
www.northernfunds.com
www08210.ntrs.com
int04511.ntrs.com
api-cashdash-csint.ntrs.com
bca-doc-dev.ntrs.com
tct-t020-ipo7ls.ntrs.com
up85133.ntrs.com
www02810.ntrs.com
wpclncupool2.entuat.aduat.ntrs.com
ohs-iaj11l-c044.ntrs.com
www00710.ntrs.com
appwpcuprsa04.ntrs.com
wwwp02.ntrs.com
uat.northerntrust.com
UNJSPZ8.ntrs.com
idf.ntrs.com
UKRCVPSSL01.ntrs.com
gfb-uat.ntrs.com
ws-caguat2-ssl.wpc.ntrs.com
gfb-pcf-dev.ntrs.com
www0383.ntrs.com
grr-uat.ntrs.com
wwwwca11.ntrs.com
nespdp-uat.ntrs.com
ohs-xaj11l-w075.ntrs.com
DQT_WAS_PRD.ntrs.com
ohs-iaj11l-t102.ntrs.com
wpc02pnnutn101.ent.ad.ntrs.com
ohs-iaj11l-w217.ntrs.com
fgc-sys.ent.ad.ntrs.com
nwa-asym-ja.ntrs.com
wwwsry.ntrs.com
web-ipn45-gpi.ntrs.com
ipl-xaj83s-ww04.ntrs.com
appnpcupctd02.ntrs.com
TEST-ignore.ntrs.com
qcdashboard-csprod.ntrs.com
sys.fos.amzext.ntrs.com
mrr83.ntrs.com
nam.ntrs.com
MYAPPS.NTRS.COM
ohsiintw15.ntrs.com
gpe-encryption.jtgprod.ntrs.com
WPCAMERCER01.ntrs.com
ohs-xaj83l-ww88.ntrs.com
sdcavsu10.ent.ad.ntrs.com
servicesuat.ntrs.com
officewebapp-p.ntrs.com
intt041.ntrs.com
ohs-iaj11l-w203.ntrs.com
sdcavsu10.ent.ad.ntrs.com
sgsgvpn01.remote.ntrs.com
ohs-xap11l-t14.ntrs.com
www4183.ntrs.com
up13843.ntrs.com
wwwsry.ntrs.com
*.dev2.src.amzext.ntrs.com
ohs-xaj11l-w031.ntrs.com
ohs-xaj10l-w098.ntrs.com
ohs-iaj11l-t098.ntrs.com
ut87072.ntrs.com
services.ntrs.com
int04807.ntrs.com
idf-uat.lux.ntrs.com
fmz-sys.ntrs.com
ohs-iaj10l-t080.ntrs.com
www0383.ntrs.com
wls-w146-iaj11ls.appzone.wpc.ntrs.com
awp-uat.ntrs.com
prismukpcvdi.ent.ad.ntrs.com
ohs-iaj11l-dcc2.ntrs.com
up12149.ntrs.com
wwwp09.ntrs.com
ohs-xap10l-w00.ntrs.com
mrr83.ntrs.com
ohs-iaj11l-t012.ntrs.com
awp-prod.ntrs.com
txh-osj.ntrs.com
irl-icon10uat-dev.ntrs.com
ohs-iap10l-admint.ntrs.com
ciscouc-apac.ntrs.com

Certificate

The complete raw certificate details for www02710.ntrs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIO2DCCDcCgAwIBAgIQBazZjYow18Uh7fyTNR6S7TANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0yMTExMDEwMDAwMDBaFw0yMjA5MjAyMzU5NTlaMHMxCzAJBgNVBAYTAlVTMREw
DwYDVQQIEwhJbGxpbm9pczEQMA4GA1UEBxMHQ2hpY2FnbzEjMCEGA1UEChMaTm9y
dGhlcm4gVHJ1c3QgQ29ycG9yYXRpb24xGjAYBgNVBAMTEXd3dzAyNzEwLm50cnMu
Y29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qeSybjWoztGCszu
d4t/GylGVAY8ijSp14EZF3EzeMlHMil8wo0VE1AawkJIAK+7pjPr+b/WIB6e+Oj3
UXHrJ18K769F55g1+qet8WAADiLe22x2ydJ8Hv0a6dYEb3peKT7xmWWQmI1dPz/V
TFKhwby4jqw5jhP1xw48+49BM1VSQSy2wM8qSnej9rDHJnhs5SN+ud3ZkKbKiK9u
ja/hMwIhxXH7u4Z8gIEyszb/4oXYsLArEjuB68xYBlpoWIFIj7zTCh9alX2YnpP5
ZHi6VuLQFTqH8xnA1NnLfXb4AuECzTebKLrxUaQGh77EhAtbYRZgXhkOQ9Fzaw1o
aZFZhwIDAQABo4ILezCCC3cwHwYDVR0jBBgwFoAUkFj/sJx1qFFUd7Ht8qNDFjie
bMUwHQYDVR0OBBYEFPeZQkejhYF9stqYfSO+8Q9Msp9mMIIIfAYDVR0RBIIIczCC
CG+CEXd3d3djYTExLm50cnMuY29tghB3d3d0ODkxLm50cnMuY29tghl3d3dzZWN1
cmlkZXNpODNhLm50cnMuY29tghV3d3dwdGxwc2lzc2wubnRycy5jb22CFnd3d3B0
bHBzaTJzc2wubnRycy5jb22CGHd3d3B0bDE0LXI1LndwYy5udHJzLmNvbYIUd3d3
cHRsMTQtcjUubnRycy5jb22CGHd3d3B0bDE0LXI1Lm5wYy5udHJzLmNvbYIVd3d3
cHRsMTQtZXhsLm50cnMuY29tghR3d3dwdGwxMi1yNS5udHJzLmNvbYIRd3d3cHRs
MDcubnRycy5jb22CEXd3d3B0bDA0Lm50cnMuY29tghF3d3dwdGwwMi5udHJzLmNv
bYIRd3d3cHRsMDAubnRycy5jb22CD3d3d3AxNC5udHJzLmNvbYISd3d3ZXNpODNh
Lm50cnMuY29tghB3d3dkY2MyLm50cnMuY29tgg93d3dkY2MubnRycy5jb22CEHd3
d2MwODAubnRycy5jb22CEHd3d2MwNzgubnRycy5jb22CDXd3d2MubnRycy5jb22C
EHd3dzMzODMubnRycy5jb22CEXd3dzIyNTExLm50cnMuY29tghF3d3cyMTcxMC5u
dHJzLmNvbYIRd3d3MjAzMTAubnRycy5jb22CEXd3dzIwMDEwLm50cnMuY29tghF3
d3cxNTAxMC5udHJzLmNvbYIRd3d3MTQ2MTAubnRycy5jb22CEXd3dzA3MDEwLm50
cnMuY29tghF3d3cwNjIxMC5udHJzLmNvbYIRd3d3MDU1MTAubnRycy5jb22CEXd3
dzA0MDEwLm50cnMuY29tghF3d3cwMzkxMC5udHJzLmNvbYIRd3d3MDM0MTAubnRy
cy5jb22CEXd3dzAzMzEwLm50cnMuY29tghF3d3cwMjcxMC5udHJzLmNvbYIRd3d3
MDE1MTAubnRycy5jb22CH3d3dy5yaXNrYW5kcGVyZm9ybWFuY2UubnRycy5jb22C
KHd3dy5yaXNrYW5kcGVyZm9ybWFuY2Uubm9ydGhlcm50cnVzdC5jb22CF3d3dy5y
ZXRpcmVtZW50Lm50cnMuY29tgiB3d3cucmV0aXJlbWVudC5ub3J0aGVybnRydXN0
LmNvbYIid3d3LnJlbGlhYmlsaXR5aW52ZXN0bWVudC5udHJzLmNvbYIMd3d3Lm50
cnMuY29tghl3d3cubm9ydGhlcm50cnVzdG9wZW4uY29tghp3d3cubm9ydGhlcm50
cnVzdGZ1bmRzLmNvbYIZd3d3Lm5vcnRoZXJudHJ1c3RiYW5rLmNvbYIUd3d3Lm5v
cnRoZXJudHJ1c3QuanCCG3d3dy5ub3J0aGVybm11dHVhbGZ1bmRzLmNvbYIWd3d3
Lm5vcnRoZXJuLWZ1bmRzLmNvbYIZd3d3LmZpZnR5c291dGhjYXBpdGFsLmNvbYIe
d3d3LmJ1c2luZXNzLm5vcnRoZXJudHJ1c3QuY29tghd3d3cuYmVuZWZpdG5vdy5u
dHJzLmNvbYIOd3d3LmJlbGFkdi5jb22CEnd3dy5hdmlhdGVsaXZlLmNvbYIWd3d3
LjUwc291dGhjYXBpdGFsLmNvbYIVd2ViLXhwMmstcHdzLm50cnMuY29tghV3ZWIt
eHAyZi1wd3MubnRycy5jb22CFXdlYi14cDJlLXB3cy5udHJzLmNvbYIVd2ViLXhw
MmQtcHdzLm50cnMuY29tghV3ZWIteHAyYy1wd3MubnRycy5jb22CGXdlYi14cDJi
LXB3cy53cGMubnRycy5jb22CFXdlYi14cDJiLXB3cy5udHJzLmNvbYIZd2ViLXhw
MmItcHdzLm5wYy5udHJzLmNvbYIed2ViLXhwMmItcHdzLm5vcnRoZXJudHJ1c3Qu
Y29tghV3ZWIteHAyYS1wd3MubnRycy5jb22CH3dlYWx0aGFkdmlzb3Iubm9ydGhl
cm50cnVzdC5jb22CD3dlYWx0aC5udHJzLmNvbYIMdXRjLm50cnMuY29tghF1cy5h
dmlhdGVsaXZlLmNvbYIPcnhwZXh0Lm50cnMuY29tghtyaXNrYW5kcGVyZm9ybWFu
Y2UubnRycy5jb22CJHJpc2thbmRwZXJmb3JtYW5jZS5ub3J0aGVybnRydXN0LmNv
bYITcmV0aXJlbWVudC5udHJzLmNvbYIccmV0aXJlbWVudC5ub3J0aGVybnRydXN0
LmNvbYIXb21uaXVtYWNjZXNzLm9tbml1bS5jb22CEW5vcnRoZXJudHJ1c3QuY29t
giNub3J0aGVybmluc3RpdHV0aW9uYWxmdW5kcy5udHJzLmNvbYIWbm9ydGhlcm5m
dW5kcy5udHJzLmNvbYIabS5wcml2YXRlcGFzc3BvcnQubnRycy5jb22CF20ubm9y
dGhlcm50cnVzdG9wZW4uY29tgg5sb2dpbi5udHJzLmNvbYINbGl2ZS5udHJzLmNv
bYIWbGl2ZS5ub3J0aGVybnRydXN0LmNvbYIXaW52ZXN0b3Jwb3J0YWwubnRycy5j
b22CE2ludmVzdG9yLm9tbml1bS5jb22CH2luc3RpdHV0aW9uYWwubm9ydGhlcm5m
dW5kcy5jb22CHGluZGl2aWR1YWwubm9ydGhlcm5mdW5kcy5jb22CFWV1cm9wZS5h
dmlhdGVsaXZlLmNvbYIaYnVzaW5lc3Mubm9ydGhlcm50cnVzdC5jb22CE2FzaWEu
YXZpYXRlbGl2ZS5jb22CEGFyazAzLm9tbml1bS5jb22CGmFkdmlzb3JzLm5vcnRo
ZXJuZnVuZHMuY29tggwxMjUubnRycy5jb22CFTEyNS5ub3J0aGVybnRydXN0LmNv
bTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
MD4GA1UdHwQ3MDUwM6AxoC+GLWh0dHA6Ly9jZHAuZ2VvdHJ1c3QuY29tL0dlb1Ry
dXN0UlNBQ0EyMDE4LmNybDA+BgNVHSAENzA1MDMGBmeBDAECAjApMCcGCCsGAQUF
BwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwdQYIKwYBBQUHAQEEaTBn
MCYGCCsGAQUFBzABhhpodHRwOi8vc3RhdHVzLmdlb3RydXN0LmNvbTA9BggrBgEF
BQcwAoYxaHR0cDovL2NhY2VydHMuZ2VvdHJ1c3QuY29tL0dlb1RydXN0UlNBQ0Ey
MDE4LmNydDAMBgNVHRMBAf8EAjAAMIIBfwYKKwYBBAHWeQIEAgSCAW8EggFrAWkA
dgApeb7wnjk5IfBWc59jpXflvld9nGAK+PlNXSZcJV3HhAAAAXzb0X/EAAAEAwBH
MEUCIQCLQxJLD4EJ+YXmhL38qENKN3GmgG7z/NvW0sUuNdeiyQIgNok2ITLiQ93a
JKJndWF93bmya8RPyFUqEL0fVRX3958AdwBRo7D1/QF5nFZtuDd4jwykeswbJ8v3
nohCmg3+1IsF5QAAAXzb0YAYAAAEAwBIMEYCIQCaqBO+CLtJcyHaktB5SqMSYlEn
klB0jFLsfO2KbM+37AIhAKkVkBh1MGm/BKs2h5MwM6IJ74ROiu+4/SJaGJ7/enSV
AHYAQcjKsd8iRkoQxqE6CUKHXk4xixsD6+tLx2jwkGKWBvYAAAF829F/0QAABAMA
RzBFAiAtftrgiK5jNek5hB7Ptzl6w6Du+Ggy9RQdhv2IMtWLPQIhAKUn9dt1RSZH
zBjCZCGD7BUL7rFjYsURfuQmVQfsQEx4MA0GCSqGSIb3DQEBCwUAA4IBAQAELB0H
FPLebAWAqfdiJ0IMq6X3vsF5AIlqTyUQuh8ebQevh1S8hRU3dIphmdvq3NJoVzht
Ko1VtpcqEiCiidwffnZtqrIN+9GV5O761V6ZIHSkKaDDcY/Uo5f0OcmUYMcZVFDA
S+0qUnPmNPePtuE4Chl74PA5d/Lvkolm4K+lTZjZKmLysRlhckjgaa++iJEwPRRh
2/gj8MlLBFr9RS9ZkUDBCByhyc0lNoM1xa3s3fwm63dSfN6EJBBn1DuM+NCAvl2x
4vbFY3wn79oX2myQa1g97x9EVehXTUqHVYJhy3taDa/6Pwi3wWmK9/MNFM5xllIY
+VYF3naQVKjA51mw
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qeSybjWoztGCszud4t/
GylGVAY8ijSp14EZF3EzeMlHMil8wo0VE1AawkJIAK+7pjPr+b/WIB6e+Oj3UXHr
J18K769F55g1+qet8WAADiLe22x2ydJ8Hv0a6dYEb3peKT7xmWWQmI1dPz/VTFKh
wby4jqw5jhP1xw48+49BM1VSQSy2wM8qSnej9rDHJnhs5SN+ud3ZkKbKiK9uja/h
MwIhxXH7u4Z8gIEyszb/4oXYsLArEjuB68xYBlpoWIFIj7zTCh9alX2YnpP5ZHi6
VuLQFTqH8xnA1NnLfXb4AuECzTebKLrxUaQGh77EhAtbYRZgXhkOQ9Fzaw1oaZFZ
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7543627535415455380314286974075572973
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Northern Trust Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www02710.ntrs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29117443660859132048573356168044279301049562137387232640357165017723156942502086810620884262485004699018309523661732051594987361521699999775003094785536013324690471062359097508363866332913304827421812311903431669020724673931318257462844886899373027472768167691821575545923284445143757627018300339905702110070473558111724139415243508978469462346634349736452629055007843615735869128649234960108064448308937638224704566431451874406733093432776065142822229633770404820327769658777050732190213412698379553909387811967336254729756756775952820279483246894420643935100145901556816175555863572676810462367659160094797473077639
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f7994247a385817db2da987d23bef10f4cb29f66
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2163 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwwca11.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwt891.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwsecuridesi83a.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptlpsissl.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptlpsi2ssl.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl14-r5.wpc.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl14-r5.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl14-r5.npc.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl14-exl.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl12-r5.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl07.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl04.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl02.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl00.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwp14.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwesi83a.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwdcc2.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwdcc.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwc080.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwc078.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwc.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3383.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www22511.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www21710.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www20310.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www20010.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www15010.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www14610.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www07010.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www06210.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www05510.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www04010.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www03910.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www03410.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www03310.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www02710.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www01510.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riskandperformance.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riskandperformance.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.retirement.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.retirement.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reliabilityinvestment.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrustopen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrustfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrustbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrust.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northernmutualfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northern-funds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fiftysouthcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.business.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benefitnow.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beladv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aviatelive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.50southcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2k-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2f-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2e-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2d-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2c-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2b-pws.wpc.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2b-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2b-pws.npc.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2b-pws.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2a-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wealthadvisor.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wealth.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utc.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.aviatelive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxpext.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riskandperformance.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riskandperformance.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirement.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirement.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omniumaccess.omnium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northerninstitutionalfunds.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northernfunds.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.privatepassport.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.northerntrustopen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorportal.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.omnium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'institutional.northernfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'individual.northernfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'europe.aviatelive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asia.aviatelive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ark03.omnium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisors.northernfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '125.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '125.northerntrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							01690076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017cdbd17fc400000403004730450221008b43124b0f8109f985e684bdfca8434a3771a6806ef3fcdbd6d2c52e35d7a2c902203689362132e243ddda24a26775617dddb9b26bc44fc8552a10bd1f5515f7f79f00770051a3b0f5fd01799c566db837788f0ca47acc1b27cbf79e88429a0dfed48b05e50000017cdbd1801800000403004830460221009aa813be08bb497321da92d0794aa3126251279250748c52ec7ced8a6ccfb7ec022100a9159018753069bf04ab3687933033a209ef844e8aefb8fd225a189eff7a749500760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017cdbd17fd1000004030047304502202d7edae088ae6335e939841ecfb7397ac3a0eef86832f5141d86fd8832d58b3d022100a527f5db75452647cc18c2642183ec150beeb16362c5117ee4265507ec404c78
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00042c1d0714f2de6c0580a9f76227420caba5f7bec17900896a4f2510ba1f1e6d07af8754bc851537748a6199dbeadcd26857386d2a8d55b6972a1220a289dc1f7e766daab20dfbd195e4eefad55e992074a429a0c3718fd4a397f439c99460c7195450c04bed2a5273e634f78fb6e1380a197be0f03977f2ef928966e0afa54d98d92a62f2b119617248e069afbe8891303d1461dbf823f0c94b045afd452f599140c1081ca1c9cd25368335c5adecddfc26eb77527cde84241067d43b8cf8d080be5db1e2f6c5637c27efda17da6c906b583def1f4455e8574d4a87558261cb7b5a0daffa3f08b7c1698af7f30d14ce71965218f95605de769054a8c0e759b0