www.cartierretailnet.com
- Richemont International Ltd -
Issued by VeriSign Class 3 International Server CA - G3
About this certificate
This digital certificate with serial number 0b:e4:3d:9f:eb:ae:a8:3d:1f:00:07:eb:ad:b7:93:55 was issued on by VeriSign, Inc..
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- CAs must include keyIdentifer field of AKI in all non-self-issued certificates (RFC 5280: 4.2.1.1)
- The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Richemont International Ltd
Organization:
Richemont International Ltd
Organization unit: Cartier
Organization unit: Cartier
State / Province:
London
Locality: London
Country: GB
Locality: London
Country: GB
VeriSign, Inc.
Organization:
VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0b:e4:3d:9f:eb:ae:a8:3d:1f:00:07:eb:ad:b7:93:55Serial Number (int): 15806601534583802706855710329352459093
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId:
AuthorityKeyId:
Fingerprint (sha1): 31:0d:ca:cc:0e:cf:ff:c5:be:16:ff:0b:17:ca:86:33:5f:52:76:ab
Fingerprint (sha256): 1c:d2:1b:68:24:03:29:f1:9d:93:35:85:21:43:71:50:33:09:c8:d8:5e:20:fb:df:4c:4d:b4:b1:29:31:12:e8
Issuing Certificate URL: http://SVRIntl-G3-aia.verisign.com/SVRIntlG3.cer
Revocation information
OCSP Server: http://ocsp.verisign.comCRL Distribution Point: http://SVRIntl-G3-crl.verisign.com/SVRIntlG3.crl
Check the revocation status for certificate www.cartierretailnet.com
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.cartierretailnet.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Netscape Server-Gated Cryptography
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.cartier-campus.com
www.cartierprestige.com
www.cartierretailnet.com
www.cartierprestige.com
www.cartierretailnet.com
Other certificates including the domain name cartierretailnet.com
(limited to 100 certificates)
www.cartierretailnet.com
www.cartierretailnet.com
www.cartierretailnet.com
presse.fondation.cartier.com
presse.fondation.cartier.com
presse.fondation.cartier.com
www.cartierretailnet.com
www.cartierretailnet.com
cartierpress.cartier.com
cartierpress.cartier.com
www.cartierretailnet.com
presse.fondation.cartier.com
presse.fondation.cartier.com
cartierpress.cartier.com
cartierpress.cartier.com
www.cartierretailnet.com
presse.fondation.cartier.com
www.cartierretailnet.com
www.cartierretailnet.com
www.cartierretailnet.com
www.cartierretailnet.com
presse.fondation.cartier.com
presse.fondation.cartier.com
cartierpress.cartier.com
www.cartierretailnet.com
www.cartierretailnet.com
cartierpress.cartier.com
cartierpress.cartier.com
presse.fondation.cartier.com
cartierpress.cartier.com
www.cartierretailnet.com
www.cartierretailnet.com
www.cartierretailnet.com
www.cartierretailnet.com
cartierpress.cartier.com
presse.fondation.cartier.com
cartierpress.cartier.com
www.cartierretailnet.com
presse.fondation.cartier.com
cartierpress.cartier.com
cartierpress.cartier.com
cartierpress.cartier.com
www.cartierretailnet.com
www.cartierretailnet.com
presse.fondation.cartier.com
cartierpress.cartier.com
cartierpress.cartier.com
presse.fondation.cartier.com
cartierpress.cartier.com
presse.fondation.cartier.com
cartierpress.cartier.com
www.cartierretailnet.com
www.cartierretailnet.com
cartierpress.cartier.com
cartierpress.cartier.com
cartierpress.cartier.com
www.cartierretailnet.com
www.cartierretailnet.com
www.cartierretailnet.com
presse.fondation.cartier.com
presse.fondation.cartier.com
presse.fondation.cartier.com
www.cartierretailnet.com
www.cartierretailnet.com
cartierpress.cartier.com
cartierpress.cartier.com
www.cartierretailnet.com
presse.fondation.cartier.com
presse.fondation.cartier.com
cartierpress.cartier.com
cartierpress.cartier.com
www.cartierretailnet.com
presse.fondation.cartier.com
www.cartierretailnet.com
www.cartierretailnet.com
www.cartierretailnet.com
www.cartierretailnet.com
presse.fondation.cartier.com
presse.fondation.cartier.com
cartierpress.cartier.com
www.cartierretailnet.com
www.cartierretailnet.com
cartierpress.cartier.com
cartierpress.cartier.com
presse.fondation.cartier.com
cartierpress.cartier.com
www.cartierretailnet.com
www.cartierretailnet.com
www.cartierretailnet.com
www.cartierretailnet.com
cartierpress.cartier.com
presse.fondation.cartier.com
cartierpress.cartier.com
www.cartierretailnet.com
presse.fondation.cartier.com
cartierpress.cartier.com
cartierpress.cartier.com
cartierpress.cartier.com
www.cartierretailnet.com
www.cartierretailnet.com
presse.fondation.cartier.com
cartierpress.cartier.com
cartierpress.cartier.com
presse.fondation.cartier.com
cartierpress.cartier.com
presse.fondation.cartier.com
cartierpress.cartier.com
www.cartierretailnet.com
www.cartierretailnet.com
cartierpress.cartier.com
cartierpress.cartier.com
cartierpress.cartier.com
www.cartierretailnet.com
Certificate
The complete raw certificate details for www.cartierretailnet.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF3TCCBMWgAwIBAgIQC+Q9n+uuqD0fAAfrrbeTVTANBgkqhkiG9w0BAQUFADCB vDELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQL ExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1c2Ug YXQgaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYSAoYykxMDE2MDQGA1UEAxMt VmVyaVNpZ24gQ2xhc3MgMyBJbnRlcm5hdGlvbmFsIFNlcnZlciBDQSAtIEczMB4X DTExMDgyNDAwMDAwMFoXDTEyMDgyMzIzNTk1OVowgYoxCzAJBgNVBAYTAkdCMQ8w DQYDVQQIEwZMb25kb24xDzANBgNVBAcUBkxvbmRvbjEkMCIGA1UEChQbUmljaGVt b250IEludGVybmF0aW9uYWwgTHRkMRAwDgYDVQQLFAdDYXJ0aWVyMSEwHwYDVQQD FBh3d3cuY2FydGllcnJldGFpbG5ldC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDLmWQ8ydowSYHKlXGLEdakUZC9/C+ZHOqXB5IDcDPndo175186 MeWlMh1TP5gSZYiXByhBGtWg3TDb+5Pv48gGRYMLRYG/h5y1r/6AyUq1RDjqETcQ 5FeDLlKsWZrsnFsBT2Evy2pNvDhjo5weyhKeYjo5bdIxrFK/X84pE3iV4C4//5W7 6qggjZPcVK3Dl6Ju6QqiPVLwRnTwc+zMtKJZH0XXJpc9nvjMF+NyALoALn5vkabM gEAFSHgTzCbIxYxzouv43/KO5LsqwT/Btc701sPoyyrZ10Wzfer93cLNiQHgkD7i AZ8qls6mUY2ctJe/ElGjqyI3q31OI9I9B6jdAgMBAAGjggIJMIICBTBUBgNVHREE TTBLghZ3d3cuY2FydGllci1jYW1wdXMuY29tghd3d3cuY2FydGllcnByZXN0aWdl LmNvbYIYd3d3LmNhcnRpZXJyZXRhaWxuZXQuY29tMAkGA1UdEwQCMAAwCwYDVR0P BAQDAgWgMEEGA1UdHwQ6MDgwNqA0oDKGMGh0dHA6Ly9TVlJJbnRsLUczLWNybC52 ZXJpc2lnbi5jb20vU1ZSSW50bEczLmNybDBEBgNVHSAEPTA7MDkGC2CGSAGG+EUB BxcDMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LnZlcmlzaWduLmNvbS9ycGEw KAYDVR0lBCEwHwYJYIZIAYb4QgQBBggrBgEFBQcDAQYIKwYBBQUHAwIwcgYIKwYB BQUHAQEEZjBkMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC52ZXJpc2lnbi5jb20w PAYIKwYBBQUHMAKGMGh0dHA6Ly9TVlJJbnRsLUczLWFpYS52ZXJpc2lnbi5jb20v U1ZSSW50bEczLmNlcjBuBggrBgEFBQcBDARiMGChXqBcMFowWDBWFglpbWFnZS9n aWYwITAfMAcGBSsOAwIaBBRLa7kolgYMu9BSOJsprEsHiyEFGDAmFiRodHRwOi8v bG9nby52ZXJpc2lnbi5jb20vdnNsb2dvMS5naWYwDQYJKoZIhvcNAQEFBQADggEB AI+r//XcMAlxGVNsJ60gq7mFJ72UA5mO7vQMQPvRIEuna4nVIlolOysqo+v7GhNr rF3xJaDGmuYYsH5LkK7fLrN9tRl2UeAO9dA0YkDZuOCzjL2xc4FredQYaqvPNlxK zbeZPSba4USlO8HQTEomfMXoG18UIknYXiCFTq9+3zxz5P7NNqlpD/VbH65UxlDl EFBGfHcfaxnsUaZz1D3Skf0aD9m41wafMwEeuCYbXkfomQfiLTexysnL4MVeh7eA pvJhhp+/6iuYPy5hNYTJZZ+kFt9L9foRgjAzVQEGAcVxLIty0K03exzO9tloAOkM HonPSXTuRInQsg0fkR0xh50= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5lkPMnaMEmBypVxixHW pFGQvfwvmRzqlweSA3Az53aNe+dfOjHlpTIdUz+YEmWIlwcoQRrVoN0w2/uT7+PI BkWDC0WBv4ecta/+gMlKtUQ46hE3EORXgy5SrFma7JxbAU9hL8tqTbw4Y6OcHsoS nmI6OW3SMaxSv1/OKRN4leAuP/+Vu+qoII2T3FStw5eibukKoj1S8EZ08HPszLSi WR9F1yaXPZ74zBfjcgC6AC5+b5GmzIBABUh4E8wmyMWMc6Lr+N/yjuS7KsE/wbXO 9NbD6Msq2ddFs33q/d3CzYkB4JA+4gGfKpbOplGNnLSXvxJRo6siN6t9TiPSPQeo 3QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 15806601534583802706855710329352459093 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)10' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 International Server CA - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-08-24 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-08-23 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'London' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Richemont International Ltd' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Cartier' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'www.cartierretailnet.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25702016101825211441377292261827615610814534714752803955953399911419540342170277973992212146196753464575827236167951674003443546570543277502983786657563101602609610144481336226251894867815209245133953110550262883834645070256557044462152423398489121018391688719491363452124209360942294600705215171833922361027503087922503152164259512397523729705729060245883129345239376037908994590315052373619837677086364320690309295634847361873772435439454445782184382222362493402082823040268553294620058624005076922423883147177317324576818228622412219398727879204682116988094705422234988065202669598124114712823458357286990502144221 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cartier-campus.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cartierprestige.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cartierretailnet.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRIntl-G3-crl.verisign.com/SVRIntlG3.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.23.3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/rpa' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.4.1 (serverGatedCrypto) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.verisign.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRIntl-G3-aia.verisign.com/SVRIntlG3.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|true] IA5String . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/gif' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4b6bb92896060cbbd052389b29ac4b078b210518 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://logo.verisign.com/vslogo1.gif' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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