wwww119.ntrs.com
- Northern Trust Corporation -
Issued by DigiCert TLS RSA SHA256 2020 CA1
About this certificate
This digital certificate with serial number 05:8d:18:f5:94:66:6b:9e:26:3e:ae:df:fb:ba:36:f4 was issued on by DigiCert Inc.
With 58 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Northern Trust Corporation
Organization:
Northern Trust Corporation
State / Province:
Illinois
Locality: Chicago
Country: US
Locality: Chicago
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 05:8d:18:f5:94:66:6b:9e:26:3e:ae:df:fb:ba:36:f4Serial Number (int): 7378760070635893792709545780376647412
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 29:a7:71:19:11:ed:dd:10:b6:4a:25:ad:5c:fe:cb:76:9e:03:83:b5
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4
Fingerprint (sha1): 49:0d:b9:b7:8e:2b:0e:a2:44:6a:f9:49:82:28:54:b1:50:95:9c:28
Fingerprint (sha256): 1e:23:67:58:63:ff:90:6a:bc:cd:7e:0c:59:01:7c:a1:83:4a:fe:31:1f:6e:1e:91:ff:01:3e:fe:97:9a:c3:f8
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
Check the revocation status for certificate wwww119.ntrs.com
58
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for wwww119.ntrs.com
Public Key Algorithm
ECDSA
Key Size
256
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Agreement
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
wwww119.ntrs.com
ach.xgateway.ntrs.com
aln-osj.ntrs.com
applistv1.ntrs.com
ark03-c.omnium.com
carbon.northerntrust.com
carbon.ntrs.com
corporate.images.northerntrust.com
docdistribution.omnium.com
fxsdp.ntrs.com
gfp-osj.ntrs.com
gpi.az.northerntrust.com
gpi.cus.az.northerntrust.com
gpi.cus.northerntrust.com
gpi.eu2.az.northerntrust.com
gpi.eu2.northerntrust.com
images.northerntrust.com
investmentanalytics.northerntrust.com
investor-c.omnium.com
investorportal-c.omnium.com
ixs.ntam.northerntrust.com
login.artemis.ntrs.com
login.bpp.ntrs.com
login.nux-investorportal.ntrs.com
migweb.eugateway.ntrs.com
myportfolio.artemisfunds.ntrs.com
nexus.northerntrust.com
nux-investorportal.ntrs.com
omnium-c.omnium.com
omnium-fo.ntrs.com
omnium-ht.ntrs.com
omnium-investor.ntrs.com
omnium-investorportal.ntrs.com
omnium.ntrs.com
omnium2.ntrs.com
omniumaccess-c.omnium.com
omniumdemo-ht.ntrs.com
omniumdemo.ntrs.com
pce.northerntrust.com
pde-ja.ntrs.com
prod.flexshares.com
ptl-osj.ntrs.com
securemail.ntrs.com
ts8-ac.northerntrust.com
ts8.50southcapital.com
ts8.fgr.northerntrust.com
ts8.flexshares.com
ts8.m.northerntrust.com
ts8.northerntrust.com
ts8.northerntrustopen.com
ts8.rfp.northerntrust.com
www.eulogin.ntrs.com
www11910.ntrs.com
wwwc082.ntrs.com
wwwc087.ntrs.com
wwwt920.ntrs.com
wwwt923.ntrs.com
wwwt926.ntrs.com
ach.xgateway.ntrs.com
aln-osj.ntrs.com
applistv1.ntrs.com
ark03-c.omnium.com
carbon.northerntrust.com
carbon.ntrs.com
corporate.images.northerntrust.com
docdistribution.omnium.com
fxsdp.ntrs.com
gfp-osj.ntrs.com
gpi.az.northerntrust.com
gpi.cus.az.northerntrust.com
gpi.cus.northerntrust.com
gpi.eu2.az.northerntrust.com
gpi.eu2.northerntrust.com
images.northerntrust.com
investmentanalytics.northerntrust.com
investor-c.omnium.com
investorportal-c.omnium.com
ixs.ntam.northerntrust.com
login.artemis.ntrs.com
login.bpp.ntrs.com
login.nux-investorportal.ntrs.com
migweb.eugateway.ntrs.com
myportfolio.artemisfunds.ntrs.com
nexus.northerntrust.com
nux-investorportal.ntrs.com
omnium-c.omnium.com
omnium-fo.ntrs.com
omnium-ht.ntrs.com
omnium-investor.ntrs.com
omnium-investorportal.ntrs.com
omnium.ntrs.com
omnium2.ntrs.com
omniumaccess-c.omnium.com
omniumdemo-ht.ntrs.com
omniumdemo.ntrs.com
pce.northerntrust.com
pde-ja.ntrs.com
prod.flexshares.com
ptl-osj.ntrs.com
securemail.ntrs.com
ts8-ac.northerntrust.com
ts8.50southcapital.com
ts8.fgr.northerntrust.com
ts8.flexshares.com
ts8.m.northerntrust.com
ts8.northerntrust.com
ts8.northerntrustopen.com
ts8.rfp.northerntrust.com
www.eulogin.ntrs.com
www11910.ntrs.com
wwwc082.ntrs.com
wwwc087.ntrs.com
wwwt920.ntrs.com
wwwt923.ntrs.com
wwwt926.ntrs.com
Other certificates including the domain name ntrs.com
(limited to 100 certificates)
up12149.ntrs.com
wwwdam.ntrs.com
www4083.ntrs.com
www9783.ntrs.com
www15010.ntrs.com
wwwsecuridesi83a.ntrs.com
int02011.ntrs.com
npc1dnhfsn02.ent.ad.ntrs.com
int01011.ntrs.com
www04510.ntrs.com
www3683.ntrs.com
pandora-npc-prod1.ntrs.com
www0483.ntrs.com
inttsp.ntrs.com
wwwsry.ntrs.com
nia-uat.ntrs.com
ut61082.lux.ntrs.com
sdcwmap03.ent.ad.ntrs.com
ipl-aj83s-nmr.ntrs.com
www.northernfunds.com
www08210.ntrs.com
int04511.ntrs.com
api-cashdash-csint.ntrs.com
bca-doc-dev.ntrs.com
tct-t020-ipo7ls.ntrs.com
up85133.ntrs.com
www02810.ntrs.com
wpclncupool2.entuat.aduat.ntrs.com
ohs-iaj11l-c044.ntrs.com
www00710.ntrs.com
appwpcuprsa04.ntrs.com
wwwp02.ntrs.com
uat.northerntrust.com
UNJSPZ8.ntrs.com
idf.ntrs.com
UKRCVPSSL01.ntrs.com
gfb-uat.ntrs.com
ws-caguat2-ssl.wpc.ntrs.com
gfb-pcf-dev.ntrs.com
www0383.ntrs.com
grr-uat.ntrs.com
wwwwca11.ntrs.com
nespdp-uat.ntrs.com
ohs-xaj11l-w075.ntrs.com
DQT_WAS_PRD.ntrs.com
ohs-iaj11l-t102.ntrs.com
wpc02pnnutn101.ent.ad.ntrs.com
ohs-iaj11l-w217.ntrs.com
fgc-sys.ent.ad.ntrs.com
nwa-asym-ja.ntrs.com
wwwsry.ntrs.com
web-ipn45-gpi.ntrs.com
ipl-xaj83s-ww04.ntrs.com
appnpcupctd02.ntrs.com
TEST-ignore.ntrs.com
qcdashboard-csprod.ntrs.com
sys.fos.amzext.ntrs.com
mrr83.ntrs.com
nam.ntrs.com
MYAPPS.NTRS.COM
ohsiintw15.ntrs.com
gpe-encryption.jtgprod.ntrs.com
WPCAMERCER01.ntrs.com
ohs-xaj83l-ww88.ntrs.com
sdcavsu10.ent.ad.ntrs.com
servicesuat.ntrs.com
officewebapp-p.ntrs.com
intt041.ntrs.com
ohs-iaj11l-w203.ntrs.com
sdcavsu10.ent.ad.ntrs.com
sgsgvpn01.remote.ntrs.com
ohs-xap11l-t14.ntrs.com
www4183.ntrs.com
up13843.ntrs.com
wwwsry.ntrs.com
*.dev2.src.amzext.ntrs.com
ohs-xaj11l-w031.ntrs.com
ohs-xaj10l-w098.ntrs.com
ohs-iaj11l-t098.ntrs.com
ut87072.ntrs.com
services.ntrs.com
int04807.ntrs.com
idf-uat.lux.ntrs.com
fmz-sys.ntrs.com
ohs-iaj10l-t080.ntrs.com
www0383.ntrs.com
wls-w146-iaj11ls.appzone.wpc.ntrs.com
awp-uat.ntrs.com
prismukpcvdi.ent.ad.ntrs.com
ohs-iaj11l-dcc2.ntrs.com
up12149.ntrs.com
wwwp09.ntrs.com
ohs-xap10l-w00.ntrs.com
mrr83.ntrs.com
ohs-iaj11l-t012.ntrs.com
awp-prod.ntrs.com
txh-osj.ntrs.com
irl-icon10uat-dev.ntrs.com
ohs-iap10l-admint.ntrs.com
ciscouc-apac.ntrs.com
wwwdam.ntrs.com
www4083.ntrs.com
www9783.ntrs.com
www15010.ntrs.com
wwwsecuridesi83a.ntrs.com
int02011.ntrs.com
npc1dnhfsn02.ent.ad.ntrs.com
int01011.ntrs.com
www04510.ntrs.com
www3683.ntrs.com
pandora-npc-prod1.ntrs.com
www0483.ntrs.com
inttsp.ntrs.com
wwwsry.ntrs.com
nia-uat.ntrs.com
ut61082.lux.ntrs.com
sdcwmap03.ent.ad.ntrs.com
ipl-aj83s-nmr.ntrs.com
www.northernfunds.com
www08210.ntrs.com
int04511.ntrs.com
api-cashdash-csint.ntrs.com
bca-doc-dev.ntrs.com
tct-t020-ipo7ls.ntrs.com
up85133.ntrs.com
www02810.ntrs.com
wpclncupool2.entuat.aduat.ntrs.com
ohs-iaj11l-c044.ntrs.com
www00710.ntrs.com
appwpcuprsa04.ntrs.com
wwwp02.ntrs.com
uat.northerntrust.com
UNJSPZ8.ntrs.com
idf.ntrs.com
UKRCVPSSL01.ntrs.com
gfb-uat.ntrs.com
ws-caguat2-ssl.wpc.ntrs.com
gfb-pcf-dev.ntrs.com
www0383.ntrs.com
grr-uat.ntrs.com
wwwwca11.ntrs.com
nespdp-uat.ntrs.com
ohs-xaj11l-w075.ntrs.com
DQT_WAS_PRD.ntrs.com
ohs-iaj11l-t102.ntrs.com
wpc02pnnutn101.ent.ad.ntrs.com
ohs-iaj11l-w217.ntrs.com
fgc-sys.ent.ad.ntrs.com
nwa-asym-ja.ntrs.com
wwwsry.ntrs.com
web-ipn45-gpi.ntrs.com
ipl-xaj83s-ww04.ntrs.com
appnpcupctd02.ntrs.com
TEST-ignore.ntrs.com
qcdashboard-csprod.ntrs.com
sys.fos.amzext.ntrs.com
mrr83.ntrs.com
nam.ntrs.com
MYAPPS.NTRS.COM
ohsiintw15.ntrs.com
gpe-encryption.jtgprod.ntrs.com
WPCAMERCER01.ntrs.com
ohs-xaj83l-ww88.ntrs.com
sdcavsu10.ent.ad.ntrs.com
servicesuat.ntrs.com
officewebapp-p.ntrs.com
intt041.ntrs.com
ohs-iaj11l-w203.ntrs.com
sdcavsu10.ent.ad.ntrs.com
sgsgvpn01.remote.ntrs.com
ohs-xap11l-t14.ntrs.com
www4183.ntrs.com
up13843.ntrs.com
wwwsry.ntrs.com
*.dev2.src.amzext.ntrs.com
ohs-xaj11l-w031.ntrs.com
ohs-xaj10l-w098.ntrs.com
ohs-iaj11l-t098.ntrs.com
ut87072.ntrs.com
services.ntrs.com
int04807.ntrs.com
idf-uat.lux.ntrs.com
fmz-sys.ntrs.com
ohs-iaj10l-t080.ntrs.com
www0383.ntrs.com
wls-w146-iaj11ls.appzone.wpc.ntrs.com
awp-uat.ntrs.com
prismukpcvdi.ent.ad.ntrs.com
ohs-iaj11l-dcc2.ntrs.com
up12149.ntrs.com
wwwp09.ntrs.com
ohs-xap10l-w00.ntrs.com
mrr83.ntrs.com
ohs-iaj11l-t012.ntrs.com
awp-prod.ntrs.com
txh-osj.ntrs.com
irl-icon10uat-dev.ntrs.com
ohs-iap10l-admint.ntrs.com
ciscouc-apac.ntrs.com
Certificate
The complete raw certificate details for wwww119.ntrs.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIILSDCCCjCgAwIBAgIQBY0Y9ZRma54mPq7f+7o29DANBgkqhkiG9w0BAQsFADBP MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMzEyMDcwMDAwMDBa Fw0yNDAzMjcyMzU5NTlaMHIxCzAJBgNVBAYTAlVTMREwDwYDVQQIEwhJbGxpbm9p czEQMA4GA1UEBxMHQ2hpY2FnbzEjMCEGA1UEChMaTm9ydGhlcm4gVHJ1c3QgQ29y cG9yYXRpb24xGTAXBgNVBAMTEHd3d3cxMTkubnRycy5jb20wWTATBgcqhkjOPQIB BggqhkjOPQMBBwNCAAQ27MTcUC979kCv1yFAaFljly3N411gNAcLPUjdjLbrAs95 5dP2IhpkAoT3HTrqYSEl1jTTs/gg+qVBTd64vQkjo4IIxjCCCMIwHwYDVR0jBBgw FoAUt2ui6qiqhIx56rTaD5iyxZV2ufQwHQYDVR0OBBYEFCmncRkR7d0QtkolrVz+ y3aeA4O1MIIFbQYDVR0RBIIFZDCCBWCCEHd3d3cxMTkubnRycy5jb22CFWFjaC54 Z2F0ZXdheS5udHJzLmNvbYIQYWxuLW9zai5udHJzLmNvbYISYXBwbGlzdHYxLm50 cnMuY29tghJhcmswMy1jLm9tbml1bS5jb22CGGNhcmJvbi5ub3J0aGVybnRydXN0 LmNvbYIPY2FyYm9uLm50cnMuY29tgiJjb3Jwb3JhdGUuaW1hZ2VzLm5vcnRoZXJu dHJ1c3QuY29tghpkb2NkaXN0cmlidXRpb24ub21uaXVtLmNvbYIOZnhzZHAubnRy cy5jb22CEGdmcC1vc2oubnRycy5jb22CGGdwaS5hei5ub3J0aGVybnRydXN0LmNv bYIcZ3BpLmN1cy5hei5ub3J0aGVybnRydXN0LmNvbYIZZ3BpLmN1cy5ub3J0aGVy bnRydXN0LmNvbYIcZ3BpLmV1Mi5hei5ub3J0aGVybnRydXN0LmNvbYIZZ3BpLmV1 Mi5ub3J0aGVybnRydXN0LmNvbYIYaW1hZ2VzLm5vcnRoZXJudHJ1c3QuY29tgiVp bnZlc3RtZW50YW5hbHl0aWNzLm5vcnRoZXJudHJ1c3QuY29tghVpbnZlc3Rvci1j Lm9tbml1bS5jb22CG2ludmVzdG9ycG9ydGFsLWMub21uaXVtLmNvbYIaaXhzLm50 YW0ubm9ydGhlcm50cnVzdC5jb22CFmxvZ2luLmFydGVtaXMubnRycy5jb22CEmxv Z2luLmJwcC5udHJzLmNvbYIhbG9naW4ubnV4LWludmVzdG9ycG9ydGFsLm50cnMu Y29tghltaWd3ZWIuZXVnYXRld2F5Lm50cnMuY29tgiFteXBvcnRmb2xpby5hcnRl bWlzZnVuZHMubnRycy5jb22CF25leHVzLm5vcnRoZXJudHJ1c3QuY29tghtudXgt aW52ZXN0b3Jwb3J0YWwubnRycy5jb22CE29tbml1bS1jLm9tbml1bS5jb22CEm9t bml1bS1mby5udHJzLmNvbYISb21uaXVtLWh0Lm50cnMuY29tghhvbW5pdW0taW52 ZXN0b3IubnRycy5jb22CHm9tbml1bS1pbnZlc3RvcnBvcnRhbC5udHJzLmNvbYIP b21uaXVtLm50cnMuY29tghBvbW5pdW0yLm50cnMuY29tghlvbW5pdW1hY2Nlc3Mt Yy5vbW5pdW0uY29tghZvbW5pdW1kZW1vLWh0Lm50cnMuY29tghNvbW5pdW1kZW1v Lm50cnMuY29tghVwY2Uubm9ydGhlcm50cnVzdC5jb22CD3BkZS1qYS5udHJzLmNv bYITcHJvZC5mbGV4c2hhcmVzLmNvbYIQcHRsLW9zai5udHJzLmNvbYITc2VjdXJl bWFpbC5udHJzLmNvbYIYdHM4LWFjLm5vcnRoZXJudHJ1c3QuY29tghZ0czguNTBz b3V0aGNhcGl0YWwuY29tghl0czguZmdyLm5vcnRoZXJudHJ1c3QuY29tghJ0czgu ZmxleHNoYXJlcy5jb22CF3RzOC5tLm5vcnRoZXJudHJ1c3QuY29tghV0czgubm9y dGhlcm50cnVzdC5jb22CGXRzOC5ub3J0aGVybnRydXN0b3Blbi5jb22CGXRzOC5y ZnAubm9ydGhlcm50cnVzdC5jb22CFHd3dy5ldWxvZ2luLm50cnMuY29tghF3d3cx MTkxMC5udHJzLmNvbYIQd3d3YzA4Mi5udHJzLmNvbYIQd3d3YzA4Ny5udHJzLmNv bYIQd3d3dDkyMC5udHJzLmNvbYIQd3d3dDkyMy5udHJzLmNvbYIQd3d3dDkyNi5u dHJzLmNvbTA+BgNVHSAENzA1MDMGBmeBDAECAjApMCcGCCsGAQUFBwIBFhtodHRw Oi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwDgYDVR0PAQH/BAQDAgOIMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjCBjwYDVR0fBIGHMIGEMECgPqA8hjpodHRw Oi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRUTFNSU0FTSEEyNTYyMDIwQ0Ex LTQuY3JsMECgPqA8hjpodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRU TFNSU0FTSEEyNTYyMDIwQ0ExLTQuY3JsMH8GCCsGAQUFBwEBBHMwcTAkBggrBgEF BQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEkGCCsGAQUFBzAChj1odHRw Oi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRUTFNSU0FTSEEyNTYyMDIw Q0ExLTEuY3J0MAwGA1UdEwEB/wQCMAAwggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkB ZwB1AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABjETKIeAAAAQD AEYwRAIgWTSM2mKeddrT1y8fmlWf3nVvq+a9gq8R5AVJA490AWECIB8JhD7Bavso Fe3wY3WgcWazGmiBJoiv2WDX+DTjOcv4AHUASLDja9qmRzQP5WoC+p0w6xxSActW 3SyB2bu/qznYhHMAAAGMRMoh/QAABAMARjBEAiBl2KfZ239oINqI/3Fluxf43GCW xsr0AH7j/TEroKdG9QIgJpBYuS54ug0NdVbqOhWN/F14k4TLbERoqOS8ccQIXyYA dwDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYxEyiHiAAAEAwBI MEYCIQDDV7+koZiVTNqRC2j2n2ndctejUs3zZipZJziZO5aDFAIhAO0Yuhk5TAu+ 3FsV+7NDyj9Gz2r3+rp8INhSU9DsCTTgMA0GCSqGSIb3DQEBCwUAA4IBAQAwcs9f a+1/2Bb1oBdH9I5MZ3GjnAbNOPi2byW4AF2IWS6HvkJqrsb8YyRRNhf6mN6I6Ute gW86HxJdcHByCZZZ4sLnyfafoe3wB+iXTYPp43783LwmGuGOzw0s2Riqrte/g19i wOUmrEwI/jtr7YjUj5L/eVsdqd7wO16yvcTp//KqPUoT3H3JvhexHYpdLhQbBUii DEv7ss6HOB7SUatLHOi0XpvJuS/Z4lzbwGZDMoJ7dafnHO3FiK6NA4Co8VQ2uXos TV3wmJ76QoazK+HD2fe4U+j9CJbR7AjEtGxnAAGvdTB9ERRBskMcdRKRrl+O8rN1 tqSD41ySBV7lpwSa -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAENuzE3FAve/ZAr9chQGhZY5ctzeNd YDQHCz1I3Yy26wLPeeXT9iIaZAKE9x066mEhJdY007P4IPqlQU3euL0JIw== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 7378760070635893792709545780376647412 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-07 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-27 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Northern Trust Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wwww119.ntrs.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey) . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1) . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits) 000436ecc4dc502f7bf640afd72140685963972dcde35d6034070b3d48dd8cb6eb02cf79e5d3f6221a640284f71d3aea612125d634d3b3f820faa5414ddeb8bd0923 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 29a7711911eddd10b64a25ad5cfecb769e0383b5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1380 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwww119.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ach.xgateway.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aln-osj.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applistv1.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ark03-c.omnium.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carbon.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carbon.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.images.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docdistribution.omnium.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxsdp.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfp-osj.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpi.az.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpi.cus.az.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpi.cus.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpi.eu2.az.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpi.eu2.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investmentanalytics.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor-c.omnium.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorportal-c.omnium.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ixs.ntam.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.artemis.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.bpp.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.nux-investorportal.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'migweb.eugateway.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myportfolio.artemisfunds.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nexus.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nux-investorportal.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omnium-c.omnium.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omnium-fo.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omnium-ht.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omnium-investor.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omnium-investorportal.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omnium.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omnium2.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omniumaccess-c.omnium.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omniumdemo-ht.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omniumdemo.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pce.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pde-ja.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.flexshares.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptl-osj.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securemail.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts8-ac.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts8.50southcapital.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts8.fgr.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts8.flexshares.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts8.m.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts8.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts8.northerntrustopen.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts8.rfp.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eulogin.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www11910.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwc082.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwc087.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwt920.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwt923.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwt926.ntrs.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits) 0388 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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