citrixmobile.bjc.org

- BJC Healthcare -

Issued by Trusted Secure Certificate Authority 5

About this certificate

This digital certificate with serial number 35:ad:ff:73:7e:08:fb:19:d2:71:d1:f2:11:10:08:19 was issued on by Corporation Service Company.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BJC Healthcare

Organization: BJC Healthcare
Organization unit: Enterprise SSL
Address: 4901 Forest Park Ave
Postal code: 63110
State / Province: MO
Locality: St. Louis
Country: US

Corporation Service Company

Organization: Corporation Service Company
State / Province: DE
Locality: Wilmington
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 35:ad:ff:73:7e:08:fb:19:d2:71:d1:f2:11:10:08:19
Serial Number (int): 71352532297820655194360809940784777241
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 6e:0a:8d:32:9d:b8:f4:54:bb:7f:52:68:47:29:11:99:9e:9f:1a:7b
AuthorityKeyId: f2:bb:55:ee:fc:8f:cf:d0:3f:14:68:1a:95:7e:79:0e:ab:17:30:f4

Fingerprint (sha1): 64:61:8f:e6:5b:91:de:e9:34:17:e1:fc:9f:cd:3d:d4:1e:2a:6b:ef
Fingerprint (sha256): 20:e4:ea:64:d1:d1:f0:8b:48:67:56:53:21:76:a8:8b:b3:76:72:13:b0:25:d5:04:c9:bf:94:b8:40:0f:64:19

Issuing Certificate URL: http://crt.usertrust.com/TrustedSecureCertificateAuthority5.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/TrustedSecureCertificateAuthority5.crl

Check the revocation status for certificate citrixmobile.bjc.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for citrixmobile.bjc.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

citrixmobile.bjc.org
www.citrixmobile.bjc.org

Other certificates including the domain name bjc.org

(limited to 100 certificates)
slchsimschedule.bjc.org
mobap-efertility.bjc.org
ottrbmt.bjc.org
hietest.bjc.org
clinicaldesktoptest.bjc.org
secure.bjc.org
interpreterschedule.bjc.org
empdirect.bjc.org
www.bjc.org
www.bjc.org
iconnectuserid.bjc.org
sni.cloudflaressl.com
sni.cloudflaressl.com
accessbjc.bjc.org
upbcgwsync05.bjc.org
bjc.org
upbcgwsync07.bjc.org
hcmobile.bjc.org
slchsimschedule.bjc.org
lms.bjc.org
webserver01.bjc.org
testmytime81.bjc.org
mytime.bjc.org
webmail.bjc.org
health.bjc.org
www.bjc.org
sni.cloudflaressl.com
bjcexconl01.bjc-nt.bjc.org
www.bjc.org
vdi.bjc.org
www.bjc.org
secure.bjc.org
tfcmobileconnecttest.bjc.org
slchsimschedule.bjc.org
rxrefill.bjc.org
adfst.bjc.org
secure.bjc.org
encryptmail.bjc.org
webmail.bjc.org
mbmclaboutreach.bjc.org
www.bjc.org
*.bjc.org
echonet5test.bjc.org
bjcfmdtest.bjc.org
echonet.bjc.org
hrdirect.bjc.org
communitybenefit.bjc.org
mobileenroll.bjc.org
bjhmedicalsurveillance.bjc.org
EchoNet.bjc.org
bjhbylaws.bjc.org
citrixmobile.bjc.org
upbcgwsync09.bjc.org
www.bjc.org
citrixmobile.bjc.org
www.bjc.org
echoapps.bjc.org
rxcall.bjc.org
compassmobile.bjc.org
scmaccess.bjc.org
EchoNet.bjc.org
rxcall.bjc.org
iconnecttest.bjc.org
webserver01.bjc.org
performancereports.bjc.org
fmd.bjc.org
echoapps.bjc.org
iconnect.bjc.org
encryptmail.bjc.org
setmypin.bjc.org
pevpn.bjc.org
fmd.bjc.org
secure.bjc.org
securemail.bjc.org
vpn.bjc.org
bjcpsmob.bjc.org
vpn.bjc.org
paymentgateway.bjc.org
nrllab.bjc.org
clinicaldesktop.bjc.org
www.bjc.org
hcmobile.bjc.org
lms.bjc.org
fmd.bjc.org
encryptmail.bjc.org
fmd.bjc.org
*.bjc.org
nrllab.bjc.org
onlinepayment.bjc.org
upbcgwsync15.bjc.org
www.bjc.org
slchsimschedule.bjc.org
mytime.carenet.org
www4.bjc.org
www.bjc.org
performancereports.bjc.org
echoapps.bjc.org
paymentgateway.bjc.org
encryptmail.bjc.org
interpreterschedule.bjc.org

Certificate

The complete raw certificate details for citrixmobile.bjc.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHJjCCBg6gAwIBAgIQNa3/c34I+xnScdHyERAIGTANBgkqhkiG9w0BAQsFADCB
hjELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAkRFMRMwEQYDVQQHEwpXaWxtaW5ndG9u
MSQwIgYDVQQKExtDb3Jwb3JhdGlvbiBTZXJ2aWNlIENvbXBhbnkxLzAtBgNVBAMT
JlRydXN0ZWQgU2VjdXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSA1MB4XDTE4MDgw
NjAwMDAwMFoXDTIwMDgwNTIzNTk1OVowga4xCzAJBgNVBAYTAlVTMQ4wDAYDVQQR
EwU2MzExMDELMAkGA1UECBMCTU8xEjAQBgNVBAcTCVN0LiBMb3VpczEdMBsGA1UE
CRMUNDkwMSBGb3Jlc3QgUGFyayBBdmUxFzAVBgNVBAoTDkJKQyBIZWFsdGhjYXJl
MRcwFQYDVQQLEw5FbnRlcnByaXNlIFNTTDEdMBsGA1UEAxMUY2l0cml4bW9iaWxl
LmJqYy5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS9gJFSmf1
e4e7dgv+jRJ6U37k8quR+kaiIvQAW73zR3JUxYTGyv2zDct+AirLyjGDRCaRr5cp
SjLrcnGwU7AH9q/PQm9DakyA923w/oarao3y5tm5o6B9A/RLRme23wr88kgjNUA9
gBCPe/vGrlyCJ/eVKq93eyArrAZXCNxr0R3O7vhKySKzVWX1tCh13sz7zQ40VaeR
R9EcRxc4oyXkvmIhY3N2Wubl5gjMoGs0omv7PqH30qnkHpNV8+F56Z0r6VwbTSi2
0zP8hj4ITaQ/jZ6XwgeUZ4V4d0q1kPptj3eMsuIfukO/R1fXRYb8WDS8STjgFtyd
fCsql8DhK9LHAgMBAAGjggNkMIIDYDAfBgNVHSMEGDAWgBTyu1Xu/I/P0D8UaBqV
fnkOqxcw9DAdBgNVHQ4EFgQUbgqNMp249FS7f1JoRykRmZ6fGnswDgYDVR0PAQH/
BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMEsGA1UdIAREMEIwNgYLKwYBBAGyMQECAggwJzAlBggrBgEFBQcCARYZaHR0
cHM6Ly9jcHMudXNlcnRydXN0LmNvbTAIBgZngQwBAgIwUAYDVR0fBEkwRzBFoEOg
QYY/aHR0cDovL2NybC51c2VydHJ1c3QuY29tL1RydXN0ZWRTZWN1cmVDZXJ0aWZp
Y2F0ZUF1dGhvcml0eTUuY3JsMIGCBggrBgEFBQcBAQR2MHQwSwYIKwYBBQUHMAKG
P2h0dHA6Ly9jcnQudXNlcnRydXN0LmNvbS9UcnVzdGVkU2VjdXJlQ2VydGlmaWNh
dGVBdXRob3JpdHk1LmNydDAlBggrBgEFBQcwAYYZaHR0cDovL29jc3AudXNlcnRy
dXN0LmNvbTA5BgNVHREEMjAwghRjaXRyaXhtb2JpbGUuYmpjLm9yZ4IYd3d3LmNp
dHJpeG1vYmlsZS5iamMub3JnMIIBgAYKKwYBBAHWeQIEAgSCAXAEggFsAWoAdgDu
S723dc5guuFCaR+r4Z5mow9+X7By2IMAxHuJeqj9ywAAAWURJi5DAAAEAwBHMEUC
IQCZ90n2pDxu5bHa72K9mWfyIoemnLE93t8iT2sKmraq6gIgDTjyiV0eg2uBUcBG
ac9oWBknOv+7HqW9PhtRMo3MunAAdwBep3P531bA57U2SH3QSeAyepGaDIShEhKE
GHWWgXFFWAAAAWURJi6cAAAEAwBIMEYCIQCDMabSMXSZYgjojw1Z2h4ockYoQgEy
QFdYCILsQX49lQIhAO6aUWlTbQ2/HBotMhUcLftVrvC1/0oU6LUrtP7n1EtcAHcA
VYHUwhaQNgFK6gubVzxT8MDkOHhwJQgXL6OqHQcT0wwAAAFlESYvJAAABAMASDBG
AiEAlTnWnibU5xlvo3ptDRMbY7n4MkjI8JkNJhHBD3SmTRICIQCrLYHRE9uzIkYJ
JY2o2pE2mWvaPXMIYkSiW5EMzdPr6DANBgkqhkiG9w0BAQsFAAOCAQEAA7az8q/Q
tYjNe09e2T803Ze3ZxAQK6ylbB4Uwz8HNCeIYTQIr2myR8N5XNt5JaOQoZ7SG7Gz
TvlWKY6dpYnhFeX1DtiSUqdcBRxj48k3O0VrzQY+mrRYmdDLwz/tAkkqfLUN13BM
R5UG7QcayLrtiQUjFt49rtKEZUB1VC5WHijewujlDPxe9qP39cpXHhaxoiMpT05h
BuRRi8siKx3XXAfK4Zh8g4ZEnBH7vk+tZrnpjtkQKnpY297y5CPga33EvwYtKoo6
G5FaZ8BuIYHM/tSU+E1jlGIhlFTQpDxVoH6iry/ShlpzlJhRtGj2+d00u/4FTVhF
8vf/vopP0azAPA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vYCRUpn9XuHu3YL/o0S
elN+5PKrkfpGoiL0AFu980dyVMWExsr9sw3LfgIqy8oxg0Qmka+XKUoy63JxsFOw
B/avz0JvQ2pMgPdt8P6Gq2qN8ubZuaOgfQP0S0Zntt8K/PJIIzVAPYAQj3v7xq5c
gif3lSqvd3sgK6wGVwjca9Edzu74Sskis1Vl9bQodd7M+80ONFWnkUfRHEcXOKMl
5L5iIWNzdlrm5eYIzKBrNKJr+z6h99Kp5B6TVfPheemdK+lcG00ottMz/IY+CE2k
P42el8IHlGeFeHdKtZD6bY93jLLiH7pDv0dX10WG/Fg0vEk44BbcnXwrKpfA4SvS
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 71352532297820655194360809940784777241
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wilmington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corporation Service Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trusted Secure Certificate Authority 5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '63110'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'St. Louis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '4901 Forest Park Ave'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BJC Healthcare'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Enterprise SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'citrixmobile.bjc.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26631355537907784828276587465238603800589277996169316474619497309883968389961876866279847172607448245411163828141650392458718808538567902836457513828447843510318910807975970886548543909867806208870295974939979763796241234124196180622186294672443367617610451979831723543063360376891522291455449845324697464105543310434154414064529156164170280895849522501074137965518879867419115208567961877419974861767162191122424194875761704476013397827698479755554664424379270521641912359921543651144760948791938157059728353767790008592374973683811710542483346748615364544753349017360085613408568754777209605737032758399582304195271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f2bb55eefc8fcfd03f14681a957e790eab1730f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6e0a8d329db8f454bb7f5268472911999e9f1a7b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/TrustedSecureCertificateAuthority5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/TrustedSecureCertificateAuthority5.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citrixmobile.bjc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citrixmobile.bjc.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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