wwww119.ntrs.com

- Northern Trust Corporation -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 03:ba:b7:cd:98:50:b4:ce:3d:fc:c7:a6:ea:f9:3c:3d was issued on by DigiCert Inc.

With 53 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Northern Trust Corporation

Organization: Northern Trust Corporation
State / Province: Illinois
Locality: Chicago
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ba:b7:cd:98:50:b4:ce:3d:fc:c7:a6:ea:f9:3c:3d
Serial Number (int): 4957179172912298626371363472185834557
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 81:cb:ab:9a:da:87:69:68:d2:d5:3f:05:de:9a:29:d9:2b:1c:39:c6
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 2b:64:89:bf:c1:1a:46:9c:5b:c0:c8:b7:0b:36:ca:1d:a8:3f:2b:33
Fingerprint (sha256): 22:6e:6b:74:c9:44:ca:91:9f:2c:b8:1b:9c:5d:5a:d0:45:dc:f0:dc:7f:c2:c8:82:7d:f4:b1:cb:61:da:f9:05

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate wwww119.ntrs.com

53

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wwww119.ntrs.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wwww119.ntrs.com
ach.xgateway.ntrs.com
aln-osj.ntrs.com
applistv1.ntrs.com
ark03-c.omnium.com
carbon.northerntrust.com
carbon.ntrs.com
careers.northerntrust.com
corporate.careers.northerntrust.com
corporate.fgr.northerntrust.com
corporate.images.northerntrust.com
corporate.pointofview.northerntrust.com
docdistribution.omnium.com
fxsdp.ntrs.com
gfp-osj.ntrs.com
gpi.az.northerntrust.com
gpi.cus.az.northerntrust.com
gpi.cus.northerntrust.com
gpi.eu2.az.northerntrust.com
gpi.eu2.northerntrust.com
images.northerntrust.com
investmentanalytics.northerntrust.com
investor-c.omnium.com
investorportal-c.omnium.com
ixs.ntam.northerntrust.com
login.artemis.ntrs.com
login.nux-investorportal.ntrs.com
myportfolio.artemisfunds.ntrs.com
nexus.northerntrust.com
nux-investorportal.ntrs.com
omnium-c.omnium.com
omnium-fo.ntrs.com
omnium-ht.ntrs.com
omnium-investor.ntrs.com
omnium-investorportal.ntrs.com
omnium.ntrs.com
omnium2.ntrs.com
omniumaccess-c.omnium.com
omniumdemo-ht.ntrs.com
omniumdemo.ntrs.com
pce.northerntrust.com
pde-ja.ntrs.com
pointofview.northerntrust.com
prod.flexshares.com
ptl-osj.ntrs.com
securemail.ntrs.com
www.eulogin.ntrs.com
www11910.ntrs.com
wwwc082.ntrs.com
wwwc087.ntrs.com
wwwt920.ntrs.com
wwwt923.ntrs.com
wwwt926.ntrs.com

Other certificates including the domain name ntrs.com

(limited to 100 certificates)
up12149.ntrs.com
wwwdam.ntrs.com
www4083.ntrs.com
www9783.ntrs.com
www15010.ntrs.com
wwwsecuridesi83a.ntrs.com
int02011.ntrs.com
npc1dnhfsn02.ent.ad.ntrs.com
int01011.ntrs.com
www04510.ntrs.com
www3683.ntrs.com
pandora-npc-prod1.ntrs.com
www0483.ntrs.com
inttsp.ntrs.com
wwwsry.ntrs.com
nia-uat.ntrs.com
ut61082.lux.ntrs.com
sdcwmap03.ent.ad.ntrs.com
ipl-aj83s-nmr.ntrs.com
www.northernfunds.com
www08210.ntrs.com
int04511.ntrs.com
api-cashdash-csint.ntrs.com
bca-doc-dev.ntrs.com
tct-t020-ipo7ls.ntrs.com
up85133.ntrs.com
www02810.ntrs.com
wpclncupool2.entuat.aduat.ntrs.com
ohs-iaj11l-c044.ntrs.com
www00710.ntrs.com
appwpcuprsa04.ntrs.com
wwwp02.ntrs.com
uat.northerntrust.com
UNJSPZ8.ntrs.com
idf.ntrs.com
UKRCVPSSL01.ntrs.com
gfb-uat.ntrs.com
ws-caguat2-ssl.wpc.ntrs.com
gfb-pcf-dev.ntrs.com
www0383.ntrs.com
grr-uat.ntrs.com
wwwwca11.ntrs.com
nespdp-uat.ntrs.com
ohs-xaj11l-w075.ntrs.com
DQT_WAS_PRD.ntrs.com
ohs-iaj11l-t102.ntrs.com
wpc02pnnutn101.ent.ad.ntrs.com
ohs-iaj11l-w217.ntrs.com
fgc-sys.ent.ad.ntrs.com
nwa-asym-ja.ntrs.com
wwwsry.ntrs.com
web-ipn45-gpi.ntrs.com
ipl-xaj83s-ww04.ntrs.com
appnpcupctd02.ntrs.com
TEST-ignore.ntrs.com
qcdashboard-csprod.ntrs.com
sys.fos.amzext.ntrs.com
mrr83.ntrs.com
nam.ntrs.com
MYAPPS.NTRS.COM
ohsiintw15.ntrs.com
gpe-encryption.jtgprod.ntrs.com
WPCAMERCER01.ntrs.com
ohs-xaj83l-ww88.ntrs.com
sdcavsu10.ent.ad.ntrs.com
servicesuat.ntrs.com
officewebapp-p.ntrs.com
intt041.ntrs.com
ohs-iaj11l-w203.ntrs.com
sdcavsu10.ent.ad.ntrs.com
sgsgvpn01.remote.ntrs.com
ohs-xap11l-t14.ntrs.com
www4183.ntrs.com
up13843.ntrs.com
wwwsry.ntrs.com
*.dev2.src.amzext.ntrs.com
ohs-xaj11l-w031.ntrs.com
ohs-xaj10l-w098.ntrs.com
ohs-iaj11l-t098.ntrs.com
ut87072.ntrs.com
services.ntrs.com
int04807.ntrs.com
idf-uat.lux.ntrs.com
fmz-sys.ntrs.com
ohs-iaj10l-t080.ntrs.com
www0383.ntrs.com
wls-w146-iaj11ls.appzone.wpc.ntrs.com
awp-uat.ntrs.com
prismukpcvdi.ent.ad.ntrs.com
ohs-iaj11l-dcc2.ntrs.com
up12149.ntrs.com
wwwp09.ntrs.com
ohs-xap10l-w00.ntrs.com
mrr83.ntrs.com
ohs-iaj11l-t012.ntrs.com
awp-prod.ntrs.com
txh-osj.ntrs.com
irl-icon10uat-dev.ntrs.com
ohs-iap10l-admint.ntrs.com
ciscouc-apac.ntrs.com

Certificate

The complete raw certificate details for wwww119.ntrs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEo8WtucjCd0KpOD7zx3cr8TNwEaZN
1MdWz08TASPsLNzaQz+Y09tYgh+sbjfm8HzOn3/lXz5TiYt0n3OWd0cHMQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4957179172912298626371363472185834557
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Northern Trust Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wwww119.ntrs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004a3c5adb9c8c27742a9383ef3c7772bf1337011a64dd4c756cf4f130123ec2cdcda433f98d3db58821fac6e37e6f07cce9f7fe55f3e53898b749f739677470731
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							81cbab9ada876968d2d53f05de9a29d92b1c39c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1303 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwww119.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ach.xgateway.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aln-osj.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applistv1.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ark03-c.omnium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carbon.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carbon.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.careers.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.fgr.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.images.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.pointofview.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docdistribution.omnium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxsdp.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gfp-osj.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpi.az.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpi.cus.az.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpi.cus.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpi.eu2.az.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpi.eu2.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investmentanalytics.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor-c.omnium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorportal-c.omnium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ixs.ntam.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.artemis.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.nux-investorportal.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myportfolio.artemisfunds.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nexus.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nux-investorportal.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omnium-c.omnium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omnium-fo.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omnium-ht.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omnium-investor.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omnium-investorportal.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omnium.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omnium2.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omniumaccess-c.omnium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omniumdemo-ht.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omniumdemo.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pce.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pde-ja.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pointofview.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.flexshares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptl-osj.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securemail.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eulogin.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www11910.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwc082.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwc087.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwt920.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwt923.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwt926.ntrs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ab74dbfc300000403004730450220121ffd3eb2b5433a0d38a832d2f2db9d5f7dab43bcaf72cab8c96ca87ef7a6ee022100fe5e1163cdc0af5aadf2ec96ab6947cd3272c0b9438debbc3f7569bddf19767f00770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ab74dbffb0000040300483046022100941d383d65ec3abf8efba7ec377194e5beae00a263ccfc171023909b5d2a3cfb022100ff6e8a3d63b7d792f3815f470fb7c0ab0c85e0782cab7894b834021424d4b7eb007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018ab74dbfbb0000040300473045022100e1c9481b26a778f00f425ea903dc45b41e80dbc2d335c052f053eeecef831a8c02202d4071c522e210485b0c6d8291136a68e7ccf3b3e6ee6e2cd2d9e9feac607b07
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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