www.northernfunds.com

- Northern Trust Corporation -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 08:a4:7e:88:a5:bc:bf:f3:28:2e:62:de:19:16:47:7f was issued on by DigiCert Inc.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Northern Trust Corporation

Organization: Northern Trust Corporation
State / Province: Illinois
Locality: Chicago
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:a4:7e:88:a5:bc:bf:f3:28:2e:62:de:19:16:47:7f
Serial Number (int): 11487927061012411896794672910453589887
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a1:92:c2:7f:48:b2:ba:61:14:0f:7b:ec:01:6a:15:a7:48:25:12:80
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 2e:05:48:d9:8c:1e:1d:94:59:fc:57:7f:a7:1b:03:10:a2:4a:f4:64
Fingerprint (sha256): 28:48:71:53:5e:d8:47:da:cf:1c:44:d0:d7:c1:ae:9c:a5:c1:4d:75:fb:b3:bd:fd:69:b3:7b:9a:f0:58:d0:5b

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.northernfunds.com

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.northernfunds.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.northernfunds.com
northernfunds.com
myplace.ntrs.com
developer.northerntrust.com
ts8.northerntrustopen.com
www-ac.ntrs.com
www00210.ntrs.com
www.flexshares.com
cdn2.northerntrust.com
www09810.ntrs.com
corporate.advisors.flexshares.com
corporate.northerntrust.com
ts8.m.northerntrust.com
www09910.ntrs.com
rfp.northerntrust.com
omnium-investorportal.ntrs.com
navigation.dev.northerntrust.com
podcast.northerntrust.com
www10910.ntrs.com
www06710.ntrs.com
idf.ntrs.com
www99910.ntrs.com
campaign.northerntrust.com
www08210.ntrs.com
ts8-ac.northerntrust.com
www53483.ntrs.com
www.col.ntrs.com
omnium.ntrs.com
www03110.ntrs.com
signalrprime.dev.northerntrust.com
cdn.ntrs.com
www.northerninstitutionalfunds.com
ts8.rfp.northerntrust.com
www01710.ntrs.com
omnium-ht.ntrs.com
omnium-fo.ntrs.com
www04110.ntrs.com
advisors.flexshares.com
www.northerntrust.com
wwwptl09-r5.ntrs.com
www10410.ntrs.com
www11910.ntrs.com
web.dev.northerntrust.com
tsp.ntrs.com
developers.northerntrust.com
luxjobs.northerntrust.com
www06310.ntrs.com
www00410.ntrs.com
web-xp3p-cdn.ntrs.com
profile.dev.northerntrust.com
www.thenortherntrust.com
nsr.dw.ntrs.com
ts8.fgr.northerntrust.com
www05410.ntrs.com
omnium-investor.ntrs.com
www12010.ntrs.com
wwww119.ntrs.com
ts8.northerntrust.com
www02110.ntrs.com
developers.ntrs.com
web-xp3i-pws.ntrs.com
web-xp3b-pws.ntrs.com
wwwc042.ntrs.com
ofx.ntrs.com
m.ntrs.com
fgr.northerntrust.com
www02410.ntrs.com
connection.dev.northerntrust.com
ts8.50southcapital.com
www07510.ntrs.com
web-xp3s-cdn.ntrs.com
wwwc008.ntrs.com
corporate.flexshares.com
www03610.ntrs.com
developer.ntrs.com
www02510.ntrs.com
ts8.flexshares.com
www06810.ntrs.com
cdn2.ntrs.com
m.northerntrust.com
www.northerntrustinvestments.com
web-xp2i-pws.ntrs.com
www04410.ntrs.com
www02810.ntrs.com
omniumdemo-ht.ntrs.com
www08610.ntrs.com
mobile.northerntrust.com
cdn.northerntrust.com
www01010.ntrs.com
web-xp3a-pws.ntrs.com
corporate.podcast.northerntrust.com
omniumdemo.ntrs.com
www04210.ntrs.com
www04510.ntrs.com
omnium2.ntrs.com
www00810.ntrs.com
www-ac.northerntrust.com

Other certificates including the domain name northernfunds.com

(limited to 100 certificates)
www.northernfunds.com
www.northernfunds.com
northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
northerntrust.com
www02710.ntrs.com
www02710.ntrs.com
www02710.ntrs.com
www02710.ntrs.com
www02710.ntrs.com
www.northernfunds.com
northerntrust.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www.northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www.northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
northerntrust.com
northerntrust.com
www.northernfunds.com
www02710.ntrs.com
www02710.ntrs.com
www.northernfunds.com
northerntrust.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
northerntrust.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
northerntrust.com
www.northerntrust.com
www02710.ntrs.com
www02710.ntrs.com
northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northerntrust.com
northerntrust.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
northerntrust.com
www.northernfunds.com
www.northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
northerntrust.com
www.northernfunds.com
www02710.ntrs.com
www02710.ntrs.com
www02710.ntrs.com
northerntrust.com
www02710.ntrs.com
www.northerntrust.com
www02710.ntrs.com
northerntrust.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www02710.ntrs.com

Certificate

The complete raw certificate details for www.northernfunds.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFuUfNkJu9fzeFjBRE58
U62EhOLn/sIMHUdxhA9C96JGvHQpnwwAMqXblVRl0GeD8Ae80/noULNj+ZM/QErl
JkSEpQgMqE2VdoB9H2B4WUlpd2t32KcxaZXjFOzSDNuSx9MrJQPeY9g7/OjRy6Vo
Bwee59DGCN0IyrBLusowoZf5SxlQAnyBdrzcinC1n0WRU8W1ph+EujWUlJ9bYAxK
v1KynTcGJzoM/Rt7hV8qicgi76w4EPsBszt8u8ODp2JXTp9uQdqXvUAO1eEoAcWF
0TZfKPvDalQalvp/2aENU4fNeUJoTK6ogQQbGMWAEnPeu+Q98VAZUiTzCc+xCpW6
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11487927061012411896794672910453589887
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Northern Trust Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.northernfunds.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24787867569282111587254794253564410886007400721026074299222856914846417857753834595530402739180759262913214229975391053033949513483958961453532017751964172989933260274883018263931126010189752935458157073539157400947111763597608823606680290242685571582883673880396180824092880789385389530845919898799512792584929407919109904466711536155740033545351817708245166161395137497676910200510113198255353745068099064491062309704266887057626334837315173336303999297951308950242152709312525173852283069129189487885217027193240720642785116499984281467667790478760897259142487542126770447933109296562475681821776199768371075857029
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a192c27f48b2ba61140f7bec016a15a748251280
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northernfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northernfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myplace.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts8.northerntrustopen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-ac.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www00210.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flexshares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn2.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www09810.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.advisors.flexshares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts8.m.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www09910.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rfp.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omnium-investorportal.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navigation.dev.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podcast.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www10910.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www06710.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idf.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www99910.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaign.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www08210.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts8-ac.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www53483.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.col.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omnium.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www03110.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signalrprime.dev.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerninstitutionalfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts8.rfp.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www01710.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omnium-ht.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omnium-fo.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www04110.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisors.flexshares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl09-r5.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www10410.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www11910.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.dev.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsp.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developers.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxjobs.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www06310.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www00410.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp3p-cdn.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profile.dev.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thenortherntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsr.dw.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts8.fgr.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www05410.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omnium-investor.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www12010.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwww119.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts8.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www02110.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developers.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp3i-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp3b-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwc042.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofx.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fgr.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www02410.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connection.dev.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts8.50southcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www07510.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp3s-cdn.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwc008.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.flexshares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www03610.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www02510.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts8.flexshares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www06810.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn2.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrustinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2i-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www04410.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www02810.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omniumdemo-ht.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www08610.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www01010.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp3a-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.podcast.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omniumdemo.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www04210.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www04510.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omnium2.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www00810.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-ac.northerntrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d70000017574c9ccbf0000040300473045022000cd627432de91367a48c9175d6444fd81cfbaca62caadbc7de95bb5a166ed170221009ca94feb453f8e9419621a06dfad27058de3ad8fa9efd157d75506fdf50d9f3c0075005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca0000017574c9ccc500000403004630440220108f960d4b81d9d767e84d845ad5220ab71f19bb11a26455ad5394c41891fba402201b8d2e688cf8cd82230f02948432555e80088ba68a78368f3755f25d6d0d728c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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