ka.kpmg.se
- KPMG AB -
Issued by VeriSign Class 3 Secure Server CA - G3
About this certificate
This digital certificate with serial number 0c:dd:ff:f4:a5:1b:14:af:61:ac:35:f1:23:02:2d:59 was issued on by VeriSign, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
KPMG AB
Organization:
KPMG AB
Organization unit: ITS
Organization unit: Terms of use at www.verisign.se/rpa (c)05
Organization unit: Authenticated by VeriSign
Organization unit: Member, VeriSign Trust Network
Organization unit: ITS
Organization unit: Terms of use at www.verisign.se/rpa (c)05
Organization unit: Authenticated by VeriSign
Organization unit: Member, VeriSign Trust Network
State / Province:
Stockholm
Locality: Stockholm
Country: SE
Locality: Stockholm
Country: SE
VeriSign, Inc.
Organization:
VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0c:dd:ff:f4:a5:1b:14:af:61:ac:35:f1:23:02:2d:59Serial Number (int): 17103424952373537337406865032769318233
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 0d:44:5c:16:53:44:c1:82:7e:1d:20:ab:25:f4:01:63:d8:be:79:a5
Fingerprint (sha1): f6:49:c4:28:c3:eb:9f:db:c0:b7:f7:b9:b6:a6:61:dd:b8:fd:41:e7
Fingerprint (sha256): 2a:fa:5f:67:5d:3d:6e:05:06:6e:b5:33:23:68:5f:8f:91:00:37:2e:40:14:1b:ec:1a:b7:54:34:6d:80:82:9b
Issuing Certificate URL: http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer
Revocation information
OCSP Server: http://ocsp.verisign.comCRL Distribution Point: http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl
Check the revocation status for certificate ka.kpmg.se
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ka.kpmg.se
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ka.kpmg.se
Other certificates including the domain name kpmg.se
(limited to 100 certificates)
*.kpmg.se
ka.kpmg.se
access.lync.omvideo.se
sipfed.kpmg.com
mi.kpmg.se
sentry.kpmg.se
sft.kpmg.se
ef.kpmg.se
sipfed.kpmg.com
Sip.kpmg.com
sip-ema.kpmg.com
ka.kpmg.se
sipfed.kpmg.com
*.kpmg.se
*.kpmg.se
indecon.kpmg.se
cdpapp1.kpmg.se
access.lync.omvideo.se
sipfed.kpmg.com
sft.kpmg.se
*.kpmg.se
info.kpmg.se
sipfed-ema2.kpmg.com
apimgmt.kpmg.se
access.lync.omvideo.se
video.kpmg.se
ef.kpmg.se
ka2.kpmg.se
sipfed-ema2.kpmg.com
*.kpmg.se
sipfed-ema2.kpmg.com
access.lync.omvideo.se
*.kpmg.se
sentry.kpmg.se
sip-amr.kpmg.com
access.lync.omvideo.se
*.kpmg.se
gp.kpmg.se
*.kpmg.se
mi.kpmg.se
*.kpmg.se
sft.kpmg.se
access.lync.omvideo.se
dialogue.kpmg.se
sip-ema2.kpmg.com
*.kpmg.se
info.kpmg.se
Sip.kpmg.com
access.lync.omvideo.se
sip-ema3.kpmg.com
xmpp.vm.omvideo.se
sipfed.kpmg.com
access.lync.omvideo.se
info.kpmg.se
info.kpmg.se
sft.kpmg.se
ka.kpmg.se
access.lync.omvideo.se
sipfed.kpmg.com
mi.kpmg.se
sentry.kpmg.se
sft.kpmg.se
ef.kpmg.se
sipfed.kpmg.com
Sip.kpmg.com
sip-ema.kpmg.com
ka.kpmg.se
sipfed.kpmg.com
*.kpmg.se
*.kpmg.se
indecon.kpmg.se
cdpapp1.kpmg.se
access.lync.omvideo.se
sipfed.kpmg.com
sft.kpmg.se
*.kpmg.se
info.kpmg.se
sipfed-ema2.kpmg.com
apimgmt.kpmg.se
access.lync.omvideo.se
video.kpmg.se
ef.kpmg.se
ka2.kpmg.se
sipfed-ema2.kpmg.com
*.kpmg.se
sipfed-ema2.kpmg.com
access.lync.omvideo.se
*.kpmg.se
sentry.kpmg.se
sip-amr.kpmg.com
access.lync.omvideo.se
*.kpmg.se
gp.kpmg.se
*.kpmg.se
mi.kpmg.se
*.kpmg.se
sft.kpmg.se
access.lync.omvideo.se
dialogue.kpmg.se
sip-ema2.kpmg.com
*.kpmg.se
info.kpmg.se
Sip.kpmg.com
access.lync.omvideo.se
sip-ema3.kpmg.com
xmpp.vm.omvideo.se
sipfed.kpmg.com
access.lync.omvideo.se
info.kpmg.se
info.kpmg.se
sft.kpmg.se
Certificate
The complete raw certificate details for ka.kpmg.se in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgIQDN3/9KUbFK9hrDXxIwItWTANBgkqhkiG9w0BAQUFADCB tTELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQL ExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1c2Ug YXQgaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYSAoYykxMDEvMC0GA1UEAxMm VmVyaVNpZ24gQ2xhc3MgMyBTZWN1cmUgU2VydmVyIENBIC0gRzMwHhcNMTIwOTA2 MDAwMDAwWhcNMTMwOTA2MjM1OTU5WjCB6zELMAkGA1UEBhMCU0UxEjAQBgNVBAgT CVN0b2NraG9sbTESMBAGA1UEBxQJU3RvY2tob2xtMRAwDgYDVQQKFAdLUE1HIEFC MQwwCgYDVQQLFANJVFMxMjAwBgNVBAsUKVRlcm1zIG9mIHVzZSBhdCB3d3cudmVy aXNpZ24uc2UvcnBhIChjKTA1MSIwIAYDVQQLExlBdXRoZW50aWNhdGVkIGJ5IFZl cmlTaWduMScwJQYDVQQLEx5NZW1iZXIsIFZlcmlTaWduIFRydXN0IE5ldHdvcmsx EzARBgNVBAMUCmthLmtwbWcuc2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDMeEZQcb03oddUW6+B3TAexZcFvXu5fzuPKVTMT65IVUg/e8RxRTkIel3Z nuoZG+lnqt8GClHuPt8STH1LNi8gXPtw/LD6SO2m/FRFSu7D5vaPX9DLyvz2E6kU 5ZbmBbkevrwX9qJfvqxuI7JSKqtIFbJ3VAwdYa/VgcOPpW6nKbv2RQzO9J4OtqFb +Mh/bDn0N1RacVSJidJByZyskCrI14w2qgxtiGBxRpbx0g0EvqDM4keyjKFsfhZw u/hyLdbtwH+Kny+Bzq+MOWNIZevacrkzPxxWdwmf2jQefEVsNEul0eBZMl1HN1WF lxTkHZghlYKDjUgY5HihBe8YpcGLAgMBAAGjggF6MIIBdjAVBgNVHREEDjAMggpr YS5rcG1nLnNlMAkGA1UdEwQCMAAwDgYDVR0PAQH/BAQDAgWgMEUGA1UdHwQ+MDww OqA4oDaGNGh0dHA6Ly9TVlJTZWN1cmUtRzMtY3JsLnZlcmlzaWduLmNvbS9TVlJT ZWN1cmVHMy5jcmwwQwYDVR0gBDwwOjA4BgpghkgBhvhFAQc2MCowKAYIKwYBBQUH AgEWHGh0dHBzOi8vd3d3LnZlcmlzaWduLmNvbS9jcHMwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFA1EXBZTRMGCfh0gqyX0AWPYvnml MHYGCCsGAQUFBwEBBGowaDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AudmVyaXNp Z24uY29tMEAGCCsGAQUFBzAChjRodHRwOi8vU1ZSU2VjdXJlLUczLWFpYS52ZXJp c2lnbi5jb20vU1ZSU2VjdXJlRzMuY2VyMA0GCSqGSIb3DQEBBQUAA4IBAQCGMz2O lwV4wZ2zn208u5pOQn+FAnepdTX8o88oLzFOXHNHmn2H9Bck0bUxlSbLm4GW72qY AbN1JAexZTJYpuuWitQJ4N7ks5UZNmRszp5f6fOB7YBOcWGgEI4fyUK+EE10G1RI S790MFlDfb1jveSagPOLHvVbHrmx/MzL2X7Mokc3oycXa1MWZ9JkqY6v74Jvclh5 0IfqlFEbMm7pQkdawhwWCxAqGlIoD015sSdTBFfZmNq/24gqF5uz35pAGO/DvClZ AO2ZZbRViRmMkzDFZrc99PR9FZKjY2rKYTA3yFGmn8rbOaT+WKFcaHdPmDlXszOk MmoBScfq1U4csCV8 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHhGUHG9N6HXVFuvgd0w HsWXBb17uX87jylUzE+uSFVIP3vEcUU5CHpd2Z7qGRvpZ6rfBgpR7j7fEkx9SzYv IFz7cPyw+kjtpvxURUruw+b2j1/Qy8r89hOpFOWW5gW5Hr68F/aiX76sbiOyUiqr SBWyd1QMHWGv1YHDj6Vupym79kUMzvSeDrahW/jIf2w59DdUWnFUiYnSQcmcrJAq yNeMNqoMbYhgcUaW8dINBL6gzOJHsoyhbH4WcLv4ci3W7cB/ip8vgc6vjDljSGXr 2nK5Mz8cVncJn9o0HnxFbDRLpdHgWTJdRzdVhZcU5B2YIZWCg41IGOR4oQXvGKXB iwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 17103424952373537337406865032769318233 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)10' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 Secure Server CA - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-09-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-09-06 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stockholm' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Stockholm' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'KPMG AB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'ITS' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Terms of use at www.verisign.se/rpa (c)05' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Authenticated by VeriSign' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Member, VeriSign Trust Network' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'ka.kpmg.se' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25811923860879677906156879786542561248283234712337168917771596477434273434683771171707337810942485866014689812952526344144639037509904563414086540760537898467272872883385407513773376584657273254871196314982754543506567903302787610801346549626095014192390100514513024464872955505462176549747231808604001599812455807335786733829189385731152727747119470776987120545619027734803451976558091508490632040010024467136043049469366796121738356220095617508511801496341570460391847905314968185219010992203928831977851280296570716694259686256293342210992229794726905176796351263362152467882808661893268346974681990980828146286987 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ka.kpmg.se' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/cps' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d445c165344c1827e1d20ab25f40163d8be79a5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.verisign.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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