kmbi.mykonicaminolta.com

- Konica Minolta Business Solutions U.S.A., Inc. -

Issued by VeriSign Class 3 International Server CA - G3

About this certificate

This digital certificate with serial number 73:18:7a:e7:3c:a6:09:b0:63:07:11:05:3d:80:8f:0a was issued on by VeriSign, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

Konica Minolta Business Solutions U.S.A., Inc.

Organization: Konica Minolta Business Solutions U.S.A., Inc.
Organization unit: KMBI
Organization unit: Terms of use at www.verisign.com/rpa (c)05
State / Province: New Jersey
Locality: Ramsey
Country: US

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 73:18:7a:e7:3c:a6:09:b0:63:07:11:05:3d:80:8f:0a
Serial Number (int): 152988327414317175576273975732422610698
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d7:9b:7c:d8:22:a0:15:f7:dd:ad:5f:ce:29:9b:58:c3:bc:46:00:b5

Fingerprint (sha1): a2:3a:f4:5a:e4:a1:a9:0d:4a:dc:7d:b6:03:b1:12:cb:42:b8:3f:43
Fingerprint (sha256): 2c:64:f4:30:37:bc:0c:7f:ab:11:63:78:18:aa:1c:a3:13:de:6d:fb:cf:91:f7:1e:e9:ea:b0:c2:85:98:8c:44

Issuing Certificate URL: http://SVRIntl-G3-aia.verisign.com/SVRIntlG3.cer

Revocation information

OCSP Server: http://ocsp.verisign.com
CRL Distribution Point: http://SVRIntl-G3-crl.verisign.com/SVRIntlG3.crl

Check the revocation status for certificate kmbi.mykonicaminolta.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kmbi.mykonicaminolta.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication
Netscape Server-Gated Cryptography

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kmbi.mykonicaminolta.com

Other certificates including the domain name mykonicaminolta.com

(limited to 100 certificates)
www.mykonicaminolta.com
atlas360.mykonicaminolta.com
www.mykonicaminolta.com
cronus360.mykonicaminolta.com
onyxweb.mykonicaminolta.com
ssdremqa.mykonicaminolta.com
chatrelay.mykonicaminolta.com
vpnsndbx.mykonicaminolta.com
crmwebdev.mykonicaminolta.com
kb.mykonicaminolta.com
lighthouse.mykonicaminolta.com
onyxweb.mykonicaminolta.com
wapps.mykonicaminolta.com
CD3310.mykonicaminolta.com
www.mykonicaminolta.com
onbasetest.mykonicaminolta.com
cscsupport.mykonicaminolta.com
crmweb.mykonicaminolta.com
crmweb.mykonicaminolta.com
cscsupport.mykonicaminolta.com
pwreset.mykonicaminolta.com
crmwebdev.mykonicaminolta.com
kmbi.mykonicaminolta.com
commerce.mykonicaminolta.com
remedyweb.mykonicaminolta.com
aep.mykonicaminolta.com
wapps.mykonicaminolta.com
kmbiq.mykonicaminolta.com
www.mykonicaminolta.com
participant.mykonicaminolta.com
atlas360.mykonicaminolta.com
crmweb.mykonicaminolta.com
ssdremqa.mykonicaminolta.com
kmbi.mykonicaminolta.com
aep.mykonicaminolta.com
onyxweb.mykonicaminolta.com
sequoia360.mykonicaminolta.com
ponferrada.mykonicaminolta.com
commerce.mykonicaminolta.com
zeus360.mykonicaminolta.com
cronus360.mykonicaminolta.com
wapps.mykonicaminolta.com
ssdremqa.mykonicaminolta.com
www.mykonicaminolta.com
www.mykonicaminolta.com
kmbi.mykonicaminolta.com
cronus360.mykonicaminolta.com
apps.mykonicaminolta.com
onbasetest.mykonicaminolta.com
acadiacpq.mykonicaminolta.com
connections.mykonicaminolta.com
zamora.mykonicaminolta.com
connections.mykonicaminolta.com
onbase.mykonicaminolta.com
wapps.mykonicaminolta.com
kmbi2.mykonicaminolta.com
opsserver.mykonicaminolta.com
kmkinetic.mykonicaminolta.com
cronus360.mykonicaminolta.com
kmbi2.mykonicaminolta.com
sms.mykonicaminolta.com
sms.mykonicaminolta.com
crmwebdev.mykonicaminolta.com
crmweb.mykonicaminolta.com
kmbiq.mykonicaminolta.com
participant.mykonicaminolta.com
cscsupport.mykonicaminolta.com
commerce.mykonicaminolta.com
kmkinetic.mykonicaminolta.com
cscsupportftp.mykonicaminolta.com
sms.mykonicaminolta.com
zaragosa.mykonicaminolta.com
util.mykonicaminolta.com
atlas360.mykonicaminolta.com
onyxweb.mykonicaminolta.com
wapps8.mykonicaminolta.com
zeus360.mykonicaminolta.com
aep.mykonicaminolta.com
kmbi2.mykonicaminolta.com
chatrelay.mykonicaminolta.com
kmkinetic.mykonicaminolta.com
atlas360.mykonicaminolta.com
cscsupport.mykonicaminolta.com
cscsupportftp.mykonicaminolta.com
kb.mykonicaminolta.com
wsauthp8.mykonicaminolta.com
zeus360.mykonicaminolta.com
zeus360.mykonicaminolta.com
onyxweb.mykonicaminolta.com
apps.mykonicaminolta.com
cscsupport.mykonicaminolta.com
onbase.mykonicaminolta.com
opsserver.mykonicaminolta.com
crmwebdev.mykonicaminolta.com
kmbiq.mykonicaminolta.com
connections.mykonicaminolta.com
onbase.mykonicaminolta.com
atlas360.mykonicaminolta.com
www.mykonicaminolta.com
kb.mykonicaminolta.com

Certificate

The complete raw certificate details for kmbi.mykonicaminolta.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSVOtBme4nQyNlEa8f/I
mvzlnjdyXZn6PBTsfB7ZFVTB4itMp40n0EtiZVxNfH1Dz7f2d26LV3NOha+rcjmx
8NcecmmtJG3tj3O5BzuOXDcGRmyijDJOqsh5WmDlcwPBwZ5XGuJm68JMQYLkJlGl
2gWFkA2jd25bHlIUvCBi41FqNEh/DEYVLrTgvnFih2yTwYisO7fZ4P68+NLiS+0M
MuJ+7sNYKAMmQpgbJ1jNl0FNTojfI5eC/kHubyqqIHB03ltUdJTxKnU1sWYkAbnU
LBzl/7sMhkeBAfEyzQ8I0XJaXfhy/PMpGIEx2yI7g8z5jOdgwdCb6SfTw2WCix9P
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 152988327414317175576273975732422610698
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)10'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 International Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-11-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Ramsey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Konica Minolta Business Solutions U.S.A., Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'KMBI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Terms of use at www.verisign.com/rpa (c)05'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'kmbi.mykonicaminolta.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23877436620748861961312891529997184086004730597427535753225765811477311710853814400610161266415206517596778505751722657073666622010826259497929178059687712966225398838207919303906505322618928794351760340291663657177056035580021233739814591875627944185890094132707913356316657555226323007349307227739080660228998549033157198579526958254699712549578274789865354222362641587348564957546045816730868199003909238811634503474065362429994312367872181262494837148791383853948803202643905220058473839881235538316643537497507424382478861601606044379385730122475316675545680889396537826215379811893717438205706244562675478515469
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kmbi.mykonicaminolta.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRIntl-G3-crl.verisign.com/SVRIntlG3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.4.1 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d79b7cd822a015f7ddad5fce299b58c3bc4600b5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRIntl-G3-aia.verisign.com/SVRIntlG3.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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