owa.derpart.com

- REWE-Informations-Systeme GmbH -

Issued by VeriSign Class 3 Secure Server CA - G3

About this certificate

This digital certificate with serial number 20:75:f5:77:9f:c8:49:5a:ce:f7:10:3c:16:92:ca:47 was issued on by VeriSign, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

REWE-Informations-Systeme GmbH

Organization: REWE-Informations-Systeme GmbH
Organization unit: derpart
State / Province: Nordrhein-Westfalen
Locality: Köln
Country: DE

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 20:75:f5:77:9f:c8:49:5a:ce:f7:10:3c:16:92:ca:47
Serial Number (int): 43147773265520364755560349129250097735
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 0d:44:5c:16:53:44:c1:82:7e:1d:20:ab:25:f4:01:63:d8:be:79:a5

Fingerprint (sha1): ee:1c:74:9f:0f:aa:e8:d4:85:30:7b:76:d3:8b:57:e9:1e:df:e1:a0
Fingerprint (sha256): 2d:2a:e0:1a:62:95:07:9b:94:73:63:30:ee:57:2d:bb:da:ea:d3:40:a3:42:e1:3c:0b:d5:26:de:58:9b:47:c0

Issuing Certificate URL: http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer

Revocation information

OCSP Server: http://ocsp.verisign.com
CRL Distribution Point: http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl

Check the revocation status for certificate owa.derpart.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for owa.derpart.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

owa.derpart.com

Other certificates including the domain name derpart.com

(limited to 100 certificates)
touristik.derpart.com
tagesspiegel.kiosk.plus
mitteilungsblatt.seifert-medien.de
www.derpart.com
kiosk.am-weststrand.com
magazine.suncoastergroup.com
kiosk.am-weststrand.com
media.hirschmann-automotive.com
publications.cwgc.org
touristik.derpart.com
www.derpart.com
kiosk.der-kleine-georg.de
downloads.yspi.ie
fewo.derpart.com
kiosk.der-kleine-georg.de
quals.truebeck.com
www.digital.britishtraveljournal.com
kiosk.vidaglobal.de
magazin.tellz.me
dev.derpart.com
owa2.derpart.com
www.derpart.com
kiosk.vidaglobal.de
quals.truebeck.com
emag.indianjeweller.in
derpart.com
publikationen.contipark.de
publications.cwgc.org
flyer.aqua-dome.at
kundenmagazin.derpart.com
magazine.roarkidsmagazine.com
kiosk.vidaglobal.de
news.vdmno.de
owa.derpart.com
kiosk.vidaglobal.de
mitteilungsblatt.seifert-medien.de
publikationen.contipark.de
magazine.elektropraktiker.de
flyer.aqua-dome.at
kiosk.antalis-verpackungen.de
brochures.waterrower.co.uk
magazine.elektropraktiker.de
magazine.inversionesciel.com
publications.cwgc.org
touristik.derpart.com
kiosk.der-kleine-georg.de
kiosk.der-kleine-georg.de
brochure.ntpwarranty.com
wirbeicontipark.contipark.de
www.derpart.com
www.derpart.com
mitteilungsblatt.seifert-medien.de
imperva.com
magazine.cioa.com
kataloge.weilermoebel.at
downloads.yspi.ie
dev.derpart.com
imperva.com
owa2.derpart.com
katalog.gartenmode.de
flyer.aqua-dome.at
brochure.ntpwarranty.com
brochure.ntpwarranty.com
brochures.waterrower.co.uk
quals.truebeck.com
flyer.aqua-dome.at
www.derpart.com
publications.cwgc.org
mitteilungsblatt.seifert-medien.de
mitteilungsblatt.seifert-medien.de
brochures.keepmoat.com
kiosk.vidaglobal.de
magazine.cioa.com
wirbeicontipark.contipark.de
magazine.elektropraktiker.de
owa2.derpart.com
fewo.derpart.com
www.derpart.com
magazine.ausemergencyservices.com.au
kiosk.vidaglobal.de
kataloge.teppich-stark.de
owa2.derpart.com
ebooks.royalafricansafaris.com
bkdmno.vdmno.de
kiosk.der-kleine-georg.de
webkiosks.corshamprint.co.uk
publications.cwgc.org
kiosk.der-kleine-georg.de
emag.indianjeweller.in
owa2.derpart.com
magazine.legacylighthouse.org
tagesspiegel.kiosk.plus
kiosk.am-weststrand.com
kiosk.am-weststrand.com
kundenmagazin.derpart.com
www.derpart.com
news.vdmno.de
magazine.legacylighthouse.org
kiosk.am-weststrand.com
downloads.yspi.ie

Certificate

The complete raw certificate details for owa.derpart.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgIQIHX1d5/ISVrO9xA8FpLKRzANBgkqhkiG9w0BAQUFADCB
tTELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQL
ExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1c2Ug
YXQgaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYSAoYykxMDEvMC0GA1UEAxMm
VmVyaVNpZ24gQ2xhc3MgMyBTZWN1cmUgU2VydmVyIENBIC0gRzMwHhcNMTIxMDE3
MDAwMDAwWhcNMTQxMDE4MjM1OTU5WjCBkDELMAkGA1UEBhMCREUxHDAaBgNVBAgM
E05vcmRyaGVpbi1XZXN0ZmFsZW4xDjAMBgNVBAcMBUvDtmxuMScwJQYDVQQKDB5S
RVdFLUluZm9ybWF0aW9ucy1TeXN0ZW1lIEdtYkgxEDAOBgNVBAsMB2RlcnBhcnQx
GDAWBgNVBAMMD293YS5kZXJwYXJ0LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJua/WLqxSqUgwRppuhYt1hAFuZn35mTAIsTNlUkyUhPP7NzgNbW
ftiusP1iPlwnlo04VKzQW+wGhj36RzTkA7YAkdZdn6nOkbTdZkRkSC+7ZEC+GYtd
VNmMQHtDW37ID/BDUJ0CNHDhEjG748tXc0vwchY3K58PA5JhAebiI5cYaZhZYSxT
v/mJCrnxpnx09Jnoq1F87ZB596TeSAmzcVsB1/sXAF2ttKhaiMt4G+b5g8OQ0yiM
owTes3y1WpQXX9DHxg+ZtLv+0ukAJdjuuO3+brX3H83Km+GkRnfRTQtCwx29Fvjp
2hqsdn47G6gixOTvVZdcjQNSnoq5QpSAxOECAwEAAaOCAX8wggF7MBoGA1UdEQQT
MBGCD293YS5kZXJwYXJ0LmNvbTAJBgNVHRMEAjAAMA4GA1UdDwEB/wQEAwIFoDBF
BgNVHR8EPjA8MDqgOKA2hjRodHRwOi8vU1ZSU2VjdXJlLUczLWNybC52ZXJpc2ln
bi5jb20vU1ZSU2VjdXJlRzMuY3JsMEMGA1UdIAQ8MDowOAYKYIZIAYb4RQEHNjAq
MCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy52ZXJpc2lnbi5jb20vY3BzMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBQNRFwWU0TBgn4d
IKsl9AFj2L55pTB2BggrBgEFBQcBAQRqMGgwJAYIKwYBBQUHMAGGGGh0dHA6Ly9v
Y3NwLnZlcmlzaWduLmNvbTBABggrBgEFBQcwAoY0aHR0cDovL1NWUlNlY3VyZS1H
My1haWEudmVyaXNpZ24uY29tL1NWUlNlY3VyZUczLmNlcjANBgkqhkiG9w0BAQUF
AAOCAQEAAwu6KWmB/fp5oWd7eQWCBMrX0ash99oq6f17DyS2dWmDAkUCB1ISizJi
LmmYc7eBC7lh9H57roLVPeBx9z+h2Zl3yU0hwyYZY6kNhQq7k0dOgmQGdaEMuro7
wppFiCxVN29ufhUf05a+HZzFMr5WALAy1pfcG2kCWKmqcoyr5Z+p5qlnBbDE2jFt
Jf+FG77bfjyc9sgOIgEj0W6805z2waPpa1kMOnPAhiJVP2vIV5dH6EjWleqP5jJD
zUNOZe8Smyy61woZUKyiUYswcSyuUWIaeAlxJH7i69aGak+UriE1ObOkfRI6Fkjr
Y/tEptmECs54TqEARiXuAXuj44VjoA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5r9YurFKpSDBGmm6Fi3
WEAW5mffmZMAixM2VSTJSE8/s3OA1tZ+2K6w/WI+XCeWjThUrNBb7AaGPfpHNOQD
tgCR1l2fqc6RtN1mRGRIL7tkQL4Zi11U2YxAe0NbfsgP8ENQnQI0cOESMbvjy1dz
S/ByFjcrnw8DkmEB5uIjlxhpmFlhLFO/+YkKufGmfHT0meirUXztkHn3pN5ICbNx
WwHX+xcAXa20qFqIy3gb5vmDw5DTKIyjBN6zfLValBdf0MfGD5m0u/7S6QAl2O64
7f5utfcfzcqb4aRGd9FNC0LDHb0W+OnaGqx2fjsbqCLE5O9Vl1yNA1KeirlClIDE
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 43147773265520364755560349129250097735
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)10'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 Secure Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-10-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Köln'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'REWE-Informations-Systeme GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'derpart'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'owa.derpart.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19643365584008556698354873299876849417936176256874370745863043707000938539399079895102519909079018787967483982580225953433540867856432697673338400792552601513920742574643693554633317561020014270076372350395427872274970612021226770790154738610910659782862489295375450282555202386328589371238895215922306042201657971618006675540244155780940809202695307045871350238870060931889077688870566227350227656914409936192150355967602343270019185768422433002906873725733083934288560444066603348099463186646329589670709245935500671184127753760247505094886518394374639104681183108691395425341777622182945464560369743292991314904289
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.derpart.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d445c165344c1827e1d20ab25f40163d8be79a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00030bba296981fdfa79a1677b79058204cad7d1ab21f7da2ae9fd7b0f24b67569830245020752128b32622e699873b7810bb961f47e7bae82d53de071f73fa1d99977c94d21c3261963a90d850abb93474e82640675a10cbaba3bc29a45882c55376f6e7e151fd396be1d9cc532be5600b032d697dc1b690258a9aa728cabe59fa9e6a96705b0c4da316d25ff851bbedb7e3c9cf6c80e220123d16ebcd39cf6c1a3e96b590c3a73c08622553f6bc8579747e848d695ea8fe63243cd434e65ef129b2cbad70a1950aca2518b30712cae51621a780971247ee2ebd6866a4f94ae213539b3a47d123a1648eb63fb44a6d9840ace784ea1004625ee017ba3e38563a0