www.northernfunds.com

- Northern Trust Corporation -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 08:36:40:6f:8f:18:ad:9d:60:3f:a1:54:6b:52:e6:26 was issued on by DigiCert Inc.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Northern Trust Corporation

Organization: Northern Trust Corporation
Organization unit: Information Security
State / Province: Illinois
Locality: Chicago
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:36:40:6f:8f:18:ad:9d:60:3f:a1:54:6b:52:e6:26
Serial Number (int): 10915514909467070962018600075463419430
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 1c:21:93:79:a0:4f:8a:9e:43:26:99:2d:52:4b:ab:42:bc:af:70:c6
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 6b:40:2b:56:01:84:92:63:04:9a:40:3c:e3:e0:88:78:17:aa:a5:c1
Fingerprint (sha256): 2e:d6:65:46:9d:eb:e0:d6:c0:44:f1:6e:2e:34:4d:ce:82:77:1a:20:42:00:29:4e:03:7c:81:b7:99:54:15:ec

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.northernfunds.com

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.northernfunds.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.northernfunds.com
northernfunds.com
web-xp3p-cdn.ntrs.com
www.col.ntrs.com
luxjobs.northerntrust.com
ts8.northerntrustopen.com
lyncdiscover.sem-uat.ntrs.com
rfp.northerntrust.com
www00410.ntrs.com
www00210.ntrs.com
www04410.ntrs.com
developers.northerntrust.com
www10910.ntrs.com
www53683.ntrs.com
www07510.ntrs.com
cdn.ntrs.com
securemail.ntrs.com
www06310.ntrs.com
ts8-ac.northerntrust.com
www50483.ntrs.com
www08110.ntrs.com
web-xp3i-pws.ntrs.com
web-xp3s-cdn.ntrs.com
m.northerntrust.com
ts8.fgr.northerntrust.com
www0383.ntrs.com
web-xp2i-pws.ntrs.com
ts8.m.northerntrust.com
www.thenortherntrust.com
www02110.ntrs.com
www99910.ntrs.com
www02410.ntrs.com
developer.ntrs.com
campaign.northerntrust.com
www06810.ntrs.com
ts8.northerntrust.com
www04210.ntrs.com
www06710.ntrs.com
cdn2.northerntrust.com
www04110.ntrs.com
www.northerninstitutionalfunds.com
www12010.ntrs.com
fgr.northerntrust.com
developer.northerntrust.com
www.northerntrustinvestments.com
developers.ntrs.com
www03110.ntrs.com
www11910.ntrs.com
fxpassport.ntrs.com
ts8.flexshares.com
m.ntrs.com
www-ac.northerntrust.com
www0683.ntrs.com
www02810.ntrs.com
www08210.ntrs.com
lyncext.sem-uat.ntrs.com
www05410.ntrs.com
www.northerntrust.com
www8083.ntrs.com
www0183.ntrs.com
www10410.ntrs.com
appls.ntrs.com
tsp.ntrs.com
www09810.ntrs.com
www.flexshares.com
www08610.ntrs.com
ts8.50southcapital.com
www0483.ntrs.com
www09910.ntrs.com
ofx.ntrs.com
www3983.ntrs.com
www03610.ntrs.com
www-ac.ntrs.com
wwwptl09-r5.ntrs.com
www02510.ntrs.com
web-xp3a-pws.ntrs.com
idf.ntrs.com
myplace.ntrs.com
www04510.ntrs.com
ts8.rfp.northerntrust.com
www00810.ntrs.com
www0583.ntrs.com
advisors.flexshares.com
cdn.northerntrust.com
cdn2.ntrs.com
www01010.ntrs.com
www01710.ntrs.com
www7083.ntrs.com
mobile.northerntrust.com
www53583.ntrs.com
www9083.ntrs.com
www55183.ntrs.com
web-xp3b-pws.ntrs.com
www7383.ntrs.com
www9783.ntrs.com
www53483.ntrs.com
www8983.ntrs.com

Other certificates including the domain name northernfunds.com

(limited to 100 certificates)
www.northernfunds.com
www.northernfunds.com
northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
northerntrust.com
www02710.ntrs.com
www02710.ntrs.com
www02710.ntrs.com
www02710.ntrs.com
www02710.ntrs.com
www.northernfunds.com
northerntrust.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www.northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www.northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
northerntrust.com
northerntrust.com
www.northernfunds.com
www02710.ntrs.com
www02710.ntrs.com
www.northernfunds.com
northerntrust.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
northerntrust.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
northerntrust.com
www.northerntrust.com
www02710.ntrs.com
www02710.ntrs.com
northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northerntrust.com
northerntrust.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
northerntrust.com
www.northernfunds.com
www.northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
northerntrust.com
www.northernfunds.com
www02710.ntrs.com
www02710.ntrs.com
www02710.ntrs.com
northerntrust.com
www02710.ntrs.com
www.northerntrust.com
www02710.ntrs.com
northerntrust.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www02710.ntrs.com

Certificate

The complete raw certificate details for www.northernfunds.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvB3wqKXjRKyKOG5Bu+MA
TM8IlfvFU9IhhPNyoRI0+hxjVeHHiYcyOpiAzJf1pj13z8QxIzWDYIkgwD51M7Ty
IGw+QPLCEof2qmm6ryR+OfKTAxzXpDoxChsw4vTqmVC/ucdtBBlpLIimsJTlsScm
Wd1CtZ/uxdlC91BEawxhi1/I4+y9UjPXAHPpSKv6jLylsTewBH1Wyb9FLeJSRoPX
JZ8j4R5Y7duDFeC94StZSHEduus6m3aQzkwn0EyAg5DQcCyP8h7xHB1otkkJ/6Vs
a7MLh/NUNIPGTLBlWtKJj3qLUJjqvsSXKp8pgTfgP7I5OmSOoLbCBZA19kk8D1YX
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10915514909467070962018600075463419430
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Northern Trust Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Security'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.northernfunds.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23747565334056761574512201077326694938524215770188786925170983849076540008709117948620998224480722621144406113139629186543786751544271884817396575918752095352865201284873723195408695849401645697352073867681421563398620420020272242510158428955452380883475583158702156346390298389406293952672584140875726795178261752988960527173318691574757796436820968831273057242598135961601231730924911440050219788608838913465792775272319544647320092822152304077991429754236937307681403866624401205943595939917590117940295085731288482662686474584140576722163257869731328797105299963965495649399155272730420790725911753940096492377903
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1c219379a04f8a9e4326992d524bab42bcaf70c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2022 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northernfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northernfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp3p-cdn.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.col.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxjobs.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts8.northerntrustopen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.sem-uat.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rfp.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www00410.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www00210.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www04410.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developers.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www10910.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www53683.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www07510.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securemail.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www06310.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts8-ac.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www50483.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www08110.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp3i-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp3s-cdn.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts8.fgr.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www0383.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2i-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts8.m.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thenortherntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www02110.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www99910.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www02410.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaign.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www06810.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts8.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www04210.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www06710.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn2.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www04110.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerninstitutionalfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www12010.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fgr.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrustinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developers.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www03110.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www11910.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxpassport.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts8.flexshares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-ac.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www0683.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www02810.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www08210.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncext.sem-uat.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www05410.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www8083.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www0183.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www10410.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appls.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsp.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www09810.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flexshares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www08610.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts8.50southcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www0483.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www09910.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofx.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3983.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www03610.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-ac.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl09-r5.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www02510.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp3a-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idf.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myplace.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www04510.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts8.rfp.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www00810.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www0583.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisors.flexshares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn2.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www01010.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www01710.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www7083.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www53583.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www9083.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www55183.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp3b-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www7383.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www9783.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www53483.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www8983.ntrs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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