mailhk.swireproperties.com

- Swire Properties Ltd. -

Issued by VeriSign Class 3 International Server CA - G3

About this certificate

This digital certificate with serial number 79:6c:15:55:9e:ba:ab:cd:c9:0a:f5:98:f1:d8:e5:ac was issued on by VeriSign, Inc..

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • CAs must include keyIdentifer field of AKI in all non-self-issued certificates (RFC 5280: 4.2.1.1)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Swire Properties Ltd.

Organization: Swire Properties Ltd.
Organization unit: eServices
State / Province: Hong Kong
Locality: Hong Kong
Country: HK

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 79:6c:15:55:9e:ba:ab:cd:c9:0a:f5:98:f1:d8:e5:ac
Serial Number (int): 161397788264816375477748155134422607276
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId:

Fingerprint (sha1): f4:ee:87:70:1b:94:84:9a:e3:55:75:77:e9:92:ed:08:82:7f:df:32
Fingerprint (sha256): 2f:36:2e:98:24:d3:e5:4e:f5:b5:e1:2f:6e:13:cd:35:e8:dd:a5:5d:b9:a5:6a:37:1e:8d:8a:eb:31:f8:a3:5b

Issuing Certificate URL: http://SVRIntl-G3-aia.verisign.com/SVRIntlG3.cer

Revocation information

OCSP Server: http://ocsp.verisign.com
CRL Distribution Point: http://SVRIntl-G3-crl.verisign.com/SVRIntlG3.crl

Check the revocation status for certificate mailhk.swireproperties.com

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mailhk.swireproperties.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Netscape Server-Gated Cryptography
Microsoft Server-Gated Cryptography
Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mailhk.swireproperties.com
autodiscover.swireproperties.com
autodiscover.taikoohui.com
autodiscover.swirehotels.com
autodiscover.indigobeijing.com
autodiscover.cdqianhao.com
mail2003.swireproperties.com

Other certificates including the domain name swireproperties.com

(limited to 100 certificates)
www.soomapp.com.hk
swire-uat.eventxtra.co
mailhk.swireproperties.com
adfs.swireproperties.com
hometownheroes.lb-swireproperties.com
splinks.swireproperties.com
www.swireproperties.com
tenant.swireproperties.com
www.swireproperties.com
www.swireproperties.com
mailhk.swireproperties.com
akamai-san207.exacttarget.com
www.soomapp.com.hk
sharehk.swireproperties.com
mailcn.swireproperties.com
mailhk.swireproperties.com
www.swireproperties.com
www.swireproperties.com
ext.swireproperties.com
www.soomapp.com.hk
sharehk.swireproperties.com
bi.swireproperties.com
akamai-san207.exacttarget.com
www.swireproperties.com
www.swireproperties.com
splsmtpgw02.swireproperties.com
remotehk.swireproperties.com
www.swireproperties.com
dts.swireproperties.com
www.swireproperties.com
sftp03.swireproperties.com
sharehk.swireproperties.com
www.soomapp.com.hk
*.swireproperties.com
sftp03.swireproperties.com
mailhk.swireproperties.com
www.soomapp.com.hk
sharehk.swireproperties.com
adfs.swireproperties.com
www.binarysolutions.com.hk
mailhk.swireproperties.com
irp.swireproperties.com
eclm.swireproperties.com
www.soomapp.com.hk
remotetest.swireproperties.com
hometownheroes.swireproperties.com
www.swireproperties.com
hometownheroes.lb-swireproperties.com
mailhk.swireproperties.com
sharehk.swireproperties.com
www.swireproperties.com
www.swireproperties.com
www.swireproperties.com
www.swireproperties.com
sgedm.swireproperties.com
www.swireproperties.com
etender.swireproperties.com
www.swireproperties.com
shshtmhduetto.hhl.gz.swireproperties.com
ir.swireproperties.com
www.soomapp.com.hk
www.swireproperties.com
splinks.swireproperties.com
www.soomapp.com.hk
remoteslt.swireproperties.com
www.swireproperties.com
splinks.swireproperties.com
mailhk.swireproperties.com
mailhk.swireproperties.com
securelogcn.swireproperties.com
e-Learning.swireproperties.com
mailhk.swireproperties.com
snib8fegl.wpc.edgecastcdn.net
uat-cms.swireproperties.com
sharehk.swireproperties.com
mailhk.swireproperties.com
www.swireproperties.com
www.soomapp.com.hk
hometownheroes.lb-swireproperties.com
www.swireproperties.com
eclm.swireproperties.com
mediaperspectives.swireproperties.com
www.swireproperties.com
mailhk.swireproperties.com
www.swireproperties.com
securelogin.swireproperties.com
www.swireproperties.com
www.swireproperties.com
remotehk.swireproperties.com
click.edm.swireproperties.com
shoppingplus.swireproperties.com
hometownheroes.lb-swireproperties.com
remotehk.swireproperties.com
50a-nft.swireproperties.com
www.swireproperties.com
mdmhk.swireproperties.com
click.edm.swireproperties.com
www.swireproperties.com
remotehk.swireproperties.com
remote.swireproperties.com

Certificate

The complete raw certificate details for mailhk.swireproperties.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGdzCCBV+gAwIBAgIQeWwVVZ66q83JCvWY8djlrDANBgkqhkiG9w0BAQUFADCB
vDELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQL
ExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1c2Ug
YXQgaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYSAoYykxMDE2MDQGA1UEAxMt
VmVyaVNpZ24gQ2xhc3MgMyBJbnRlcm5hdGlvbmFsIFNlcnZlciBDQSAtIEczMB4X
DTExMDQyMDAwMDAwMFoXDTEyMDQxOTIzNTk1OVowgY4xCzAJBgNVBAYTAkhLMRIw
EAYDVQQIEwlIb25nIEtvbmcxEjAQBgNVBAcUCUhvbmcgS29uZzEeMBwGA1UEChQV
U3dpcmUgUHJvcGVydGllcyBMdGQuMRIwEAYDVQQLFAllU2VydmljZXMxIzAhBgNV
BAMUGm1haWxoay5zd2lyZXByb3BlcnRpZXMuY29tMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAsI3WuSHegdCTvd0KIiIejBOsYK9v9DPsaKFGLmE5tHI0
fnZJyoLUtOBcKGA/5VIU2bF29uoIT4T6JYvE1S2lGbxUMjS5mqK4FMoSrRpRZKvM
RzCwkLyrji5GfUBfodfUQlE87Enr2+DYDZ0I/3OaaEbp9Y5G8DTJDTGwU99Pldfn
SOR76xCgRLhDKHlM6bL/Ks4XpoNYDvylv6Xj4pvbT7Dv5bUsU0bAit/loTz2tGA4
MYi7/7HhJm1lgtUbgd5Th49Jw5N0tqAoX27sIsmP/sJmFQThhC/D9LmshO8+XgxM
eFGCjNEOnMSwud8+wvfVrS+trkWH0x8FnriBKqU8awIDAQABo4ICnzCCApswgd0G
A1UdEQSB1TCB0oIabWFpbGhrLnN3aXJlcHJvcGVydGllcy5jb22CIGF1dG9kaXNj
b3Zlci5zd2lyZXByb3BlcnRpZXMuY29tghphdXRvZGlzY292ZXIudGFpa29vaHVp
LmNvbYIcYXV0b2Rpc2NvdmVyLnN3aXJlaG90ZWxzLmNvbYIeYXV0b2Rpc2NvdmVy
LmluZGlnb2JlaWppbmcuY29tghphdXRvZGlzY292ZXIuY2RxaWFuaGFvLmNvbYIc
bWFpbDIwMDMuc3dpcmVwcm9wZXJ0aWVzLmNvbTAJBgNVHRMEAjAAMAsGA1UdDwQE
AwIFoDBBBgNVHR8EOjA4MDagNKAyhjBodHRwOi8vU1ZSSW50bC1HMy1jcmwudmVy
aXNpZ24uY29tL1NWUkludGxHMy5jcmwwRAYDVR0gBD0wOzA5BgtghkgBhvhFAQcX
AzAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy52ZXJpc2lnbi5jb20vcnBhMDQG
A1UdJQQtMCsGCWCGSAGG+EIEAQYKKwYBBAGCNwoDAwYIKwYBBQUHAwEGCCsGAQUF
BwMCMHIGCCsGAQUFBwEBBGYwZDAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AudmVy
aXNpZ24uY29tMDwGCCsGAQUFBzAChjBodHRwOi8vU1ZSSW50bC1HMy1haWEudmVy
aXNpZ24uY29tL1NWUkludGxHMy5jZXIwbgYIKwYBBQUHAQwEYjBgoV6gXDBaMFgw
VhYJaW1hZ2UvZ2lmMCEwHzAHBgUrDgMCGgQUS2u5KJYGDLvQUjibKaxLB4shBRgw
JhYkaHR0cDovL2xvZ28udmVyaXNpZ24uY29tL3ZzbG9nbzEuZ2lmMA0GCSqGSIb3
DQEBBQUAA4IBAQCYhn3aXpzLBNY1DHWWPedWhIcheP2n241wRJI6XiH+xpcz2ANJ
Z713c3b/BmULsI3JGM05f6iZFGqkbFVVDXhVX/HGyOe+76HQ44NRF9rJnDv/dYfJ
aGMf7nX+xfoYhDormmuF3lt4xJqPM6vbDH/NbLJV6ZintTbSAj9VmtzYY7IUC6Uq
5srgqLiuj94Xa4hBJa0CHPtjPQAK/bMyOyS5Wi972Y73lTk3pJPN2VA5hNdhAyc5
8p5oEMIEsrKYYMaVwE9c0biZAUTpFEAjv1CqYYL20SkzUxNf7nXKKyJGl7uNkqCR
IUr/FIQBt+p1/OqycRi7Ld0DPYGeABXnXblL
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsI3WuSHegdCTvd0KIiIe
jBOsYK9v9DPsaKFGLmE5tHI0fnZJyoLUtOBcKGA/5VIU2bF29uoIT4T6JYvE1S2l
GbxUMjS5mqK4FMoSrRpRZKvMRzCwkLyrji5GfUBfodfUQlE87Enr2+DYDZ0I/3Oa
aEbp9Y5G8DTJDTGwU99PldfnSOR76xCgRLhDKHlM6bL/Ks4XpoNYDvylv6Xj4pvb
T7Dv5bUsU0bAit/loTz2tGA4MYi7/7HhJm1lgtUbgd5Th49Jw5N0tqAoX27sIsmP
/sJmFQThhC/D9LmshO8+XgxMeFGCjNEOnMSwud8+wvfVrS+trkWH0x8FnriBKqU8
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 161397788264816375477748155134422607276
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)10'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 International Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-04-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-04-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hong Kong'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Hong Kong'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Swire Properties Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'eServices'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'mailhk.swireproperties.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22287884974585673181486615765427150224710105397646046830437252173756215884495159524718943447067673610038695430040810927798218903773575949612510593961254069954073397190123737231800415859670457759958386986355275011859077483383961997955485372464623966278422610093795558872637622824685090345253895825799357629236871154496519951574329336879576034510510142385632010051794438580455294967432494998439756919064202719476762785061126931434488984462985401426769944648642629152614590436223745893704383380135734589156785125388167202639038249695655164086100828042502216673856086095004933458086764147045325020817345386245630403624043
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (213 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailhk.swireproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.swireproperties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.taikoohui.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.swirehotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.indigobeijing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.cdqianhao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail2003.swireproperties.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRIntl-G3-crl.verisign.com/SVRIntlG3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.23.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.4.1 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.3 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRIntl-G3-aia.verisign.com/SVRIntlG3.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/gif'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															4b6bb92896060cbbd052389b29ac4b078b210518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://logo.verisign.com/vslogo1.gif'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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