www.northernfunds.com
- Northern Trust Corporation -
Issued by GeoTrust RSA CA 2018
About this certificate
This digital certificate with serial number 07:40:f9:2a:c7:51:e3:a9:f2:ba:95:68:98:d3:e0:f8 was issued on by DigiCert Inc.
With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Northern Trust Corporation
Organization:
Northern Trust Corporation
State / Province:
Illinois
Locality: Chicago
Country: US
Locality: Chicago
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 07:40:f9:2a:c7:51:e3:a9:f2:ba:95:68:98:d3:e0:f8Serial Number (int): 9641956678701290001608612866528895224
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: f6:74:7b:b2:76:5e:bf:99:4e:10:25:c6:f6:a0:ba:f9:9e:dc:ba:81
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5
Fingerprint (sha1): 0d:7c:be:66:90:29:24:a6:a0:7c:a1:29:b6:05:cf:92:53:9f:e2:25
Fingerprint (sha256): 2f:5c:84:b3:f4:50:20:ee:2d:13:d5:72:4d:c7:89:3e:1b:b7:dd:f9:ec:29:9f:3d:88:f6:78:c6:b9:70:da:aa
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl
Check the revocation status for certificate www.northernfunds.com
95
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.northernfunds.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.northernfunds.com
advisors.flexshares.com
applist.ntrs.com
campaign.northerntrust.com
careers.northerntrust.com
cdn.northerntrust.com
cdn.ntrs.com
cdn2.northerntrust.com
cdn2.ntrs.com
corporate.advisors.flexshares.com
corporate.careers.northerntrust.com
corporate.cdn.northerntrust.com
corporate.cdn.ntrs.com
corporate.fgr.northerntrust.com
corporate.flexshares.com
corporate.northerntrust.com
corporate.ntam.northerntrust.com
corporate.podcast.northerntrust.com
corporate.pointofview.northerntrust.com
corporate.rfp.northerntrust.com
developer.northerntrust.com
developer.ntrs.com
developers.northerntrust.com
developers.ntrs.com
docdistribution.ntrs.com
fgr.northerntrust.com
gatewayservice.xde.northerntrust.com
gpi.northerntrust.com
idf.ntrs.com
luxjobs.northerntrust.com
m.northerntrust.com
m.ntrs.com
mobile.northerntrust.com
myplace.ntrs.com
northernfunds.com
nsr.dw.ntrs.com
ntam.northerntrust.com
ofx.ntrs.com
paa.ntrs.com
podcast.northerntrust.com
pointofview.northerntrust.com
rfp.northerntrust.com
sda.essex.northerntrust.com
tsp.ntrs.com
web-xp2i-pws.ntrs.com
web-xp3a-pws.ntrs.com
web-xp3b-pws.ntrs.com
web-xp3i-pws.ntrs.com
web-xp3p-cdn.ntrs.com
web-xp3s-cdn.ntrs.com
www-ac.northerntrust.com
www-ac.ntrs.com
www.col.ntrs.com
www.flexshares.com
www.northerninstitutionalfunds.com
www.northerntrust.com
www.northerntrustinvestments.com
www.ntam.northerntrust.com
www.thenortherntrust.com
www.tntimok.com
www00210.ntrs.com
www00410.ntrs.com
www00810.ntrs.com
www01010.ntrs.com
www01710.ntrs.com
www02110.ntrs.com
www02410.ntrs.com
www02510.ntrs.com
www02810.ntrs.com
www03110.ntrs.com
www03610.ntrs.com
www04110.ntrs.com
www04210.ntrs.com
www04410.ntrs.com
www04510.ntrs.com
www05410.ntrs.com
www06310.ntrs.com
www06710.ntrs.com
www06810.ntrs.com
www07510.ntrs.com
www08210.ntrs.com
www08610.ntrs.com
www09810.ntrs.com
www09910.ntrs.com
www10410.ntrs.com
www10910.ntrs.com
www11910.ntrs.com
www12010.ntrs.com
www53483.ntrs.com
www99910.ntrs.com
wwwc008.ntrs.com
wwwc042.ntrs.com
wwwc062.ntrs.com
wwwptl09-r5.ntrs.com
xde.northerntrust.com
advisors.flexshares.com
applist.ntrs.com
campaign.northerntrust.com
careers.northerntrust.com
cdn.northerntrust.com
cdn.ntrs.com
cdn2.northerntrust.com
cdn2.ntrs.com
corporate.advisors.flexshares.com
corporate.careers.northerntrust.com
corporate.cdn.northerntrust.com
corporate.cdn.ntrs.com
corporate.fgr.northerntrust.com
corporate.flexshares.com
corporate.northerntrust.com
corporate.ntam.northerntrust.com
corporate.podcast.northerntrust.com
corporate.pointofview.northerntrust.com
corporate.rfp.northerntrust.com
developer.northerntrust.com
developer.ntrs.com
developers.northerntrust.com
developers.ntrs.com
docdistribution.ntrs.com
fgr.northerntrust.com
gatewayservice.xde.northerntrust.com
gpi.northerntrust.com
idf.ntrs.com
luxjobs.northerntrust.com
m.northerntrust.com
m.ntrs.com
mobile.northerntrust.com
myplace.ntrs.com
northernfunds.com
nsr.dw.ntrs.com
ntam.northerntrust.com
ofx.ntrs.com
paa.ntrs.com
podcast.northerntrust.com
pointofview.northerntrust.com
rfp.northerntrust.com
sda.essex.northerntrust.com
tsp.ntrs.com
web-xp2i-pws.ntrs.com
web-xp3a-pws.ntrs.com
web-xp3b-pws.ntrs.com
web-xp3i-pws.ntrs.com
web-xp3p-cdn.ntrs.com
web-xp3s-cdn.ntrs.com
www-ac.northerntrust.com
www-ac.ntrs.com
www.col.ntrs.com
www.flexshares.com
www.northerninstitutionalfunds.com
www.northerntrust.com
www.northerntrustinvestments.com
www.ntam.northerntrust.com
www.thenortherntrust.com
www.tntimok.com
www00210.ntrs.com
www00410.ntrs.com
www00810.ntrs.com
www01010.ntrs.com
www01710.ntrs.com
www02110.ntrs.com
www02410.ntrs.com
www02510.ntrs.com
www02810.ntrs.com
www03110.ntrs.com
www03610.ntrs.com
www04110.ntrs.com
www04210.ntrs.com
www04410.ntrs.com
www04510.ntrs.com
www05410.ntrs.com
www06310.ntrs.com
www06710.ntrs.com
www06810.ntrs.com
www07510.ntrs.com
www08210.ntrs.com
www08610.ntrs.com
www09810.ntrs.com
www09910.ntrs.com
www10410.ntrs.com
www10910.ntrs.com
www11910.ntrs.com
www12010.ntrs.com
www53483.ntrs.com
www99910.ntrs.com
wwwc008.ntrs.com
wwwc042.ntrs.com
wwwc062.ntrs.com
wwwptl09-r5.ntrs.com
xde.northerntrust.com
Other certificates including the domain name northernfunds.com
(limited to 100 certificates)
www.northernfunds.com
www.northernfunds.com
northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
northerntrust.com
www02710.ntrs.com
www02710.ntrs.com
www02710.ntrs.com
www02710.ntrs.com
www02710.ntrs.com
www.northernfunds.com
northerntrust.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www.northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www.northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
northerntrust.com
northerntrust.com
www.northernfunds.com
www02710.ntrs.com
www02710.ntrs.com
www.northernfunds.com
northerntrust.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
northerntrust.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
northerntrust.com
www.northerntrust.com
www02710.ntrs.com
www02710.ntrs.com
northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northerntrust.com
northerntrust.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
northerntrust.com
www.northernfunds.com
www.northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
northerntrust.com
www.northernfunds.com
www02710.ntrs.com
www02710.ntrs.com
www02710.ntrs.com
northerntrust.com
www02710.ntrs.com
www.northerntrust.com
www02710.ntrs.com
northerntrust.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www02710.ntrs.com
www.northernfunds.com
northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
northerntrust.com
www02710.ntrs.com
www02710.ntrs.com
www02710.ntrs.com
www02710.ntrs.com
www02710.ntrs.com
www.northernfunds.com
northerntrust.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www.northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www.northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
northerntrust.com
northerntrust.com
www.northernfunds.com
www02710.ntrs.com
www02710.ntrs.com
www.northernfunds.com
northerntrust.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
northerntrust.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
northerntrust.com
www.northerntrust.com
www02710.ntrs.com
www02710.ntrs.com
northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northerntrust.com
northerntrust.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
northerntrust.com
www.northernfunds.com
www.northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
northerntrust.com
www.northernfunds.com
www02710.ntrs.com
www02710.ntrs.com
www02710.ntrs.com
northerntrust.com
www02710.ntrs.com
www.northerntrust.com
www02710.ntrs.com
northerntrust.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www02710.ntrs.com
Certificate
The complete raw certificate details for www.northernfunds.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIO1DCCDbygAwIBAgIQB0D5KsdR46nyupVomNPg+DANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe Fw0yMzExMDEwMDAwMDBaFw0yNDA2MjcyMzU5NTlaMHcxCzAJBgNVBAYTAlVTMREw DwYDVQQIEwhJbGxpbm9pczEQMA4GA1UEBxMHQ2hpY2FnbzEjMCEGA1UEChMaTm9y dGhlcm4gVHJ1c3QgQ29ycG9yYXRpb24xHjAcBgNVBAMTFXd3dy5ub3J0aGVybmZ1 bmRzLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ+rKrA5/NHx otxkkNwNF953OGBj5KWW/Z9l3OqMn5ii1Q6t9bGEeCGhTUX43hddxDfy37of3Vse stBfYSBQjRsKQoV3BMctqJZLkjJfG7cR272yf1IWnI/A3P2vO/+YeAB+Dc8WiWJX C1cl2vBvYjWGDsn+w2883rKH0DRWG8W/7UlRBX8qEF3CxVuv1fGm8I1iLpZa6aoh q9paWjaAzSU2jmiae05KAAKsjWBP1yX09heWyF3c40kvASh0dPDLZLvCYFQDR/tX 5Z3rodfXkEX/bZ+YnVm8qJDixKW7uLiNlznv08VMddsTqtuudPyRtZ9rB1bn9CHU WPELJ5mzRFMCAwEAAaOCC3MwggtvMB8GA1UdIwQYMBaAFJBY/7CcdahRVHex7fKj QxY4nmzFMB0GA1UdDgQWBBT2dHuydl6/mU4QJcb2oLr5nty6gTCCCHQGA1UdEQSC CGswgghnghV3d3cubm9ydGhlcm5mdW5kcy5jb22CF2Fkdmlzb3JzLmZsZXhzaGFy ZXMuY29tghBhcHBsaXN0Lm50cnMuY29tghpjYW1wYWlnbi5ub3J0aGVybnRydXN0 LmNvbYIZY2FyZWVycy5ub3J0aGVybnRydXN0LmNvbYIVY2RuLm5vcnRoZXJudHJ1 c3QuY29tggxjZG4ubnRycy5jb22CFmNkbjIubm9ydGhlcm50cnVzdC5jb22CDWNk bjIubnRycy5jb22CIWNvcnBvcmF0ZS5hZHZpc29ycy5mbGV4c2hhcmVzLmNvbYIj Y29ycG9yYXRlLmNhcmVlcnMubm9ydGhlcm50cnVzdC5jb22CH2NvcnBvcmF0ZS5j ZG4ubm9ydGhlcm50cnVzdC5jb22CFmNvcnBvcmF0ZS5jZG4ubnRycy5jb22CH2Nv cnBvcmF0ZS5mZ3Iubm9ydGhlcm50cnVzdC5jb22CGGNvcnBvcmF0ZS5mbGV4c2hh cmVzLmNvbYIbY29ycG9yYXRlLm5vcnRoZXJudHJ1c3QuY29tgiBjb3Jwb3JhdGUu bnRhbS5ub3J0aGVybnRydXN0LmNvbYIjY29ycG9yYXRlLnBvZGNhc3Qubm9ydGhl cm50cnVzdC5jb22CJ2NvcnBvcmF0ZS5wb2ludG9mdmlldy5ub3J0aGVybnRydXN0 LmNvbYIfY29ycG9yYXRlLnJmcC5ub3J0aGVybnRydXN0LmNvbYIbZGV2ZWxvcGVy Lm5vcnRoZXJudHJ1c3QuY29tghJkZXZlbG9wZXIubnRycy5jb22CHGRldmVsb3Bl cnMubm9ydGhlcm50cnVzdC5jb22CE2RldmVsb3BlcnMubnRycy5jb22CGGRvY2Rp c3RyaWJ1dGlvbi5udHJzLmNvbYIVZmdyLm5vcnRoZXJudHJ1c3QuY29tgiRnYXRl d2F5c2VydmljZS54ZGUubm9ydGhlcm50cnVzdC5jb22CFWdwaS5ub3J0aGVybnRy dXN0LmNvbYIMaWRmLm50cnMuY29tghlsdXhqb2JzLm5vcnRoZXJudHJ1c3QuY29t ghNtLm5vcnRoZXJudHJ1c3QuY29tggptLm50cnMuY29tghhtb2JpbGUubm9ydGhl cm50cnVzdC5jb22CEG15cGxhY2UubnRycy5jb22CEW5vcnRoZXJuZnVuZHMuY29t gg9uc3IuZHcubnRycy5jb22CFm50YW0ubm9ydGhlcm50cnVzdC5jb22CDG9meC5u dHJzLmNvbYIMcGFhLm50cnMuY29tghlwb2RjYXN0Lm5vcnRoZXJudHJ1c3QuY29t gh1wb2ludG9mdmlldy5ub3J0aGVybnRydXN0LmNvbYIVcmZwLm5vcnRoZXJudHJ1 c3QuY29tghtzZGEuZXNzZXgubm9ydGhlcm50cnVzdC5jb22CDHRzcC5udHJzLmNv bYIVd2ViLXhwMmktcHdzLm50cnMuY29tghV3ZWIteHAzYS1wd3MubnRycy5jb22C FXdlYi14cDNiLXB3cy5udHJzLmNvbYIVd2ViLXhwM2ktcHdzLm50cnMuY29tghV3 ZWIteHAzcC1jZG4ubnRycy5jb22CFXdlYi14cDNzLWNkbi5udHJzLmNvbYIYd3d3 LWFjLm5vcnRoZXJudHJ1c3QuY29tgg93d3ctYWMubnRycy5jb22CEHd3dy5jb2wu bnRycy5jb22CEnd3dy5mbGV4c2hhcmVzLmNvbYIid3d3Lm5vcnRoZXJuaW5zdGl0 dXRpb25hbGZ1bmRzLmNvbYIVd3d3Lm5vcnRoZXJudHJ1c3QuY29tgiB3d3cubm9y dGhlcm50cnVzdGludmVzdG1lbnRzLmNvbYIad3d3Lm50YW0ubm9ydGhlcm50cnVz dC5jb22CGHd3dy50aGVub3J0aGVybnRydXN0LmNvbYIPd3d3LnRudGltb2suY29t ghF3d3cwMDIxMC5udHJzLmNvbYIRd3d3MDA0MTAubnRycy5jb22CEXd3dzAwODEw Lm50cnMuY29tghF3d3cwMTAxMC5udHJzLmNvbYIRd3d3MDE3MTAubnRycy5jb22C EXd3dzAyMTEwLm50cnMuY29tghF3d3cwMjQxMC5udHJzLmNvbYIRd3d3MDI1MTAu bnRycy5jb22CEXd3dzAyODEwLm50cnMuY29tghF3d3cwMzExMC5udHJzLmNvbYIR d3d3MDM2MTAubnRycy5jb22CEXd3dzA0MTEwLm50cnMuY29tghF3d3cwNDIxMC5u dHJzLmNvbYIRd3d3MDQ0MTAubnRycy5jb22CEXd3dzA0NTEwLm50cnMuY29tghF3 d3cwNTQxMC5udHJzLmNvbYIRd3d3MDYzMTAubnRycy5jb22CEXd3dzA2NzEwLm50 cnMuY29tghF3d3cwNjgxMC5udHJzLmNvbYIRd3d3MDc1MTAubnRycy5jb22CEXd3 dzA4MjEwLm50cnMuY29tghF3d3cwODYxMC5udHJzLmNvbYIRd3d3MDk4MTAubnRy cy5jb22CEXd3dzA5OTEwLm50cnMuY29tghF3d3cxMDQxMC5udHJzLmNvbYIRd3d3 MTA5MTAubnRycy5jb22CEXd3dzExOTEwLm50cnMuY29tghF3d3cxMjAxMC5udHJz LmNvbYIRd3d3NTM0ODMubnRycy5jb22CEXd3dzk5OTEwLm50cnMuY29tghB3d3dj MDA4Lm50cnMuY29tghB3d3djMDQyLm50cnMuY29tghB3d3djMDYyLm50cnMuY29t ghR3d3dwdGwwOS1yNS5udHJzLmNvbYIVeGRlLm5vcnRoZXJudHJ1c3QuY29tMD4G A1UdIAQ3MDUwMwYGZ4EMAQICMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGln aWNlcnQuY29tL0NQUzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH AwEGCCsGAQUFBwMCMD4GA1UdHwQ3MDUwM6AxoC+GLWh0dHA6Ly9jZHAuZ2VvdHJ1 c3QuY29tL0dlb1RydXN0UlNBQ0EyMDE4LmNybDB1BggrBgEFBQcBAQRpMGcwJgYI KwYBBQUHMAGGGmh0dHA6Ly9zdGF0dXMuZ2VvdHJ1c3QuY29tMD0GCCsGAQUFBzAC hjFodHRwOi8vY2FjZXJ0cy5nZW90cnVzdC5jb20vR2VvVHJ1c3RSU0FDQTIwMTgu Y3J0MAwGA1UdEwEB/wQCMAAwggF/BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB2AHb/ iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABi4mQWtcAAAQDAEcwRQIh AMUdov9AmK/XZkPfT1dtNx3/Jwyc+cuMsUuo4wCo1iwoAiB/2xLp23z1VU+JFqbq Ck6CCmzEs7wBvyh2O+WOb1quWAB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7 v6s52IRzAAABi4mQWqUAAAQDAEcwRQIgUoS2+c1DccdVbf33ECSG20FzxyfCUo3d kiLxq4M3H3gCIQCI2sOMYzWBn4jRjGoc/TZs4l5sUmInxrCDgX2D8oHVIwB3ANq2 v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABi4mQWo8AAAQDAEgwRgIh AKl7cZC9ICpR7gxVl9StofrcL7qZuK7jhe6N9dEMSmkcAiEA4QxXZfr9rcDLrD0s 73ZKS73mvlXuBzt0v+kE2YCC7q8wDQYJKoZIhvcNAQELBQADggEBAIiJd3QBIVjY ealE+59dLuKvD7iMGnzvU5O8ihjQubSmdeJPcMunCOmMTsGW/Ny8zh9FKpP6JpMj L8wsSAiLvgAsrqBqCgvR4tygHPHT+VfBd/wdIc7PHaj+SsOs+rpvqOdj1oyJA4IN 3jBRF6HueGyGIJ1gLbrL9SxBjc9fgVJ+EJbXk2LintFWpbYjCFBu736rT6Re0I6E frHRSwKVl25wcV2DPzVsGjflEntB/DGSyAYP1Ns3GbS/86pXKhPz+M0P3U7dx2Md nLCAelCvpVvQW2ovwtMy2LF1BKZxV1q7aCw2oi0kZFv8tbydNkaXzLDWVIcU07gv ADpdhzRbf1Q= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6sqsDn80fGi3GSQ3A0X 3nc4YGPkpZb9n2Xc6oyfmKLVDq31sYR4IaFNRfjeF13EN/Lfuh/dWx6y0F9hIFCN GwpChXcExy2olkuSMl8btxHbvbJ/Uhacj8Dc/a87/5h4AH4NzxaJYlcLVyXa8G9i NYYOyf7DbzzesofQNFYbxb/tSVEFfyoQXcLFW6/V8abwjWIullrpqiGr2lpaNoDN JTaOaJp7TkoAAqyNYE/XJfT2F5bIXdzjSS8BKHR08Mtku8JgVANH+1flneuh19eQ Rf9tn5idWbyokOLEpbu4uI2XOe/TxUx12xOq2650/JG1n2sHVuf0IdRY8QsnmbNE UwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 9641956678701290001608612866528895224 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-01 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-27 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Northern Trust Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.northernfunds.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20156295960604535947864262241818500193595669117069251278284665951936378406325429415240235014621644042288029843301999056634097751087834260348538075307021724723370244334608226801377346025915060756175157456510125748772573445599995879780284608333244981778097380707932473772199165877340711277089080197809290295576064294420604401508295743856362203636802478169209732967700434125610973259531102837910250358519435681079879015204999460160783613925711831042275558912056800254865401282603140301039860022098100435731471889363391315560934653620332080201931545079439167785700170076326980020240620369507231973160291732428727971431507 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f6747bb2765ebf994e1025c6f6a0baf99edcba81 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2155 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northernfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisors.flexshares.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applist.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaign.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn2.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn2.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.advisors.flexshares.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.careers.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.cdn.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.cdn.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.fgr.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.flexshares.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.ntam.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.podcast.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.pointofview.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.rfp.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developers.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developers.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docdistribution.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fgr.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gatewayservice.xde.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpi.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idf.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxjobs.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myplace.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northernfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsr.dw.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntam.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofx.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paa.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podcast.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pointofview.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rfp.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sda.essex.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsp.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2i-pws.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp3a-pws.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp3b-pws.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp3i-pws.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp3p-cdn.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp3s-cdn.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-ac.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-ac.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.col.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flexshares.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerninstitutionalfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrustinvestments.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ntam.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thenortherntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tntimok.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www00210.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www00410.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www00810.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www01010.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www01710.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www02110.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www02410.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www02510.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www02810.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www03110.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www03610.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www04110.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www04210.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www04410.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www04510.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www05410.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www06310.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www06710.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www06810.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www07510.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www08210.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www08610.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www09810.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www09910.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www10410.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www10910.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www11910.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www12010.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www53483.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www99910.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwc008.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwc042.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwc062.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl09-r5.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xde.northerntrust.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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