webmail.fwcs.k12.in.us

- Fort Wayne Community Schools -

Issued by VeriSign Class 3 International Server CA - G3

About this certificate

This digital certificate with serial number 5a:d3:ec:ed:2b:8c:34:2e:bc:9a:a0:c8:59:06:cd:88 was issued on by VeriSign, Inc..

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

Fort Wayne Community Schools

Organization: Fort Wayne Community Schools
Organization unit: Technology
State / Province: Indiana
Locality: Fort Wayne
Country: US

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5a:d3:ec:ed:2b:8c:34:2e:bc:9a:a0:c8:59:06:cd:88
Serial Number (int): 120730899697011606328092205631622532488
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d7:9b:7c:d8:22:a0:15:f7:dd:ad:5f:ce:29:9b:58:c3:bc:46:00:b5

Fingerprint (sha1): 2e:be:2d:48:81:bf:ae:24:52:ed:8c:fd:58:6c:16:42:91:90:66:a5
Fingerprint (sha256): 30:09:c1:44:e5:f5:a8:0b:64:8d:7a:d8:9a:0c:6c:92:d5:52:81:e9:e5:cc:00:5a:c2:ff:ca:a4:e2:52:4a:fb

Issuing Certificate URL: http://SVRIntl-G3-aia.verisign.com/SVRIntlG3.cer

Revocation information

OCSP Server: http://ocsp.verisign.com
CRL Distribution Point: http://SVRIntl-G3-crl.verisign.com/SVRIntlG3.crl

Check the revocation status for certificate webmail.fwcs.k12.in.us

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.fwcs.k12.in.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication
Netscape Server-Gated Cryptography
Microsoft Server-Gated Cryptography

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.fwcs.k12.in.us
autodiscover.fwcs.k12.in.us
legacy.fwcs.k12.in.us
outlook.fwcs.k12.in.us

Other certificates including the domain name fwcs.k12.in.us

(limited to 100 certificates)
pinnacle.fwcs.k12.in.us
destiny.fwcs.k12.in.us
www.fwcs.k12.in.us
destiny.fwcs.k12.in.us
webauth.fwcs.k12.in.us
fwcs.k12.in.us
fwcs.k12.in.us
ifas.fwcs.k12.in.us
myfiles.fwcs.k12.in.us
gp.fwcs.k12.in.us
pd.fwcs.k12.in.us
*.fwcs.k12.in.us
vpn.fwcs.k12.in.us
sso.fwcs.k12.in.us
fwcs.k12.in.us
fwcs.k12.in.us
pinnacle.fwcs.k12.in.us
fwcs.k12.in.us
workforce.fwcs.k12.in.us
destiny.fwcs.k12.in.us
gp.fwcs.k12.in.us
powerschool.fwcs.k12.in.us
vpn.fwcs.k12.in.us
destiny.fwcs.k12.in.us
workforce.fwcs.k12.in.us
destiny.fwcs.k12.in.us
vpn.fwcs.k12.in.us
powerschool.fwcs.k12.in.us
webmail.fwcs.k12.in.us
workforce.fwcs.k12.in.us
gp-gw-int-01.fwcs.k12.in.us
webmail.fwcs.k12.in.us
fwcs.k12.in.us
workforce.fwcs.k12.in.us
fwcs.k12.in.us
workforce.fwcs.k12.in.us
fwcs.k12.in.us
sso.fwcs.k12.in.us
smtp-ext-01.fwcs.k12.in.us
webmail.fwcs.k12.in.us
sso.fwcs.k12.in.us
gp-gw-ext-01.fwcs.k12.in.us
pinnacle.fwcs.k12.in.us
workforce.fwcs.k12.in.us
myfiles.fwcs.k12.in.us
gp-gw-int-01.fwcs.k12.in.us
home.fwcs.k12.in.us
workforce.fwcs.k12.in.us
sso.fwcs.k12.in.us
pinnacle.fwcs.k12.in.us
destiny.fwcs.k12.in.us
webmail.fwcs.k12.in.us
hybrid.fwcs.k12.in.us
compass.fwcs.k12.in.us
www.fwcs.k12.in.us
fwcs.k12.in.us
pinnacle.fwcs.k12.in.us
hybrid.fwcs.k12.in.us
pinnacle.fwcs.k12.in.us
fwcs.k12.in.us
fwcsnet.fwcs.k12.in.us
www.fwcs.k12.in.us
vpn.fwcs.k12.in.us
destiny.fwcs.k12.in.us
sso.fwcs.k12.in.us
destiny.fwcs.k12.in.us
gp.fwcs.k12.in.us
www.fwcs.k12.in.us
home.fwcs.k12.in.us
powerschool.fwcs.k12.in.us
destiny.fwcs.k12.in.us
destiny.fwcs.k12.in.us
pd.fwcs.k12.in.us
fwcs.k12.in.us
destiny.fwcs.k12.in.us
vpn.fwcs.k12.in.us
pd.fwcs.k12.in.us
destiny.fwcs.k12.in.us
www.fwcs.k12.in.us
webmail.fwcs.k12.in.us
vpn.fwcs.k12.in.us
fwcsnet.fwcs.k12.in.us
gp.fwcs.k12.in.us
www.fwcs.k12.in.us
smtp-gw-02.fwcs.k12.in.us
fwcs.k12.in.us
powerschool.fwcs.k12.in.us
fwcs.k12.in.us
www.fortwayneschools.org
pinnacle.fwcs.k12.in.us
sso.fwcs.k12.in.us
gp.fwcs.k12.in.us
smtp-gw-02.fwcs.k12.in.us
fwcs.k12.in.us
smtp-gw-01.fwcs.k12.in.us
workforce.fwcs.k12.in.us
fwcs.k12.in.us
ts-gw-00.fwcs.k12.in.us
workforce.fwcs.k12.in.us
fwcs.k12.in.us

Certificate

The complete raw certificate details for webmail.fwcs.k12.in.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuw7/ZeUQjmJgUc+g2ubC
PCdA64y7HBKRAPA0gQJ0dvd8xL66K5w3q0g3j1Iz4Xlk3KBw79YdD1+0bqq5AY74
AjEIQ98yudcMQ29xfryJz/A77URCLETReyuWcT9Moy8OihsKPjftHmFOiXdLYRP7
RIketEoPflBG50WLSGjvreHRjmfDNtYO7UOfFPt67A9jQ5E8LUvNG3Ck2TaygyN7
RLbZePeJwrsNG108MCPs1GWPUVIr079JAf8cQyijPKmpJKr0aY2k5VgJDSb81Ngb
xOj8pFlAWsmpwxuy8f1fppdvP3CT5Z32as2HcWb0CyZzRM4m4TBTpRLln12UswVj
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 120730899697011606328092205631622532488
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)10'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 International Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-01-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Indiana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Fort Wayne'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Fort Wayne Community Schools'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'webmail.fwcs.k12.in.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23613958644786924311251579201538471636038174902680642890235498474798440224845882921423291169131242765306652693346237246858036178646584636090825787813559163541308757744190320952226902805252142851237874293276231048065928561752845937639220311374252248731499460337506644737322311716184305238963396787842679905576915511732178249765279223861124426794101145757485038986158441955047409285788799332756680444855892282340747711373785032271741511785073957894572736873712488153933495312753270814279962185540664173974966568163575361111421700799796257940182653047551211982896001484772016526267879582601288662507408399265942720570209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.fwcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.fwcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.fwcs.k12.in.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outlook.fwcs.k12.in.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.4.1 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.3 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d79b7cd822a015f7ddad5fce299b58c3bc4600b5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRIntl-G3-crl.verisign.com/SVRIntlG3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRIntl-G3-aia.verisign.com/SVRIntlG3.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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