www.staging-acl.aon.co.uk

- Aon Limited -

Issued by

About this certificate

This digital certificate with serial number 0f:04:d1:44:2f:f2:20:49:71:12:de:b6:3e:63:ac:9c was issued on by VeriSign Trust Network.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • CAs must include keyIdentifer field of AKI in all non-self-issued certificates (RFC 5280: 4.2.1.1)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Aon Limited

Organization: Aon Limited
Organization unit: Member, VeriSign Trust Network
Organization unit: Terms of use at www.verisign.co.uk/rpa (c)05
Organization unit: Authenticated by VeriSign
Organization unit: Member, VeriSign Trust Network
State / Province: London
Locality: London
Country: GB

VeriSign Trust Network

Organization: VeriSign Trust Network
Organization unit: VeriSign, Inc.
Organization unit: VeriSign International Server CA - Class 3
Organization unit: www.verisign.com/CPS Incorp.by Ref. LIABILITY LTD.(c)97 VeriSign

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:04:d1:44:2f:f2:20:49:71:12:de:b6:3e:63:ac:9c
Serial Number (int): 19963433550168599553602336475995942044
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId:
AuthorityKeyId:

Fingerprint (sha1): 14:4a:80:3b:32:ef:b4:cc:0c:dd:c4:fc:46:13:8e:1a:8b:e7:a8:cd
Fingerprint (sha256): 31:96:54:e9:2a:49:97:a1:46:42:ed:57:0c:5d:06:5b:87:cb:05:d4:fb:11:69:c1:72:10:d3:91:88:b8:0f:e0

Issuing Certificate URL: http://SVRIntl-aia.verisign.com/SVRIntl-aia.cer

Revocation information

OCSP Server: http://ocsp.verisign.com
CRL Distribution Point: http://SVRIntl-crl.verisign.com/SVRIntl.crl

Check the revocation status for certificate www.staging-acl.aon.co.uk

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.staging-acl.aon.co.uk

Public Key Algorithm

RSA

Key Size

1024

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication
Netscape Server-Gated Cryptography

Extensions

7 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name aon.co.uk

(limited to 100 certificates)
www.staging-acl.aon.co.uk
staging-secure.aon.co.uk
www.che.aon.co.uk
www.maintenance.aon.co.uk
www.securepgp.aon.co.uk
www.staging-cashreceiptpreload.aon.co.uk
www.bi.aon.co.uk
caggateway1.aon.co.uk
staging-acrash.aon.co.uk
ipse.aon.co.uk
www.securepgp.aon.co.uk
insurance.aon.co.uk
maven.aon.co.uk
www.maintenance.aon.co.uk
www.soap.aon.co.uk
www.aviationcertificates.aon.co.uk
www.cashreceiptpreload.aon.co.uk
staging-mediaandentertainment.secureaffinity.aon.co.uk
www.dataextraction.aon.co.uk
aoncentre-roombooking.aon.co.uk
secure.aon.co.uk
acrash.aon.co.uk
acrash.aon.co.uk
www.riskmaps.aon.co.uk
www.bi.aon.co.uk
myview.aon.co.uk
acrash.aon.co.uk
www.staging-soap.aon.co.uk
www.bi.aon.co.uk
drpax.secureaffinity.aon.co.uk
www.staging-cargonet.aon.co.uk
www.dataextraction.aon.co.uk
staging.applyonline.aon.co.uk
www.prionestop.aon.co.uk
insurance.aon.co.uk
www.staging-riskmaps.aon.co.uk
www.riskmaps.aon.co.uk
www.uat-ecm.aon.co.uk
www.cashreceiptpreload.aon.co.uk
www.ecmws.aon.co.uk
accountantspi.secureaffinity.aon.co.uk
insurance.aon.co.uk
acrashreporting.aon.co.uk
act.aon.co.uk
www.staging-gauss-web.aon.co.uk
uat.cm.insurance.aon.co.uk
www.securepgp.aon.co.uk
valiant.aon.co.uk
www.staging-dataextraction.aon.co.uk
www.staging-globe-web.aon.co.uk
www.staging-aviationcertificates.aon.co.uk
www.staging-clientarrival.aon.co.uk
www.uat-ecmws.aon.co.uk
uat-aoncentre-roombooking.aon.co.uk
www.staging-cashreceiptpreload.aon.co.uk
www.docex.aon.co.uk
www.docex-link.aon.co.uk
oscar.aon.co.uk
accountantspi.secureaffinity.aon.co.uk
www.dataextraction.aon.co.uk
www.ecm.aon.co.uk
www.staging-bi.aon.co.uk
maven.aon.co.uk
www.staging-acl.aon.co.uk
www.securepgp.aon.co.uk
insurance.aon.co.uk
www.bi.aon.co.uk
www.apr.aon.co.uk
www.riskmaps.aon.co.uk
www.cargonet.aon.co.uk
www.grc.aon.co.uk
uat-aoncentre-roombooking.aon.co.uk
www.aviationcertificates.aon.co.uk
staging-act.aon.co.uk
www.prionestop.aon.co.uk
www.staging-cargonet.aon.co.uk
www.staging-dataextraction.aon.co.uk
www.staging-bankreconutility.aon.co.uk
www.apr.aon.co.uk
staging-aoncarrierlink.aon.co.uk
act.aon.co.uk
www.staging-grc.aon.co.uk
www.staging-service.aon.co.uk
acrash.aon.co.uk
www.prionestop.aon.co.uk
www.globe-web.aon.co.uk
www.staging-securepgp.aon.co.uk
valiant.aon.co.uk
www.docex-link.aon.co.uk
tradesman.secureaffinity.aon.co.uk
www.staging-globe-web.aon.co.uk
staging-secure.aon.co.uk
secure.aon.co.uk
www.staging-gauss-web.aon.co.uk
insolvencyandrestructuring.aon.co.uk
www.maintenance.aon.co.uk
www.staging-aviationcertificates.aon.co.uk
pax.secureaffinity.aon.co.uk
www.staging-soap.aon.co.uk
emeaapps1.aon.co.uk

Certificate

The complete raw certificate details for www.staging-acl.aon.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC8uKIpFe8yDaWOaWMd8h05DG7C
y1hyI4nxENhNLDyIr81ewuEsQ4q0xTjMh5pmj5tKFlwXVTufUxOsHQQ1jWGq6fPK
lR+2y4eQrhl8cA3/P1+R8bD0NZVeo8TXkaCknpDJ8SW1Aqgxf+LqtJobuMgMtpD1
erhK3VQk179BsTLudQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19963433550168599553602336475995942044
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign International Server CA - Class 3'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.verisign.com/CPS Incorp.by Ref. LIABILITY LTD.(c)97 VeriSign'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2010-07-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-08-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Aon Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Member, VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at www.verisign.co.uk/rpa (c)05'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Authenticated by VeriSign'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Member, VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'www.staging-acl.aon.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1120 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 132524550569398240023729337641827695223620362337361577751459821940074811841452324552005439721138656441512697839409168279168349610158040900168559065410489971454696826787657744450097315759884083163879115344663247474496795682456705017023143411480552806403900785778195106265928834678175950973181022192807428943477
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.23.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.co.uk/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRIntl-crl.verisign.com/SVRIntl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.4.1 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRIntl-aia.verisign.com/SVRIntl-aia.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/gif'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															4b6bb92896060cbbd052389b29ac4b078b210518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://logo.verisign.com/vslogo1.gif'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (1024 bits)
		001e21c614e19e2424bf2a08fd9481ae7be6a2c14b6c83c23799c3cae1ce3ec2210195527d7fa24823bd010d5db0d24d89f2585215e514f76ff5793912a42f94c8721ecb066a833102e26dc76c4fb487dfd3e7a3b88a8c38d8d6455c565b7021aafe1b19aa9151b97a8d503755143627f406641ada125c6d1c829829ad4cb39cdb