www.cargo-net-ad-g.aioinissaydowa.co.jp

- Aioi Nissay Dowa Insurance Co.,Ltd -

Issued by VeriSign Class 3 International Server CA - G3

About this certificate

This digital certificate with serial number 38:16:a7:c0:30:79:f6:44:93:0d:5b:60:0f:36:49:2c was issued on by VeriSign, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

Aioi Nissay Dowa Insurance Co.,Ltd

Organization: Aioi Nissay Dowa Insurance Co.,Ltd
Organization unit: marine
Organization unit: Terms of use at www.verisign.com/rpa (c)05
State / Province: TOKYO
Locality: SHIBUYA-KU
Country: JP

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 38:16:a7:c0:30:79:f6:44:93:0d:5b:60:0f:36:49:2c
Serial Number (int): 74554400684056791120882025786649233708
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d7:9b:7c:d8:22:a0:15:f7:dd:ad:5f:ce:29:9b:58:c3:bc:46:00:b5

Fingerprint (sha1): 43:5f:29:ee:42:7b:4c:88:92:f7:c6:88:2f:d8:b3:53:e1:6d:72:1e
Fingerprint (sha256): 31:d0:fb:ca:c7:c5:aa:f4:8b:a3:e2:f6:6a:33:42:f4:48:fd:7e:a0:33:02:ae:0b:f5:0c:69:b3:c4:50:3f:19

Issuing Certificate URL: http://SVRIntl-G3-aia.verisign.com/SVRIntlG3.cer

Revocation information

OCSP Server: http://ocsp.verisign.com
CRL Distribution Point: http://SVRIntl-G3-crl.verisign.com/SVRIntlG3.crl

Check the revocation status for certificate www.cargo-net-ad-g.aioinissaydowa.co.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cargo-net-ad-g.aioinissaydowa.co.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication
Netscape Server-Gated Cryptography

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.cargo-net-ad-g.aioinissaydowa.co.jp

Other certificates including the domain name aioinissaydowa.co.jp

(limited to 100 certificates)
shikai.aioinissaydowa.co.jp
www.eganns.aioinissaydowa.co.jp
dejima-branche.aioinissaydowa.co.jp
raku-branche2.aioinissaydowa.co.jp
netjibaisg.aioinissaydowa.co.jp
www.eganns.aioinissaydowa.co.jp
tsunagaru.aioinissaydowa.co.jp
ec3.aioinissaydowa.co.jp
tstsrv.aioinissaydowa.co.jp
h.aioinissaydowa.co.jp
ad-sc-search-t.aioinissaydowa.co.jp
netad.aioinissaydowa.co.jp
www.aioinissaydowa.co.jp
t.aioinissaydowa.co.jp
mobilead.aioinissaydowa.co.jp
www.btoca-giji-t.aioinissaydowa.co.jp
pet.aioinissaydowa.co.jp
ey.aioinissaydowa.co.jp
t.aioinissaydowa.co.jp
ey1.aioinissaydowa.co.jp
www.aioinissaydowa.co.jp
adcc-faq.aioinissaydowa.co.jp
ib-line.aioinissaydowa.co.jp
www.ec901.aioinissaydowa.co.jp
one-day.aioinissaydowa.co.jp
www.egannst.aioinissaydowa.co.jp
h.aioinissaydowa.co.jp
akamai-san14.exacttarget.com
ec5.aioinissaydowa.co.jp
recruit.aioinissaydowa.co.jp
mp.aioinissaydowa.co.jp
eco-shouken.aioinissaydowa.co.jp
netjibai.aioinissaydowa.co.jp
ey-b.aioinissaydowa.co.jp
raku-branche2.aioinissaydowa.co.jp
faq.aioinissaydowa.co.jp
myc.aioinissaydowa.co.jp
dantai.aioinissaydowa.co.jp
www.aioinissaydowa.co.jp
akamai-san14.exacttarget.com
mag.aioinissaydowa.co.jp
netjibai.aioinissaydowa.co.jp
egagsat.aioinissaydowa.co.jp
www.aioinissaydowa.co.jp
dps-test.aioinissaydowa.co.jp
www.btoca-honban-t.aioinissaydowa.co.jp
pet.aioinissaydowa.co.jp
web-yakkan.aioinissaydowa.co.jp
ey.aioinissaydowa.co.jp
akamai-san14.exacttarget.com
mp.aioinissaydowa.co.jp
www.eganns.aioinissaydowa.co.jp
netjibai.aioinissaydowa.co.jp
oph13t.aioinissaydowa.co.jp
ec5.aioinissaydowa.co.jp
dps.aioinissaydowa.co.jp
raku.aioinissaydowa.co.jp
mobilead.aioinissaydowa.co.jp
raku.aioinissaydowa.co.jp
ad-sc-search-t.aioinissaydowa.co.jp
oph.aioinissaydowa.co.jp
mp.aioinissaydowa.co.jp
eco-shouken.aioinissaydowa.co.jp
one-day-branche.aioinissaydowa.co.jp
oph13t.aioinissaydowa.co.jp
dejima.aioinissaydowa.co.jp
raku-branche2.aioinissaydowa.co.jp
www.aioinissaydowa.co.jp
mobilead.aioinissaydowa.co.jp
www.cargo-net.aioinissaydowa.co.jp
www.btoca.aioinissaydowa.co.jp
netad.aioinissaydowa.co.jp
tsunagaru.aioinissaydowa.co.jp
contact.aioinissaydowa.co.jp
myc11t.aioinissaydowa.co.jp
dejima.aioinissaydowa.co.jp
dantai.aioinissaydowa.co.jp
oph.aioinissaydowa.co.jp
one-day-maintenance.aioinissaydowa.co.jp
ec7.aioinissaydowa.co.jp
one-day-branche.aioinissaydowa.co.jp
faq.aioinissaydowa.co.jp
eco-shouken.aioinissaydowa.co.jp
adint2.aioinissaydowa.co.jp
api-gateway-portal-t.aioinissaydowa.co.jp
mp.aioinissaydowa.co.jp
ib-linedemo1.aioinissaydowa.co.jp
netjibai.aioinissaydowa.co.jp
egagsa-honban-t.aioinissaydowa.co.jp
pub.aioinissaydowa.co.jp
one-day.aioinissaydowa.co.jp
t.aioinissaydowa.co.jp
i-system.aioinissaydowa.co.jp
netjibaisg.aioinissaydowa.co.jp
one-day.aioinissaydowa.co.jp
faq.aioinissaydowa.co.jp
www.cargo-net-ad-g.aioinissaydowa.co.jp
www.tnet.aioinissaydowa.co.jp
www.btoca-g.aioinissaydowa.co.jp
keiyaku-kakunin.aioinissaydowa.co.jp

Certificate

The complete raw certificate details for www.cargo-net-ad-g.aioinissaydowa.co.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/luwkUAQ2ALg5uhYGoi
+xLp4jsf1j5m3j2Y5xFymHzilai4XSARmDejn72prw0jgoQ0ePH8nDsecpGk3VXi
2obEh9Xma9TUYsrYwLJM7nNXWsmE/q7irEQqjOvedwjhONmRJQqGXHn+eKIaufV0
ZTJ1KRxlG512GTRztqXqHRf37aWspWs5HtOT50Hx2hJ2T/gLKhBk6jy+8333uciP
LLMu3pKrjNxc1CNI7F43bMpmveCK9TULWAwCTLrAe96wj3SroqtZ5bzyRxa8Xydu
0m3x6s5SoSvbYKnzhIQdY9tjJWNeyQcdtHD4lF2RY9CpGAVARDZnexW87vpCesVy
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 74554400684056791120882025786649233708
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)10'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 International Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-10-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TOKYO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'SHIBUYA-KU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Aioi Nissay Dowa Insurance Co.,Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'marine'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Terms of use at www.verisign.com/rpa (c)05'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'www.cargo-net-ad-g.aioinissaydowa.co.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24234516073394836359607067470325167146781137803519267096264156667248316576984205458427483124728685346331149218493046805302745759803266100455306687028092990812310940663767520348169823127632152241429399495512777301362028521881265589305755132757838879533306766268132169184416851662436473115702645016174564761842181507278707444266030585729253125932185013298069842830188457390110322269197838560648960787460795562866693980733012720089707985839053918834028645023095930630711522240088881220512710825570396692937182780606003788436223302070850118400997940988853089261860976506618665664642730413643440043082087136077868630897161
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cargo-net-ad-g.aioinissaydowa.co.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRIntl-G3-crl.verisign.com/SVRIntlG3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.4.1 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d79b7cd822a015f7ddad5fce299b58c3bc4600b5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRIntl-G3-aia.verisign.com/SVRIntlG3.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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