two.verisign.co.jp

- VeriSign Japan K.K. -

Issued by VeriSign Class 3 Extended Validation SSL SGC CA

About this certificate

This digital certificate with serial number 68:e0:2d:2f:89:25:9b:85:79:69:8d:b6:13:33:7a:64 was issued on by VeriSign, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

VeriSign Japan K.K.

Company registration number: 0100-01-078218
Organization: VeriSign Japan K.K.
Organization unit: Class2 Individual Certificate Service - EV - GSID1
Address: 2-8-1Yaesu
Postal code: 104-0028
State / Province: Tokyo
Locality: Chuo-ku
Country: JP

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)06
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 68:e0:2d:2f:89:25:9b:85:79:69:8d:b6:13:33:7a:64
Serial Number (int): 139403702532543765696200211827201899108
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 23:34:0f:94:a9:28:65:00:63:50:38:c5:fc:5f:aa:76:66:6f:c1:c8
AuthorityKeyId: 4e:43:c8:1d:76:ef:37:53:7a:4f:f2:58:6f:94:f3:38:e2:d5:bd:df

Fingerprint (sha1): 75:3d:b1:48:39:88:dd:38:9b:33:5a:06:f2:3e:0e:b9:d4:a6:3a:9a
Fingerprint (sha256): 32:14:2c:bc:94:d3:4a:75:a2:9b:84:84:bb:df:73:4f:2c:6d:05:a5:a8:18:8d:de:81:be:92:17:0b:82:60:ad

Issuing Certificate URL: http://EVIntl-aia.verisign.com/EVIntl2006.cer

Revocation information

OCSP Server: http://EVIntl-ocsp.verisign.com
CRL Distribution Point: http://EVIntl-crl.verisign.com/EVIntl2006.crl

Check the revocation status for certificate two.verisign.co.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for two.verisign.co.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication
Netscape Server-Gated Cryptography

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

two.verisign.co.jp

Other certificates including the domain name verisign.co.jp

(limited to 100 certificates)
esignonsite.verisign.co.jp
onsite.verisign.co.jp
admin-manager.symauth.jp
go.verisign.co.jp
dcrafec.verisign.co.jp
storefront.jp.websecurity.symantec.com
onsite.verisign.co.jp
coupon.jp.websecurity.symantec.com
admin-manager.verisign.co.jp
mgw.verisign.co.jp
two.verisign.co.jp
www.verisign.co.jp
digitalid.verisign.co.jp
esc.verisign.co.jp
knowledge.verisign.co.jp
ams.jp.websecurity.symantec.com
ra-hosting.verisign.co.jp
ra-hosting.symauth.jp
pilotsc-admin-manager.symauth.jp
onsite.verisign.co.jp
ssltest-dsa.verisign.co.jp
testsc-admin-manager.verisign.co.jp
twoadmin.verisign.co.jp
ssltest-sgc.verisign.co.jp
web-cms.verisign.co.jp
pilot-ssl-admin.jp.websecurity.symantec.com
onsite.symauth.jp
goadmin.verisign.co.jp
pilotonsite.symauth.jp
pilotsc-admin-manager.symauth.jp
esc.verisign.co.jp
support110.verisign.co.jp
zgok.verisign.co.jp
pilotsc-admin-manager.verisign.co.jp
report.jp.websecurity.symantec.com
client-auth2.symauth.jp
pilot-ams.jp.websecurity.symantec.com
goadmin.verisign.co.jp
onsite-admin.verisign.co.jp
mpki4dev.verisign.co.jp
lhkg.symauth.jp
onsite.symauth.jp
storefront.verisign.co.jp
admin-manager.verisign.co.jp
onsite.symauth.jp
esignonsite-admin.symauth.jp
support.symauth.jp
charzak.verisign.co.jp
onsite-admin.symauth.jp
onsite.verisign.co.jp
mpki4dev-admin.symauth.jp
admin-manager.symauth.jp
mws.verisign.co.jp
go.verisign.co.jp
lhkg.verisign.co.jp
mpki4dev.verisign.co.jp
dcrafec.verisign.co.jp
pilot-ssl-subscriber.jp.websecurity.symantec.com
download.symauth.jp
onsite-admin.verisign.co.jp
esc.verisign.co.jp
ra.verisign.co.jp
admin-manager.symauth.jp
partner.verisign.co.jp
pilotsc-admin-enrollment.symauth.jp
admin-enrollment.symauth.jp
two.verisign.co.jp
pilot-ra-hosting.symauth.jp
dcrafe.verisign.co.jp
www.verisign.co.jp
m.verisign.co.jp
support110.verisign.co.jp
amazon.cdn01.verisign.co.jp
two.verisign.co.jp
pilotsc-admin-enrollment.verisign.co.jp
ssltest-ecc-rsa.verisign.co.jp
pilot-mpki4dev-admin.symauth.jp
partner.symauth.jp
support.verisign.co.jp
ssltest-san2.verisign.co.jp
support110.verisign.co.jp
pilot-ra-hosting.symauth.jp
pilotsc-admin-manager.verisign.co.jp
admin-manager.verisign.co.jp
reseller.verisign.co.jp
pilotsc-admin-enrollment.symauth.jp
dcrafepilot.verisign.co.jp
charzak-admin.verisign.co.jp
sedemo.verisign.co.jp
pilotsc-admin-enrollment.symauth.jp
support110.verisign.co.jp
*.verisign.co.jp
dcrafepilot.verisign.co.jp
corp-sfadmin.jp.websecurity.symantec.com
ssl-subscriber.verisign.co.jp
pilot-mpki4dev.verisign.co.jp
pilotsc-admin-enrollment.symauth.jp
www.verisign.co.jp
codesign.verisign.co.jp
pilotonsite.symauth.jp

Certificate

The complete raw certificate details for two.verisign.co.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qiyTnZOxV1sWYC5MNXb
zIcu8mioRCDAqnT81b0p+brYtTocua4iQa1dlZ8J3gNFdsvRbKIBlu0U3vrGOrco
abW0sd1nMY5DKaBAhRlDR6XX8uI+kUoAB9ZTJv1Kyvdtc9JwCzdsohIiJZESo8yE
O/8T44UM0vyzvXbIdEx1901FFdnPy/gxPrUP0zkBZ69B8KNOhYImImJ5F3HX2D9J
KcXbIdtWy00u9rRZyoHBz2iS2HK5+HEJYDB2dP9QWTMq/PjLZ/9DG/DOWw2c2Ttf
R9Ad2Acnr5j6+R71aLvFCuormICaoN2V1r1qNHK5oR32m2tCrpKe+Y5XFvP/J1CN
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 139403702532543765696200211827201899108
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)06'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 Extended Validation SSL SGC CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-06-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-06-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '0100-01-078218'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '104-0028'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Chuo-ku'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '2-8-1Yaesu'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'VeriSign Japan K.K.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Class2 Individual Certificate Service - EV - GSID1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'two.verisign.co.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27098184612122946655759694534623013079197610064502087660410410926498290132328183647359774911172966667427488568130904844264453253952924192922223505316816389942658031823440920033998235351058277123795793088329705348913964470188403335613021446876434371982222772364859982504233284570540368735288381173391011003153446099286320012960487396446899173755491705652097048402197030967449638840551951647860810013259818334366839570344113376223419627881999265629676273374723774657047906720099595688371961762961448415060428192663321492178135409308483416458009460780959389241508073605150102589380028276789659613574098409271509212237203
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'two.verisign.co.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.4.1 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.23.6 (VeriSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							23340f94a9286500635038c5fc5faa76666fc1c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4e43c81d76ef37537a4ff2586f94f338e2d5bddf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://EVIntl-crl.verisign.com/EVIntl2006.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://EVIntl-ocsp.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://EVIntl-aia.verisign.com/EVIntl2006.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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