carteaffaires.sg.wlp-acs.com

- Atos Worldline -

Issued by VeriSign Class 3 Secure Server CA - G2

About this certificate

This digital certificate with serial number 18:7c:d8:09:09:7b:a7:0e:6b:cd:a4:d9:b3:b5:87:e4 was issued on by VeriSign, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Atos Worldline

Organization: Atos Worldline
Organization unit: Terms of use at www.verisign.com/rpa (c)05
State / Province: LOIR ET CHER
Locality: BLOIS
Country: FR

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)09
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 18:7c:d8:09:09:7b:a7:0e:6b:cd:a4:d9:b3:b5:87:e4
Serial Number (int): 32549698425759002830249569396635043812
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: a5:ef:0b:11:ce:c0:41:03:a3:4a:65:90:48:b2:1c:e0:57:2d:7d:47

Fingerprint (sha1): 1e:b1:09:e5:38:d0:16:36:44:21:75:28:48:8a:d8:58:70:e7:86:6b
Fingerprint (sha256): 32:64:ea:ce:38:e9:39:a3:eb:00:28:b5:e2:e6:88:f6:41:c4:65:4c:59:6d:aa:e5:18:15:3f:db:47:c8:a3:5e

Issuing Certificate URL: http://SVRSecure-G2-aia.verisign.com/SVRSecureG2.cer

Revocation information

OCSP Server: http://ocsp.verisign.com
CRL Distribution Point: http://SVRSecure-G2-crl.verisign.com/SVRSecureG2.crl

Check the revocation status for certificate carteaffaires.sg.wlp-acs.com

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for carteaffaires.sg.wlp-acs.com

Public Key Algorithm

RSA

Key Size

1024

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name wlp-acs.com

(limited to 100 certificates)
extranet.ecbl.wlp-acs.com
san.bpcepaymentservices-3ds.wlp-acs.com
bred.wlp-acs.com
extranet.german-u1g.wlp-acs.com
bred.wlp-acs.com
sgba.wlp-acs.com
fo.rci.acs3.wlp-acs.com
ssl-prd-u7f-fo-acs-pa-casa.wlp-acs.com
u7g.fo.wlp-acs.com
belgium-3dsecure.wlp-acs.com
extranet.bcc-corporate.wlp-acs.com
tests-lbp.wlp-acs.com
cnce.wlp-acs.com
apac.wlp-acs.com
belgium-3dsecure-uvg.wlp-acs.com
hsbc.wlp-acs.com
compasscard-3ds.wlp-acs.com
bnpp-3ds.wlp-acs.com
sg.wlp-acs.com
liv-ttis.ano.smime.wlp-acs.com
extranet.ca-sp.wlp-acs.com
ssl-prd-fo-hub-as.ita.wlp-acs.com
cgi-dnb.wlp-acs.com
optpf.wlp-acs.com
german-3dsecure.wlp-acs.com
cofinoga.wlp-acs.com
belgium-3ds.wlp-acs.com
ttis.ano.smime.wlp-acs.com
extranet.hsbc.wlp-acs.com
u5g.bo.wlp-acs.com
extranet.sg.wlp-acs.com
hsbc.bo.wlp-acs.com
bcc-corporate.wlp-acs.com
dpc2-extranet.bnpp.wlp-acs.com
extranet.belgium-uvb.wlp-acs.com
ingdf.wlp-acs.com
ssl-prd-u0l-fo-acs-appbased.wlp-acs.com
ssl-prd-fr-bo-acs.wlp-acs.com
extranet.belgium-uvb.wlp-acs.com
extranet.cnce.wlp-acs.com
ssl-prd-u6g-bo-acs.wlp-acs.com
hsbc-3ds.wlp-acs.com
san.credit-mutuel-3ds.wlp-acs.com
lux-u1b-3dsecure.wlp-acs.com
optnc.wlp-acs.com
extranet.bcc-corporate.wlp-acs.com
sparda.wlp-acs.com
bo.rci.acs3.wlp-acs.com
hsbc.wlp-acs.com
postbank-3dsecure.wlp-acs.com
client-test-authent.vlk.hub.wlp-acs.com
prd.be.hub.sticky.ita.as8677.net
sparbankernaskort.wlp-acs.com
ssl-rct.wlp-acs.com
fo.rce.acs3.wlp-acs.com
fo.rce.fr2.acs3.wlp-acs.com
bcc-corporate.wlp-acs.com
belgium-uvj-3dsecure.wlp-acs.com
extranet.bcc-corporate.wlp-acs.com
extranet.belgium-uvj.wlp-acs.com
up-rt-3ds.wlp-acs.com
danskebank-3ds.wlp-acs.com
bnpp.wlp-acs.com
extranet.sg.wlp-acs.com
cofinoga.wlp-acs.com
credit-mutuel.wlp-acs.com
german-3dsecure.wlp-acs.com
u2f.bo.wlp-acs.com
crt-www.wlp-acs.com
extranet.belgium-uvg.wlp-acs.com
danskebank-3dsecure.wlp-acs.com
crt-extranet.belgium-uvj.wlp-acs.com
extranet.german-u2g.wlp-acs.com
bnpp.wlp-acs.com
belgium-uvj-3dsecure.wlp-acs.com
bfcoi.wlp-acs.com
danskebank-3ds.wlp-acs.com
www.wlp-acs.com
extranet.belgium-uvg.wlp-acs.com
credit-mutuel.wlp-acs.com
u6g.bo.wlp-acs.com
sparda-3dsecure-mastercard.wlp-acs.com
bcc-corporate.wlp-acs.com
carteaffaires.sg.wlp-acs.com
ca-sp.wlp-acs.com
ingdf.wlp-acs.com
ca-sp.wlp-acs.com
german-3ds.wlp-acs.com
extranet.credit-mutuel.wlp-acs.com
dpc2-bcc-corporate.wlp-acs.com
extranet.hsbc.wlp-acs.com
recette-bred.wlp-acs.com
extranet.lbp.wlp-acs.com
ca-sp.wlp-acs.com
cdn.wlp-acs.com
fo.rce.acs3.wlp-acs.com
german-3dsecure.wlp-acs.com
german-3dsecure.wlp-acs.com
belgium-uvp-3dsecure.wlp-acs.com
*.wlp-acs.com

Certificate

The complete raw certificate details for carteaffaires.sg.wlp-acs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC5ik1MYsD6xfBlKUaUvhQEtEUJ
6CBZrggG31xJ+ihetfB9oJlAWB8olDoPqt6xHJde9VEaKDfXpBUTfBYJ7mIwAxlq
WL3frgFgACzBrn+cXf9xfafQqeRKdAH1aOkbgjKLpXuGs9s2s5l8gnbC5gUc1bCe
6gPJ6OkEfCUkMb2UKQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 32549698425759002830249569396635043812
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)09'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 Secure Server CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2009-11-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-11-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LOIR ET CHER'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'BLOIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Atos Worldline'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Terms of use at www.verisign.com/rpa (c)05'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'carteaffaires.sg.wlp-acs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1120 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 130290788768596198945800403348603219699315732481862308881576884706896297606748037805005728805419138213147532118273613936096645731250310388268348033626252979578264062026694406956037358292719769386508848200986944242432914574403159560453400850697345547901870125330515096412567761503871662573137403972627533239337
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G2-crl.verisign.com/SVRSecureG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.23.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5ef0b11cec04103a34a659048b21ce0572d7d47
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G2-aia.verisign.com/SVRSecureG2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/gif'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															4b6bb92896060cbbd052389b29ac4b078b210518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://logo.verisign.com/vslogo1.gif'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007d3be17eabaa62eea97c1798a064ba502a998da163a499a475b6f58aaa9bcec7ff375b8f462a3644a5072e5ddf02e225bb2df7cbc0f7fab3294685fc72020ebe33bbc5b391e486563cb5cd22413e8597d1ab564b6f4fbdc742fd557bcdf4a6f98428292734c2562c95d7a375d2a76d324c07ba8af946b083bf35d81667f833f6e25cfe84c930376c3e2d9068b416e13ec972014cdc713096c7cbe00543b049ea4cb26da2ccd650e2bfb6d8b2c84db30c9a85ea2ebd2acaa544f1cb60c551cfb5d2cdc736528ad909a94a2a2a855c4ef5d0a90bcd61ceeb620bda7af4848159730bd2e7d38f9be35a611f75b6e209a9a140fac5984196837cf0345dab36292034