www.bicbenefits.com

Issued by Digi-Sign CA Digi-SSL Xp

About this certificate


This digital certificate with serial number 81:36:35:13:6f:77:1a:a1:cb:8c:c6:f5:29:44:e3:11 was issued on by Digi-Sign Limited .

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

BIC

Organization: BIC
Organization unit: BIC Group IT
Organization unit: Provided by Digi-Sign Limited
Organization unit: Digi-SSL Xp
State / Province: NJ
Locality: Hoboken
Country: US

Digi-Sign Limited

Organization: Digi-Sign Limited
Organization unit: Terms and Conditions of use: http://www.digi-sign.com/repository
State / Province: NJ
Locality: Hoboken
Country: US

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 81:36:35:13:6f:77:1a:a1:cb:8c:c6:f5:29:44:e3:11
Serial Number (int): 171751871994155933634911751880550179601
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 90:37:b9:d7:08:0b:a0:0e:57:fe:39:7b:56:a4:fb:6c:67:1a:72:43
AuthorityKeyId: 33:5a:0b:4e:35:da:b8:8e:87:05:64:5f:d8:ec:7d:25:98:da:ba:3f

Fingerprint (sha1): 0f:59:a0:43:7e:9a:c4:8a:6b:88:64:85:f8:76:8f:61:8b:41:95:f8
Fingerprint (sha256): 1a:c1:dd:07:6a:ff:3c:87:06:b5:ea:fc:53:cb:25:f4:6d:d5:b4:b6:b5:78:e5:26:e0:e2:4f:78:82:eb:6e:f8

Issuing Certificate URL: http://crt.digi-sign.com/DigiSignCADigiSSLXp.crt

Revocation information

OCSP Server: http://ocsp.digi-sign.com
CRL Distribution Point: http://crl.digi-sign.com/DigiSignCADigiSSLXp.crl
CRL Distribution Point: http://crl2.digi-sign.com/DigiSignCADigiSSLXp.crl

Check the revocation status for the current certificate on www.bicbenefits.com
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

www.bicbenefits.com
bicbenefits.com

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIF7zCCBNegAwIBAgIRAIE2NRNvdxqhy4zG9SlE4xEwDQYJKoZIhvcNAQEFBQAw gbkxCzAJBgNVBAYTAklFMQ8wDQYDVQQIEwZEdWJsaW4xDzANBgNVBAcTBkR1Ymxp bjEaMBgGA1UEChMRRGlnaS1TaWduIExpbWl0ZWQxSTBHBgNVBAsTQFRlcm1zIGFu ZCBDb25kaXRpb25zIG9mIHVzZTogaHR0cDovL3d3dy5kaWdpLXNpZ24uY29tL3Jl cG9zaXRvcnkxITAfBgNVBAMTGERpZ2ktU2lnbiBDQSBEaWdpLVNTTCBYcDAeFw0x MzEyMzAwMDAwMDBaFw0xNDEyMzAyMzU5NTlaMIGtMQswCQYDVQQGEwJVUzELMAkG A1UECBMCTkoxEDAOBgNVBAcTB0hvYm9rZW4xDDAKBgNVBAoTA0JJQzEVMBMGA1UE CxMMQklDIEdyb3VwIElUMSYwJAYDVQQLEx1Qcm92aWRlZCBieSBEaWdpLVNpZ24g TGltaXRlZDEUMBIGA1UECxMLRGlnaS1TU0wgWHAxHDAaBgNVBAMTE3d3dy5iaWNi ZW5lZml0cy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ldP4 kfMh8LE5IGZT2nUp345FzcagLv10U+8isrWcwchpsarHrDzHv/biClIuVBosq05v cCulhNnNvjGPwlev6I4fKJmSLBjkxgOsGI1kZmUhLpPjENKauMIzpz5ttaYI4flI xkf0TTD5q+yJBgkUOqaXjo9MrIPmKGTQgrn1ztEi8gLDPOytOpJs2cesRflrh6hK 0GWDY2ynvv+yBBTPukPeRXzlFvNn7dvbR2aLt+GmZmpEMXXfChRnts6Wm/ikk/Ou VcPXAJ16NM2E7H4nixtayAkI1xgR1waTlVHDAjH48KNjqPtJLp46M2TQI93k3sZm Vomg6N7dzLWb4B5hAgMBAAGjggH6MIIB9jAfBgNVHSMEGDAWgBQzWgtONdq4jocF ZF/Y7H0lmNq6PzAdBgNVHQ4EFgQUkDe51wgLoA5X/jl7VqT7bGcackMwDgYDVR0P AQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG AQUFBwMCMFUGA1UdIAROMEwwQAYLKwYBBAGyMQECAgkwMTAvBggrBgEFBQcCARYj aHR0cDovL3d3dy5kaWdpLXNpZ24uY29tL3JlcG9zaXRvcnkwCAYGZ4EMAQICMHoG A1UdHwRzMHEwNqA0oDKGMGh0dHA6Ly9jcmwuZGlnaS1zaWduLmNvbS9EaWdpU2ln bkNBRGlnaVNTTFhwLmNybDA3oDWgM4YxaHR0cDovL2NybDIuZGlnaS1zaWduLmNv bS9EaWdpU2lnbkNBRGlnaVNTTFhwLmNybDBzBggrBgEFBQcBAQRnMGUwPAYIKwYB BQUHMAKGMGh0dHA6Ly9jcnQuZGlnaS1zaWduLmNvbS9EaWdpU2lnbkNBRGlnaVNT TFhwLmNydDAlBggrBgEFBQcwAYYZaHR0cDovL29jc3AuZGlnaS1zaWduLmNvbTAv BgNVHREEKDAmghN3d3cuYmljYmVuZWZpdHMuY29tgg9iaWNiZW5lZml0cy5jb20w DQYJKoZIhvcNAQEFBQADggEBAI/2mEniDduSH5NaVa+oS1VpCs+IC72ssCDYl36g ampozAm3gJLQxQvvHMSILJjgMKdtMU+AZB+COpsqsJzSY45NPcAn2UMUZggIkj/u E7fsJO5C2en7ESSnvbTcx27fdnouoclc991B3yzvYEKupjBTbuTF3sHnuO4C0ENX RVOCBwnCdI0hOBfSlhM7tuzrjz6Xz3j6VCmgpST9+0jCDxEe4xX342BI6XsBaxBv Uvbq4crOmJwjsZL5Kk/9dsUFUvFRWb7Fx76PwIbLDy9Zgiuu8XG1GVukx21ryca8 gWzgSVbGcYFew/ytUekG/POmkbPmfD8w0UoqutwxN/R2ojc= -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZXT+JHzIfCxOSBmU9p1 Kd+ORc3GoC79dFPvIrK1nMHIabGqx6w8x7/24gpSLlQaLKtOb3ArpYTZzb4xj8JX r+iOHyiZkiwY5MYDrBiNZGZlIS6T4xDSmrjCM6c+bbWmCOH5SMZH9E0w+avsiQYJ FDqml46PTKyD5ihk0IK59c7RIvICwzzsrTqSbNnHrEX5a4eoStBlg2Nsp77/sgQU z7pD3kV85RbzZ+3b20dmi7fhpmZqRDF13woUZ7bOlpv4pJPzrlXD1wCdejTNhOx+ J4sbWsgJCNcYEdcGk5VRwwIx+PCjY6j7SS6eOjNk0CPd5N7GZlaJoOje3cy1m+Ae YQIDAQAB -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 171751871994155933634911751880550179601 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dublin' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dublin' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Digi-Sign Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms and Conditions of use: http://www.digi-sign.com/repository' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Digi-Sign CA Digi-SSL Xp' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-12-30 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-12-30 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NJ' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hoboken' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BIC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BIC Group IT' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Provided by Digi-Sign Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Digi-SSL Xp' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bicbenefits.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23427969364910204711865542208337916030284460025656003722298081093538986654645410658019332067338953143612424080003117879486312479512360294796260062382409188262308632429618382802185155740123874724475440465618451686690713458657919067428134461380812620140969681516814667417929310796435722540308004499577406106334613077314909289340159977305126575184043295611268307334292679227959266500911509580928606869012921227314628543875274792557290225043471381379672330849931921601102622591511334076231148654879135975837071290809913470323534578636432439389855410094432968932409859717011698959836887778015738008137810432924810324483681 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 335a0b4e35dab88e8705645fd8ec7d2598daba3f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9037b9d7080ba00e57fe397b56a4fb6c671a7243 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.9 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digi-sign.com/repository' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.digi-sign.com/DigiSignCADigiSSLXp.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.digi-sign.com/DigiSignCADigiSSLXp.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.digi-sign.com/DigiSignCADigiSSLXp.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digi-sign.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bicbenefits.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bicbenefits.com' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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