www.oldsecond.com

- Old Second National Bank -

Issued by Go Daddy Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number a0:32:f2:da:64:b2:b6:69 was issued on by GoDaddy.com, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Old Second National Bank

Company registration number: 3603
Organization: Old Second National Bank
State / Province: Illinois
Locality: Aurora
Country: US

GoDaddy.com, Inc.

Organization: GoDaddy.com, Inc.
Organization unit: http://certs.godaddy.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): a0:32:f2:da:64:b2:b6:69
Serial Number (int): 11543555814710228585
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: 0c:70:0d:20:17:05:ef:e1:01:25:00:c4:00:2c:cb:8d:ac:88:43:43
AuthorityKeyId: 40:c2:bd:27:8e:cc:34:83:30:a2:33:d7:fb:6c:b3:f0:b4:2c:80:ce

Fingerprint (sha1): 69:f7:33:79:3f:fc:d4:ad:6f:ca:e7:15:52:b0:73:63:c4:c7:39:ce
Fingerprint (sha256): 34:46:2e:e1:17:6b:90:2a:01:65:b8:92:d0:1c:8b:12:74:df:11:8f:9d:ef:8d:f0:48:7d:0f:ea:cc:03:57:b2

Issuing Certificate URL: http://certificates.godaddy.com/repository/gdig2.crt

Revocation information

OCSP Server: http://ocsp.godaddy.com/
CRL Distribution Point: http://crl.godaddy.com/gdig2s3-20.crl

Check the revocation status for certificate www.oldsecond.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.oldsecond.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.oldsecond.com
oldsecond.com

Other certificates including the domain name oldsecond.com

(limited to 100 certificates)
investors.oldsecond.com
o2vpn2.oldsecond.com
onlinebanking.oldsecond.com
akamai-san145.exacttarget.com
o2vpn2.oldsecond.com
o2vpn1.oldsecond.com
onlinebanking.oldsecond.com
webmail.oldsecond.com
sip.oldsecond.com
www.oldsecond.com
stores.footlocker.co.uk
www.oldsecond.com
answers-embed.techem.de.pagescdn.com
onlinebanking.oldsecond.com
*.oldsecond.com
local.oldsecond.com
www.oldsecond.com
*.oldsecond.com
akamai-san145.exacttarget.com
mail2.oldsecond.com
*.oldsecond.com
sip.oldsecond.com
ens.oldsecond.com
akamai-san145.exacttarget.com
store.iwc.com
digital.oldsecond.com
akamai-san145.exacttarget.com
onlinebanking.oldsecond.com
webmail.oldsecond.com
local.oldsecond.com
o2vpn2.oldsecond.com
investors.oldsecond.com
locations.wauchulastatebank.com
www.oldsecond.com
o2vpn1.oldsecond.com
digital.oldsecond.com
local.oldsecond.com
answers-embed.techem.de.pagescdn.com
local.oldsecond.com
answers-embed.shumanlaw.com.pagescdn.com
locations.wauchulastatebank.com
answers-embed.westmichiganderm.com.pagescdn.com
sip.oldsecond.com
oos1.oldsecond.com
o2vpn1.oldsecond.com
*.oldsecond.com
o2vpn1.oldsecond.com
lmweb.oldsecond.com
answers.waltoncommunities.com
webmail.oldsecond.com
oos2.oldsecond.com
mail.oldsecond.com
o2vpn1.oldsecond.com
webmail.oldsecond.com
o2WC.oldsecond.com
www.oldsecond.com
o2vpn2.oldsecond.com
mail.oldsecond.com
digital.oldsecond.com
akamai-san145.exacttarget.com
*.oldsecond.com
answers.lafamiliainsurance.com
sip.oldsecond.com
local.oldsecond.com
onlinebanking.oldsecond.com
www.oldsecond.com
mail2.oldsecond.com
answers-embed.shumanlaw.com.pagescdn.com
answers-embed.westmichiganderm.com.pagescdn.com
answers.waltoncommunities.com
myloan.oldsecond.com
akamai-san145.exacttarget.com
onlinebanking.oldsecond.com
akamai-san145.exacttarget.com
local.oldsecond.com
*.oldsecond.com
local.oldsecond.com
www.oldsecond.com
synergichealthcareers.yext-cdn.com
local.oldsecond.com
webmail.oldsecond.com
O2View.OldSecond.com
store.iwc.com
webmail.oldsecond.com
stores.footlocker.co.uk
o2vpn2.oldsecond.com
o2AE.oldsecond.com
synergichealthcareers.yext-cdn.com
seg.oldsecond.com
local.oldsecond.com
www.oldsecond.com
*.oldsecond.com
*.oldsecond.com

Certificate

The complete raw certificate details for www.oldsecond.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIKzCCBxOgAwIBAgIJAKAy8tpksrZpMA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD
VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEa
MBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0
cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2Vj
dXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTIyMDUwNDIxMjAyMFoX
DTIzMDUyMTA3NDE0MFowgbMxEzARBgsrBgEEAYI3PAIBAxMCVVMxHTAbBgNVBA8T
FFByaXZhdGUgT3JnYW5pemF0aW9uMQ0wCwYDVQQFEwQzNjAzMQswCQYDVQQGEwJV
UzERMA8GA1UECBMISWxsaW5vaXMxDzANBgNVBAcTBkF1cm9yYTEhMB8GA1UEChMY
T2xkIFNlY29uZCBOYXRpb25hbCBCYW5rMRowGAYDVQQDExF3d3cub2xkc2Vjb25k
LmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAJOm3/nrCTH6VSQ4
X27Mt+HhaigzlDDrNc3sIQGn4q9+VCIS9FNGonbVgPNiw3xyIlT1j0IrKzY3I2Ex
lNt7APXJEWAIyd8KrV+AGuD0Fle+2L8IxQbfT7gn2dKqtUjekH50W/JCzjMW9rLM
8ry5gAZOtpZEnNCLPFCiPKCxIwyVnYXDcwfwnAjvIoGwGdg2psfitVvTWjkRYghY
WqwVujngL4YpHWOo3Xw4l2qug5ZH0aMvoWXi7h57SqcdWEDpMEYnv5aiT5OvR7QG
1OkP29NSJvJvXS8WI74SyRdlXg0PMgPptVYB5eSDJqLd0c66xHlC46n9quV51AQ4
Xl5XQPX2QsuZTm8XNnNOJ/oFzfUGJNo2RT8G/bjrMD1Vx0JqwPDyyaDoN5FclUD+
uC+8Byuj1uVyvx90xmM2NVQgRIXSBH1KkWWZWYRE3ghZF+UkH6ezIGZYH4bDhOOA
rSqehD56afxQoTjUaGZqkXYyodYmA+4KfcM4q5jUk39LMpf+E57POQ2F6tJSIu+6
vglgbvb5dMTWwAl24Y6PHxYaXLNkCngglxofCHtGPzPjbeijPbK+2VjgXOO2eFIN
ysngtAwepABMgXYPxOhV5qDjFfM0RZPnjaeqDOnDIRnvlu1Ok1qRlOdd7J2+M55n
xeLa8LQwk0A1xad1hrTKN+/ECaZ5AgMBAAGjggM9MIIDOTAMBgNVHRMBAf8EAjAA
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAOBgNVHQ8BAf8EBAMCBaAw
NgYDVR0fBC8wLTAroCmgJ4YlaHR0cDovL2NybC5nb2RhZGR5LmNvbS9nZGlnMnMz
LTIwLmNybDBcBgNVHSAEVTBTMEgGC2CGSAGG/W0BBxcDMDkwNwYIKwYBBQUHAgEW
K2h0dHA6Ly9jZXJ0aWZpY2F0ZXMuZ29kYWRkeS5jb20vcmVwb3NpdG9yeS8wBwYF
Z4EMAQEwdgYIKwYBBQUHAQEEajBoMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5n
b2RhZGR5LmNvbS8wQAYIKwYBBQUHMAKGNGh0dHA6Ly9jZXJ0aWZpY2F0ZXMuZ29k
YWRkeS5jb20vcmVwb3NpdG9yeS9nZGlnMi5jcnQwHwYDVR0jBBgwFoAUQMK9J47M
NIMwojPX+2yz8LQsgM4wKwYDVR0RBCQwIoIRd3d3Lm9sZHNlY29uZC5jb22CDW9s
ZHNlY29uZC5jb20wHQYDVR0OBBYEFAxwDSAXBe/hASUAxAAsy42siENDMIIBfQYK
KwYBBAHWeQIEAgSCAW0EggFpAWcAdgDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp
4Xd9bQa9bgAAAYCQ8hibAAAEAwBHMEUCIGOq5QiEMA9sEj+DvkiLDgBsW+2fTgf6
ptKMzMg8xa2OAiEA1UpD8esblUImoKbLBRBXBTl11CbKEaTnz6dAEyhy5pAAdgA1
zxkbv7FsV78PrUxtQsu7ticgJlHqP+Eq76gDwzvWTAAAAYCQ8hodAAAEAwBHMEUC
IQCiDCILeupQKwdKqFCHrJpsYfiy2+3ojVhO31SvoGdBNgIgaVFnmY5n0EY4h4xh
PUeck7Zg3rye7LGyZWCQva/LYmgAdQB6MoxU2LcttiDqOOBSHumEFnAyE4VNO9Ir
wTpXo1LrUgAAAYCQ8hqfAAAEAwBGMEQCIFV2QlQyrOSJL6x8S2U3PAG93HwpzJQz
7Tv8hhATCBCFAiBk9G64o5QazbCYRh3XCAnYknfsb2GS30eZ+1+bNNroqTANBgkq
hkiG9w0BAQsFAAOCAQEAAIqn8aIDxHeT6vrdf4sT7daq88FOPYOQxJ98qV0gCGo/
RV3FMmZ91eutdTABT4JdQmNsljEM9pRQ6CmTR0SygtLYG8U3x6lUp9cArXitUoTO
MZrbUWUiNxnUpUIxu0d6/tFmZ1HCA1a0Ho1g7fU8QLR4OLaANc44kcZCZUL8Lfmq
xToWTEmxy5ZkV9at5Brijypj0JyFNtTpURiZDvpGhSqyp1CodDeRrD/EKtyegJsd
P+eanTWcegClDqMRt9ROG025bj2WxPslM9oX5M8tpcUvHdiYgYF4TE0tejYWuNGd
7lUmGWIxUUd7QJt9KOJtN/XfWhzSOf8z2Gih7qYJ+w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAk6bf+esJMfpVJDhfbsy3
4eFqKDOUMOs1zewhAafir35UIhL0U0aidtWA82LDfHIiVPWPQisrNjcjYTGU23sA
9ckRYAjJ3wqtX4Aa4PQWV77YvwjFBt9PuCfZ0qq1SN6QfnRb8kLOMxb2sszyvLmA
Bk62lkSc0Is8UKI8oLEjDJWdhcNzB/CcCO8igbAZ2Damx+K1W9NaORFiCFharBW6
OeAvhikdY6jdfDiXaq6DlkfRoy+hZeLuHntKpx1YQOkwRie/lqJPk69HtAbU6Q/b
01Im8m9dLxYjvhLJF2VeDQ8yA+m1VgHl5IMmot3RzrrEeULjqf2q5XnUBDheXldA
9fZCy5lObxc2c04n+gXN9QYk2jZFPwb9uOswPVXHQmrA8PLJoOg3kVyVQP64L7wH
K6PW5XK/H3TGYzY1VCBEhdIEfUqRZZlZhETeCFkX5SQfp7MgZlgfhsOE44CtKp6E
Pnpp/FChONRoZmqRdjKh1iYD7gp9wzirmNSTf0syl/4Tns85DYXq0lIi77q+CWBu
9vl0xNbACXbhjo8fFhpcs2QKeCCXGh8Ie0Y/M+Nt6KM9sr7ZWOBc47Z4Ug3KyeC0
DB6kAEyBdg/E6FXmoOMV8zRFk+eNp6oM6cMhGe+W7U6TWpGU513snb4znmfF4trw
tDCTQDXFp3WGtMo378QJpnkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11543555814710228585
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GoDaddy.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.godaddy.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Go Daddy Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-04 21:20:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-21 07:41:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '3603'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Aurora'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Old Second National Bank'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.oldsecond.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 602367014816343598664720713160056519959703807619230936611110133821285690613106408918072843781252494986929815061889570713580669626021856122619348885370885292369309337071374777858453358381128113456861714913643263494952808527938711388297660994267864524449349134652259627358792219341089889957723118569144748542002634964053682865319850421427956136371828911022436879191732281696684774299548877269053040338862885172157302131591879092030825198636174970396121418379017695045420252340427224234742052808854715730648387315835669136726991444303455536068584729574437054866183347035338600634069427648883616206132851707712217300486069976850345877682204511104398888959104101025887550358442985172321689855187673760731153810523461309625055749900792876377716992480697707585133633352394768828211628026769838830067134432497036052685378680028651201354115414027831647835964892979812667404090537793586398991139482204298532227725683400392061039630018552964990631404447603178202110656506288381620980681615058286550924784846067422878425304698977806937151685719915200471277911576839761409641782811469317303189870733392282213898257759586010571816304351568846510424929491132355546461061031491872376854141310590614455419598892793509719365606071800828474238832322169
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.godaddy.com/gdig2s3-20.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (85 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114413.1.7.23.3 (GoDaddy EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.godaddy.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.godaddy.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.godaddy.com/repository/gdig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 40c2bd278ecc348330a233d7fb6cb3f0b42c80ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oldsecond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldsecond.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0c700d201705efe1012500c4002ccb8dac884343
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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