www02710.ntrs.com

- Northern Trust Corporation -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 4d:5c:8d:16:55:ce:d5:c4:38:65:7d:42:4d:07:47:1a was issued on by GeoTrust Inc..

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Northern Trust Corporation

Organization: Northern Trust Corporation
Organization unit: Operations and Technology
State / Province: Illinois
Locality: Chicago
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4d:5c:8d:16:55:ce:d5:c4:38:65:7d:42:4d:07:47:1a
Serial Number (int): 102831108575753690592104579019856889626
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): fe:04:bc:d9:44:b7:3e:fe:3d:9e:0e:24:05:ed:c8:09:56:04:d4:01
Fingerprint (sha256): 34:84:b0:01:2a:eb:d7:db:c7:41:57:d2:04:80:45:66:34:2e:cc:0f:6d:41:98:f0:c5:38:26:90:dc:8a:95:cb

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate www02710.ntrs.com

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www02710.ntrs.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.50southcapital.com
www.northerntrustfunds.com
www.fiftysouthcapital.com
www.northernmutualfunds.com
www.northerntrust.jp
www.northerntrustbank.com
www.northern-funds.com
m.northerntrustopen.com
www.northerntrustopen.com
riskandperformance.northerntrust.com
business.northerntrust.com
web-xp2b-pws.northerntrust.com
www.retirement.northerntrust.com
retirement.northerntrust.com
www.business.northerntrust.com
www.riskandperformance.northerntrust.com
125.northerntrust.com
wealthadvisor.northerntrust.com
advisors.northernfunds.com
institutional.northernfunds.com
individual.northernfunds.com
www03910.ntrs.com
wwwptl14-exl.ntrs.com
www.retirement.ntrs.com
www03310.ntrs.com
nmr83.ntrs.com
www20310.ntrs.com
m.privatepassport.ntrs.com
www03410.ntrs.com
wwwp14.ntrs.com
wwwptl14-r5.ntrs.com
wwwsecuridesi83a.ntrs.com
wwwptl14-r5.wpc.ntrs.com
utc.ntrs.com
www05510.ntrs.com
www8783.ntrs.com
www.reliabilityinvestment.ntrs.com
web-xp2c-pws.ntrs.com
wwwptl14-r5.npc.ntrs.com
www3683.ntrs.com
www04010.ntrs.com
www21710.ntrs.com
wwwptl04.ntrs.com
wwwptl12-r5.ntrs.com
retirement.ntrs.com
www01510.ntrs.com
wwwptl07.ntrs.com
www22511.ntrs.com
wwwptlpsi2ssl.ntrs.com
web-xp2a-pws.ntrs.com
www06210.ntrs.com
web-xp2b-pws.wpc.ntrs.com
www2283.ntrs.com
web-xp2e-pws.ntrs.com
www15010.ntrs.com
web-xp2b-pws.npc.ntrs.com
wwwesi83a.ntrs.com
www3383.ntrs.com
www.benefitnow.ntrs.com
northernfunds.ntrs.com
www8583.ntrs.com
www2183.ntrs.com
web-xp2k-pws.ntrs.com
wwwc.ntrs.com
ohs-xaptl10l-ww12-r5.ntrs.com
www07010.ntrs.com
web-xp2d-pws.ntrs.com
www3083.ntrs.com
web-xp2b-pws.ntrs.com
northerninstitutionalfunds.ntrs.com
wwwptl02.ntrs.com
www0883.ntrs.com
nwa83.ntrs.com
www.ntrs.com
www9283.ntrs.com
www14610.ntrs.com
www1083.ntrs.com
wwwptl00.ntrs.com
www0283.ntrs.com
www50583.ntrs.com
www.riskandperformance.ntrs.com
125.ntrs.com
www20010.ntrs.com
myhrhelp.ntrs.com
web-xp2f-pws.ntrs.com
www8683.ntrs.com
wwwptlpsissl.ntrs.com
riskandperformance.ntrs.com
www02710.ntrs.com

Other certificates including the domain name ntrs.com

(limited to 100 certificates)
up12149.ntrs.com
wwwdam.ntrs.com
www4083.ntrs.com
www9783.ntrs.com
www15010.ntrs.com
wwwsecuridesi83a.ntrs.com
int02011.ntrs.com
npc1dnhfsn02.ent.ad.ntrs.com
int01011.ntrs.com
www04510.ntrs.com
www3683.ntrs.com
pandora-npc-prod1.ntrs.com
www0483.ntrs.com
inttsp.ntrs.com
wwwsry.ntrs.com
nia-uat.ntrs.com
ut61082.lux.ntrs.com
sdcwmap03.ent.ad.ntrs.com
ipl-aj83s-nmr.ntrs.com
www.northernfunds.com
www08210.ntrs.com
int04511.ntrs.com
api-cashdash-csint.ntrs.com
bca-doc-dev.ntrs.com
tct-t020-ipo7ls.ntrs.com
up85133.ntrs.com
www02810.ntrs.com
wpclncupool2.entuat.aduat.ntrs.com
ohs-iaj11l-c044.ntrs.com
www00710.ntrs.com
appwpcuprsa04.ntrs.com
wwwp02.ntrs.com
uat.northerntrust.com
UNJSPZ8.ntrs.com
idf.ntrs.com
UKRCVPSSL01.ntrs.com
gfb-uat.ntrs.com
ws-caguat2-ssl.wpc.ntrs.com
gfb-pcf-dev.ntrs.com
www0383.ntrs.com
grr-uat.ntrs.com
wwwwca11.ntrs.com
nespdp-uat.ntrs.com
ohs-xaj11l-w075.ntrs.com
DQT_WAS_PRD.ntrs.com
ohs-iaj11l-t102.ntrs.com
wpc02pnnutn101.ent.ad.ntrs.com
ohs-iaj11l-w217.ntrs.com
fgc-sys.ent.ad.ntrs.com
nwa-asym-ja.ntrs.com
wwwsry.ntrs.com
web-ipn45-gpi.ntrs.com
ipl-xaj83s-ww04.ntrs.com
appnpcupctd02.ntrs.com
TEST-ignore.ntrs.com
qcdashboard-csprod.ntrs.com
sys.fos.amzext.ntrs.com
mrr83.ntrs.com
nam.ntrs.com
MYAPPS.NTRS.COM
ohsiintw15.ntrs.com
gpe-encryption.jtgprod.ntrs.com
WPCAMERCER01.ntrs.com
ohs-xaj83l-ww88.ntrs.com
sdcavsu10.ent.ad.ntrs.com
servicesuat.ntrs.com
officewebapp-p.ntrs.com
intt041.ntrs.com
ohs-iaj11l-w203.ntrs.com
sdcavsu10.ent.ad.ntrs.com
sgsgvpn01.remote.ntrs.com
ohs-xap11l-t14.ntrs.com
www4183.ntrs.com
up13843.ntrs.com
wwwsry.ntrs.com
*.dev2.src.amzext.ntrs.com
ohs-xaj11l-w031.ntrs.com
ohs-xaj10l-w098.ntrs.com
ohs-iaj11l-t098.ntrs.com
ut87072.ntrs.com
services.ntrs.com
int04807.ntrs.com
idf-uat.lux.ntrs.com
fmz-sys.ntrs.com
ohs-iaj10l-t080.ntrs.com
www0383.ntrs.com
wls-w146-iaj11ls.appzone.wpc.ntrs.com
awp-uat.ntrs.com
prismukpcvdi.ent.ad.ntrs.com
ohs-iaj11l-dcc2.ntrs.com
up12149.ntrs.com
wwwp09.ntrs.com
ohs-xap10l-w00.ntrs.com
mrr83.ntrs.com
ohs-iaj11l-t012.ntrs.com
awp-prod.ntrs.com
txh-osj.ntrs.com
irl-icon10uat-dev.ntrs.com
ohs-iap10l-admint.ntrs.com
ciscouc-apac.ntrs.com

Certificate

The complete raw certificate details for www02710.ntrs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIODDCCDPSgAwIBAgIQTVyNFlXO1cQ4ZX1CTQdHGjANBgkqhkiG9w0BAQsFADBE
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU
R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTcxMDIzMDAwMDAwWhcNMTgxMDIzMjM1
OTU5WjCBlzELMAkGA1UEBhMCVVMxETAPBgNVBAgMCElsbGlub2lzMRAwDgYDVQQH
DAdDaGljYWdvMSMwIQYDVQQKDBpOb3J0aGVybiBUcnVzdCBDb3Jwb3JhdGlvbjEi
MCAGA1UECwwZT3BlcmF0aW9ucyBhbmQgVGVjaG5vbG9neTEaMBgGA1UEAwwRd3d3
MDI3MTAubnRycy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB
VCGNKG8wYmrcfiyHNJxJy9kRa8oCb7gHyn7o586MtUZLFPnU9wtw9YXTYhsMFKaY
KwwVLwASxIIiMA3VaTcuCgTKvfVLsE2NCk8GsFouXikBfOUOiC/5PHaQrlPUyIx9
J6bUaABUMW+LcIn+At+7pLwEzT7Db5lIZqKEwR+x1rr44ZeDhvQVtDGn6XLHgPZE
lQn+NtqTKGtGWKlAmiyUgDwTKx1LI1FeRafydyhlL69KgautArXRgQjASAvia0WM
6MsGeS8IX8FNdUVlGfTDyHxVgMlWqAD+0xMvklywX9F5mJAQrvXU/8Sk8M/9cykW
l93ZN+yHb87I82mu8/zjAgMBAAGjggqkMIIKoDCCCBMGA1UdEQSCCAowgggGghZ3
d3cuNTBzb3V0aGNhcGl0YWwuY29tghp3d3cubm9ydGhlcm50cnVzdGZ1bmRzLmNv
bYIZd3d3LmZpZnR5c291dGhjYXBpdGFsLmNvbYIbd3d3Lm5vcnRoZXJubXV0dWFs
ZnVuZHMuY29tghR3d3cubm9ydGhlcm50cnVzdC5qcIIZd3d3Lm5vcnRoZXJudHJ1
c3RiYW5rLmNvbYIWd3d3Lm5vcnRoZXJuLWZ1bmRzLmNvbYIXbS5ub3J0aGVybnRy
dXN0b3Blbi5jb22CGXd3dy5ub3J0aGVybnRydXN0b3Blbi5jb22CJHJpc2thbmRw
ZXJmb3JtYW5jZS5ub3J0aGVybnRydXN0LmNvbYIaYnVzaW5lc3Mubm9ydGhlcm50
cnVzdC5jb22CHndlYi14cDJiLXB3cy5ub3J0aGVybnRydXN0LmNvbYIgd3d3LnJl
dGlyZW1lbnQubm9ydGhlcm50cnVzdC5jb22CHHJldGlyZW1lbnQubm9ydGhlcm50
cnVzdC5jb22CHnd3dy5idXNpbmVzcy5ub3J0aGVybnRydXN0LmNvbYIod3d3LnJp
c2thbmRwZXJmb3JtYW5jZS5ub3J0aGVybnRydXN0LmNvbYIVMTI1Lm5vcnRoZXJu
dHJ1c3QuY29tgh93ZWFsdGhhZHZpc29yLm5vcnRoZXJudHJ1c3QuY29tghphZHZp
c29ycy5ub3J0aGVybmZ1bmRzLmNvbYIfaW5zdGl0dXRpb25hbC5ub3J0aGVybmZ1
bmRzLmNvbYIcaW5kaXZpZHVhbC5ub3J0aGVybmZ1bmRzLmNvbYIRd3d3MDM5MTAu
bnRycy5jb22CFXd3d3B0bDE0LWV4bC5udHJzLmNvbYIXd3d3LnJldGlyZW1lbnQu
bnRycy5jb22CEXd3dzAzMzEwLm50cnMuY29tgg5ubXI4My5udHJzLmNvbYIRd3d3
MjAzMTAubnRycy5jb22CGm0ucHJpdmF0ZXBhc3Nwb3J0Lm50cnMuY29tghF3d3cw
MzQxMC5udHJzLmNvbYIPd3d3cDE0Lm50cnMuY29tghR3d3dwdGwxNC1yNS5udHJz
LmNvbYIZd3d3c2VjdXJpZGVzaTgzYS5udHJzLmNvbYIYd3d3cHRsMTQtcjUud3Bj
Lm50cnMuY29tggx1dGMubnRycy5jb22CEXd3dzA1NTEwLm50cnMuY29tghB3d3c4
NzgzLm50cnMuY29tgiJ3d3cucmVsaWFiaWxpdHlpbnZlc3RtZW50Lm50cnMuY29t
ghV3ZWIteHAyYy1wd3MubnRycy5jb22CGHd3d3B0bDE0LXI1Lm5wYy5udHJzLmNv
bYIQd3d3MzY4My5udHJzLmNvbYIRd3d3MDQwMTAubnRycy5jb22CEXd3dzIxNzEw
Lm50cnMuY29tghF3d3dwdGwwNC5udHJzLmNvbYIUd3d3cHRsMTItcjUubnRycy5j
b22CE3JldGlyZW1lbnQubnRycy5jb22CEXd3dzAxNTEwLm50cnMuY29tghF3d3dw
dGwwNy5udHJzLmNvbYIRd3d3MjI1MTEubnRycy5jb22CFnd3d3B0bHBzaTJzc2wu
bnRycy5jb22CFXdlYi14cDJhLXB3cy5udHJzLmNvbYIRd3d3MDYyMTAubnRycy5j
b22CGXdlYi14cDJiLXB3cy53cGMubnRycy5jb22CEHd3dzIyODMubnRycy5jb22C
FXdlYi14cDJlLXB3cy5udHJzLmNvbYIRd3d3MTUwMTAubnRycy5jb22CGXdlYi14
cDJiLXB3cy5ucGMubnRycy5jb22CEnd3d2VzaTgzYS5udHJzLmNvbYIQd3d3MzM4
My5udHJzLmNvbYIXd3d3LmJlbmVmaXRub3cubnRycy5jb22CFm5vcnRoZXJuZnVu
ZHMubnRycy5jb22CEHd3dzg1ODMubnRycy5jb22CEHd3dzIxODMubnRycy5jb22C
FXdlYi14cDJrLXB3cy5udHJzLmNvbYINd3d3Yy5udHJzLmNvbYIdb2hzLXhhcHRs
MTBsLXd3MTItcjUubnRycy5jb22CEXd3dzA3MDEwLm50cnMuY29tghV3ZWIteHAy
ZC1wd3MubnRycy5jb22CEHd3dzMwODMubnRycy5jb22CFXdlYi14cDJiLXB3cy5u
dHJzLmNvbYIjbm9ydGhlcm5pbnN0aXR1dGlvbmFsZnVuZHMubnRycy5jb22CEXd3
d3B0bDAyLm50cnMuY29tghB3d3cwODgzLm50cnMuY29tgg5ud2E4My5udHJzLmNv
bYIMd3d3Lm50cnMuY29tghB3d3c5MjgzLm50cnMuY29tghF3d3cxNDYxMC5udHJz
LmNvbYIQd3d3MTA4My5udHJzLmNvbYIRd3d3cHRsMDAubnRycy5jb22CEHd3dzAy
ODMubnRycy5jb22CEXd3dzUwNTgzLm50cnMuY29tgh93d3cucmlza2FuZHBlcmZv
cm1hbmNlLm50cnMuY29tggwxMjUubnRycy5jb22CEXd3dzIwMDEwLm50cnMuY29t
ghFteWhyaGVscC5udHJzLmNvbYIVd2ViLXhwMmYtcHdzLm50cnMuY29tghB3d3c4
NjgzLm50cnMuY29tghV3d3dwdGxwc2lzc2wubnRycy5jb22CG3Jpc2thbmRwZXJm
b3JtYW5jZS5udHJzLmNvbYIRd3d3MDI3MTAubnRycy5jb20wCQYDVR0TBAIwADAO
BgNVHQ8BAf8EBAMCBaAwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL2duLnN5bWNi
LmNvbS9nbi5jcmwwgZ0GA1UdIASBlTCBkjCBjwYGZ4EMAQICMIGEMD8GCCsGAQUF
BwIBFjNodHRwczovL3d3dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL3JlcG9zaXRv
cnkvbGVnYWwwQQYIKwYBBQUHAgIwNQwzaHR0cHM6Ly93d3cuZ2VvdHJ1c3QuY29t
L3Jlc291cmNlcy9yZXBvc2l0b3J5L2xlZ2FsMB0GA1UdJQQWMBQGCCsGAQUFBwMB
BggrBgEFBQcDAjAfBgNVHSMEGDAWgBTSb/eW9IU/cjwwfSPahXibo3xafDBXBggr
BgEFBQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9nbi5zeW1jZC5jb20wJgYI
KwYBBQUHMAKGGmh0dHA6Ly9nbi5zeW1jYi5jb20vZ24uY3J0MIIBBAYKKwYBBAHW
eQIEAgSB9QSB8gDwAHYA3esdK3oNT6Ygi4GtgWhwfi6OnQHVXIiNPRHEzbbsvswA
AAFfSuSMTwAABAMARzBFAiBLQHIZHtxNiuyxgBrH2DR3LOfctKNI44mBhprgiaE9
FwIhAPwSILKVUxvO/n4T6+jyn8nHu5r9Ke+MVUcIrUbkuGuxAHYApLkJkLQYWBSH
uxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFfSuSMfwAABAMARzBFAiBx+FhORkCv
Lm/J/4o8DEkXazKZ3ZDVm5Y6QS6guMLbMQIhAPu/go75wel4OLV/9QzANABM4OlH
ZJ8J3Zcauq4JtM3fMA0GCSqGSIb3DQEBCwUAA4IBAQAwcD16WR7sSLlxaVQXo5CB
QgkMXsaYRpuc4+6gGZGBaBZojWa+RscXPy7hcRFqRdYzROF5Aw2EqRgM8LaUMIY0
gsTe0gCPGPAuNQ7Mbcs/Xhxk96cGwEwXpOVGOnoADXGuIl9e8y1UYuM7C+DvsBOF
TGqNYCg6UD3PesxVTYrC7JDtVAMAGsShGr7IkNpujZqgHM6Z62VF2yGS15QthgHX
pdcyD9FPliNSscXRTvf74naudchowltJpBrfOsTFSaqk57j9OEbmxtxz3idO05nN
m9/H5CY3XsscOhttqVUKhbgpaIsiL9oSciGpd/g4JhfGfMZSsnD6O078qKf/cJNP
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVQhjShvMGJq3H4shzSc
ScvZEWvKAm+4B8p+6OfOjLVGSxT51PcLcPWF02IbDBSmmCsMFS8AEsSCIjAN1Wk3
LgoEyr31S7BNjQpPBrBaLl4pAXzlDogv+Tx2kK5T1MiMfSem1GgAVDFvi3CJ/gLf
u6S8BM0+w2+ZSGaihMEfsda6+OGXg4b0FbQxp+lyx4D2RJUJ/jbakyhrRlipQJos
lIA8EysdSyNRXkWn8ncoZS+vSoGrrQK10YEIwEgL4mtFjOjLBnkvCF/BTXVFZRn0
w8h8VYDJVqgA/tMTL5JcsF/ReZiQEK711P/EpPDP/XMpFpfd2Tfsh2/OyPNprvP8
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 102831108575753690592104579019856889626
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Northern Trust Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Operations and Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www02710.ntrs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24405479430434662420189005823399673270157116351312189434567891229864736612026481951493289699948713273832693219145931824936860770353707007309849825904493857759583351381950190016189713285082672887413579029241912024679939444349407946064804709109968501595115978109402140809647720608225506871971649047150794813765018960758419391446331366450610154636248524204028974560955968887313641972084759088568583689591150999143814022798149311437124771513808709800019864051982733428082970196553935212756022950417173551124522746421066202696391774314152233974756519858413749454142064553024760765543506108066237324070363140270957874380003
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2058 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.50southcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrustfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fiftysouthcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northernmutualfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrust.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrustbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northern-funds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.northerntrustopen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrustopen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riskandperformance.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2b-pws.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.retirement.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirement.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.business.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riskandperformance.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '125.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wealthadvisor.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisors.northernfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'institutional.northernfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'individual.northernfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www03910.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl14-exl.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.retirement.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www03310.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmr83.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www20310.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.privatepassport.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www03410.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwp14.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl14-r5.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwsecuridesi83a.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl14-r5.wpc.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utc.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www05510.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www8783.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reliabilityinvestment.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2c-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl14-r5.npc.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3683.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www04010.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www21710.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl04.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl12-r5.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirement.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www01510.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl07.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www22511.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptlpsi2ssl.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2a-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www06210.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2b-pws.wpc.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2283.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2e-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www15010.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2b-pws.npc.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwesi83a.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3383.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benefitnow.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northernfunds.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www8583.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2183.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2k-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwc.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohs-xaptl10l-ww12-r5.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www07010.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2d-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3083.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2b-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northerninstitutionalfunds.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl02.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www0883.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nwa83.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www9283.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www14610.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1083.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl00.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www0283.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www50583.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riskandperformance.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '125.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www20010.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhrhelp.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2f-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www8683.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptlpsissl.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riskandperformance.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www02710.ntrs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015f4ae48c4f000004030047304502204b4072191edc4d8aecb1801ac7d834772ce7dcb4a348e38981869ae089a13d17022100fc1220b295531bcefe7e13ebe8f29fc9c7bb9afd29ef8c554708ad46e4b86bb1007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015f4ae48c7f0000040300473045022071f8584e4640af2e6fc9ff8a3c0c49176b3299dd90d59b963a412ea0b8c2db31022100fbbf828ef9c1e97838b57ff50cc034004ce0e947649f09dd971abaae09b4cddf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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