www.safr.bdo.co.uk
- BDO LLP -
Issued by VeriSign Class 3 International Server CA - G3
About this certificate
This digital certificate with serial number 0d:36:4e:96:c7:9a:0a:55:60:54:8d:a9:d8:16:41:08 was issued on by VeriSign, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
- Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)
BDO LLP
Organization:
BDO LLP
Organization unit: IT Dept
Organization unit: IT Dept
State / Province:
UNITED KINGDOM
Locality: London
Country: GB
Locality: London
Country: GB
VeriSign, Inc.
Organization:
VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0d:36:4e:96:c7:9a:0a:55:60:54:8d:a9:d8:16:41:08Serial Number (int): 17561941949511989338881570719814533384
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: d7:9b:7c:d8:22:a0:15:f7:dd:ad:5f:ce:29:9b:58:c3:bc:46:00:b5
Fingerprint (sha1): 20:a8:54:b3:85:47:cd:a4:6a:53:27:91:58:8b:98:f3:56:3e:51:a5
Fingerprint (sha256): 3b:dc:23:70:f5:0c:26:38:ff:5a:3e:30:82:f5:44:36:c7:94:51:ea:5a:e8:23:6e:c3:26:f0:40:9f:35:fe:bd
Issuing Certificate URL: http://SVRIntl-G3-aia.verisign.com/SVRIntlG3.cer
Revocation information
OCSP Server: http://ocsp.verisign.comCRL Distribution Point: http://SVRIntl-G3-crl.verisign.com/SVRIntlG3.crl
Check the revocation status for certificate www.safr.bdo.co.uk
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.safr.bdo.co.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Netscape Server-Gated Cryptography
Microsoft Server-Gated Cryptography
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.safr.bdo.co.uk
Other certificates including the domain name bdo.co.uk
(limited to 100 certificates)
sni.cloudflaressl.com
bdoextranet.bdo.co.uk
fs.bdo.co.uk
mail.bdo.co.uk
guestwifi.bdo.co.uk
bdosbc01HA.bdo.co.uk
ceros4.map.fastly.net
paws.bdo.co.uk
ceros4.map.fastly.net
gtlp.bdo.co.uk
ndes.bdo.co.uk
guestwifi.bdo.co.uk
*.bdo.co.uk
ceros4.map.fastly.net
BDO SERVICES LIMITED
www.bdo.co.uk
emos.bdo.co.uk
help.bdo.co.uk
pentanavision.bdo.co.uk
open.bdo.co.uk
guestwifi.bdo.co.uk
ceros4.map.fastly.net
*.exp.gumgum.com
adrms.bdo.co.uk
guestwifi.bdo.co.uk
adfs.bdo.co.uk
gtlp.bdo.co.uk
eportal.bdo.co.uk
ceros4.map.fastly.net
share.bdo.co.uk
careers.bdo.co.uk
bdo-dms.bdo.co.uk
brportal.bdo.co.uk
ceros4.map.fastly.net
share.bdo.co.uk
ndes.bdo.co.uk
ssl473150.cloudflaressl.com
www.bdo.co.uk
www.bdo.co.uk
insite.bdo.co.uk
ixbrl.bdo.co.uk
drhome.bdo.co.uk
*.bdo.co.uk
uatbdoextranet.bdo.co.uk
careers.bdo.co.uk
ceros4.map.fastly.net
bdoarchive.bdo.co.uk
apps.bdo.co.uk
ams.bdo.co.uk
apps.bdo.co.uk
proaudit.bdo.co.uk
p11dupdate.bdo.co.uk
support.bdo.co.uk
www.neweconomy.bdo.co.uk
ssl473150.cloudflaressl.com
ceros4.map.fastly.net
emos.bdo.co.uk
gtlp.bdo.co.uk
go.bdo.co.uk
www.neweconomy.bdo.co.uk
bdoextranet.bdo.co.uk
msllp.bdo.co.uk
brainspace.bdo.co.uk
*.bdo.co.uk
ams.bdo.co.uk
ras.bdo.co.uk
adfs.bdo.co.uk
www.msllpstage.bdo.co.uk
open.bdo.co.uk
ras.bdo.co.uk
*.exp.gumgum.com
brportal.bdo.co.uk
ceros4.map.fastly.net
*.exp.gumgum.com
reception2.bdo.co.uk
ceros4.map.fastly.net
BDO SERVICES LIMITED
ssl473150.cloudflaressl.com
ceros4.map.fastly.net
adfs.bdo.co.uk
mobileiron.bdo.co.uk
ceros4.map.fastly.net
share.bdo.co.uk
admin-bdoprivate.bdo.co.uk
eportalftp.bdo.co.uk
ceros4.map.fastly.net
ams.bdo.co.uk
ceros4.map.fastly.net
www.safr.bdo.co.uk
www.bdo.co.uk
ssl473149.cloudflaressl.com
www.bdo.co.uk
ceros4.map.fastly.net
*.exp.gumgum.com
emos.bdo.co.uk
apps.bdo.co.uk
epubs.bdo.co.uk
ceros4.map.fastly.net
www.bdo.co.uk
officewebapps.bdo.co.uk
bdoextranet.bdo.co.uk
fs.bdo.co.uk
mail.bdo.co.uk
guestwifi.bdo.co.uk
bdosbc01HA.bdo.co.uk
ceros4.map.fastly.net
paws.bdo.co.uk
ceros4.map.fastly.net
gtlp.bdo.co.uk
ndes.bdo.co.uk
guestwifi.bdo.co.uk
*.bdo.co.uk
ceros4.map.fastly.net
BDO SERVICES LIMITED
www.bdo.co.uk
emos.bdo.co.uk
help.bdo.co.uk
pentanavision.bdo.co.uk
open.bdo.co.uk
guestwifi.bdo.co.uk
ceros4.map.fastly.net
*.exp.gumgum.com
adrms.bdo.co.uk
guestwifi.bdo.co.uk
adfs.bdo.co.uk
gtlp.bdo.co.uk
eportal.bdo.co.uk
ceros4.map.fastly.net
share.bdo.co.uk
careers.bdo.co.uk
bdo-dms.bdo.co.uk
brportal.bdo.co.uk
ceros4.map.fastly.net
share.bdo.co.uk
ndes.bdo.co.uk
ssl473150.cloudflaressl.com
www.bdo.co.uk
www.bdo.co.uk
insite.bdo.co.uk
ixbrl.bdo.co.uk
drhome.bdo.co.uk
*.bdo.co.uk
uatbdoextranet.bdo.co.uk
careers.bdo.co.uk
ceros4.map.fastly.net
bdoarchive.bdo.co.uk
apps.bdo.co.uk
ams.bdo.co.uk
apps.bdo.co.uk
proaudit.bdo.co.uk
p11dupdate.bdo.co.uk
support.bdo.co.uk
www.neweconomy.bdo.co.uk
ssl473150.cloudflaressl.com
ceros4.map.fastly.net
emos.bdo.co.uk
gtlp.bdo.co.uk
go.bdo.co.uk
www.neweconomy.bdo.co.uk
bdoextranet.bdo.co.uk
msllp.bdo.co.uk
brainspace.bdo.co.uk
*.bdo.co.uk
ams.bdo.co.uk
ras.bdo.co.uk
adfs.bdo.co.uk
www.msllpstage.bdo.co.uk
open.bdo.co.uk
ras.bdo.co.uk
*.exp.gumgum.com
brportal.bdo.co.uk
ceros4.map.fastly.net
*.exp.gumgum.com
reception2.bdo.co.uk
ceros4.map.fastly.net
BDO SERVICES LIMITED
ssl473150.cloudflaressl.com
ceros4.map.fastly.net
adfs.bdo.co.uk
mobileiron.bdo.co.uk
ceros4.map.fastly.net
share.bdo.co.uk
admin-bdoprivate.bdo.co.uk
eportalftp.bdo.co.uk
ceros4.map.fastly.net
ams.bdo.co.uk
ceros4.map.fastly.net
www.safr.bdo.co.uk
www.bdo.co.uk
ssl473149.cloudflaressl.com
www.bdo.co.uk
ceros4.map.fastly.net
*.exp.gumgum.com
emos.bdo.co.uk
apps.bdo.co.uk
epubs.bdo.co.uk
ceros4.map.fastly.net
www.bdo.co.uk
officewebapps.bdo.co.uk
Certificate
The complete raw certificate details for www.safr.bdo.co.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgIQDTZOlseaClVgVI2p2BZBCDANBgkqhkiG9w0BAQUFADCB vDELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQL ExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1c2Ug YXQgaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYSAoYykxMDE2MDQGA1UEAxMt VmVyaVNpZ24gQ2xhc3MgMyBJbnRlcm5hdGlvbmFsIFNlcnZlciBDQSAtIEczMB4X DTEzMTAxNTAwMDAwMFoXDTE1MTAxNjIzNTk1OVoweDELMAkGA1UEBhMCR0IxFzAV BgNVBAgTDlVOSVRFRCBLSU5HRE9NMQ8wDQYDVQQHFAZMb25kb24xEDAOBgNVBAoU B0JETyBMTFAxEDAOBgNVBAsUB0lUIERlcHQxGzAZBgNVBAMUEnd3dy5zYWZyLmJk by5jby51azCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIwCkFB9ZDea uD0YbFuk62zt2YfoOQmIpcUR0FWaQ1yxxTAVFavbOVgIsFRyWkw86murEE4+HzEu 18WkVHO7a2djpq4vnPaQUNCXRsU3kbK3QbpvHaqxVBI5ObKvY1IsTSIQf+oOteSc egaT2qJtPQCVUN0fpp57MERnKgeOJubZVEFUjMlRw1gdJcIAPeFEeIN6UtKuTje3 ZUieBEsULt8ibwtMRr6ZSvjO/QxcMNBEfuUcKlUm1ezmzoY8KFAFbCtF2MtqT2vq ktH8YuRlx+/krNQH97+O0eaPjOxkUxV9lFVeiOJ2uYnQtAAF8bzLVgWMPzhlOva8 WDT4+h80XxcCAwEAAaOCAZEwggGNMB0GA1UdEQQWMBSCEnd3dy5zYWZyLmJkby5j by51azAJBgNVHRMEAjAAMA4GA1UdDwEB/wQEAwIFoDA0BgNVHSUELTArBggrBgEF BQcDAQYIKwYBBQUHAwIGCWCGSAGG+EIEAQYKKwYBBAGCNwoDAzBDBgNVHSAEPDA6 MDgGCmCGSAGG+EUBBzYwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cudmVyaXNp Z24uY29tL2NwczAfBgNVHSMEGDAWgBTXm3zYIqAV992tX84pm1jDvEYAtTBBBgNV HR8EOjA4MDagNKAyhjBodHRwOi8vU1ZSSW50bC1HMy1jcmwudmVyaXNpZ24uY29t L1NWUkludGxHMy5jcmwwcgYIKwYBBQUHAQEEZjBkMCQGCCsGAQUFBzABhhhodHRw Oi8vb2NzcC52ZXJpc2lnbi5jb20wPAYIKwYBBQUHMAKGMGh0dHA6Ly9TVlJJbnRs LUczLWFpYS52ZXJpc2lnbi5jb20vU1ZSSW50bEczLmNlcjANBgkqhkiG9w0BAQUF AAOCAQEAfldnimwOjfN79CULpAJ201+YMTnpkX95uI+r+dBrzSHGGKDRe+z9OUcf wS+7fZJ5gA5lZ7O1sOmNPRNfHtITKyly61wYs0eMpLXY/NTKQ9Drq4E4KCP7thgy AbB7YXeoXdhtDPBhQw3XgvBCgN3G2B5VzkpFlwHBwm7htgeScOemQdvkJ1xpv9CA fn1tbwP66spvtJIM/Ucbnlq3way1AEdtlz5OgwNWkHg1k2nqQkQlQc1AW7/DWbRX dOL/QaBlO4e8cm/0SAZ6QgwsYbumOCFr2yPAQjRqBBSeCgHW5oWSLVDG4knJGIpQ DhoRLBO5+n04GnFsn+g3vHOq0pJg9Q== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAKQUH1kN5q4PRhsW6Tr bO3Zh+g5CYilxRHQVZpDXLHFMBUVq9s5WAiwVHJaTDzqa6sQTj4fMS7XxaRUc7tr Z2Omri+c9pBQ0JdGxTeRsrdBum8dqrFUEjk5sq9jUixNIhB/6g615Jx6BpPaom09 AJVQ3R+mnnswRGcqB44m5tlUQVSMyVHDWB0lwgA94UR4g3pS0q5ON7dlSJ4ESxQu 3yJvC0xGvplK+M79DFww0ER+5RwqVSbV7ObOhjwoUAVsK0XYy2pPa+qS0fxi5GXH 7+Ss1Af3v47R5o+M7GRTFX2UVV6I4na5idC0AAXxvMtWBYw/OGU69rxYNPj6HzRf FwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 17561941949511989338881570719814533384 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)10' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 International Server CA - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-10-15 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-16 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UNITED KINGDOM' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'London' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'BDO LLP' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'IT Dept' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'www.safr.bdo.co.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17674626916730485071671197201035353790165224617079399492951424408901265309840515444823677879693972136090967691393821875830288970440644864112518355209329668399434630424525493785912691481411526785858277094502432566903625122571943033246243398609626706770343195893151775176783080416804789856471777673631582904609215405031155709224492648542152484039699507704766242569327567149862828024363806148636700000344918030141410049369634605487253867958887332703605932761680927566423561812021793124322403487492489329774249388083784913236583997467368729395734943534974578076400815301892501720105177460655824004622031690323783866146583 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.safr.bdo.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.4.1 (serverGatedCrypto) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.3 (serverGatedCrypto) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/cps' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d79b7cd822a015f7ddad5fce299b58c3bc4600b5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRIntl-G3-crl.verisign.com/SVRIntlG3.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.verisign.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRIntl-G3-aia.verisign.com/SVRIntlG3.cer' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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