www.northernfunds.com

- Northern Trust Corporation -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 08:95:22:51:fc:22:9f:3f:4f:65:ef:32:a7:21:57:70 was issued on by DigiCert Inc.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Northern Trust Corporation

Organization: Northern Trust Corporation
State / Province: Illinois
Locality: Chicago
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 08:95:22:51:fc:22:9f:3f:4f:65:ef:32:a7:21:57:70
Serial Number (int): 11408172295640782089070009249251284848
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: cc:ca:ae:79:10:c3:62:70:25:2c:6b:e0:30:f7:0b:20:d7:33:cc:13
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 1a:45:a0:e3:b9:e5:8d:73:14:04:df:4c:72:6e:c0:1d:7f:d8:91:6a
Fingerprint (sha256): 3d:bb:ce:b0:b4:c9:c5:c6:1c:0a:4b:9f:fc:5a:88:99:16:70:1c:3f:bf:8f:56:14:12:9a:68:8b:6e:2a:15:6a

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.northernfunds.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.northernfunds.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.northernfunds.com
advisors.flexshares.com
applist.ntrs.com
campaign.northerntrust.com
cdn.northerntrust.com
cdn.ntrs.com
cdn2.northerntrust.com
cdn2.ntrs.com
corporate.advisors.flexshares.com
corporate.cdn.northerntrust.com
corporate.cdn.ntrs.com
corporate.flexshares.com
corporate.northerntrust.com
corporate.ntam.northerntrust.com
corporate.podcast.northerntrust.com
corporate.rfp.northerntrust.com
developer.northerntrust.com
developer.ntrs.com
developers.northerntrust.com
developers.ntrs.com
docdistribution.ntrs.com
fgr.northerntrust.com
gatewayservice.xde.northerntrust.com
gpi.northerntrust.com
idf.ntrs.com
luxjobs.northerntrust.com
m.northerntrust.com
m.ntrs.com
mobile.northerntrust.com
myplace.ntrs.com
northernfunds.com
nsr.dw.ntrs.com
ntam.northerntrust.com
ofx.ntrs.com
paa.ntrs.com
podcast.northerntrust.com
rfp.northerntrust.com
sda.essex.northerntrust.com
ts8-ac.northerntrust.com
ts8.50southcapital.com
ts8.fgr.northerntrust.com
ts8.flexshares.com
ts8.m.northerntrust.com
ts8.northerntrust.com
ts8.northerntrustopen.com
ts8.rfp.northerntrust.com
tsp.ntrs.com
web-xp2i-pws.ntrs.com
web-xp3a-pws.ntrs.com
web-xp3b-pws.ntrs.com
web-xp3i-pws.ntrs.com
web-xp3p-cdn.ntrs.com
web-xp3s-cdn.ntrs.com
www-ac.northerntrust.com
www-ac.ntrs.com
www.col.ntrs.com
www.flexshares.com
www.northerninstitutionalfunds.com
www.northerntrust.com
www.northerntrustinvestments.com
www.ntam.northerntrust.com
www.thenortherntrust.com
www.tntimok.com
www00210.ntrs.com
www00410.ntrs.com
www00810.ntrs.com
www01010.ntrs.com
www01710.ntrs.com
www02110.ntrs.com
www02410.ntrs.com
www02510.ntrs.com
www02810.ntrs.com
www03110.ntrs.com
www03610.ntrs.com
www04110.ntrs.com
www04210.ntrs.com
www04410.ntrs.com
www04510.ntrs.com
www05410.ntrs.com
www06310.ntrs.com
www06710.ntrs.com
www06810.ntrs.com
www07510.ntrs.com
www08210.ntrs.com
www08610.ntrs.com
www09810.ntrs.com
www09910.ntrs.com
www10410.ntrs.com
www10910.ntrs.com
www11910.ntrs.com
www12010.ntrs.com
www53483.ntrs.com
www99910.ntrs.com
wwwc008.ntrs.com
wwwc042.ntrs.com
wwwc062.ntrs.com
wwwptl09-r5.ntrs.com
xde.northerntrust.com

Other certificates including the domain name northernfunds.com

(limited to 100 certificates)
www.northernfunds.com
www.northernfunds.com
northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
northerntrust.com
www02710.ntrs.com
www02710.ntrs.com
www02710.ntrs.com
www02710.ntrs.com
www02710.ntrs.com
www.northernfunds.com
northerntrust.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www.northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www.northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
northerntrust.com
northerntrust.com
www.northernfunds.com
www02710.ntrs.com
www02710.ntrs.com
www.northernfunds.com
northerntrust.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
northerntrust.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
northerntrust.com
www.northerntrust.com
www02710.ntrs.com
www02710.ntrs.com
northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northerntrust.com
northerntrust.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
northerntrust.com
www.northernfunds.com
www.northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
northerntrust.com
www.northernfunds.com
www02710.ntrs.com
www02710.ntrs.com
www02710.ntrs.com
northerntrust.com
www02710.ntrs.com
www.northerntrust.com
www02710.ntrs.com
northerntrust.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www02710.ntrs.com

Certificate

The complete raw certificate details for www.northernfunds.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1M515DrqIoAshewSfUg2
1Q8XqMIfvvwN2Mob4Q2qCScveSnfnyeSTmK7tiNlv2soxM2LkXmF8GFrG6ZAluCO
ybx06ZZOtJhrEKc5KzoKu7VGA/N/MprG8WxUnQUmg71cQJTFh0suSSgGKMNh/bqH
yUxZlYyfZy1gXKLC4m+J/ScKBfn1rkPiUmkvnP73LPasOQdvND5HGEQ5VZhVxH+V
2yobmVMyeZbHjG+JbEo4lP+NIvhbC3qWeUtYePWKRZETBk18i1yVUW54YM3QQv+t
M+PjjFXRca7k43HhIPJsF2iQqRLvPdLZmU38SgBe/ALLVL2NU/xws4WtZvWsDrSc
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11408172295640782089070009249251284848
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Northern Trust Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.northernfunds.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26864330126633244305800818796015500815603477365283697052185695394946078073601913986808724833044933810763872063316387561200382147324732063333887058948517406337066359423070633883367565894437522318242610389615013758365229048643045545775847696911283573625783575181777877232275304514326794286320563414071186996115954258568862586305255502036318417936454438938725682013822092995022600783834628581994554972460240063094819551168850863556371742743641421250870421840416318225820142205733882446596889632450868764919346937492979970630713777467164516585142178933019455845744302587349838862969883575834751980570061197800664630336619
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cccaae7910c36270252c6be030f70b20d733cc13
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northernfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisors.flexshares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applist.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaign.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn2.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn2.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.advisors.flexshares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.cdn.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.cdn.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.flexshares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.ntam.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.podcast.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.rfp.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developers.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developers.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docdistribution.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fgr.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gatewayservice.xde.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpi.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idf.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxjobs.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myplace.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northernfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsr.dw.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntam.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofx.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paa.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podcast.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rfp.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sda.essex.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts8-ac.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts8.50southcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts8.fgr.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts8.flexshares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts8.m.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts8.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts8.northerntrustopen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts8.rfp.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsp.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2i-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp3a-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp3b-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp3i-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp3p-cdn.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp3s-cdn.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-ac.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-ac.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.col.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flexshares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerninstitutionalfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrustinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ntam.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thenortherntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tntimok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www00210.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www00410.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www00810.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www01010.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www01710.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www02110.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www02410.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www02510.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www02810.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www03110.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www03610.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www04110.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www04210.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www04410.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www04510.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www05410.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www06310.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www06710.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www06810.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www07510.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www08210.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www08610.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www09810.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www09910.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www10410.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www10910.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www11910.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www12010.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www53483.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www99910.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwc008.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwc042.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwc062.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl09-r5.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xde.northerntrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003ebd40b6d7f2a39ddf1aaa7c58834761fc2aafeb655c1cec680b7895bffbc673f2d6fc76490c6c9c0536eda6fe07e29d95a8873b7f3efab6338eee921279b46d77383d232a7207afc6f1b3804d3cc68806c5cca63576edc5d728bc61e575a8b70dd2f5373af56ee27c2ddfb572095fafcbe4b7e34aa9e8d93c775e804bd4425e1235b11ec5945135774d3ca8510e5b80a79c7f4a0e23b353ccd93238f31f0d168fadefe0882baca9610ac1ca257a1d8ad174921fae00116400a786dff2ec97737e7ee55bc8e477fb08696029b81bbfdf71039515cf134de65eb436f82b859d3ea708138069273c707a8c77612744a4b87f8ce8b15c5d1ccfa43ac87d5a14831a