www02710.ntrs.com

- Northern Trust Corporation -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 09:f0:86:a1:6c:66:92:67:a0:e5:00:7e:77:33:2f:82 was issued on by DigiCert Inc.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Northern Trust Corporation

Organization: Northern Trust Corporation
State / Province: Illinois
Locality: Chicago
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:f0:86:a1:6c:66:92:67:a0:e5:00:7e:77:33:2f:82
Serial Number (int): 13211933840282038478797515671066587010
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a3:45:bb:23:3f:b9:b9:30:85:74:35:8c:1b:ae:42:d9:45:5e:61:49
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 99:6d:30:86:af:e7:9c:ae:a1:4a:ab:c3:a8:4b:ed:d2:42:c0:9f:7d
Fingerprint (sha256): 3e:b8:7d:f0:61:41:10:a6:b5:1b:9d:22:11:56:9a:14:93:53:0c:c0:04:81:d8:5b:3c:30:c7:a9:f8:c1:a6:df

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www02710.ntrs.com

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www02710.ntrs.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

125.northerntrust.com
125.ntrs.com
advisors.northernfunds.com
ark03.omnium.com
asia.aviatelive.com
business.northerntrust.com
europe.aviatelive.com
individual.northernfunds.com
institutional.northernfunds.com
investor.omnium.com
investorportal.ntrs.com
live.northerntrust.com
live.ntrs.com
login.ntrs.com
m.northerntrustopen.com
m.privatepassport.ntrs.com
northernfunds.ntrs.com
northerninstitutionalfunds.ntrs.com
northerntrust.com
omniumaccess.omnium.com
retirement.northerntrust.com
retirement.ntrs.com
riskandperformance.northerntrust.com
riskandperformance.ntrs.com
rxpext.ntrs.com
us.aviatelive.com
utc.ntrs.com
wealth.ntrs.com
wealthadvisor.northerntrust.com
web-xp2a-pws.ntrs.com
web-xp2b-pws.northerntrust.com
web-xp2b-pws.npc.ntrs.com
web-xp2b-pws.ntrs.com
web-xp2b-pws.wpc.ntrs.com
web-xp2c-pws.ntrs.com
web-xp2d-pws.ntrs.com
web-xp2e-pws.ntrs.com
web-xp2f-pws.ntrs.com
web-xp2k-pws.ntrs.com
www.50southcapital.com
www.aviatelive.com
www.beladv.com
www.benefitnow.ntrs.com
www.business.northerntrust.com
www.fiftysouthcapital.com
www.northern-funds.com
www.northernmutualfunds.com
www.northerntrust.jp
www.northerntrustbank.com
www.northerntrustfunds.com
www.northerntrustopen.com
www.ntrs.com
www.reliabilityinvestment.ntrs.com
www.retirement.northerntrust.com
www.retirement.ntrs.com
www.riskandperformance.northerntrust.com
www.riskandperformance.ntrs.com
www01510.ntrs.com
www02710.ntrs.com
www03310.ntrs.com
www03410.ntrs.com
www03910.ntrs.com
www04010.ntrs.com
www05510.ntrs.com
www06210.ntrs.com
www07010.ntrs.com
www14610.ntrs.com
www15010.ntrs.com
www20010.ntrs.com
www20310.ntrs.com
www21710.ntrs.com
www22511.ntrs.com
www3383.ntrs.com
wwwc.ntrs.com
wwwdcc.ntrs.com
wwwdcc2.ntrs.com
wwwesi83a.ntrs.com
wwwp14.ntrs.com
wwwptl00.ntrs.com
wwwptl02.ntrs.com
wwwptl04.ntrs.com
wwwptl07.ntrs.com
wwwptl12-r5.ntrs.com
wwwptl14-exl.ntrs.com
wwwptl14-r5.npc.ntrs.com
wwwptl14-r5.ntrs.com
wwwptl14-r5.wpc.ntrs.com
wwwptlpsi2ssl.ntrs.com
wwwptlpsissl.ntrs.com
wwwsecuridesi83a.ntrs.com
wwwt891.ntrs.com
wwwwca11.ntrs.com

Other certificates including the domain name ntrs.com

(limited to 100 certificates)
up12149.ntrs.com
wwwdam.ntrs.com
www4083.ntrs.com
www9783.ntrs.com
www15010.ntrs.com
wwwsecuridesi83a.ntrs.com
int02011.ntrs.com
npc1dnhfsn02.ent.ad.ntrs.com
int01011.ntrs.com
www04510.ntrs.com
www3683.ntrs.com
pandora-npc-prod1.ntrs.com
www0483.ntrs.com
inttsp.ntrs.com
wwwsry.ntrs.com
nia-uat.ntrs.com
ut61082.lux.ntrs.com
sdcwmap03.ent.ad.ntrs.com
ipl-aj83s-nmr.ntrs.com
www.northernfunds.com
www08210.ntrs.com
int04511.ntrs.com
api-cashdash-csint.ntrs.com
bca-doc-dev.ntrs.com
tct-t020-ipo7ls.ntrs.com
up85133.ntrs.com
www02810.ntrs.com
wpclncupool2.entuat.aduat.ntrs.com
ohs-iaj11l-c044.ntrs.com
www00710.ntrs.com
appwpcuprsa04.ntrs.com
wwwp02.ntrs.com
uat.northerntrust.com
UNJSPZ8.ntrs.com
idf.ntrs.com
UKRCVPSSL01.ntrs.com
gfb-uat.ntrs.com
ws-caguat2-ssl.wpc.ntrs.com
gfb-pcf-dev.ntrs.com
www0383.ntrs.com
grr-uat.ntrs.com
wwwwca11.ntrs.com
nespdp-uat.ntrs.com
ohs-xaj11l-w075.ntrs.com
DQT_WAS_PRD.ntrs.com
ohs-iaj11l-t102.ntrs.com
wpc02pnnutn101.ent.ad.ntrs.com
ohs-iaj11l-w217.ntrs.com
fgc-sys.ent.ad.ntrs.com
nwa-asym-ja.ntrs.com
wwwsry.ntrs.com
web-ipn45-gpi.ntrs.com
ipl-xaj83s-ww04.ntrs.com
appnpcupctd02.ntrs.com
TEST-ignore.ntrs.com
qcdashboard-csprod.ntrs.com
sys.fos.amzext.ntrs.com
mrr83.ntrs.com
nam.ntrs.com
MYAPPS.NTRS.COM
ohsiintw15.ntrs.com
gpe-encryption.jtgprod.ntrs.com
WPCAMERCER01.ntrs.com
ohs-xaj83l-ww88.ntrs.com
sdcavsu10.ent.ad.ntrs.com
servicesuat.ntrs.com
officewebapp-p.ntrs.com
intt041.ntrs.com
ohs-iaj11l-w203.ntrs.com
sdcavsu10.ent.ad.ntrs.com
sgsgvpn01.remote.ntrs.com
ohs-xap11l-t14.ntrs.com
www4183.ntrs.com
up13843.ntrs.com
wwwsry.ntrs.com
*.dev2.src.amzext.ntrs.com
ohs-xaj11l-w031.ntrs.com
ohs-xaj10l-w098.ntrs.com
ohs-iaj11l-t098.ntrs.com
ut87072.ntrs.com
services.ntrs.com
int04807.ntrs.com
idf-uat.lux.ntrs.com
fmz-sys.ntrs.com
ohs-iaj10l-t080.ntrs.com
www0383.ntrs.com
wls-w146-iaj11ls.appzone.wpc.ntrs.com
awp-uat.ntrs.com
prismukpcvdi.ent.ad.ntrs.com
ohs-iaj11l-dcc2.ntrs.com
up12149.ntrs.com
wwwp09.ntrs.com
ohs-xap10l-w00.ntrs.com
mrr83.ntrs.com
ohs-iaj11l-t012.ntrs.com
awp-prod.ntrs.com
txh-osj.ntrs.com
irl-icon10uat-dev.ntrs.com
ohs-iap10l-admint.ntrs.com
ciscouc-apac.ntrs.com

Certificate

The complete raw certificate details for www02710.ntrs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5YsqYl2vEVAAiMHTHO6
fWOYEps89eHmUk2HpToR8gL2mCz0iy9YVojy7q0yDpiUlNkSmYYCMfv4N7wQP5On
0IaR3VcB+bpHPy2oZZ+jkvzXmzT09g+JCfGYvQghgWS3l+DB7fXUzTgLEavhI2f7
UtjRLKKPOsNctFLAN2oOHI1vam+pMRC1kkfPU6UsHC58DaSYqqKWdrhP/nzYc5jC
BvbIqELLyxgLKj3xM69DySgK5QIAKvIP1wW2ZoV1p3Lx2HmEzOt/Sb4ZJiwSzc3W
gdW7C04f8l3qu7lQr9XeTkKx19mQkzk9pvx4HD98H8uPXVjDLdLoPLw+9ZLfzraz
dwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13211933840282038478797515671066587010
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Northern Trust Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www02710.ntrs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21155850716531343819418298557811043504207664063220984887747722235053472469261462390498562154421236717396482899682584003357712291078594025649862595466286552855604065828541986132528234685453540528420944628529924215623633037339857812729507699144732129637685666703360687950118811164746990256488430982992363804159500808159131565136712241628628072307972900853562735892041601416807908783084860734988079984298586423607159692821649484340495740316133500984226929822406193577288219562459245612127080765432661585449943175076534989295717876137229903913085476519261616400989436045046755965426141434640994609419249175926369313796983
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a345bb233fb9b9308574358c1bae42d9455e6149
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '125.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '125.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisors.northernfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ark03.omnium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asia.aviatelive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'europe.aviatelive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'individual.northernfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'institutional.northernfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.omnium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorportal.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.northerntrustopen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.privatepassport.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northernfunds.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northerninstitutionalfunds.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omniumaccess.omnium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirement.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirement.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riskandperformance.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riskandperformance.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxpext.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.aviatelive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utc.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wealth.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wealthadvisor.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2a-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2b-pws.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2b-pws.npc.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2b-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2b-pws.wpc.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2c-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2d-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2e-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2f-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2k-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.50southcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aviatelive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beladv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benefitnow.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.business.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fiftysouthcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northern-funds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northernmutualfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrust.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrustbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrustfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrustopen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reliabilityinvestment.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.retirement.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.retirement.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riskandperformance.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riskandperformance.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www01510.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www02710.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www03310.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www03410.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www03910.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www04010.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www05510.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www06210.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www07010.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www14610.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www15010.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www20010.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www20310.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www21710.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www22511.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3383.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwc.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwdcc.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwdcc2.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwesi83a.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwp14.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl00.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl02.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl04.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl07.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl12-r5.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl14-exl.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl14-r5.npc.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl14-r5.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl14-r5.wpc.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptlpsi2ssl.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptlpsissl.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwsecuridesi83a.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwt891.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwwca11.ntrs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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