northerntrust.com
- The Northern Trust Company -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 0e:59:22:5a:ff:e6:ad:72:f3:07:f8:1d:f2:0f:88:65 was issued on by DigiCert Inc.
With 46 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
The Northern Trust Company
Organization:
The Northern Trust Company
State / Province:
Illinois
Locality: Chicago
Country: US
Locality: Chicago
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0e:59:22:5a:ff:e6:ad:72:f3:07:f8:1d:f2:0f:88:65Serial Number (int): 19072003173057121852974267212789418085
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 47:cb:a5:70:1b:e8:89:fc:8d:8b:28:4e:5d:5f:52:f3:40:12:56:11
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): 1e:96:4c:5a:be:74:7b:d3:04:95:8c:74:c6:9e:0c:7c:5e:14:ca:15
Fingerprint (sha256): 40:bf:31:32:ff:9b:f1:be:c4:19:73:d3:ca:db:e8:27:d4:98:c0:d5:e9:bf:81:84:49:d7:de:e6:e2:be:c3:64
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl
Check the revocation status for certificate northerntrust.com
46
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for northerntrust.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
northerntrust.com
www.flexshares.com
northernfunds.com
www.northernfunds.com
www.northerninstitutionalfunds.com
northerninstitutionalfunds.com
www.northerntrustinvestments.com
northerntrustinvestments.com
individual.northernfunds.com
advisors.northernfunds.com
www.northerntrustopen.com
125.northerntrust.com
50southcapital.com
northerntrust.jp
www.northerntrust.jp
www.50southcapital.com
fiftysouthcapital.com
www.fiftysouthcapital.com
northern-Funds.com
www.northern-Funds.com
northernmutualfunds.com
www.northernmutualfunds.com
www.northerntrust.com
www.ntrs.com
ntrs.com
northerntrust.ntrs.com
www.northerntrust.ntrs.com
rfp.northerntrust.com
m.northerntrust.com
m.ntrs.com
web-xp2i-pws.ntrs.com
web-xp2c-pws.ntrs.com
web-xp2b-pws.ntrs.com
web-xp2d-pws.ntrs.com
www-xp.ntrs.com
www-ac.northerntrust.com
emotomy.com
beladv.com
tntimok.com
www.tntimok.com
www.northerntrustbank.com
northerntrustbank.com
www.beladv.com
www.emotomy.com
advisors.flexshares.com
flexshares.com
www.flexshares.com
northernfunds.com
www.northernfunds.com
www.northerninstitutionalfunds.com
northerninstitutionalfunds.com
www.northerntrustinvestments.com
northerntrustinvestments.com
individual.northernfunds.com
advisors.northernfunds.com
www.northerntrustopen.com
125.northerntrust.com
50southcapital.com
northerntrust.jp
www.northerntrust.jp
www.50southcapital.com
fiftysouthcapital.com
www.fiftysouthcapital.com
northern-Funds.com
www.northern-Funds.com
northernmutualfunds.com
www.northernmutualfunds.com
www.northerntrust.com
www.ntrs.com
ntrs.com
northerntrust.ntrs.com
www.northerntrust.ntrs.com
rfp.northerntrust.com
m.northerntrust.com
m.ntrs.com
web-xp2i-pws.ntrs.com
web-xp2c-pws.ntrs.com
web-xp2b-pws.ntrs.com
web-xp2d-pws.ntrs.com
www-xp.ntrs.com
www-ac.northerntrust.com
emotomy.com
beladv.com
tntimok.com
www.tntimok.com
www.northerntrustbank.com
northerntrustbank.com
www.beladv.com
www.emotomy.com
advisors.flexshares.com
flexshares.com
Other certificates including the domain name northerntrust.com
(limited to 100 certificates)
ntam-uat-cus-agw.northerntrust.com
www.northernfunds.com
san-001.ceros.com
uat.northerntrust.com
san-001.ceros.com
san-001.ceros.com
locations.northerntrust.com
san-001.ceros.com
san-001.ceros.com
san-001.ceros.com
wwww119.ntrs.com
san-001.ceros.com
deviaa.northerntrust.com
san-001.ceros.com
locations.northerntrust.com
san-001.ceros.com
uat.northerntrust.com
locations.northerntrust.com
wealth.northerntrust.com
pes1.northerntrust.com
san-001.ceros.com
san-001.ceros.com
www.northernfunds.com
wwww119.ntrs.com
northerntrust.com
ciscouc-emea-XMPP.ntrs.com
careers.northerntrust.com
www02710.ntrs.com
www.northernfunds.com
ntam-prod-cus-agw.northerntrust.com
uat.northerntrust.com
www.northernfunds.com
www.northernfunds.com
survey.northerntrust.com
san-001.ceros.com
smetrics.northerntrust.com
san-001.ceros.com
smetrics.northerntrust.com
www-ac.northerntrust.com
www02710.ntrs.com
northerntrust.com
www-ac.northerntrust.com
san-001.ceros.com
uat.northerntrust.com
ciscouc-indi-XMPP.ntrs.com
www02710.ntrs.com
ukpcuat2imp01.ntrs.com
amer-c4-expe.ntrs.com
www02710.ntrs.com
san-001.ceros.com
www02710.ntrs.com
web-xp3p-cdn.ntrs.com
san-001.ceros.com
www02710.ntrs.com
pages.e.northerntrust.com
san-001.ceros.com
www02710.ntrs.com
san-001.ceros.com
assetmanagement.northerntrust.com
san-001.ceros.com
pages.e.northerntrust.com
ciscouc-emea-XMPP.ntrs.com
northerntrust.com
wealth.northerntrust.com
www.northernfunds.com
survey.northerntrust.com
pages.e.northerntrust.com
pointofview.northerntrust.com
pages.e.northerntrust.com
san-001.ceros.com
san-001.ceros.com
wwww119.ntrs.com
pes1.northerntrust.com
www.northerntrust.com
www02710.ntrs.com
assetmanagement.northerntrust.com
www-ac.northerntrust.com
devotto.northerntrust.com
pes2.northerntrust.com
assetmanagement.northerntrust.com
uat.northerntrust.com
wwww119.ntrs.com
ukpcuat2imp01.ntrs.com
uat.northerntrust.com
careers.northerntrust.com
san-001.ceros.com
click.news.northerntrust.com
www.northernfunds.com
*.api.tpv.northerntrust.com
san-001.ceros.com
cm.demo.northerntrust.com
pointofview.northerntrust.com
san-001.ceros.com
www.northerntrust.com
uat.northerntrust.com
stores.cictitlepawn.com
www02710.ntrs.com
www-ac.northerntrust.com
www.northernfunds.com
careers.northerntrust.com
www.northernfunds.com
san-001.ceros.com
uat.northerntrust.com
san-001.ceros.com
san-001.ceros.com
locations.northerntrust.com
san-001.ceros.com
san-001.ceros.com
san-001.ceros.com
wwww119.ntrs.com
san-001.ceros.com
deviaa.northerntrust.com
san-001.ceros.com
locations.northerntrust.com
san-001.ceros.com
uat.northerntrust.com
locations.northerntrust.com
wealth.northerntrust.com
pes1.northerntrust.com
san-001.ceros.com
san-001.ceros.com
www.northernfunds.com
wwww119.ntrs.com
northerntrust.com
ciscouc-emea-XMPP.ntrs.com
careers.northerntrust.com
www02710.ntrs.com
www.northernfunds.com
ntam-prod-cus-agw.northerntrust.com
uat.northerntrust.com
www.northernfunds.com
www.northernfunds.com
survey.northerntrust.com
san-001.ceros.com
smetrics.northerntrust.com
san-001.ceros.com
smetrics.northerntrust.com
www-ac.northerntrust.com
www02710.ntrs.com
northerntrust.com
www-ac.northerntrust.com
san-001.ceros.com
uat.northerntrust.com
ciscouc-indi-XMPP.ntrs.com
www02710.ntrs.com
ukpcuat2imp01.ntrs.com
amer-c4-expe.ntrs.com
www02710.ntrs.com
san-001.ceros.com
www02710.ntrs.com
web-xp3p-cdn.ntrs.com
san-001.ceros.com
www02710.ntrs.com
pages.e.northerntrust.com
san-001.ceros.com
www02710.ntrs.com
san-001.ceros.com
assetmanagement.northerntrust.com
san-001.ceros.com
pages.e.northerntrust.com
ciscouc-emea-XMPP.ntrs.com
northerntrust.com
wealth.northerntrust.com
www.northernfunds.com
survey.northerntrust.com
pages.e.northerntrust.com
pointofview.northerntrust.com
pages.e.northerntrust.com
san-001.ceros.com
san-001.ceros.com
wwww119.ntrs.com
pes1.northerntrust.com
www.northerntrust.com
www02710.ntrs.com
assetmanagement.northerntrust.com
www-ac.northerntrust.com
devotto.northerntrust.com
pes2.northerntrust.com
assetmanagement.northerntrust.com
uat.northerntrust.com
wwww119.ntrs.com
ukpcuat2imp01.ntrs.com
uat.northerntrust.com
careers.northerntrust.com
san-001.ceros.com
click.news.northerntrust.com
www.northernfunds.com
*.api.tpv.northerntrust.com
san-001.ceros.com
cm.demo.northerntrust.com
pointofview.northerntrust.com
san-001.ceros.com
www.northerntrust.com
uat.northerntrust.com
stores.cictitlepawn.com
www02710.ntrs.com
www-ac.northerntrust.com
www.northernfunds.com
careers.northerntrust.com
Certificate
The complete raw certificate details for northerntrust.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIKqjCCCZKgAwIBAgIQDlkiWv/mrXLzB/gd8g+IZTANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMjMwMTIwMDAwMDAwWhcN MjMxMDAxMjM1OTU5WjBzMQswCQYDVQQGEwJVUzERMA8GA1UECBMISWxsaW5vaXMx EDAOBgNVBAcTB0NoaWNhZ28xIzAhBgNVBAoTGlRoZSBOb3J0aGVybiBUcnVzdCBD b21wYW55MRowGAYDVQQDExFub3J0aGVybnRydXN0LmNvbTCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAJl75uMAW4Q3vgDrrlMNvq/wt+sNU9S+fVGTbG7d XZDQ/qkJymP5KDOzG2/5R0HGD2kivM2KqeJtpje33SSoiY5fi3cDaCvJCQ45HIq1 tdwJVKd+YsG4D07QTcQEzmHM1IXA8bpkH/mgr1jOYUtnx8CO+Z1pCYB7i1KWfIJr zLm4loJ+7Iz4EF7+Ff8WsGbKvXX3gEJOsKcqxdC/fFucV4wpZakk4L92UJSzbrLo +B2qT9L0iB8E0+OzWuY7YvU7b79xpywK4GRk0FtCQDnv/iwvDihRQsNRzkRk4cnZ Ud5pAeQziyL/KB8AhMmAQ+NemoBa7V0m0ml/T6AawvCNKQ8CAwEAAaOCB14wggda MB8GA1UdIwQYMBaAFA+AYRyCMWHVLyjnjUY4tCzhxtniMB0GA1UdDgQWBBRHy6Vw G+iJ/I2LKE5dX1LzQBJWETCCBAsGA1UdEQSCBAIwggP+ghFub3J0aGVybnRydXN0 LmNvbYISd3d3LmZsZXhzaGFyZXMuY29tghFub3J0aGVybmZ1bmRzLmNvbYIVd3d3 Lm5vcnRoZXJuZnVuZHMuY29tgiJ3d3cubm9ydGhlcm5pbnN0aXR1dGlvbmFsZnVu ZHMuY29tgh5ub3J0aGVybmluc3RpdHV0aW9uYWxmdW5kcy5jb22CIHd3dy5ub3J0 aGVybnRydXN0aW52ZXN0bWVudHMuY29tghxub3J0aGVybnRydXN0aW52ZXN0bWVu dHMuY29tghxpbmRpdmlkdWFsLm5vcnRoZXJuZnVuZHMuY29tghphZHZpc29ycy5u b3J0aGVybmZ1bmRzLmNvbYIZd3d3Lm5vcnRoZXJudHJ1c3RvcGVuLmNvbYIVMTI1 Lm5vcnRoZXJudHJ1c3QuY29tghI1MHNvdXRoY2FwaXRhbC5jb22CEG5vcnRoZXJu dHJ1c3QuanCCFHd3dy5ub3J0aGVybnRydXN0LmpwghZ3d3cuNTBzb3V0aGNhcGl0 YWwuY29tghVmaWZ0eXNvdXRoY2FwaXRhbC5jb22CGXd3dy5maWZ0eXNvdXRoY2Fw aXRhbC5jb22CEm5vcnRoZXJuLUZ1bmRzLmNvbYIWd3d3Lm5vcnRoZXJuLUZ1bmRz LmNvbYIXbm9ydGhlcm5tdXR1YWxmdW5kcy5jb22CG3d3dy5ub3J0aGVybm11dHVh bGZ1bmRzLmNvbYIVd3d3Lm5vcnRoZXJudHJ1c3QuY29tggx3d3cubnRycy5jb22C CG50cnMuY29tghZub3J0aGVybnRydXN0Lm50cnMuY29tghp3d3cubm9ydGhlcm50 cnVzdC5udHJzLmNvbYIVcmZwLm5vcnRoZXJudHJ1c3QuY29tghNtLm5vcnRoZXJu dHJ1c3QuY29tggptLm50cnMuY29tghV3ZWIteHAyaS1wd3MubnRycy5jb22CFXdl Yi14cDJjLXB3cy5udHJzLmNvbYIVd2ViLXhwMmItcHdzLm50cnMuY29tghV3ZWIt eHAyZC1wd3MubnRycy5jb22CD3d3dy14cC5udHJzLmNvbYIYd3d3LWFjLm5vcnRo ZXJudHJ1c3QuY29tggtlbW90b215LmNvbYIKYmVsYWR2LmNvbYILdG50aW1vay5j b22CD3d3dy50bnRpbW9rLmNvbYIZd3d3Lm5vcnRoZXJudHJ1c3RiYW5rLmNvbYIV bm9ydGhlcm50cnVzdGJhbmsuY29tgg53d3cuYmVsYWR2LmNvbYIPd3d3LmVtb3Rv bXkuY29tghdhZHZpc29ycy5mbGV4c2hhcmVzLmNvbYIOZmxleHNoYXJlcy5jb20w DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjCB jQYDVR0fBIGFMIGCMD+gPaA7hjlodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGln aWNlcnRTSEEyU2VjdXJlU2VydmVyQ0EtMS5jcmwwP6A9oDuGOWh0dHA6Ly9jcmw0 LmRpZ2ljZXJ0LmNvbS9EaWdpY2VydFNIQTJTZWN1cmVTZXJ2ZXJDQS0xLmNybDA+ BgNVHSAENzA1MDMGBmeBDAECAjApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRp Z2ljZXJ0LmNvbS9DUFMwfgYIKwYBBQUHAQEEcjBwMCQGCCsGAQUFBzABhhhodHRw Oi8vb2NzcC5kaWdpY2VydC5jb20wSAYIKwYBBQUHMAKGPGh0dHA6Ly9jYWNlcnRz LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJTZWN1cmVTZXJ2ZXJDQS0yLmNydDAJ BgNVHRMEAjAAMIIBfQYKKwYBBAHWeQIEAgSCAW0EggFpAWcAdgDoPtDaPvUGNTLn Vyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYXNF864AAAEAwBHMEUCIQCz4hAzITWJ WDbjtvf9MtrBSzeOPt/HEl69PtNtgOja3wIgFJ1etMPsk8CwkW12NygvzrnQy+Sv 1bM6ekxRJJ623LsAdgCzc3cH4YRQ+GOG1gWp3BEJSnktsWcMC4fc8AMOeTalmgAA AYXNF88cAAAEAwBHMEUCIQD26QI4b9ROqcVOVjeH2mz12NtpUH/Muv/D8+EH/Tfl 8gIgJGRoA4W3uGY5ixBVBlhjvcdacU8kiy9T1zXrGnbulysAdQC3Pvsk35xNunXy OcW6WPRsXfxCz3qfNcSeHQmBJe20mQAAAYXNF86uAAAEAwBGMEQCIHJJJSRBpdr5 kznG4VHxbARfG4sLKW1wQMnMmq/PrEI3AiBawIPGaRQ3h6Gg02/1CgkqTYAzO6qS j9hDy13Hxgp0UDANBgkqhkiG9w0BAQsFAAOCAQEASyrQ1DpybUoZUVKCcv5a12ZC uZy81dSBEFKzfY8alcD3gQrw8hq3luaP2tFHyaxfajBVe20mAxPzLJx7xbrWICAE p+E9+/G3pol+biROgQxztDC+pV/YMqFaUhGc/oN5GTxYrpY0bLmPFVADUgW2NB/W artpZR6pbNp1s/1orULuatLn/Iu0+v3M/p6Np23yZAvkSY1tbsy94+7hrOIF5Ht2 nerkE3j2JAf37V96k/dR1DX2cQCCswytRAeSHkUmogVBxcUGhjZIt1ncaGLRwy/F Ufs/e2/8j3RdADAWPkx3P9XFrwWDT1Y9IrlzsuXbyqf1k+vcx4N+dmuhZE9LFQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXvm4wBbhDe+AOuuUw2+ r/C36w1T1L59UZNsbt1dkND+qQnKY/koM7Mbb/lHQcYPaSK8zYqp4m2mN7fdJKiJ jl+LdwNoK8kJDjkcirW13AlUp35iwbgPTtBNxATOYczUhcDxumQf+aCvWM5hS2fH wI75nWkJgHuLUpZ8gmvMubiWgn7sjPgQXv4V/xawZsq9dfeAQk6wpyrF0L98W5xX jCllqSTgv3ZQlLNusuj4HapP0vSIHwTT47Na5jti9Ttvv3GnLArgZGTQW0JAOe/+ LC8OKFFCw1HORGThydlR3mkB5DOLIv8oHwCEyYBD416agFrtXSbSaX9PoBrC8I0p DwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 19072003173057121852974267212789418085 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-20 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-01 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Northern Trust Company' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'northerntrust.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19375558964486443611900583564624231386148405993714818687759864640804601885185446491195021754604122808286086711429672972224155517187140167464883517249561695227139522683722670640468410794919390869664070320134816951083317333051443528018377512288329442931291318826519248896927129872776001239158779320307657154046579083652813339928116792463474195107743583021123527415004537634509622609171972615245230600281935046992530929731705843599318778701301077912280954841421998791594671349685944364643425709368781858006461483987342670196285842636500003312431467473942362764062503964077398491548493058955266395861717359391009795811599 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 47cba5701be889fc8d8b284e5d5f52f340125611 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1026 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flexshares.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northernfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northernfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerninstitutionalfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northerninstitutionalfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrustinvestments.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northerntrustinvestments.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'individual.northernfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisors.northernfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrustopen.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '125.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '50southcapital.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northerntrust.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrust.jp' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.50southcapital.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiftysouthcapital.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fiftysouthcapital.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northern-Funds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northern-Funds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northernmutualfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northernmutualfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northerntrust.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrust.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rfp.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2i-pws.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2c-pws.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2b-pws.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2d-pws.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-xp.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-ac.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emotomy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beladv.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tntimok.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tntimok.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrustbank.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northerntrustbank.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beladv.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emotomy.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisors.flexshares.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flexshares.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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