ssl-certificate-center-ncsa-ilg.verisign.net

- Symantec Corporation -

Issued by VeriSign Class 3 Extended Validation SSL SGC CA

About this certificate

This digital certificate with serial number 31:27:cf:dc:c5:62:c9:7d:84:70:11:6c:2a:e6:5f:97 was issued on by VeriSign, Inc..

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

Symantec Corporation

Company registration number: 2158113
Organization: Symantec Corporation
Organization unit: Infrastructure Operations
Address: 350 Ellis Street
Postal code: 94043
State / Province: California
Locality: Mountain View
Country: US

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)06
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 31:27:cf:dc:c5:62:c9:7d:84:70:11:6c:2a:e6:5f:97
Serial Number (int): 65338887321015418259907687948218687383
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 73:a6:45:df:9d:0c:1c:6e:87:e1:f4:44:82:84:2b:18:0f:f0:ef:50
AuthorityKeyId: 4e:43:c8:1d:76:ef:37:53:7a:4f:f2:58:6f:94:f3:38:e2:d5:bd:df

Fingerprint (sha1): 17:25:57:bd:0e:a5:dc:e0:26:78:ab:16:b6:8f:49:eb:de:16:72:e5
Fingerprint (sha256): 41:07:06:fd:83:fa:61:c6:a2:67:b0:4c:b0:d6:f6:7c:fe:e2:c4:82:fc:e5:c0:f9:44:a7:c9:40:c9:9e:d4:6d

Issuing Certificate URL: http://EVIntl-aia.verisign.com/EVIntl2006.cer

Revocation information

OCSP Server: http://EVIntl-ocsp.verisign.com
CRL Distribution Point: http://EVIntl-crl.verisign.com/EVIntl2006.crl

Check the revocation status for certificate ssl-certificate-center-ncsa-ilg.verisign.net

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl-certificate-center-ncsa-ilg.verisign.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication
Netscape Server-Gated Cryptography

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ssl-certificate-center.verisign.com
trust-center.verisign.com
trustcenter.websecurity.symantec.com
ssl-certificate-center-ncsa-ilg.verisign.net

Other certificates including the domain name verisign.net

(limited to 100 certificates)
www.verisign.com
ssl-certificate-center-emea-ilg.verisign.net
ssl-certificate-center-enterprise-ncsa-ilg.verisign.net
query-emea-ilg.verisign.net
pilot-ssl-certificate-center-enterprise-apac-ilg.verisign.net
pilot-ssl-certificate-center-enterprise-apac.verisign.net
pkiservices.verisign.com
SSL-CERTIFICATE-CENTER.THAWTE.FR
eol-redirect.verisign.net
ssl-certificate-center-ncsa-ilg.verisign.net
ssl-certificate-center.thawte.com
www.verisign.com
www.verisign.com
pilot-ssl-certificate-center-enterprise-emea-ilg.verisign.net
pilot-ssl-certificate-center-enterprise-apac-ilg.verisign.net
ssl-certificate-center-ncsa.verisign.net
trustseal.verisign.com
pilot-ssl-certificate-center-enterprise-ncsa-ilg.verisign.net
ssl-certificate-center-ncsa-ilg.verisign.net
pilot-ssl-certificate-center.thawte.com
pilot-verify-ilg.verisign.net
query-ncsa.verisign.net
ssl-certificate-center-enterprise-emea.verisign.net
ssl-certificate-center-ncsa-ilg.verisign.net
www.verisign.com
ssl-certificate-center-emea-ilg.verisign.net
pilot-ssl-certificate-center-ncsa-ilg.verisign.net
pilot-ssl-certificate-center-emea-ilg.verisign.net
eol-redirect-thawte.verisign.net
vipuserservices.verisign.com
ssl-certificate-center-enterprise.thawte.fr
pilot-ssl-certificate-center-apac-ilg.verisign.net
pilot-ssl-certificate-center-emea-ilg.verisign.net
maintenance.verisign.net
www.verisign.com
www.verisign.com
pilot-ssl-certificate-center-enterprise-apac.verisign.net
blogs.thawte.com
pilot-ssl-certificate-center-enterprise-emea-ilg.verisign.net
pilot-ssl-certificate-center-ncsa-ilg.verisign.net
ssl-certificate-center-enterprise-apac-ilg.verisign.net
ssl-certificate-center-ncsa-ilg.verisign.net
ssl-certificate-center.thawte.de
pilot-verify.thawte.com
SSL-CERTIFICATE-CENTER.THAWTE.DE
www.verisign.com
ssl-certificate-center-enterprise.thawte.fr
pilot-pkiservices.verisign.com
ssl-certificate-center-apac-ilg.verisign.net
pilot-ssl-certificate-center.thawte.de
pilot-ssl-certificate-center-emea-ilg.verisign.net
pilot-ssl-certificate-center-enterprise-ncsa-ilg.verisign.net
ssl-certificate-center-enterprise-ncsa-ilg.verisign.net
test-products.verisign.com
pilot-ssl-certificate-center-enterprise-apac-ilg.verisign.net
ssl-certificate-center-enterprise-thawte-de-ilg.verisign.net
verify-ilg.verisign.net
pilot-ssl-certificate-center-enterprise.thawte.de
eol-redirect-thawte.verisign.net
maintenance.verisign.net
pilot-ssl-certificate-center-apac.verisign.net
ssl-certificate-center-emea.verisign.net
www.verisign.com
pilot-ssl-certificate-center-enterprise.thawte.de
trustseal.verisign.com
www.verisign.com
blogs.geotrust.com
pilot-verify.thawte.com
pilot-ssl-certificate-center-enterprise-ncsa-ilg.verisign.net
query-apac.verisign.net
SSL-CERTIFICATE-CENTER.THAWTE.DE
ssl-certificate-center-enterprise-emea.verisign.net
ssl-certificate-center-enterprise-thawte-ilg.verisign.net
pkiservices.verisign.com
query-emea-ilg.verisign.net
PILOT-SSL-CERTIFICATE-CENTER-ENTERPRISE.THAWTE.FR
pilot-adms.verisign.com
ssl-certificate-center.thawte.fr
knowledge-intl.verisign.net
pilot-verify-ilg.verisign.net
ssl-certificate-center-enterprise-emea-ilg.verisign.net
pilot-ssl-certificate-center-ncsa.verisign.net
pilot-ssl-certificate-center.thawte.com
pilot-ssl-certificate-center-enterprise.thawte.com
ssl-certificate-center-ncsa-ilg.verisign.net
www.verisign.com
ssl-certificate-center-enterprise-ncsa-ilg.verisign.net
pilot-ssl-certificate-center-enterprise-ncsa-ilg.verisign.net
query-ncsa.verisign.net
adms.verisign.com
authconnect-mtv.verisign.com
verify-ilg.verisign.net
pilot-ssl-certificate-center-enterprise-emea-ilg.verisign.net
pilot-ssl-certificate-center.thawte.fr
ssl-certificate-center-ncsa.verisign.net
www.verisign.com
ssl-certificate-center-emea.verisign.net
www.verisign.com
eol-redirect-thawte.verisign.net
pilot-ssl-certificate-center-ncsa-ilg.verisign.net

Certificate

The complete raw certificate details for ssl-certificate-center-ncsa-ilg.verisign.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8LUwEnLdV4jVv4DKU8d
2N3RApfMJfbX8aLudQcqVRv6Pbln/RYSIWEW1xmbkHKXS7WVFxAFPI5HqzMblPCo
X19NOKTG11c4s/QKbiRgRI4+dRgmgWUE0BV6cnGYg686quIKcp0Q/TnB4UIzs4I3
O70m1VUJje+JboEbRtfangfCW1QZXkzGZlhad8pbuqX/xjVNoqD0eL43RGPWSJBT
wR+Ru1LQFPffME2q1sD19EdYDfVu7a/fcdlIUdiB/XJmPNn/Z2skmWNqOMlVLCtB
4OCl+kVV555ax1jWuBUR93Dq4upBm/0NQgZtNOR5Og/IYpNYhd3jPIVQiF4nI+/U
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 65338887321015418259907687948218687383
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)06'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 Extended Validation SSL SGC CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2158113'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '94043'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Mountain View'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '350 Ellis Street'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Infrastructure  Operations'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'ssl-certificate-center-ncsa-ilg.verisign.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21682824925187274298152452263493716879527876984840442146626464162592232997744125824777874679125063699012465999006142367387112461737493694865396686157324938265179562808682145794164825371955250357693072557692613195346663738336296229333131432043486967356891569876252506144913726430160983155285829105031574261430217712752587778055680057617159744118717641299827217748244470365206931068305623616933594292406888591672839805774433182217298097618665317114766990845664927456456070716608125677036972204647500679217547700736991998917721617536963127991668879108327234155685087929597108683214014815319249374067122392545156649702431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl-certificate-center.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trust-center.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trustcenter.websecurity.symantec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl-certificate-center-ncsa-ilg.verisign.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.4.1 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.23.6 (VeriSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							73a645df9d0c1c6e87e1f44482842b180ff0ef50
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4e43c81d76ef37537a4ff2586f94f338e2d5bddf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://EVIntl-crl.verisign.com/EVIntl2006.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://EVIntl-ocsp.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://EVIntl-aia.verisign.com/EVIntl2006.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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