sdi-vclab1-vcs1.sdi.na.xde3.xerox.org

- Xerox Corporation -

Issued by COMODO RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 99:26:d0:55:ff:54:87:e7:a6:2d:9f:61:a2:66:73:2e was issued on by COMODO CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Xerox Corporation

Organization: Xerox Corporation
Organization unit: Xerox Corp
Organization unit: Multi-Domain SSL
Address: 45 Glover Avenue
Postal code: 06850
State / Province: Connecticut
Locality: Norwalk
Country: US

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 99:26:d0:55:ff:54:87:e7:a6:2d:9f:61:a2:66:73:2e
Serial Number (int): 203573416190328694330021607593344398126
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 9b:9a:41:70:6b:7c:02:c1:38:83:76:36:25:ff:d8:c5:71:c3:bb:ec
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24

Fingerprint (sha1): b1:34:9a:21:2e:2f:37:9a:a5:f8:5e:51:32:44:69:13:c5:b7:5c:d8
Fingerprint (sha256): 42:18:e6:73:0c:5e:61:05:ba:7e:ca:ea:29:92:65:ec:90:8a:34:5c:ed:1d:5e:f5:01:bd:43:2a:f7:de:73:54

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate sdi-vclab1-vcs1.sdi.na.xde3.xerox.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sdi-vclab1-vcs1.sdi.na.xde3.xerox.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sdi-vclab1-vcs1.sdi.na.xde3.xerox.org
sdi-vclab1-vcs-lb.sdi.na.xde3.xerox.org

Other certificates including the domain name xerox.org

(limited to 100 certificates)
usa7061rf010.na.xerox.org
win2016-ds7.na.xerox.org
xde0200eudc002.eu.xerox.org
xde37061nadc022.na.xde3.xerox.org
xde0200vs030.na.xerox.org
xde7061eudc021.eu.xerox.org
xde30200dc001.xde3.xerox.org
webmail.xerox.org
usa7061rf011.na.xerox.org
xde0200nadc001.na.xerox.org
Xde3owa.na.xde3.xerox.org
xde0300ns001.na.xerox.org
win2012r2-es-hv.na.xerox.org
sdi-scom2012.sdi.na.xde3.xerox.org
sts.corp.xerox.org
sdi-vclab1-vcs2.sdi.na.xde3.xerox.org
eastgw.mail.xerox.org
xde7061vm1831.na.xerox.org
xde0300vs033.na.xerox.org
usa1042vm000663.na.xerox.org
xde0300nadc022.na.xerox.org
vcsa-sys-mgmt-01.na.xerox.org
chn-xerox-dns1.gdc.hcl.vend.xerox.org
xde0300nadc002.na.xerox.org
xcm-axigen.na.xerox.org
sdi-ca.sdi.na.xde3.xerox.org
webmail.xerox.org
vcsa-sys-mgmt-01.na.xerox.org
sdi-vclab1-vcs2.sdi.na.xde3.xerox.org
xde0200ns001.na.xerox.org
cennisvmx3.sdi.na.xde3.xerox.org
sts.corp.xerox.org
xde30300dc003.xde3.xerox.org
xde7061dc023.xerox.org
westgw.mail.xerox.org
xde7061dc023.xerox.org
USA7109XD001.na.xerox.net
xde3sdidc002.sdi.na.xde3.xerox.org
xde30300dc023.xde3.xerox.org
xde0200rf005.na.xerox.org
xde3sdidc001.sdi.na.xde3.xerox.org
jean.sdi.na.xde3.xerox.org
xcm-w12r2-tar.na.xerox.org
xde30300nadc003.na.xde3.xerox.org
xde7061dc022.xerox.org
win2016-jpn.na.xerox.org
xde0300dc022.xerox.org
chn-xerox-dhcp4.gdc.hcl.vend.xerox.org
sdi-tfsapp.sdi.na.xde3.xerox.org
xerox.org
xcm-win7-rhyde.na.xerox.org
sdi-vclab1-vss1.sdi.na.xde3.xerox.org
xcm-w16-dev.na.xerox.org
xcm-win7-rhyde.na.xerox.org
xde0200namfa002.na.xerox.org
xde30200sm001.na.xde3.xerox.org
xde3sdidc003.sdi.na.xde3.xerox.org
xde7061vm2070.na.xerox.org
win2016eng.na.xerox.org
sdi-tfsapp.sdi.na.xde3.xerox.org
chn-xerox-dhcp4.gdc.hcl.vend.xerox.org
xde3sdidc003.sdi.na.xde3.xerox.org
xde30200nadc001.na.xde3.xerox.org
xde0300ns002.na.xerox.org
vcsa-sys-mgmt-01.na.xerox.org
xde0300dc002.xerox.org
xcm-w12r2-tar.na.xerox.org
xde30300dc002.xde3.xerox.org
xde0200vs031.na.xerox.org
xde30300dc022.xde3.xerox.org
jetboy.na.xerox.org
xde0300dc022.xerox.org
xde1069nadc021.na.xerox.org
xmen.sdi.na.xde3.xerox.org
sdi-ca.sdi.na.xde3.xerox.org
webmail.xerox.org
sdi-vclab1-vcs2.sdi.na.xde3.xerox.org
xwstest1.sdi.na.xde3.xerox.org
xde0200rf006.na.xerox.org
mtgreleaseservices.sdi.na.xde3.xerox.org
xde0200rf006.na.xerox.org
win10-pro-2013.na.xerox.org
xde3sdidc001.sdi.na.xde3.xerox.org
xde0200dc001.xerox.org
xde7061ns002.na.xerox.org
sdi-vclab1-vcs1.sdi.na.xde3.xerox.org
xde7061vm0110.na.xerox.org
xde37061nadc021.na.xde3.xerox.org
usa1042vm000663.na.xerox.org
sdi-vclab1-vcs1.sdi.na.xde3.xerox.org
mail.xerox.org
xde0300vm1817.na.xerox.org
xde0200as002.na.xerox.org
xdebetanadc001.na.xdebeta.xerox.org
xde0200nadc002.na.xerox.org
win2012r2-eng.na.xerox.org
xde0300dc002.xerox.org
*.na.xde3.xerox.org
sdi-es3.sdi.na.xde3.xerox.org
xde0300ns002.na.xerox.org

Certificate

The complete raw certificate details for sdi-vclab1-vcs1.sdi.na.xde3.xerox.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IOWxVEhCI79CGbphdcT
BjzobbNIgHjFXHIflcztM0u4PgwdmBte8f5AOdGrQZAnd3AECKbKlepFkTn9oymf
EXjItnDwJLmvM5C/Ze6Lz/EilR3/9Tc7tYGo7qPfz0afTcRZ9AuR+cIVFpOtZ8l0
EWHK9dK95/CIB7ErISwFPC7a+ecQDLUHV8wKQDcD2y4BCC0+INlhyb/vaLpAKnjd
mc5kB5fL9XrSxUg7dP3Uh3U9+Z4Un4iOeg9Eu9GiMfzG1WWgFZtgvMl3iSL8YILB
pXryH/TavLW51yh0Cu9Mvm9eUxV4e5HlhdVS/jfuhKhglgg7/dTHZyAoFb2kvvIg
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 203573416190328694330021607593344398126
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '06850'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Connecticut'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Norwalk'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '45 Glover Avenue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Xerox Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Xerox Corp'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Multi-Domain SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sdi-vclab1-vcs1.sdi.na.xde3.xerox.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26827409581663094342378250086191984298839411498160068040359799636752194095856549582030254312475170117010215812747884020013917111948660809505682781696659683882475952769828851069408350982986201556143633560412314896348190359231688750544603553288243135802260514965862252608608222226631502818335715565163352909591419666948088557365453594715484737553762025769698158762789881576596187388214865997473393287026215704569911882835013489837527080674997571311779396768116892175562429060823179696522414642803792060662250474185287868892810409237008791925279429246670609543905344222418554840587516098187640570427638038201234508357731
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9b9a41706b7c02c13883763625ffd8c571c3bbec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdi-vclab1-vcs1.sdi.na.xde3.xerox.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdi-vclab1-vcs-lb.sdi.na.xde3.xerox.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb000001638e20c39f0000040300473045022100a09a1a20ea167220b8fe75267ff0599ac07c1ad21afe72f3ec146c709ef08c1f0220743eacefb2e8b76d6b349dd5566cfd2fd8062c9d6da1f4fc8d31dd53db43d651007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001638e20c3e6000004030046304402201732462981e6fc5fbcbdb2b510022d98eff0c7e8ed3396b5debaeb92fdf5368502206ec9dc175bacd5bcc15f8cc9d25f4de7990c3b33bd8a23ac3d3fc40e450ac93a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a0a5fa90f320014f52fcb8471aafec83695878b02450fdacb49573a81e867c6b940fe3b3b5cc179dec201d18662ada3947a5b5730681ad68e75892c6613a336b16c09a9fcd9fa15b35c6b02174edde0d49da9b350a984f1627b6db8ef724327f677c28dbafc670e13690216ec7039ad08293261e0d5b455646bb7c9405a021e8f4eae2107854e9cf4271c79fe60ee8ff21c4df6ad7d119ea9fe28a616844e082c3414990c1497f7d4211b062b9593cc8ffd2e40c6af73b3cfe92025c4637349d4a2d85891802a9eb0d1265aeec821c86f03774bccdc75699c29b303fa09641da9ade0744ca02f99e98c99ed3d78aaec077a6a2747c5a85dfd043e115321286ed