pilot-mpki4dev.verisign.co.jp

- VeriSign Japan K.K. -

Issued by VeriSign Class 3 Extended Validation SSL SGC CA

About this certificate

This digital certificate with serial number 40:8a:80:55:6f:62:4d:d7:06:31:b3:e4:dd:f8:cf:f2 was issued on by VeriSign, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

VeriSign Japan K.K.

Company registration number: 0100-01-078218
Organization: VeriSign Japan K.K.
Organization unit: CA Services - GSID EV-2
Address: 2-8-1Yaesu
Postal code: 104-0028
State / Province: Tokyo
Locality: Chuo-ku
Country: JP

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)06
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 40:8a:80:55:6f:62:4d:d7:06:31:b3:e4:dd:f8:cf:f2
Serial Number (int): 85789731614007181614070849782226145266
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 12:2a:ad:8a:8e:a9:bd:19:ea:02:53:1b:20:43:98:ee:49:d7:8d:0d
AuthorityKeyId: 4e:43:c8:1d:76:ef:37:53:7a:4f:f2:58:6f:94:f3:38:e2:d5:bd:df

Fingerprint (sha1): f6:28:71:b1:3c:e3:b5:f4:f1:1a:5c:fb:f2:94:04:16:4a:f6:2e:e3
Fingerprint (sha256): 49:ab:99:d1:f6:ba:95:99:02:4b:0d:a1:d0:3d:09:4d:94:78:73:b7:06:4e:ec:85:6d:95:ec:64:a3:69:c9:12

Issuing Certificate URL: http://EVIntl-aia.verisign.com/EVIntl2006.cer

Revocation information

OCSP Server: http://EVIntl-ocsp.verisign.com
CRL Distribution Point: http://EVIntl-crl.verisign.com/EVIntl2006.crl

Check the revocation status for certificate pilot-mpki4dev.verisign.co.jp

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pilot-mpki4dev.verisign.co.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication
Netscape Server-Gated Cryptography

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pilot-mpki4dev.symauth.jp
pilot-mpki4dev.verisign.co.jp

Other certificates including the domain name verisign.co.jp

(limited to 100 certificates)
esignonsite.verisign.co.jp
onsite.verisign.co.jp
admin-manager.symauth.jp
go.verisign.co.jp
dcrafec.verisign.co.jp
storefront.jp.websecurity.symantec.com
onsite.verisign.co.jp
coupon.jp.websecurity.symantec.com
admin-manager.verisign.co.jp
mgw.verisign.co.jp
two.verisign.co.jp
www.verisign.co.jp
digitalid.verisign.co.jp
esc.verisign.co.jp
knowledge.verisign.co.jp
ams.jp.websecurity.symantec.com
ra-hosting.verisign.co.jp
ra-hosting.symauth.jp
pilotsc-admin-manager.symauth.jp
onsite.verisign.co.jp
ssltest-dsa.verisign.co.jp
testsc-admin-manager.verisign.co.jp
twoadmin.verisign.co.jp
ssltest-sgc.verisign.co.jp
web-cms.verisign.co.jp
pilot-ssl-admin.jp.websecurity.symantec.com
onsite.symauth.jp
goadmin.verisign.co.jp
pilotonsite.symauth.jp
pilotsc-admin-manager.symauth.jp
esc.verisign.co.jp
support110.verisign.co.jp
zgok.verisign.co.jp
pilotsc-admin-manager.verisign.co.jp
report.jp.websecurity.symantec.com
client-auth2.symauth.jp
pilot-ams.jp.websecurity.symantec.com
goadmin.verisign.co.jp
onsite-admin.verisign.co.jp
mpki4dev.verisign.co.jp
lhkg.symauth.jp
onsite.symauth.jp
storefront.verisign.co.jp
admin-manager.verisign.co.jp
onsite.symauth.jp
esignonsite-admin.symauth.jp
support.symauth.jp
charzak.verisign.co.jp
onsite-admin.symauth.jp
onsite.verisign.co.jp
mpki4dev-admin.symauth.jp
admin-manager.symauth.jp
mws.verisign.co.jp
go.verisign.co.jp
lhkg.verisign.co.jp
mpki4dev.verisign.co.jp
dcrafec.verisign.co.jp
pilot-ssl-subscriber.jp.websecurity.symantec.com
download.symauth.jp
onsite-admin.verisign.co.jp
esc.verisign.co.jp
ra.verisign.co.jp
admin-manager.symauth.jp
partner.verisign.co.jp
pilotsc-admin-enrollment.symauth.jp
admin-enrollment.symauth.jp
two.verisign.co.jp
pilot-ra-hosting.symauth.jp
dcrafe.verisign.co.jp
www.verisign.co.jp
m.verisign.co.jp
support110.verisign.co.jp
amazon.cdn01.verisign.co.jp
two.verisign.co.jp
pilotsc-admin-enrollment.verisign.co.jp
ssltest-ecc-rsa.verisign.co.jp
pilot-mpki4dev-admin.symauth.jp
partner.symauth.jp
support.verisign.co.jp
ssltest-san2.verisign.co.jp
support110.verisign.co.jp
pilot-ra-hosting.symauth.jp
pilotsc-admin-manager.verisign.co.jp
admin-manager.verisign.co.jp
reseller.verisign.co.jp
pilotsc-admin-enrollment.symauth.jp
dcrafepilot.verisign.co.jp
charzak-admin.verisign.co.jp
sedemo.verisign.co.jp
pilotsc-admin-enrollment.symauth.jp
support110.verisign.co.jp
*.verisign.co.jp
dcrafepilot.verisign.co.jp
corp-sfadmin.jp.websecurity.symantec.com
ssl-subscriber.verisign.co.jp
pilot-mpki4dev.verisign.co.jp
pilotsc-admin-enrollment.symauth.jp
www.verisign.co.jp
codesign.verisign.co.jp
pilotonsite.symauth.jp

Certificate

The complete raw certificate details for pilot-mpki4dev.verisign.co.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyciTFnOy8KJ9YW6Y9Nn3
K79MUzg1Bq21p58elV3s3LXfew1X5XHObdy3SEUpMekQTE49H4VQfooCcmLAXxFU
taiWIU11bTlYmOqmRTrvVjlbDHVQLLdI1h2bPiYHZSbUj3SUnRhCdg6ytHWf6RNH
4EnJJZ3ccKoqbcPScubN/ti76PYjT6OlkvghGw4aDHw5CMGeTxlyA9jeC6FIddq0
R4E6nV7o/VqIQcYYWL0w1Q06Y/Fuy3VG8YTp2Lq5QX9QtLr/ri9k4XTSg+9/SGd5
lLc83pp+FXmyHbeN85h0Ng1ja9AMHG3PxGz9zUvh4sfU629Hq62jnc8iFii0Bb82
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 85789731614007181614070849782226145266
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)06'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 Extended Validation SSL SGC CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-03-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '0100-01-078218'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '104-0028'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Chuo-ku'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '2-8-1Yaesu'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'VeriSign Japan K.K.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'CA Services - GSID EV-2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'pilot-mpki4dev.verisign.co.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25472806300688784371174736762065670332436957499390094033723595330083216769953652116191034947214244381934447510522592040168540671472284400558492527158057255368226907168457675869595163546404190695913815745417388401642387071229353173107569286904009999862637258910219317835139743237229442649078275387162299266383575472120679982949961832471764212539310128950469370295909506321718633455268470859269040217079159777198415156198089011949381814509416486496559884471747514186889794595845210667778416312705467677578406971207017060584613722766935307632513592657191379744301676941185682110619733975160123866635145297673217785149063
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot-mpki4dev.symauth.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot-mpki4dev.verisign.co.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.4.1 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.23.6 (VeriSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							122aad8a8ea9bd19ea02531b204398ee49d78d0d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4e43c81d76ef37537a4ff2586f94f338e2d5bddf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://EVIntl-crl.verisign.com/EVIntl2006.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://EVIntl-ocsp.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://EVIntl-aia.verisign.com/EVIntl2006.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a2f10b86cf1ed7cdcd0a6400d7e05a72b1292e97ccf4691d3054318fefa4877e59a3614fbde8c35830cc187a1c7442c77cb0d5fa34c16d605594aa98864ebe841bfa8a0ee54ec83d00fa1c98530d0d95a73d0f3c92c646860e674dd1cdf751eff0cac96079b8a61d2bc9b23058369928bcdb0856091e61b908c974e282911b1df393a13962f90102d5016e56447d2f17b924e3dae67094b72b8b75ed7d42db4b2df1735bbf5e5dd6966d921d2b6458cea06e1813a9e4639e131a144c246a94b2b80c859da8e822aab059775b7e8441a477de23e1ab2a5f298c3e33ad89e9341292ca03353b3b62f1dbe9ae681261fec823e69a20aa099e3a018d9cac70115cd1