epicprodce.lpch.org

- Lucile Salter Packard Children's Hospital at Stanford -

Issued by VeriSign Class 3 Extended Validation SSL SGC CA

About this certificate

This digital certificate with serial number 4e:de:f8:fb:95:02:8a:02:95:c5:30:20:f0:fa:b8:bf was issued on by VeriSign, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

Lucile Salter Packard Children's Hospital at Stanford

Company registration number: C1175691
Organization: Lucile Salter Packard Children's Hospital at Stanford
Organization unit: IS
Address: 725 Welch Rd
Postal code: 94304
State / Province: California
Locality: Palo Alto
Country: US

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)06
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4e:de:f8:fb:95:02:8a:02:95:c5:30:20:f0:fa:b8:bf
Serial Number (int): 104837523543785002563924449441707899071
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 4c:f0:1d:60:12:a6:ad:84:b2:b4:84:9a:ca:6e:cb:3e:16:c7:97:0a
AuthorityKeyId: 4e:43:c8:1d:76:ef:37:53:7a:4f:f2:58:6f:94:f3:38:e2:d5:bd:df

Fingerprint (sha1): 44:8a:cf:77:35:a7:7b:93:ca:e9:0e:dc:8b:31:2a:75:8c:aa:47:be
Fingerprint (sha256): 54:d8:4d:ec:5b:fd:a4:9a:f2:7d:06:8b:bf:09:bc:c6:e5:50:45:5b:36:ca:32:df:40:2f:e4:77:ea:a8:bf:b5

Issuing Certificate URL: http://EVIntl-aia.verisign.com/EVIntl2006.cer

Revocation information

OCSP Server: http://EVIntl-ocsp.verisign.com
CRL Distribution Point: http://EVIntl-crl.verisign.com/EVIntl2006.crl

Check the revocation status for certificate epicprodce.lpch.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for epicprodce.lpch.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication
Netscape Server-Gated Cryptography
Microsoft Server-Gated Cryptography

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

epicprodce.lpch.org

Other certificates including the domain name lpch.org

(limited to 100 certificates)
mcd.lpch.org
changepassword.stanfordchildrens.org
ifc.lpch.org
accesshr.lpch.org
myphone.lpch.org
insight.lpch.org
mccm.lpch.org
remote.lpch.org
lpch.org
hrprdwebext1.lpch.org
cernerwebviewdemo.lpch.org
accesshr.lpch.org
stanfordchildrens.org
wech-cuclpcup01.lpch.org
ottr.lpch.org
citrixportal.LPCH.ORG
epicnonprodce.lpch.org
NAM.LPCH.ORG
mccm.lpch.org
accesshr.lpch.org
mdportal.lpch.org
applyjobs.lpch.org
aweisdev.lpch.org
mediabin.lpch.org
peoplesoftfscm.lpch.org
epicnonprod.lpch.org
voltage-ps-0000.lpch.org
schvoicemail.lpch.org
stanfordchildrens.org
pbr.stanfordchildrens.org
remote.lpch.org
stanfordchildrens.org
mccm.lpch.org
lpch.org
accesshr.lpch.org
intranet.lpch.org
schvoicemail.lpch.org
capeevents.lpch.org
intranetdemo.stanfordchildrens.org
epicnonprodce.lpch.org
portal.stanfordchildrens.org
peoplesoftfscm.lpch.org
StanfordChildrens.org
lpchp-ironport2.lpch.org
peoplesoftfscm.lpch.org
NAS1.LPCH.ORG
NAM.LPCH.ORG
cardioaccesstest.lpch.org
mccm.lpch.org
intranetdemo.lpch.org
wech-cuclpvcsc01.lpch.org
AWEISPROD.lpch.org
StanfordChildrens.org
intranetdemo.lpch.org
gluvue.stanfordchildrens.org
analytics.stanfordchildrens.org
pres-cuclpvcse01.lpch.org
epicnonprodce.lpch.org
www.lpch.org
cernerwebview.lpch.org
intranet.stanfordchildrens.org
intranet.lpch.org
epicnonprodhc.lpch.org
applyjobs.lpch.org
hrprdwebext1.lpch.org
lpforpacs02.lpch.org
remote.lpch.org
epicprodce.lpch.org
dss.lpch.org
intranet.lpch.org
epicprodss.lpch.org
intranet.lpch.org
accesshrqa.lpch.org
mdemo.lpch.org
intranetdemo.stanfordchildrens.org
mcd.lpch.org
accesshrqa.lpch.org
admin.lpch.org
AWEISPROD.lpch.org
intranet.lpch.org
portal.stanfordchildrens.org
ews.lpch.org
ifc.lpch.org
stanfordchildrens.org
www.lpch.org
portal.stanfordchildrens.org
fs.stanfordchildrens.org
peoplesoftfscm.lpch.org
cardioaccesstest.lpch.org
accesshrqa.lpch.org
wech-cuclpvcsc01.lpch.org
sch-sts.lpch.org
calendar.lpch.org
SCH-Wireless.lpch.org
remote.lpch.org
teletracking.lpch.org
lyncweb.lpch.org
pres-cuclpvcse01.lpch.org
lpchp-ironport2.lpch.org
epicprodhc.lpch.org

Certificate

The complete raw certificate details for epicprodce.lpch.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTJ+Qb4EG0SAiqESz08Q
kQt2C/xT/Lvvl8Hgm8jPHMLipAXLwW5zESDwzR11uQSDK2K3fMvlbWVGc6brXS6u
Tuvab32JDsnSUdvmtNPUzKHKFKJr4y0RutBGVWoNKejCmoGrjgRt43uAmAOdGcQW
F4KcpbUgHE7NhWQPnPZrGI0PUCQ36DG3vfoqbMnwMz0faQVYs6Lqnl3tbSH6rqYR
dB+gONM7aRnT0/RRWkAjFBUwW7xzOhz+TitMJ15l4r3tq+enpgoEpZGcJU2nlh49
oqH0kUm2I9CqbNBm7r7NjfXPpr4njjg5QT5Fz2C+944AWAI1AcTwV2h6bG5oDHVF
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 104837523543785002563924449441707899071
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)06'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 Extended Validation SSL SGC CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-03-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'C1175691'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '94304'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Palo Alto'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '725 Welch Rd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Lucile Salter Packard Children's Hospital at Stanford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'IS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'epicprodce.lpch.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25903751638353038832665006303540603822402397892197121115371361904523885336719708764952344085431560497466680515306202947658615402472305527486407768794527301741399161858497200202783632068650502230563232804085293153291924184801266578034102312621375702890332850268778801018223685718777227580576778849195312009490610293293373511823298709076599254809259609678176517267977893617258107831943025114067394272144039068167133441707477534897961892960075045683909275720102571820781864574562741938278696447706091311919003170258613449666251847135723021235157655795057024166381200587793145817186453658805321300773491882605359511455219
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicprodce.lpch.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.4.1 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.3 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.23.6 (VeriSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4cf01d6012a6ad84b2b4849aca6ecb3e16c7970a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4e43c81d76ef37537a4ff2586f94f338e2d5bddf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://EVIntl-crl.verisign.com/EVIntl2006.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://EVIntl-ocsp.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://EVIntl-aia.verisign.com/EVIntl2006.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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