www02710.ntrs.com

- Northern Trust Corporation -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0b:db:64:dd:2c:a6:7c:56:21:bd:b3:e9:ff:21:51:13 was issued on by DigiCert Inc.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Northern Trust Corporation

Organization: Northern Trust Corporation
State / Province: Illinois
Locality: Chicago
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:db:64:dd:2c:a6:7c:56:21:bd:b3:e9:ff:21:51:13
Serial Number (int): 15760666729856091952541434090883207443
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b6:25:30:c2:62:c9:4d:90:a4:5c:6c:ca:e2:f7:8b:b9:db:2b:8a:8f
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): cd:74:b2:ca:e9:85:cd:81:35:da:35:47:f6:61:fb:58:01:b5:76:64
Fingerprint (sha256): 55:f1:8c:83:d3:1a:ae:08:aa:12:bb:82:d8:20:eb:42:ab:42:45:80:5e:4d:3d:89:70:7a:e7:90:79:60:a7:c6

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www02710.ntrs.com

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www02710.ntrs.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www02710.ntrs.com
125.northerntrust.com
125.ntrs.com
advisors.northernfunds.com
ark03.omnium.com
asia.aviatelive.com
business.northerntrust.com
europe.aviatelive.com
individual.northernfunds.com
institutional.northernfunds.com
investor.omnium.com
investorportal.ntrs.com
live.northerntrust.com
live.ntrs.com
login.ntrs.com
m.northerntrustopen.com
m.privatepassport.ntrs.com
ndc.ntam.northerntrust.com
northernfunds.ntrs.com
northerninstitutionalfunds.ntrs.com
northerntrust.com
omniumaccess.omnium.com
retirement.northerntrust.com
retirement.ntrs.com
riskandperformance.northerntrust.com
riskandperformance.ntrs.com
rxpext.ntrs.com
us.aviatelive.com
utc.ntrs.com
wealth.ntrs.com
wealthadvisor.northerntrust.com
web-xp2a-pws.ntrs.com
web-xp2b-pws.northerntrust.com
web-xp2b-pws.npc.ntrs.com
web-xp2b-pws.ntrs.com
web-xp2b-pws.wpc.ntrs.com
web-xp2c-pws.ntrs.com
web-xp2d-pws.ntrs.com
web-xp2e-pws.ntrs.com
web-xp2f-pws.ntrs.com
web-xp2k-pws.ntrs.com
www.50southcapital.com
www.aviatelive.com
www.beladv.com
www.benefitnow.ntrs.com
www.business.northerntrust.com
www.fiftysouthcapital.com
www.northern-funds.com
www.northernmutualfunds.com
www.northerntrust.jp
www.northerntrustbank.com
www.northerntrustfunds.com
www.northerntrustopen.com
www.ntrs.com
www.reliabilityinvestment.ntrs.com
www.retirement.northerntrust.com
www.retirement.ntrs.com
www.riskandperformance.northerntrust.com
www.riskandperformance.ntrs.com
www01510.ntrs.com
www03310.ntrs.com
www03410.ntrs.com
www03910.ntrs.com
www04010.ntrs.com
www05510.ntrs.com
www06210.ntrs.com
www07010.ntrs.com
www14610.ntrs.com
www15010.ntrs.com
www20010.ntrs.com
www20310.ntrs.com
www21710.ntrs.com
www22511.ntrs.com
www3383.ntrs.com
wwwc.ntrs.com
wwwc078.ntrs.com
wwwc080.ntrs.com
wwwdcc.ntrs.com
wwwdcc2.ntrs.com
wwwesi83a.ntrs.com
wwwp14.ntrs.com
wwwptl00.ntrs.com
wwwptl02.ntrs.com
wwwptl04.ntrs.com
wwwptl07.ntrs.com
wwwptl12-r5.ntrs.com
wwwptl14-exl.ntrs.com
wwwptl14-r5.npc.ntrs.com
wwwptl14-r5.ntrs.com
wwwptl14-r5.wpc.ntrs.com
wwwptlpsi2ssl.ntrs.com
wwwptlpsissl.ntrs.com
wwwsecuridesi83a.ntrs.com
wwwt891.ntrs.com
wwwwca11.ntrs.com

Other certificates including the domain name ntrs.com

(limited to 100 certificates)
up12149.ntrs.com
wwwdam.ntrs.com
www4083.ntrs.com
www9783.ntrs.com
www15010.ntrs.com
wwwsecuridesi83a.ntrs.com
int02011.ntrs.com
npc1dnhfsn02.ent.ad.ntrs.com
int01011.ntrs.com
www04510.ntrs.com
www3683.ntrs.com
pandora-npc-prod1.ntrs.com
www0483.ntrs.com
inttsp.ntrs.com
wwwsry.ntrs.com
nia-uat.ntrs.com
ut61082.lux.ntrs.com
sdcwmap03.ent.ad.ntrs.com
ipl-aj83s-nmr.ntrs.com
www.northernfunds.com
www08210.ntrs.com
int04511.ntrs.com
api-cashdash-csint.ntrs.com
bca-doc-dev.ntrs.com
tct-t020-ipo7ls.ntrs.com
up85133.ntrs.com
www02810.ntrs.com
wpclncupool2.entuat.aduat.ntrs.com
ohs-iaj11l-c044.ntrs.com
www00710.ntrs.com
appwpcuprsa04.ntrs.com
wwwp02.ntrs.com
uat.northerntrust.com
UNJSPZ8.ntrs.com
idf.ntrs.com
UKRCVPSSL01.ntrs.com
gfb-uat.ntrs.com
ws-caguat2-ssl.wpc.ntrs.com
gfb-pcf-dev.ntrs.com
www0383.ntrs.com
grr-uat.ntrs.com
wwwwca11.ntrs.com
nespdp-uat.ntrs.com
ohs-xaj11l-w075.ntrs.com
DQT_WAS_PRD.ntrs.com
ohs-iaj11l-t102.ntrs.com
wpc02pnnutn101.ent.ad.ntrs.com
ohs-iaj11l-w217.ntrs.com
fgc-sys.ent.ad.ntrs.com
nwa-asym-ja.ntrs.com
wwwsry.ntrs.com
web-ipn45-gpi.ntrs.com
ipl-xaj83s-ww04.ntrs.com
appnpcupctd02.ntrs.com
TEST-ignore.ntrs.com
qcdashboard-csprod.ntrs.com
sys.fos.amzext.ntrs.com
mrr83.ntrs.com
nam.ntrs.com
MYAPPS.NTRS.COM
ohsiintw15.ntrs.com
gpe-encryption.jtgprod.ntrs.com
WPCAMERCER01.ntrs.com
ohs-xaj83l-ww88.ntrs.com
sdcavsu10.ent.ad.ntrs.com
servicesuat.ntrs.com
officewebapp-p.ntrs.com
intt041.ntrs.com
ohs-iaj11l-w203.ntrs.com
sdcavsu10.ent.ad.ntrs.com
sgsgvpn01.remote.ntrs.com
ohs-xap11l-t14.ntrs.com
www4183.ntrs.com
up13843.ntrs.com
wwwsry.ntrs.com
*.dev2.src.amzext.ntrs.com
ohs-xaj11l-w031.ntrs.com
ohs-xaj10l-w098.ntrs.com
ohs-iaj11l-t098.ntrs.com
ut87072.ntrs.com
services.ntrs.com
int04807.ntrs.com
idf-uat.lux.ntrs.com
fmz-sys.ntrs.com
ohs-iaj10l-t080.ntrs.com
www0383.ntrs.com
wls-w146-iaj11ls.appzone.wpc.ntrs.com
awp-uat.ntrs.com
prismukpcvdi.ent.ad.ntrs.com
ohs-iaj11l-dcc2.ntrs.com
up12149.ntrs.com
wwwp09.ntrs.com
ohs-xap10l-w00.ntrs.com
mrr83.ntrs.com
ohs-iaj11l-t012.ntrs.com
awp-prod.ntrs.com
txh-osj.ntrs.com
irl-icon10uat-dev.ntrs.com
ohs-iap10l-admint.ntrs.com
ciscouc-apac.ntrs.com

Certificate

The complete raw certificate details for www02710.ntrs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv10V61TAZmLVtYLY7CG1
CJnP4uP9FynJxgS8MF7+FX/I02L8evqDzMQF0sCCbLdSWMuIpC5EhvTTrr9pdSmL
KZogg4yKd9Q/eUYr2rWDASN/pNnrEdIIqqhnvePfHe+Q7l2kkpC+X0RY7EPmruqJ
INgDHHe5VXj24nO2FPBq7aNT6x/Dea5fbNRyoUO7N8KK4IShMf+1FGr3WI3uxL53
QbZDKTgjUYJP2MLgw+309uLmKt4p/rO0bMCqkuC9MYJPL8uZFnY8/5Mc4ybOjwnL
qzT+wuUp7lXFRGK9OGh2GuM87QuB39645LJ8NnUpS6t3Uj1wY21UyxrPsH3fSIY0
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15760666729856091952541434090883207443
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Northern Trust Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www02710.ntrs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24157418479582678159015438872002352200000616274698628539836039007253411464192844336026845035196542878879986815447272695193262953984096526197554120448799539143839650996472694118333865607301455219277536794742722315925879308989609569116579622921098743438576447479353095208277460915281154719745372179366050528741278220597623421108240291807779302754505741160738328585380083679843348899178059500407556770480561489655618509921725359070457495464358859480536822685171279335649341894141773044098966757148469452665788622776197033784891058765024067509791002424480329268385494475964328139546462454540605455388000875719184699765897
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b62530c262c94d90a45c6ccae2f78bb9db2b8a8f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2191 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www02710.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '125.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '125.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisors.northernfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ark03.omnium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asia.aviatelive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'europe.aviatelive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'individual.northernfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'institutional.northernfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investor.omnium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorportal.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.northerntrustopen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.privatepassport.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ndc.ntam.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northernfunds.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northerninstitutionalfunds.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omniumaccess.omnium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirement.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirement.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riskandperformance.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riskandperformance.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rxpext.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.aviatelive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'utc.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wealth.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wealthadvisor.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2a-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2b-pws.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2b-pws.npc.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2b-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2b-pws.wpc.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2c-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2d-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2e-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2f-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2k-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.50southcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aviatelive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beladv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benefitnow.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.business.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fiftysouthcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northern-funds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northernmutualfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrust.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrustbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrustfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrustopen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reliabilityinvestment.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.retirement.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.retirement.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riskandperformance.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riskandperformance.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www01510.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www03310.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www03410.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www03910.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www04010.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www05510.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www06210.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www07010.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www14610.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www15010.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www20010.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www20310.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www21710.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www22511.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3383.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwc.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwc078.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwc080.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwdcc.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwdcc2.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwesi83a.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwp14.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl00.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl02.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl04.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl07.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl12-r5.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl14-exl.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl14-r5.npc.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl14-r5.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl14-r5.wpc.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptlpsi2ssl.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptlpsissl.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwsecuridesi83a.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwt891.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwwca11.ntrs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000189078fd54d00000403004830460221009d2a61fee49ea779ab210e27ca5da09f394be0e6e8a4366feb40128da670e74e0221008bb8542318eec504ab32d9b9ccab7b68a5f4b0ca675e97ebcc47dbcbbbf707b200760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d8847300000189078fd4fd000004030047304502206cd00ff9466a94794ee2d2c0f6267592051067c53da6a5c12486a14f532a074c022100baafc8727de63c8511f6b6049f75674f2bf5633f974a358bbc63be5bb0a4c383007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab00000189078fd4c00000040300483046022100fd8de2c764c3adaeec4d5dbc993695e55a9111b06d1aa360949c737660a8112702210085efce3c36b11b6059382218766c426049065a3f48dd24784fdd7cb57b7e3582
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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