www.northernfunds.com
- Northern Trust Corporation -
Issued by GeoTrust RSA CA 2018
About this certificate
This digital certificate with serial number 0f:14:c5:4f:5b:07:7d:8f:0e:56:0d:99:f9:0c:19:06 was issued on by DigiCert Inc.
With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Northern Trust Corporation
Organization:
Northern Trust Corporation
Organization unit: Information Security
Organization unit: Information Security
State / Province:
Illinois
Locality: Chicago
Country: US
Locality: Chicago
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0f:14:c5:4f:5b:07:7d:8f:0e:56:0d:99:f9:0c:19:06Serial Number (int): 20046267795833383961291396353048189190
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 30:38:1a:02:80:23:fc:fd:87:b5:76:3c:42:e1:9c:d0:a5:14:4b:6e
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5
Fingerprint (sha1): 69:ec:0a:7d:d2:1e:79:97:19:6c:21:8c:ba:d7:79:7b:f0:0f:84:b7
Fingerprint (sha256): 6b:14:9e:d1:51:92:43:a9:49:b6:48:16:72:c8:08:1f:0d:a0:9b:7d:6c:22:a1:5e:1d:6a:3d:de:6a:ad:c8:6c
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl
Check the revocation status for certificate www.northernfunds.com
85
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.northernfunds.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.northernfunds.com
northernfunds.com
wwwptl09-r5.ntrs.com
www10410.ntrs.com
www00410.ntrs.com
www04410.ntrs.com
tsp.ntrs.com
web-xp3b-pws.ntrs.com
www02510.ntrs.com
developers.northerntrust.com
ts8.fgr.northerntrust.com
ts8.flexshares.com
m.northerntrust.com
www09810.ntrs.com
corporate.northerntrust.com
ts8.rfp.northerntrust.com
web-xp2i-pws.ntrs.com
www10910.ntrs.com
cdn.northerntrust.com
omnium-investorportal.ntrs.com
www.col.ntrs.com
omnium.ntrs.com
www00810.ntrs.com
omniumdemo.ntrs.com
ts8.50southcapital.com
www-ac.ntrs.com
www06710.ntrs.com
www03110.ntrs.com
fgr.northerntrust.com
ts8.northerntrustopen.com
www03610.ntrs.com
www04510.ntrs.com
idf.ntrs.com
www.flexshares.com
luxjobs.northerntrust.com
www02410.ntrs.com
ofx.ntrs.com
omnium2.ntrs.com
www11910.ntrs.com
web-xp3p-cdn.ntrs.com
web-xp3a-pws.ntrs.com
cdn2.northerntrust.com
wwww119.ntrs.com
www06310.ntrs.com
cdn2.ntrs.com
myplace.ntrs.com
rfp.northerntrust.com
www.northerntrustinvestments.com
www00210.ntrs.com
ts8.m.northerntrust.com
www.thenortherntrust.com
www08610.ntrs.com
mobile.northerntrust.com
web-xp3i-pws.ntrs.com
www53483.ntrs.com
ts8-ac.northerntrust.com
www99910.ntrs.com
www04210.ntrs.com
www.northerninstitutionalfunds.com
developer.northerntrust.com
www06810.ntrs.com
www-ac.northerntrust.com
www12010.ntrs.com
developers.ntrs.com
wwwc008.ntrs.com
campaign.northerntrust.com
cdn.ntrs.com
www07510.ntrs.com
web-xp3s-cdn.ntrs.com
www.northerntrust.com
www01710.ntrs.com
www09910.ntrs.com
m.ntrs.com
www02110.ntrs.com
omnium-investor.ntrs.com
advisors.flexshares.com
www04110.ntrs.com
www05410.ntrs.com
www08210.ntrs.com
developer.ntrs.com
www02810.ntrs.com
www01010.ntrs.com
nsr.dw.ntrs.com
omnium-fo.ntrs.com
ts8.northerntrust.com
northernfunds.com
wwwptl09-r5.ntrs.com
www10410.ntrs.com
www00410.ntrs.com
www04410.ntrs.com
tsp.ntrs.com
web-xp3b-pws.ntrs.com
www02510.ntrs.com
developers.northerntrust.com
ts8.fgr.northerntrust.com
ts8.flexshares.com
m.northerntrust.com
www09810.ntrs.com
corporate.northerntrust.com
ts8.rfp.northerntrust.com
web-xp2i-pws.ntrs.com
www10910.ntrs.com
cdn.northerntrust.com
omnium-investorportal.ntrs.com
www.col.ntrs.com
omnium.ntrs.com
www00810.ntrs.com
omniumdemo.ntrs.com
ts8.50southcapital.com
www-ac.ntrs.com
www06710.ntrs.com
www03110.ntrs.com
fgr.northerntrust.com
ts8.northerntrustopen.com
www03610.ntrs.com
www04510.ntrs.com
idf.ntrs.com
www.flexshares.com
luxjobs.northerntrust.com
www02410.ntrs.com
ofx.ntrs.com
omnium2.ntrs.com
www11910.ntrs.com
web-xp3p-cdn.ntrs.com
web-xp3a-pws.ntrs.com
cdn2.northerntrust.com
wwww119.ntrs.com
www06310.ntrs.com
cdn2.ntrs.com
myplace.ntrs.com
rfp.northerntrust.com
www.northerntrustinvestments.com
www00210.ntrs.com
ts8.m.northerntrust.com
www.thenortherntrust.com
www08610.ntrs.com
mobile.northerntrust.com
web-xp3i-pws.ntrs.com
www53483.ntrs.com
ts8-ac.northerntrust.com
www99910.ntrs.com
www04210.ntrs.com
www.northerninstitutionalfunds.com
developer.northerntrust.com
www06810.ntrs.com
www-ac.northerntrust.com
www12010.ntrs.com
developers.ntrs.com
wwwc008.ntrs.com
campaign.northerntrust.com
cdn.ntrs.com
www07510.ntrs.com
web-xp3s-cdn.ntrs.com
www.northerntrust.com
www01710.ntrs.com
www09910.ntrs.com
m.ntrs.com
www02110.ntrs.com
omnium-investor.ntrs.com
advisors.flexshares.com
www04110.ntrs.com
www05410.ntrs.com
www08210.ntrs.com
developer.ntrs.com
www02810.ntrs.com
www01010.ntrs.com
nsr.dw.ntrs.com
omnium-fo.ntrs.com
ts8.northerntrust.com
Other certificates including the domain name northernfunds.com
(limited to 100 certificates)
www.northernfunds.com
www.northernfunds.com
northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
northerntrust.com
www02710.ntrs.com
www02710.ntrs.com
www02710.ntrs.com
www02710.ntrs.com
www02710.ntrs.com
www.northernfunds.com
northerntrust.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www.northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www.northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
northerntrust.com
northerntrust.com
www.northernfunds.com
www02710.ntrs.com
www02710.ntrs.com
www.northernfunds.com
northerntrust.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
northerntrust.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
northerntrust.com
www.northerntrust.com
www02710.ntrs.com
www02710.ntrs.com
northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northerntrust.com
northerntrust.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
northerntrust.com
www.northernfunds.com
www.northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
northerntrust.com
www.northernfunds.com
www02710.ntrs.com
www02710.ntrs.com
www02710.ntrs.com
northerntrust.com
www02710.ntrs.com
www.northerntrust.com
www02710.ntrs.com
northerntrust.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www02710.ntrs.com
www.northernfunds.com
northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
northerntrust.com
www02710.ntrs.com
www02710.ntrs.com
www02710.ntrs.com
www02710.ntrs.com
www02710.ntrs.com
www.northernfunds.com
northerntrust.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www.northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www.northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
northerntrust.com
northerntrust.com
www.northernfunds.com
www02710.ntrs.com
www02710.ntrs.com
www.northernfunds.com
northerntrust.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
northerntrust.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
northerntrust.com
www.northerntrust.com
www02710.ntrs.com
www02710.ntrs.com
northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northerntrust.com
northerntrust.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
northerntrust.com
www.northernfunds.com
www.northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
northerntrust.com
www.northernfunds.com
www02710.ntrs.com
www02710.ntrs.com
www02710.ntrs.com
northerntrust.com
www02710.ntrs.com
www.northerntrust.com
www02710.ntrs.com
northerntrust.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www02710.ntrs.com
Certificate
The complete raw certificate details for www.northernfunds.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIMOjCCCyKgAwIBAgIQDxTFT1sHfY8OVg2Z+QwZBjANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe Fw0xOTA3MTMwMDAwMDBaFw0yMDAxMDkxMjAwMDBaMIGWMQswCQYDVQQGEwJVUzER MA8GA1UECBMISWxsaW5vaXMxEDAOBgNVBAcTB0NoaWNhZ28xIzAhBgNVBAoTGk5v cnRoZXJuIFRydXN0IENvcnBvcmF0aW9uMR0wGwYDVQQLExRJbmZvcm1hdGlvbiBT ZWN1cml0eTEeMBwGA1UEAxMVd3d3Lm5vcnRoZXJuZnVuZHMuY29tMIIBIjANBgkq hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTzWIqd0fVxxTKHyL6Jg0rLrSBTUBJCC ATp25U21mnz0e65j+DzpYVbZadP0REaWzgwVh3+pPkKsZtdpNN0xa2R8CrBRtUR6 ll43L3Jk332FmTfv9N4pZF1FJX3GrIvouJBsPDKumDstmJPrZAgS4dvfhYLgttM8 y0g6AyqPkDLeukEZvEtSW7GX3qwWqixWBQsFMFDCC5qStpy59+IFddIBasb50HSH cy0ZWBdIWZjqjhJQcilSb3cLFS4XOz0LX/L99FyJEo16YFRwlmiW/H13VtXqIJQ1 Ut4SlJedaXHmEbGw5pyba1SxKG2XgL5m2WSOHITUgVAyoDcDSW4jfwIDAQABo4II uTCCCLUwHwYDVR0jBBgwFoAUkFj/sJx1qFFUd7Ht8qNDFjiebMUwHQYDVR0OBBYE FDA4GgKAI/z9h7V2PELhnNClFEtuMIIHHQYDVR0RBIIHFDCCBxCCFXd3dy5ub3J0 aGVybmZ1bmRzLmNvbYIRbm9ydGhlcm5mdW5kcy5jb22CFHd3d3B0bDA5LXI1Lm50 cnMuY29tghF3d3cxMDQxMC5udHJzLmNvbYIRd3d3MDA0MTAubnRycy5jb22CEXd3 dzA0NDEwLm50cnMuY29tggx0c3AubnRycy5jb22CFXdlYi14cDNiLXB3cy5udHJz LmNvbYIRd3d3MDI1MTAubnRycy5jb22CHGRldmVsb3BlcnMubm9ydGhlcm50cnVz dC5jb22CGXRzOC5mZ3Iubm9ydGhlcm50cnVzdC5jb22CEnRzOC5mbGV4c2hhcmVz LmNvbYITbS5ub3J0aGVybnRydXN0LmNvbYIRd3d3MDk4MTAubnRycy5jb22CG2Nv cnBvcmF0ZS5ub3J0aGVybnRydXN0LmNvbYIZdHM4LnJmcC5ub3J0aGVybnRydXN0 LmNvbYIVd2ViLXhwMmktcHdzLm50cnMuY29tghF3d3cxMDkxMC5udHJzLmNvbYIV Y2RuLm5vcnRoZXJudHJ1c3QuY29tgh5vbW5pdW0taW52ZXN0b3Jwb3J0YWwubnRy cy5jb22CEHd3dy5jb2wubnRycy5jb22CD29tbml1bS5udHJzLmNvbYIRd3d3MDA4 MTAubnRycy5jb22CE29tbml1bWRlbW8ubnRycy5jb22CFnRzOC41MHNvdXRoY2Fw aXRhbC5jb22CD3d3dy1hYy5udHJzLmNvbYIRd3d3MDY3MTAubnRycy5jb22CEXd3 dzAzMTEwLm50cnMuY29tghVmZ3Iubm9ydGhlcm50cnVzdC5jb22CGXRzOC5ub3J0 aGVybnRydXN0b3Blbi5jb22CEXd3dzAzNjEwLm50cnMuY29tghF3d3cwNDUxMC5u dHJzLmNvbYIMaWRmLm50cnMuY29tghJ3d3cuZmxleHNoYXJlcy5jb22CGWx1eGpv YnMubm9ydGhlcm50cnVzdC5jb22CEXd3dzAyNDEwLm50cnMuY29tggxvZngubnRy cy5jb22CEG9tbml1bTIubnRycy5jb22CEXd3dzExOTEwLm50cnMuY29tghV3ZWIt eHAzcC1jZG4ubnRycy5jb22CFXdlYi14cDNhLXB3cy5udHJzLmNvbYIWY2RuMi5u b3J0aGVybnRydXN0LmNvbYIQd3d3dzExOS5udHJzLmNvbYIRd3d3MDYzMTAubnRy cy5jb22CDWNkbjIubnRycy5jb22CEG15cGxhY2UubnRycy5jb22CFXJmcC5ub3J0 aGVybnRydXN0LmNvbYIgd3d3Lm5vcnRoZXJudHJ1c3RpbnZlc3RtZW50cy5jb22C EXd3dzAwMjEwLm50cnMuY29tghd0czgubS5ub3J0aGVybnRydXN0LmNvbYIYd3d3 LnRoZW5vcnRoZXJudHJ1c3QuY29tghF3d3cwODYxMC5udHJzLmNvbYIYbW9iaWxl Lm5vcnRoZXJudHJ1c3QuY29tghV3ZWIteHAzaS1wd3MubnRycy5jb22CEXd3dzUz NDgzLm50cnMuY29tghh0czgtYWMubm9ydGhlcm50cnVzdC5jb22CEXd3dzk5OTEw Lm50cnMuY29tghF3d3cwNDIxMC5udHJzLmNvbYIid3d3Lm5vcnRoZXJuaW5zdGl0 dXRpb25hbGZ1bmRzLmNvbYIbZGV2ZWxvcGVyLm5vcnRoZXJudHJ1c3QuY29tghF3 d3cwNjgxMC5udHJzLmNvbYIYd3d3LWFjLm5vcnRoZXJudHJ1c3QuY29tghF3d3cx MjAxMC5udHJzLmNvbYITZGV2ZWxvcGVycy5udHJzLmNvbYIQd3d3YzAwOC5udHJz LmNvbYIaY2FtcGFpZ24ubm9ydGhlcm50cnVzdC5jb22CDGNkbi5udHJzLmNvbYIR d3d3MDc1MTAubnRycy5jb22CFXdlYi14cDNzLWNkbi5udHJzLmNvbYIVd3d3Lm5v cnRoZXJudHJ1c3QuY29tghF3d3cwMTcxMC5udHJzLmNvbYIRd3d3MDk5MTAubnRy cy5jb22CCm0ubnRycy5jb22CEXd3dzAyMTEwLm50cnMuY29tghhvbW5pdW0taW52 ZXN0b3IubnRycy5jb22CF2Fkdmlzb3JzLmZsZXhzaGFyZXMuY29tghF3d3cwNDEx MC5udHJzLmNvbYIRd3d3MDU0MTAubnRycy5jb22CEXd3dzA4MjEwLm50cnMuY29t ghJkZXZlbG9wZXIubnRycy5jb22CEXd3dzAyODEwLm50cnMuY29tghF3d3cwMTAx MC5udHJzLmNvbYIPbnNyLmR3Lm50cnMuY29tghJvbW5pdW0tZm8ubnRycy5jb22C FXRzOC5ub3J0aGVybnRydXN0LmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMD4GA1UdHwQ3MDUwM6AxoC+GLWh0dHA6Ly9j ZHAuZ2VvdHJ1c3QuY29tL0dlb1RydXN0UlNBQ0EyMDE4LmNybDBMBgNVHSAERTBD MDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2Vy dC5jb20vQ1BTMAgGBmeBDAECAjB1BggrBgEFBQcBAQRpMGcwJgYIKwYBBQUHMAGG Gmh0dHA6Ly9zdGF0dXMuZ2VvdHJ1c3QuY29tMD0GCCsGAQUFBzAChjFodHRwOi8v Y2FjZXJ0cy5nZW90cnVzdC5jb20vR2VvVHJ1c3RSU0FDQTIwMTguY3J0MAkGA1Ud EwQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAK8v j9Iaibmv+qKjCX9rwjw6CZce98faX+2K9uCwe2s9mndphtTPsVKH5ciGY9AwxLcP wOQa3oiywEyVDbbhCFcyBDSr8WVNtshYsSwaC2xm49+nCUO9MzVoyJsJ+NLuOocs kaPXt+NDTycLwOxjcXvp8D/0WbG+Fsi8TCrwL60+2Z3dMOehxZBLBCTN2OE/MvUa RAazx08UrJ2Y3my+pKFi9c2dDc5t6xQSZqNe03lM7D1gZMs9bqx4H5P0x0W+Wbp6 ETd20vB/f79AfKeqn2FEAL+RWI7AN9ILtz9dlbXVDjnG5y+O9U0ymn2HBIHTXCCT D0OZSrwUxn8vn2Nu9TI= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTzWIqd0fVxxTKHyL6Jg 0rLrSBTUBJCCATp25U21mnz0e65j+DzpYVbZadP0REaWzgwVh3+pPkKsZtdpNN0x a2R8CrBRtUR6ll43L3Jk332FmTfv9N4pZF1FJX3GrIvouJBsPDKumDstmJPrZAgS 4dvfhYLgttM8y0g6AyqPkDLeukEZvEtSW7GX3qwWqixWBQsFMFDCC5qStpy59+IF ddIBasb50HSHcy0ZWBdIWZjqjhJQcilSb3cLFS4XOz0LX/L99FyJEo16YFRwlmiW /H13VtXqIJQ1Ut4SlJedaXHmEbGw5pyba1SxKG2XgL5m2WSOHITUgVAyoDcDSW4j fwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 20046267795833383961291396353048189190 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-13 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-09 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Northern Trust Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Security' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.northernfunds.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25908852097664293588653690995183965966897893633280939189345115204708217145231500241131833149243841688947890233883029920363197165497537267199990844536379396800375174386316908325220329092859099095870814300814658696024026999298489920056347837745598487251053036406899645572216271486800055179720053011226881868059680083813621677035956492245117475560062355804350684725964120800811644379565422720431392548490775920467740266221177481603043480562580204020595352095075096108811592715265342095710329415079539898266228696234283459644296288541057802880986730015448485522084929776770243783747658249709356888892692136442627386909567 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 30381a028023fcfd87b5763c42e19cd0a5144b6e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1812 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northernfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northernfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwptl09-r5.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www10410.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www00410.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www04410.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsp.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp3b-pws.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www02510.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developers.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts8.fgr.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts8.flexshares.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www09810.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts8.rfp.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2i-pws.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www10910.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omnium-investorportal.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.col.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omnium.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www00810.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omniumdemo.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts8.50southcapital.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-ac.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www06710.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www03110.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fgr.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts8.northerntrustopen.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www03610.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www04510.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idf.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flexshares.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxjobs.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www02410.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofx.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omnium2.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www11910.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp3p-cdn.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp3a-pws.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn2.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwww119.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www06310.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn2.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myplace.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rfp.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrustinvestments.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www00210.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts8.m.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thenortherntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www08610.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp3i-pws.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www53483.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts8-ac.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www99910.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www04210.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerninstitutionalfunds.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www06810.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-ac.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www12010.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developers.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwc008.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaign.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www07510.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp3s-cdn.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www01710.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www09910.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www02110.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omnium-investor.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisors.flexshares.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www04110.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www05410.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www08210.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www02810.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www01010.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsr.dw.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omnium-fo.ntrs.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts8.northerntrust.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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