vdm.valmont.com
- Valmont Industries, Inc. -
Issued by VeriSign Class 3 International Server CA - G3
About this certificate
This digital certificate with serial number 1b:72:cb:a3:ef:bd:fa:d1:7e:6e:f4:c0:db:98:59:b2 was issued on by VeriSign, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
- Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)
Valmont Industries, Inc.
Organization:
Valmont Industries, Inc.
Organization unit: Utility
Organization unit: Utility
State / Province:
Nebraska
Locality: Valley
Country: US
Locality: Valley
Country: US
VeriSign, Inc.
Organization:
VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 1b:72:cb:a3:ef:bd:fa:d1:7e:6e:f4:c0:db:98:59:b2Serial Number (int): 36485208045602318815547709609989396914
Serial Number lenght: 125 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: d7:9b:7c:d8:22:a0:15:f7:dd:ad:5f:ce:29:9b:58:c3:bc:46:00:b5
Fingerprint (sha1): 8c:2d:c3:d5:27:6b:c9:d5:30:81:2d:f1:f3:f9:61:dc:cf:29:08:d6
Fingerprint (sha256): 73:13:7f:80:83:31:c2:5b:10:0b:05:1e:a0:27:97:94:e3:c5:50:ae:75:fe:37:1f:a1:15:e3:69:bc:a8:1d:7b
Issuing Certificate URL: http://SVRIntl-G3-aia.verisign.com/SVRIntlG3.cer
Revocation information
OCSP Server: http://ocsp.verisign.comCRL Distribution Point: http://SVRIntl-G3-crl.verisign.com/SVRIntlG3.crl
Check the revocation status for certificate vdm.valmont.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for vdm.valmont.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Netscape Server-Gated Cryptography
Microsoft Server-Gated Cryptography
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
vdm.valmont.com
Other certificates including the domain name valmont.com
(limited to 100 certificates)
fsoma.valmont.com
securemail.valmont.com
valmont.com
valmontux.valmonttest.com
weblync-na.valmont.com
ps.valmont.com
stage.valmont.com
vendortest.valmont.com
vendortest.valmont.com
web.valmont.com
valmont.com
valmont.com
emeavpn.valmont.com
web.valmont.com
webs4b-na.valmont.com
fs.valmont.com
*.valmont.com
vo.valmont.com
fs.valmont.com
securemail.valmont.com
webmail.valmont.com
apacvpn.valmont.com
usomadccppmpub1.valmont.com
valmont.com
VALDC1-W7210.valmont.com
VALDC2-W7210.valmont.com
ocs.valmont.com
guestwifi.valmont.com
webmail.valmont.com
valmont.com
v2o.valmont.com
webmail.valmont.com
valmontux.valmonttest.com
webs4b-na.valmont.com
usomadcvpn.valmont.com
web.valmont.com
valmontvpn.valmont.com
webmail.valmont.com
ocs.valmont.com
web.valmont.com
webmail.valmont.com
valleytest.valmont.com
v2otest.valmont.com
CHM01-W7030.valmont.com
APACVALLEYTEST.VALMONT.COM
webs4b-na.valmont.com
mdevbasestation.valmont.com
*.valmont.com
valmontvpn2.valmont.com
vdm.valmont.com
vdm.valmont.com
v2o.valmont.com
valmont.com
valmont.com
vdm.valmont.com
UTLWEB.VALMONT.COM
fs.valmont.com
webs4b-na.valmont.com
ps.valmont.com
usomadccppmpub1.valmont.com
valleytest.valmont.com
web.valmont.com
cwa.valmont.com
vo.valmont.com
ocs.valmont.com
valucbe01.valmont.com
*.valmont.com
v2o.valmont.com
s4baccess-na.valmont.com
vo.valmont.com
cwa.valmont.com
pstesttmp.valmont.com
mdevbasestation.valmont.com
testcpqapi.valmont.com
CHM02-W7030.valmont.com
fsoma.valmont.com
mobility.valmont.com
v2otest.valmont.com
USOMADCOSAS.na.valmont.com
mysite.valmont.com
profpntmgr.valmont.com
emeavpn.valmont.com
webmail.valmont.com
tsg.valmont.com
fs.valmont.com
valmont.com
v2otest.valmont.com
s4baccess-na.valmont.com
valmontvpn2.valmont.com
apacvalley.valmont.com
emeavpn.valmont.com
pstesttmp.valmont.com
webmail.valmont.com
vdm.valmont.com
CHM02-W7030.valmont.com
valmontvpn.valmont.com
webmail.valmont.com
mysite.valmont.com
v2o.valmont.com
webmail.valmont.com
securemail.valmont.com
valmont.com
valmontux.valmonttest.com
weblync-na.valmont.com
ps.valmont.com
stage.valmont.com
vendortest.valmont.com
vendortest.valmont.com
web.valmont.com
valmont.com
valmont.com
emeavpn.valmont.com
web.valmont.com
webs4b-na.valmont.com
fs.valmont.com
*.valmont.com
vo.valmont.com
fs.valmont.com
securemail.valmont.com
webmail.valmont.com
apacvpn.valmont.com
usomadccppmpub1.valmont.com
valmont.com
VALDC1-W7210.valmont.com
VALDC2-W7210.valmont.com
ocs.valmont.com
guestwifi.valmont.com
webmail.valmont.com
valmont.com
v2o.valmont.com
webmail.valmont.com
valmontux.valmonttest.com
webs4b-na.valmont.com
usomadcvpn.valmont.com
web.valmont.com
valmontvpn.valmont.com
webmail.valmont.com
ocs.valmont.com
web.valmont.com
webmail.valmont.com
valleytest.valmont.com
v2otest.valmont.com
CHM01-W7030.valmont.com
APACVALLEYTEST.VALMONT.COM
webs4b-na.valmont.com
mdevbasestation.valmont.com
*.valmont.com
valmontvpn2.valmont.com
vdm.valmont.com
vdm.valmont.com
v2o.valmont.com
valmont.com
valmont.com
vdm.valmont.com
UTLWEB.VALMONT.COM
fs.valmont.com
webs4b-na.valmont.com
ps.valmont.com
usomadccppmpub1.valmont.com
valleytest.valmont.com
web.valmont.com
cwa.valmont.com
vo.valmont.com
ocs.valmont.com
valucbe01.valmont.com
*.valmont.com
v2o.valmont.com
s4baccess-na.valmont.com
vo.valmont.com
cwa.valmont.com
pstesttmp.valmont.com
mdevbasestation.valmont.com
testcpqapi.valmont.com
CHM02-W7030.valmont.com
fsoma.valmont.com
mobility.valmont.com
v2otest.valmont.com
USOMADCOSAS.na.valmont.com
mysite.valmont.com
profpntmgr.valmont.com
emeavpn.valmont.com
webmail.valmont.com
tsg.valmont.com
fs.valmont.com
valmont.com
v2otest.valmont.com
s4baccess-na.valmont.com
valmontvpn2.valmont.com
apacvalley.valmont.com
emeavpn.valmont.com
pstesttmp.valmont.com
webmail.valmont.com
vdm.valmont.com
CHM02-W7030.valmont.com
valmontvpn.valmont.com
webmail.valmont.com
mysite.valmont.com
v2o.valmont.com
webmail.valmont.com
Certificate
The complete raw certificate details for vdm.valmont.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgIQG3LLo++9+tF+bvTA25hZsjANBgkqhkiG9w0BAQUFADCB vDELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQL ExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1c2Ug YXQgaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYSAoYykxMDE2MDQGA1UEAxMt VmVyaVNpZ24gQ2xhc3MgMyBJbnRlcm5hdGlvbmFsIFNlcnZlciBDQSAtIEczMB4X DTEzMDQwMzAwMDAwMFoXDTE0MDQwNDIzNTk1OVowgYAxCzAJBgNVBAYTAlVTMREw DwYDVQQIEwhOZWJyYXNrYTEPMA0GA1UEBxQGVmFsbGV5MSEwHwYDVQQKFBhWYWxt b250IEluZHVzdHJpZXMsIEluYy4xEDAOBgNVBAsUB1V0aWxpdHkxGDAWBgNVBAMU D3ZkbS52YWxtb250LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AIMBOZBC9F/y/DL4qsjr8zo9+tISXrtn7VxzfI/gCE8m9Im43Sc8tEZkVk+ntxEO xxsLBEHLSqeNT9ndSZshxYaIfsLsdHp9Fr2QUZZ9IvYs05IDmjQadRfX9G/0JzVN SeILtJMQjWwqwbx5uMYFkbwX17hG6zRy19jCBP07h6v/XRXjND/B7en0dBFWeRhJ cwERFWW32jTMTLFp0CGVx6E6UZ2kCl/7wOKze9j85hagNb/Hl4ESf153EFd6PTZB WGtPBUQXOXfIZ3eXAWBJJ/i4Ah1bx0Sd8mWtAb+bBxgs8gCLZtqsZB9XnnapA5Hz XH5Qy8K9CdDs/d0ArtB/cbkCAwEAAaOCAY4wggGKMBoGA1UdEQQTMBGCD3ZkbS52 YWxtb250LmNvbTAJBgNVHRMEAjAAMA4GA1UdDwEB/wQEAwIFoDA0BgNVHSUELTAr BggrBgEFBQcDAQYIKwYBBQUHAwIGCWCGSAGG+EIEAQYKKwYBBAGCNwoDAzBDBgNV HSAEPDA6MDgGCmCGSAGG+EUBBzYwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cu dmVyaXNpZ24uY29tL2NwczAfBgNVHSMEGDAWgBTXm3zYIqAV992tX84pm1jDvEYA tTBBBgNVHR8EOjA4MDagNKAyhjBodHRwOi8vU1ZSSW50bC1HMy1jcmwudmVyaXNp Z24uY29tL1NWUkludGxHMy5jcmwwcgYIKwYBBQUHAQEEZjBkMCQGCCsGAQUFBzAB hhhodHRwOi8vb2NzcC52ZXJpc2lnbi5jb20wPAYIKwYBBQUHMAKGMGh0dHA6Ly9T VlJJbnRsLUczLWFpYS52ZXJpc2lnbi5jb20vU1ZSSW50bEczLmNlcjANBgkqhkiG 9w0BAQUFAAOCAQEAM9qon08l+oCl/+1l+ikkOXPyRzvB7Wgh1mKOivBzTPIBGA7P PiL8rjU9z0tNXuREsO8vEsYn/mqge4Y+50BqcSoyghidIpDZzDJ73cu/RYOMm+rY BoI7rSDRDe8r6Kmi94HF//6a7jg4ZhIEupQrU8gTraE7JkyOpubxxfnuFfcxtJiU Az28/JWvR5ciZiUUetrdQDnJZQ1YS4mRvHGdS7hUQ2Bf1Lm74upYEfQrJJFCBQRK 39aWIOHRdN+rQfGovC6PtmFYtOS44uSk0V1yHjz90Uozi1EwsUEyMiqX7zftkG5d nS+b14BoDOEp8UJ8upq/7rGKWp6O2xSEv/ZBDw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwE5kEL0X/L8MviqyOvz Oj360hJeu2ftXHN8j+AITyb0ibjdJzy0RmRWT6e3EQ7HGwsEQctKp41P2d1JmyHF hoh+wux0en0WvZBRln0i9izTkgOaNBp1F9f0b/QnNU1J4gu0kxCNbCrBvHm4xgWR vBfXuEbrNHLX2MIE/TuHq/9dFeM0P8Ht6fR0EVZ5GElzAREVZbfaNMxMsWnQIZXH oTpRnaQKX/vA4rN72PzmFqA1v8eXgRJ/XncQV3o9NkFYa08FRBc5d8hnd5cBYEkn +LgCHVvHRJ3yZa0Bv5sHGCzyAItm2qxkH1eedqkDkfNcflDLwr0J0Oz93QCu0H9x uQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 36485208045602318815547709609989396914 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)10' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 International Server CA - G3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-04-03 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-04 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nebraska' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Valley' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Valmont Industries, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Utility' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'vdm.valmont.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16537821950301478786743426905058675033924578756910519945002576111240402066980466466307420901858544559160846783708434240375944743923266003390815025114921126154169539611773201538708644481336056078959222800347280796926719683668832806226423282095415367323570619001645848978456668601678378736358692409481566681931236642271961841005286463516463434184679448060656998258412842902409614021068524191294491855330943071299841296032840719359476330978328392205090869617897715786554055742058314696510325022864647747411550017021898161879111739607699392921625054514784825682374453940755316338483384719509413773542185522229320529965497 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vdm.valmont.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.4.1 (serverGatedCrypto) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.3 (serverGatedCrypto) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/cps' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d79b7cd822a015f7ddad5fce299b58c3bc4600b5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRIntl-G3-crl.verisign.com/SVRIntlG3.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.verisign.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRIntl-G3-aia.verisign.com/SVRIntlG3.cer' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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