vpn1.sandyspringbank.com

- Sandy Spring Bank -

Issued by Network Solutions OV Server CA 2

About this certificate

This digital certificate with serial number 03:be:b3:35:b4:fb:9f:44:58:d2:07:aa:16:fc:3e:91 was issued on by Network Solutions L.L.C..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Sandy Spring Bank

Organization: Sandy Spring Bank
Organization unit: SSB
Organization unit: Secure Link SSL Pro
Address: 17801 Georgia Avenue
Postal code: 20832
State / Province: MD
Locality: Olney
Country: US

Network Solutions L.L.C.

Organization: Network Solutions L.L.C.
State / Province: VA
Locality: Herndon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:be:b3:35:b4:fb:9f:44:58:d2:07:aa:16:fc:3e:91
Serial Number (int): 4977855196899526038762938525911105169
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 84:3f:c3:df:b4:30:b8:d0:a1:cd:77:96:f6:cb:ae:c1:ee:c3:1a:79
AuthorityKeyId: 20:33:cd:b7:61:f6:a5:86:4f:dc:c9:d7:73:6a:bc:0a:51:65:98:ec

Fingerprint (sha1): 18:dc:f7:1f:c1:a2:d7:39:5d:91:99:a3:32:7e:36:6a:8b:35:88:17
Fingerprint (sha256): 84:12:74:1e:2c:e5:a5:31:b7:78:7f:2c:9a:ff:67:4e:2e:52:40:af:f7:76:8a:5f:cc:32:c4:aa:ba:f9:b2:80

Issuing Certificate URL: http://crt.netsolssl.com/NetworkSolutionsOVServerCA2.crt

Revocation information

OCSP Server: http://ocsp.netsolssl.com
CRL Distribution Point: http://crl.netsolssl.com/NetworkSolutionsOVServerCA2.crl

Check the revocation status for certificate vpn1.sandyspringbank.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vpn1.sandyspringbank.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vpn1.sandyspringbank.com
www.vpn1.sandyspringbank.com

Other certificates including the domain name sandyspringbank.com

(limited to 100 certificates)
sni.cloudflaressl.com
mymortgage.sandyspringbank.com
sni.cloudflaressl.com
ssl511589.cloudflaressl.com
dialog.sandyspringbank.com
remotedeposit.sandyspringbank.com
news.sandyspringbank.com
secure.sandyspringbank.com
remotedeposit.sandyspringbank.com
www.sandyspringbank.com
offer.sandyspringbank.com
ssl511590.cloudflaressl.com
ssl511588.cloudflaressl.com
news.sandyspringbank.com
www.sandyspringbank.com
sandyspringbankfoundation.org
owa.sandyspringbank.com
offer.sandyspringbank.com
secure.sandyspringbank.com
www.sandyspringbank.com
sni.cloudflaressl.com
offer.sandyspringbank.com
www.sandyspringbank.com
secure.sandyspringbank.com
vpn1.sandyspringbank.com
*.sandyspringbank.com
remotedeposit2.sandyspringbank.com
sni.cloudflaressl.com
ssl511589.cloudflaressl.com
www.sandyspringbank.com
secure.sandyspringbank.com
offer.sandyspringbank.com
sni.cloudflaressl.com
secure.sandyspringbank.com
san-21-s12.tlsprovisioning.exacttarget.com
fs.sandyspringbank.com
ssl511589.cloudflaressl.com
news.sandyspringbank.com
www.sandyspringbank.com
news.sandyspringbank.com
www.sandyspringbank.com
san-21-s12.tlsprovisioning.exacttarget.com
ssl511590.cloudflaressl.com
secure.sandyspringbank.com
*.sandyspringbank.com
ssl511590.cloudflaressl.com
vpn1.sandyspringbank.com
remotedeposit2.sandyspringbank.com
remotedeposit.sandyspringbank.com
OWA.SandySpringBank.com
owa.SandySpringBank.com
sandyspringbank.com
secure.sandyspringbank.com
offer.sandyspringbank.com
ssl327486.cloudflaressl.com
secure.sandyspringbank.com
*.sandyspringbank.com
remotedeposit2.sandyspringbank.com
offer.sandyspringbank.com
sni.cloudflaressl.com
secure.readiness.sandyspringbank.com
sni.cloudflaressl.com
www.sandyspringbank.com
lync-col-1.sandyspringcorp.com
ssl511589.cloudflaressl.com
owa.sandyspringbank.com
offer.sandyspringbank.com
www.sandyspringbank.com
owa.sandyspringbank.com
ssl511590.cloudflaressl.com
ssl511590.cloudflaressl.com
www.sandyspringbank.com
offer.sandyspringbank.com
remotedeposit.sandyspringbank.com
remotedeposit2.sandyspringbank.com
secure.sandyspringbank.com
vpn1.sandyspringbank.com
offer.sandyspringbank.com
www.sandyspringbank.com
search.sandyspringbank.com
fs.sandyspringbank.com
owa.sandyspringbank.com
secure.sandyspringbank.com
san-21-s12.tlsprovisioning.exacttarget.com
lync-col-1.sandyspringcorp.com
offer.sandyspringbank.com
www.sandyspringbank.com
*.sandyspringbank.com
www.sandyspringbank.com
vpn2.sandyspringbank.com
remotedeposit.sandyspringbank.com
vpn1.sandyspringbank.com
ssl327486.cloudflaressl.com
remotedeposit.sandyspringbank.com
sandyspringbank.com
remotedeposit2.sandyspringbank.com
*.online.sandyspringbank.com
remotedeposit.sandyspringbank.com
www.sandyspringbank.com
vpn1.sandyspringbank.com

Certificate

The complete raw certificate details for vpn1.sandyspringbank.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEMIIh76oikKLuLmutUn
ls0jeyD9j6HorHHWfkFlpmttxfUf3FJZmxClhgYPc3d+Qyp5Kw8fDIPiqz/tsQ6R
q369oGm14g3usO1VgavwFuyA631dHvmLD8fH1aAac3pNKb157WVEyLnifFJWmtui
/+sXz2lfYHzWYqkPRTI1vC9ZSNwOEpig4nCCv8Me0/gtViBlzC1lDBJEnIaOv4mI
JZ5q6dZ9R37jGntfg+q22/h+mVnehmlaXDvn9cAUSBRB3nCoTV61i/DBnVsBGun0
6y2Olfb2OGeHQz+u2CN88iIlx2reQllItudmRn8mhKft54NX7RYv4mCPMyed8BcH
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4977855196899526038762938525911105169
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Herndon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Network Solutions L.L.C.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Network Solutions OV Server CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '20832'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Olney'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '17801 Georgia Avenue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sandy Spring Bank'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SSB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Secure Link SSL Pro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vpn1.sandyspringbank.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22250996272093267254440231278657812384499876762708281920346267062986702361397930903702831861137626813375168741577099000586828735246099514405310679837194988402508669399971592106216172913928759674185690223265359441163826450909391592376217729432055243407919032393714127014089020404699168750683578572640775981970329524228349504993319512356041053998239203215870295185610973415924047044849805675109376146736553314354817085847522424750832210788762736973236543155012002860226313220349114271749631754094212104555534330577787723795747095104829449049477293907864718528467706353127706347282561588162517050229200347946590152361947
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2033cdb761f6a5864fdcc9d7736abc0a516598ec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							843fc3dfb430b8d0a1cd7796f6cbaec1eec31a79
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.782.1.2.1.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.networksolutions.com/legal/SSL-legal-repository-cps.jsp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.netsolssl.com/NetworkSolutionsOVServerCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.netsolssl.com/NetworkSolutionsOVServerCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.netsolssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn1.sandyspringbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vpn1.sandyspringbank.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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