www.northernfunds.com

- Northern Trust Corporation -

Issued by GeoTrust SSL CA - G4

About this certificate

This digital certificate with serial number 06:3f was issued on by GeoTrust Inc..

With 65 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Northern Trust Corporation

Organization: Northern Trust Corporation
Organization unit: Information Security
State / Province: Illinois
Locality: Chicago
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:3f
Serial Number (int): 1599
Serial Number lenght: 11 bits, 2 octets

SubjectKeyId:
AuthorityKeyId: ac:32:ed:5a:c9:e0:de:30:9c:90:58:55:26:63:f6:72:a6:54:5f:e3

Fingerprint (sha1): 2a:ce:4b:b0:b5:00:7f:62:1d:e6:30:23:7c:db:69:ba:7e:d6:81:b4
Fingerprint (sha256): 85:c8:06:59:5d:b8:b6:86:7e:04:78:f1:ce:fa:da:21:b9:50:37:c4:7a:cb:f2:0a:38:d3:f3:77:a5:d1:81:d4

Issuing Certificate URL: http://gw.symcb.com/gw.crt

Revocation information

OCSP Server: http://gw.symcd.com
CRL Distribution Point: http://gw.symcb.com/gw.crl

Check the revocation status for certificate www.northernfunds.com

65

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.northernfunds.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fxpassport.ntrs.com
securemail.ntrs.com
tsp.ntrs.com
www12010.ntrs.com
www11910.ntrs.com
www10910.ntrs.com
www0383.ntrs.com
lyncext.sem-uat.ntrs.com
lyncdiscover.sem-uat.ntrs.com
www09910.ntrs.com
www08610.ntrs.com
ofx.ntrs.com
www02510.ntrs.com
www02410.ntrs.com
www06310.ntrs.com
www03610.ntrs.com
www01010.ntrs.com
www09810.ntrs.com
www06810.ntrs.com
www06710.ntrs.com
www04510.ntrs.com
www04210.ntrs.com
www04110.ntrs.com
www03110.ntrs.com
www02810.ntrs.com
www02110.ntrs.com
www00810.ntrs.com
www00210.ntrs.com
www99910.ntrs.com
www10410.ntrs.com
www08210.ntrs.com
www08110.ntrs.com
www07510.ntrs.com
www05410.ntrs.com
www04410.ntrs.com
www01710.ntrs.com
www00410.ntrs.com
m.ntrs.com
rfp.northerntrust.com
www.northerntrustinvestments.com
www.northerntrust.com
www.northerninstitutionalfunds.com
www.flexshares.com
www0483.ntrs.com
www-ac.northerntrust.com
web-xp2i-pws.ntrs.com
m.northerntrust.com
www0583.ntrs.com
myplace.ntrs.com
www9783.ntrs.com
www9083.ntrs.com
www8983.ntrs.com
www8083.ntrs.com
www7383.ntrs.com
www7083.ntrs.com
www55183.ntrs.com
www50483.ntrs.com
www3983.ntrs.com
www0683.ntrs.com
www0183.ntrs.com
www53683.ntrs.com
www53583.ntrs.com
www53483.ntrs.com
www.northernfunds.com
northernfunds.com

Other certificates including the domain name northernfunds.com

(limited to 100 certificates)
www.northernfunds.com
www.northernfunds.com
northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
northerntrust.com
www02710.ntrs.com
www02710.ntrs.com
www02710.ntrs.com
www02710.ntrs.com
www02710.ntrs.com
www.northernfunds.com
northerntrust.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www.northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www.northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
northerntrust.com
northerntrust.com
www.northernfunds.com
www02710.ntrs.com
www02710.ntrs.com
www.northernfunds.com
northerntrust.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
northerntrust.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
northerntrust.com
www.northerntrust.com
www02710.ntrs.com
www02710.ntrs.com
northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northerntrust.com
northerntrust.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
northerntrust.com
www.northernfunds.com
www.northerntrust.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
northerntrust.com
www.northernfunds.com
www02710.ntrs.com
www02710.ntrs.com
www02710.ntrs.com
northerntrust.com
www02710.ntrs.com
www.northerntrust.com
www02710.ntrs.com
northerntrust.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www.northernfunds.com
www02710.ntrs.com
www.northernfunds.com
www02710.ntrs.com
www02710.ntrs.com

Certificate

The complete raw certificate details for www.northernfunds.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqP92eYKQk8zJMNUBPk7
0EDsJ2vcx4gJFBWavg/M6t7k9hCC3wCkxybHXcVaZK/tXuSDRatKTwj3cPqmC2mH
iZdNq6YkGyCFWfv3DQ3MRLJanR0DYHblwAqF4FmWqOppcv0RlTC7ykC3DF229v61
CgFpwmtS/WLjMR0ejnsPexJY0S403J2P8Pj7dEQnXlgijpGILO9FPxIW+m+lMf81
YMFbRo4HONDG1N8Kj4w6/RJuksr0KLo7/yGW9BhrhKPYms/y9Qeef0eAf+u6u8no
PvuJmAcDA9e6vTxk8i9uQ1SBYO3RFfh28L7UXDYsBm6438F1f9ULFeHwST20XqPe
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1599
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-19 14:37:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-20 13:36:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Northern Trust Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Security'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.northernfunds.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21541379119171700667292708334992795708659331388395074382082689973554669679304664779748716320112997908148484570766060888758520591461886273135065537060251138596154083076899882376345789921771797315499774987584097403848720678858438887313976448417013416557090010252490898044120857093579455372062990024713580822240334178770182646426459075783226021688117664893760546762924308465113828122451198674518453378496116409013960951930567258006353361718691708143662072217303421599371147851310766374329074537507826411551445208010536673194344768513894777453678436100205927056786572870616081061622471484538197916556524038289895947755231
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ac32ed5ac9e0de309c9058552663f672a6545fe3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gw.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gw.symcb.com/gw.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1290 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxpassport.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securemail.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsp.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www12010.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www11910.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www10910.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www0383.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncext.sem-uat.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.sem-uat.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www09910.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www08610.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofx.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www02510.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www02410.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www06310.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www03610.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www01010.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www09810.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www06810.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www06710.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www04510.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www04210.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www04110.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www03110.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www02810.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www02110.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www00810.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www00210.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www99910.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www10410.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www08210.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www08110.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www07510.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www05410.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www04410.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www01710.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www00410.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rfp.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrustinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerninstitutionalfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flexshares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www0483.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-ac.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2i-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www0583.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myplace.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www9783.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www9083.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www8983.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www8083.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www7383.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www7083.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www55183.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www50483.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3983.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www0683.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www0183.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www53683.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www53583.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www53483.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northernfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northernfunds.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gw.symcb.com/gw.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0093b6e523f2cbfa80790fbde8de2256f4577784b56c69cff18a9a15b8263909aadc5b0e6b5971720055116841376cdd630cda35bd2402491235ddaf46303f00ebab54f2cb5f9f814194edce749751e8e66f9fc452b339e32d3d169744b2bbc35fc99570fa5d120b5db223c62216115cf9428d070b9e6ec0960be2a86124dc9a87ad7bc0b011e3089472056547dbc410699f9cdf19dafdd2d99e7710b28ab1c3c8022094d173f718879436f3d7adee46db3b21a97e7943794825775ec8ceec92f979492ec625588f8c44b59a4a8cc58da8f8c62030e2877b61ee92dd4a53b09f340657602ebff54a693b8095184b2a9dbd19a6168c4c4f7c4dd5065f4aa7e268a0