federation2.saskatoon.ca

- City of Saskatoon -

Issued by VeriSign Class 3 Extended Validation SSL CA

About this certificate

This digital certificate with serial number 34:ff:9e:0c:09:1a:55:59:a5:1b:ba:f2:55:1c:8b:a4 was issued on by VeriSign, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

City of Saskatoon

Company registration number: Government Entity
Organization: City of Saskatoon
Organization unit: IT
Address: 222 3rd Ave N
Postal code: S7K 0J5
State / Province: Saskatchewan
Locality: Saskatoon
Country: CA

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)06
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 34:ff:9e:0c:09:1a:55:59:a5:1b:ba:f2:55:1c:8b:a4
Serial Number (int): 70447097054014533785882939334420368292
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 43:00:e4:91:37:e2:07:94:0c:9b:c3:f0:d9:f0:89:ef:3f:e3:1d:44
AuthorityKeyId: fc:8a:50:ba:9e:b9:25:5a:7b:55:85:4f:95:00:63:8f:e9:58:6b:43

Fingerprint (sha1): 60:6b:f8:28:18:b2:af:43:96:e9:1d:e3:5f:78:db:8f:8b:b0:c7:8b
Fingerprint (sha256): 86:f0:8f:cb:1a:19:91:c0:1a:57:59:39:be:82:ad:32:ed:9a:b6:5c:1d:3a:35:1a:88:59:78:08:39:f8:1b:d8

Issuing Certificate URL: http://EVSecure-aia.verisign.com/EVSecure2006.cer

Revocation information

OCSP Server: http://EVSecure-ocsp.verisign.com
CRL Distribution Point: http://EVSecure-crl.verisign.com/EVSecure2006.crl

Check the revocation status for certificate federation2.saskatoon.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for federation2.saskatoon.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

federation2.saskatoon.ca

Other certificates including the domain name saskatoon.ca

(limited to 100 certificates)
*.saskatoon.ca
webmail.saskatoon.ca
sip.saskatoon.ca
websrvdirector.saskatoon.ca
leisure.saskatoon.ca
leisure.saskatoon.ca
saskatoon.ca
secure7.saskatoon.ca
webconnect.saskatoon.ca
leisureonline.saskatoon.ca
saskatoon.ca
d10transitdev.saskatoon.ca
saskatoon.ca
webdev.saskatoon.ca
webmail.saskatoon.ca
saskatoon.ca
webmail.saskatoon.ca
saskatoon.ca
login.saskatoon.ca
*.saskatoon.ca
*.saskatoon.ca
d10webdev.saskatoon.ca
saskatoon.ca
saskatoon.ca
amp.saskatoon.ca
websrvdirector.saskatoon.ca
sip.lynctest.saskatoon.ca
saskatoon.ca
saskatoon.ca
websrvdirector.saskatoon.ca
stgext4.saskatoon.ca
webmail.saskatoon.ca
federation3.saskatoon.ca
leisureonline.saskatoon.ca
postoffice.saskatoon.ca
new2.saskatoon.ca
*.saskatoon.ca
leisureonline.saskatoon.ca
websrvdirector.saskatoon.ca
fs.saskatoon.ca
webmail.saskatoon.ca
learning.saskatoon.ca
leisureonline.saskatoon.ca
login.saskatoon.ca
webmail.saskatoon.ca
*.saskatoon.ca
webconnect.saskatoon.ca
*.hec.fusion.saskatoon.ca
*.saskatoon.ca
saskatoon.ca
learning.saskatoon.ca
ww9.saskatoon.ca
saskatoon.ca
sip.saskatoon.ca
saskatoon.ca
transitdev.saskatoon.ca
federation2.saskatoon.ca
federation.saskatoon.ca
websrvdirector.saskatoon.ca
webconnect.saskatoon.ca
amp.saskatoon.ca
webmail.saskatoon.ca
websrvdirector.saskatoon.ca
saskatoon.ca
*.saskatoon.ca
saskatoon.ca
saskatoon.ca
amp.saskatoon.ca
ww9.saskatoon.ca
rpbackgis2.saskatoon.ca
saskatoon.ca
federation.saskatoon.ca
careers.saskatoon.ca
saskatoon.ca
leisure.saskatoon.ca
webmail.saskatoon.ca
webmail.saskatoon.ca
careers.saskatoon.ca
saskatoon.ca
leisure.saskatoon.ca
amp.saskatoon.ca
leisureonline.saskatoon.ca
*.saskatoon.ca
*.saskatoon.ca
ww9.saskatoon.ca
apps2.saskatoon.ca
websrvdirector.saskatoon.ca
port365.saskatoon.ca
federation.saskatoon.ca
webconnect.saskatoon.ca
*.saskatoon.ca
saskatoon.ca
federation3.saskatoon.ca
d10transitprd.saskatoon.ca

Certificate

The complete raw certificate details for federation2.saskatoon.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZ59AF7jkb1QmN7AyOXy
dr/79J4WDW3uNX/pKIKyMKfA2OX4vz0FFjwi7RBIw1WsSpffzIR1VGo5j3mlmjbh
qpliKZwQiGqqPUA9qFrWgdnqpNT/FlzTRBNr7nEvb8uKa3tZSb2B7YVOwFFSPeZu
Cq3+qczI1nTdXWUMA76xMN54VFQeNAzwuwfGdni7lDQlpYIp8ojJAxc/j0Q7HTif
2FgpJY8Ax1mxUy42j0CcXJK/jkpU/BjacYd/Q38Dd23j2/ukRJnIFaKExRQS6+gT
u4FBdd9KaF4oJesWIurrvSiHEWyZTaukvxYRgrs3HbHL1KHrEb1VuoNVhcbiokk8
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 70447097054014533785882939334420368292
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)06'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 Extended Validation SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-02-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'S7K 0J5'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Saskatchewan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Saskatoon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '222 3rd Ave N'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'City of Saskatoon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'federation2.saskatoon.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25452052785271397595618705199409690963960217540394437343107249681776869159261615731052927865106569467674136111326902597303159461041748331426636405038501324572830860795120804731561669239461726263276275282370982805118998068799792167568004712559118604298838224927540991936024604722521619552343592431977650563467889310040315368089433384349983717693351220365523148367274968429133125407352329323562554059178859118801999073883271063707500510187783009639868737685225463229318823014060217422423090022675405857250281544370452929441326984565713934699911162648916368749582989052307105877874458176956668959430871045692291658890271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'federation2.saskatoon.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.23.6 (VeriSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4300e49137e207940c9bc3f0d9f089ef3fe31d44
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fc8a50ba9eb9255a7b55854f9500638fe9586b43
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://EVSecure-crl.verisign.com/EVSecure2006.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://EVSecure-ocsp.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://EVSecure-aia.verisign.com/EVSecure2006.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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