northerntrust.com

- The Northern Trust Company -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0b:aa:65:a1:93:3e:53:cc:dc:0e:82:4e:5d:18:c9:81 was issued on by DigiCert Inc.

With 45 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Northern Trust Company

Organization: The Northern Trust Company
Organization unit: Enterprise Support
State / Province: Illinois
Locality: Chicago
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:aa:65:a1:93:3e:53:cc:dc:0e:82:4e:5d:18:c9:81
Serial Number (int): 15506259744258774494027689211782023553
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 47:cb:a5:70:1b:e8:89:fc:8d:8b:28:4e:5d:5f:52:f3:40:12:56:11
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): cc:59:6a:da:b3:43:bb:74:20:da:8d:e2:ef:bc:a3:11:4b:34:43:5a
Fingerprint (sha256): 94:2b:ae:51:fa:4f:5e:90:41:f8:bb:09:12:2b:ed:9d:9f:79:83:73:71:e4:a1:14:e6:1b:bf:2b:ed:ac:a4:c9

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertSHA2SecureServerCA.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertSHA2SecureServerCA.crl

Check the revocation status for certificate northerntrust.com

45

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for northerntrust.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

northerntrust.com
www.flexshares.com
northernfunds.com
www.northernfunds.com
www.northerninstitutionalfunds.com
northerninstitutionalfunds.com
www.northerntrustinvestments.com
northerntrustinvestments.com
individual.northernfunds.com
advisors.northernfunds.com
www.northerntrustopen.com
125.northerntrust.com
50southcapital.com
northerntrust.jp
www.northerntrust.jp
www.50southcapital.com
fiftysouthcapital.com
www.fiftysouthcapital.com
northern-Funds.com
www.northern-Funds.com
northernmutualfunds.com
www.northernmutualfunds.com
www.northerntrust.com
www.ntrs.com
ntrs.com
northerntrust.ntrs.com
www.northerntrust.ntrs.com
rfp.northerntrust.com
m.northerntrust.com
m.ntrs.com
web-xp2i-pws.ntrs.com
web-xp2c-pws.ntrs.com
web-xp2b-pws.ntrs.com
web-xp2d-pws.ntrs.com
www-xp.ntrs.com
www-ac.northerntrust.com
emotomy.com
beladv.com
tntimok.com
www.tntimok.com
www.northerntrustbank.com
northerntrustbank.com
www.beladv.com
www.emotomy.com
advisors.flexshares.com

Other certificates including the domain name northerntrust.com

(limited to 100 certificates)
www.northernfunds.com
san-001.ceros.com
uat.northerntrust.com
san-001.ceros.com
san-001.ceros.com
locations.northerntrust.com
san-001.ceros.com
san-001.ceros.com
san-001.ceros.com
wwww119.ntrs.com
san-001.ceros.com
deviaa.northerntrust.com
san-001.ceros.com
locations.northerntrust.com
san-001.ceros.com
uat.northerntrust.com
locations.northerntrust.com
wealth.northerntrust.com
pes1.northerntrust.com
san-001.ceros.com
san-001.ceros.com
www.northernfunds.com
wwww119.ntrs.com
northerntrust.com
ciscouc-emea-XMPP.ntrs.com
careers.northerntrust.com
www02710.ntrs.com
www.northernfunds.com
uat.northerntrust.com
www.northernfunds.com
www.northernfunds.com
survey.northerntrust.com
san-001.ceros.com
smetrics.northerntrust.com
san-001.ceros.com
smetrics.northerntrust.com
www-ac.northerntrust.com
www02710.ntrs.com
northerntrust.com
www-ac.northerntrust.com
san-001.ceros.com
uat.northerntrust.com
ciscouc-indi-XMPP.ntrs.com
www02710.ntrs.com
ukpcuat2imp01.ntrs.com
amer-c4-expe.ntrs.com
www02710.ntrs.com
san-001.ceros.com
www02710.ntrs.com
web-xp3p-cdn.ntrs.com
san-001.ceros.com
www02710.ntrs.com
pages.e.northerntrust.com
san-001.ceros.com
www02710.ntrs.com
san-001.ceros.com
assetmanagement.northerntrust.com
san-001.ceros.com
pages.e.northerntrust.com
ciscouc-emea-XMPP.ntrs.com
northerntrust.com
wealth.northerntrust.com
www.northernfunds.com
survey.northerntrust.com
pages.e.northerntrust.com
pointofview.northerntrust.com
pages.e.northerntrust.com
san-001.ceros.com
san-001.ceros.com
wwww119.ntrs.com
pes1.northerntrust.com
www.northerntrust.com
www02710.ntrs.com
assetmanagement.northerntrust.com
www-ac.northerntrust.com
devotto.northerntrust.com
pes2.northerntrust.com
assetmanagement.northerntrust.com
uat.northerntrust.com
wwww119.ntrs.com
ukpcuat2imp01.ntrs.com
uat.northerntrust.com
careers.northerntrust.com
san-001.ceros.com
click.news.northerntrust.com
www.northernfunds.com
*.api.tpv.northerntrust.com
san-001.ceros.com
cm.demo.northerntrust.com
pointofview.northerntrust.com
san-001.ceros.com
www.northerntrust.com
uat.northerntrust.com
stores.cictitlepawn.com
www02710.ntrs.com
www-ac.northerntrust.com
www.northernfunds.com
careers.northerntrust.com
san-001.ceros.com
san-001.ceros.com

Certificate

The complete raw certificate details for northerntrust.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXvm4wBbhDe+AOuuUw2+
r/C36w1T1L59UZNsbt1dkND+qQnKY/koM7Mbb/lHQcYPaSK8zYqp4m2mN7fdJKiJ
jl+LdwNoK8kJDjkcirW13AlUp35iwbgPTtBNxATOYczUhcDxumQf+aCvWM5hS2fH
wI75nWkJgHuLUpZ8gmvMubiWgn7sjPgQXv4V/xawZsq9dfeAQk6wpyrF0L98W5xX
jCllqSTgv3ZQlLNusuj4HapP0vSIHwTT47Na5jti9Ttvv3GnLArgZGTQW0JAOe/+
LC8OKFFCw1HORGThydlR3mkB5DOLIv8oHwCEyYBD416agFrtXSbSaX9PoBrC8I0p
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15506259744258774494027689211782023553
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Northern Trust Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Enterprise Support'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'northerntrust.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19375558964486443611900583564624231386148405993714818687759864640804601885185446491195021754604122808286086711429672972224155517187140167464883517249561695227139522683722670640468410794919390869664070320134816951083317333051443528018377512288329442931291318826519248896927129872776001239158779320307657154046579083652813339928116792463474195107743583021123527415004537634509622609171972615245230600281935046992530929731705843599318778701301077912280954841421998791594671349685944364643425709368781858006461483987342670196285842636500003312431467473942362764062503964077398491548493058955266395861717359391009795811599
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							47cba5701be889fc8d8b284e5d5f52f340125611
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1010 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flexshares.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northernfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northernfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerninstitutionalfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northerninstitutionalfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrustinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northerntrustinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'individual.northernfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisors.northernfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrustopen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '125.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '50southcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northerntrust.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrust.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.50southcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiftysouthcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fiftysouthcapital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northern-Funds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northern-Funds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northernmutualfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northernmutualfunds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northerntrust.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrust.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rfp.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2i-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2c-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2b-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-xp2d-pws.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-xp.ntrs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-ac.northerntrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emotomy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beladv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tntimok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tntimok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northerntrustbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northerntrustbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beladv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emotomy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisors.flexshares.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (128 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertSHA2SecureServerCA.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertSHA2SecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (114 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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