portal.gruener-punkt.de

- Der Gruene Punkt - Duales System Deutschland GmbH -

Issued by VeriSign Class 3 Extended Validation SSL SGC CA

About this certificate

This digital certificate with serial number 5e:bb:76:fb:42:e8:bd:88:a4:b1:9e:0e:c5:46:ce:a4 was issued on by VeriSign, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

Der Gruene Punkt - Duales System Deutschland GmbH

Company registration number: HRB 72131
Organization: Der Gruene Punkt - Duales System Deutschland GmbH
Organization unit: edv
Organization unit: Terms of use at www.verisign.com/rpa (c)05
State / Province: Nordrhein-Westfalen
Locality: Koeln
Country: DE

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)06
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5e:bb:76:fb:42:e8:bd:88:a4:b1:9e:0e:c5:46:ce:a4
Serial Number (int): 125920804347637503283201093406286073508
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 4e:43:c8:1d:76:ef:37:53:7a:4f:f2:58:6f:94:f3:38:e2:d5:bd:df

Fingerprint (sha1): b2:51:e8:85:db:88:54:e1:7d:b3:d4:e0:09:50:ae:e0:17:84:2f:17
Fingerprint (sha256): a4:1a:5e:eb:f7:3f:38:7e:34:46:bd:67:99:0e:b3:42:0e:51:f3:ff:27:93:b8:76:a1:d4:8e:d9:6d:3d:b9:9f

Issuing Certificate URL: http://EVIntl-aia.verisign.com/EVIntl2006.cer

Revocation information

OCSP Server: http://ocsp.verisign.com
CRL Distribution Point: http://EVIntl-crl.verisign.com/EVIntl2006.crl

Check the revocation status for certificate portal.gruener-punkt.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal.gruener-punkt.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication
Netscape Server-Gated Cryptography
Microsoft Server-Gated Cryptography

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portal.gruener-punkt.de

Other certificates including the domain name gruener-punkt.de

(limited to 100 certificates)
gruener-punkt.de
helpdesk.sgmc.org
servicedesk.eugenustech.com
helpdesk.sgmc.org
support.ecctis.com
www.gruener-punkt.de
helpdesk.sgmc.org
nge.gruener-punkt.de
helpdesk.sgmc.org
support.ecctis.com
helpdesk.sgmc.org
servicedesk.cheaperwaste.co.uk
webmail.gruener-punkt.de
webmail.gruener-punkt.de
helpdesk.sgmc.org
helpdesk.sgmc.org
adfs.gruener-punkt.de
support-services.gruener-punkt.de
portal.gruener-punkt.de
servicedesk.eugenustech.com
servicedesk.eugenustech.com
portal.gruener-punkt.de
servicedesk.cheaperwaste.co.uk
nge.gruener-punkt.de
helpdesk.zultys.com
support-services.gruener-punkt.de
servicedesk.eugenustech.com
nge.gruener-punkt.de
support-services.gruener-punkt.de
portal.gruener-punkt.de
infopfand.gruener-punkt.de
servicedesk.eugenustech.com
gruener-punkt.de
helpdesk.sgmc.org
portal.gruener-punkt.de
servicedesk.eugenustech.com
helpdesk.sgmc.org
servicedesk.cheaperwaste.co.uk
portal.gruener-punkt.de
gruener-punkt.de
portal.gruener-punkt.de
helpdesk.sgmc.org
helpdesk.sgmc.org
servicedesk.cheaperwaste.co.uk
webmail.gruener-punkt.de
infopfand.gruener-punkt.de
webmail.gruener-punkt.de
helpdesk.sgmc.org
support-services.gruener-punkt.de
servicedesk.eugenustech.com
servicedesk.eugenustech.com
www.gruener-punkt.de
helpdesk.sgmc.org
login.gruener-punkt.de
servicedesk.eugenustech.com
helpdesk.sgmc.org
adfs.gruener-punkt.de
helpdesk.sgmc.org
web0.gruener-punkt.de
adfs.gruener-punkt.de
gruener-punkt.de
helpdesk.sgmc.org
gruener-punkt.de
nge.gruener-punkt.de
portal.gruener-punkt.de
gruener-punkt.de
servicemanager.loacker.com
servicedesk.eugenustech.com
gruener-punkt.de
web0.gruener-punkt.de
www.gruener-punkt.de
servicedesk.solidsolutions.co.uk
helpdesk.zultys.com
nge.gruener-punkt.de
servicedesk.solidsolutions.co.uk
servicedesk.eugenustech.com
nge.gruener-punkt.de
servicedesk.eugenustech.com
servicedesk.eugenustech.com
servicedesk.eugenustech.com
portal.gruener-punkt.de
portal.gruener-punkt.de
servicedesk.trencon.co.za
gruener-punkt.de
helpdesk.sgmc.org
helpdesk.sgmc.org
portal.gruener-punkt.de
gruener-punkt.de
servicedesk.trencon.co.za
portal.gruener-punkt.de
servicedesk.eugenustech.com
servicedesk.eugenustech.com
infopfand.gruener-punkt.de
helpdesk.sgmc.org
helpdesk.sgmc.org
servicedesk.solidsolutions.co.uk
helpdesk.sgmc.org
helpdesk.sgmc.org
helpdesk.sgmc.org
infopfand.gruener-punkt.de

Certificate

The complete raw certificate details for portal.gruener-punkt.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgIQXrt2+0LovYiksZ4OxUbOpDANBgkqhkiG9w0BAQUFADCB
vjELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQL
ExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1c2Ug
YXQgaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYSAoYykwNjE4MDYGA1UEAxMv
VmVyaVNpZ24gQ2xhc3MgMyBFeHRlbmRlZCBWYWxpZGF0aW9uIFNTTCBTR0MgQ0Ew
HhcNMTMwOTE3MDAwMDAwWhcNMTUwOTI4MjM1OTU5WjCCATwxEzARBgsrBgEEAYI3
PAIBAxMCREUxFjAUBgsrBgEEAYI3PAIBARQFS8O2bG4xHTAbBgNVBA8TFFByaXZh
dGUgT3JnYW5pemF0aW9uMRIwEAYDVQQFEwlIUkIgNzIxMzExCzAJBgNVBAYTAkRF
MRwwGgYDVQQIDBNOb3JkcmhlaW4tV2VzdGZhbGVuMQ4wDAYDVQQHDAVLb2VsbjE6
MDgGA1UECgwxRGVyIEdydWVuZSBQdW5rdCAtIER1YWxlcyBTeXN0ZW0gRGV1dHNj
aGxhbmQgR21iSDEMMAoGA1UECwwDZWR2MTMwMQYDVQQLFCpUZXJtcyBvZiB1c2Ug
YXQgd3d3LnZlcmlzaWduLmNvbS9ycGEgKGMpMDUxIDAeBgNVBAMMF3BvcnRhbC5n
cnVlbmVyLXB1bmt0LmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
4LUTxleOfufrnxeIt1giYsvUmloNSzWhaCIED7HaurqVHPfywqKbA5Z7IQIgxfMg
PbhgwYNFcKsGijZhG+EGhBiHCKCqB0IWzyDNkux0Eszhbh/TuxHhYrM5JcDcSxj1
Rvlc9BXdjOHhh0faNP6KaNGlrwaI7VpNDfkvI7dIAN60vpZ29aZD0UmNmQZ7WIvQ
C2l3Q9+EsBuRs+0uPFfEOsGC8lQ+BgeUmv/7pI1KJIDyFN0XWLegkJ0gO6HL99Ww
gXNfKMmmKGKSW7sFtO2sbCA3/jLT28LB6Kt2Dyl+IFyPertHLu2eNMuc8OsRY88O
RKySTpBD6vwCHPtyx87bnQIDAQABo4IBkTCCAY0wIgYDVR0RBBswGYIXcG9ydGFs
LmdydWVuZXItcHVua3QuZGUwCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwRAYD
VR0gBD0wOzA5BgtghkgBhvhFAQcXBjAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3
dy52ZXJpc2lnbi5jb20vY3BzMD4GA1UdHwQ3MDUwM6AxoC+GLWh0dHA6Ly9FVklu
dGwtY3JsLnZlcmlzaWduLmNvbS9FVkludGwyMDA2LmNybDA0BgNVHSUELTArBggr
BgEFBQcDAQYIKwYBBQUHAwIGCWCGSAGG+EIEAQYKKwYBBAGCNwoDAzAfBgNVHSME
GDAWgBROQ8gddu83U3pP8lhvlPM44tW93zBvBggrBgEFBQcBAQRjMGEwJAYIKwYB
BQUHMAGGGGh0dHA6Ly9vY3NwLnZlcmlzaWduLmNvbTA5BggrBgEFBQcwAoYtaHR0
cDovL0VWSW50bC1haWEudmVyaXNpZ24uY29tL0VWSW50bDIwMDYuY2VyMA0GCSqG
SIb3DQEBBQUAA4IBAQCjYHsvllquhG2WsE81r+DTpEbiKGOMdf90Cso1uvNA/PT1
hfsewWplng0BdTk+mr2glFQ7MOWxGICp9TSrTwu+IhtgsWqdTAFgtKbe+7sCUAGI
gO3lDGj8h3NvNvpao59woFEGePBzY99XMX/rTiujZ+trajqUY+GfyAz4sBbr2j/w
7Rp9pt88tL7iOj1UhkmSlKy+eazhjnXsZuu4t/3Qyi12APXCzO91R2LV9N4K7aZi
+I3yJFjTCmTg1i9jobsYS4lsq/15mQYJRo+y7f1R2U/RWp+JIt3EoK9XMRDAtjEa
YY0KqMuDJ5mDI4VrvbshTLUHk/+MOceiU85+rcL9
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4LUTxleOfufrnxeIt1gi
YsvUmloNSzWhaCIED7HaurqVHPfywqKbA5Z7IQIgxfMgPbhgwYNFcKsGijZhG+EG
hBiHCKCqB0IWzyDNkux0Eszhbh/TuxHhYrM5JcDcSxj1Rvlc9BXdjOHhh0faNP6K
aNGlrwaI7VpNDfkvI7dIAN60vpZ29aZD0UmNmQZ7WIvQC2l3Q9+EsBuRs+0uPFfE
OsGC8lQ+BgeUmv/7pI1KJIDyFN0XWLegkJ0gO6HL99WwgXNfKMmmKGKSW7sFtO2s
bCA3/jLT28LB6Kt2Dyl+IFyPertHLu2eNMuc8OsRY88ORKySTpBD6vwCHPtyx87b
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 125920804347637503283201093406286073508
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)06'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 Extended Validation SSL SGC CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-09-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Köln'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 72131'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Koeln'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Der Gruene Punkt - Duales System Deutschland GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'edv'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Terms of use at www.verisign.com/rpa (c)05'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'portal.gruener-punkt.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28366672829987402948482124858062446982923628418495748542867126478292607092408120885995054350950587474001736934104460196539617405851788020304469963077342704821295429728317497557705241018846780405432313421466515174731468816097892490998095973869696231654338762959556788325873633895160208751009413283918062381385669216738911421505964467381055945333793865267997179796057646077184729272234854039435423542279669685452931779217190402734235300023111162694039959325773165546476679281072495558646816356205927469565547116200967224488882976685018103637475652348763557715869874348880825176272419913691673245455384014731923690544029
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.gruener-punkt.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.23.6 (VeriSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://EVIntl-crl.verisign.com/EVIntl2006.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.4.1 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.3 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4e43c81d76ef37537a4ff2586f94f338e2d5bddf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://EVIntl-aia.verisign.com/EVIntl2006.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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