loans.bssbank.com

- Metavante Corporation -

Issued by VeriSign Class 3 Secure Server CA - G3

About this certificate

This digital certificate with serial number 5d:0f:dd:dd:a6:d5:5b:18:08:0f:e7:d6:a8:1f:c7:ce was issued on by VeriSign, Inc..

With 35 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Metavante Corporation

Organization: Metavante Corporation
Organization unit: Corporate Account - 38
State / Province: Wisconsin
Locality: Brown Deer
Country: US

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5d:0f:dd:dd:a6:d5:5b:18:08:0f:e7:d6:a8:1f:c7:ce
Serial Number (int): 123700588034453964274638248682111092686
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 0d:44:5c:16:53:44:c1:82:7e:1d:20:ab:25:f4:01:63:d8:be:79:a5

Fingerprint (sha1): 2b:25:cd:71:e3:11:8c:17:f9:88:26:29:19:eb:39:db:c1:9a:a2:84
Fingerprint (sha256): c1:5d:e5:fd:7d:cd:f6:d0:77:35:d9:36:93:73:8d:ca:dd:aa:13:06:a0:02:3b:0f:eb:6b:46:70:b7:38:d9:1f

Issuing Certificate URL: http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer

Revocation information

OCSP Server: http://ocsp.verisign.com
CRL Distribution Point: http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl

Check the revocation status for certificate loans.bssbank.com

35

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for loans.bssbank.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

loans.wsbonline.com
loans.firstscotia.com
loans.centralstatecu.org
loans.genisyscu.org
loans.wtnb.com
loans.myfirstfarmers.com
loans.classicbank.com
loans.guadalupenational.com
loans.bssbank.com
loans.mycgb.com
loans.myfinancialresources.org
loans.MWABank.com
loans.bmtc.com
loans.fiscal.org
loans.websterfirst.com
loans.starone.org
loans.tlccu.org
loans.lfcu.org
loans.fnblagrange.com
loans.avidiabank.com
loans.fortbraggfcu.org
loans.firstmidwest.com
loans.ameriana.com
loans.thepartnershipfcu.com
loans.busey.com
loans.mafcu.org
loans.educationcu.com
loans.gatecitybank.com
loans.familyfirstny.com
loans.centralcitycu.com
loans.mainstreetcu.org
loanstest.pyramaxbank.com
loans.pyramaxbank.com
loans.olyfed.com
loans.choicefinancialgroup.com

Other certificates including the domain name bssbank.com

(limited to 100 certificates)
bssbank.com
loans.bssbank.com
loans.bssbank.com
bssbank.com
promo.bssbank.com
loans.bssbank.com
bssbank.com
promo.bssbank.com
loans.bssbank.com
loans.bssbank.com
loans.bssbank.com
secure.bssbank.com
promo.bssbank.com
loans.bssbank.com
loans.bssbank.com
loans.bssbank.com
loans.bssbank.com
bssbank.com
loans.bssbank.com
loans.bssbank.com
loans.bssbank.com
www.bssbank.com
loans.bssbank.com
www.bssbank.com
loans.bssbank.com
loans.bssbank.com
loans.bssbank.com
bssbank.com

Certificate

The complete raw certificate details for loans.bssbank.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIVTCCBz2gAwIBAgIQXQ/d3abVWxgID+fWqB/HzjANBgkqhkiG9w0BAQUFADCB
tTELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQL
ExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1c2Ug
YXQgaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYSAoYykxMDEvMC0GA1UEAxMm
VmVyaVNpZ24gQ2xhc3MgMyBTZWN1cmUgU2VydmVyIENBIC0gRzMwHhcNMTMxMDI3
MDAwMDAwWhcNMTQxMDI4MjM1OTU5WjCBkzELMAkGA1UEBhMCVVMxEjAQBgNVBAgT
CVdpc2NvbnNpbjETMBEGA1UEBxQKQnJvd24gRGVlcjEeMBwGA1UEChQVTWV0YXZh
bnRlIENvcnBvcmF0aW9uMR8wHQYDVQQLFBZDb3Jwb3JhdGUgQWNjb3VudCAtIDM4
MRowGAYDVQQDFBFsb2Fucy5ic3NiYW5rLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMxjQl6QNV8jU/pL34qT+0SEyDKS1nGibQb0mSik8iu6HWUT
S2Okuz+HyO5ynJoS5p7zxUVZfhjtD5VpRA9Dud+iojyvbH2zKP2VbWVODNAdmJrC
iZ/p242aTNkuWqZaPEqPXA7UlgEpBQyOhA5jKWLmAvI6JBV7ACYG95fjkNa9qorD
f9kuyRdR6aLoWwE9goA8PxUTakwVeluVRKizmVLW3LFTmoICrtnXzS3+u4OfmD05
1xqXVPSMN5rj17/1Fm4Q8dm4LBu1W0IQBB6Ra1i5aQs8wcTdWgf/EfXVxuRrN5ZD
SYbz3R6LiOqfKPJpy5uRwxqaybDZcMWBcMsYZIMCAwEAAaOCBH8wggR7MIIDGAYD
VR0RBIIDDzCCAwuCE2xvYW5zLndzYm9ubGluZS5jb22CFWxvYW5zLmZpcnN0c2Nv
dGlhLmNvbYIYbG9hbnMuY2VudHJhbHN0YXRlY3Uub3JnghNsb2Fucy5nZW5pc3lz
Y3Uub3Jngg5sb2Fucy53dG5iLmNvbYIYbG9hbnMubXlmaXJzdGZhcm1lcnMuY29t
ghVsb2Fucy5jbGFzc2ljYmFuay5jb22CG2xvYW5zLmd1YWRhbHVwZW5hdGlvbmFs
LmNvbYIRbG9hbnMuYnNzYmFuay5jb22CD2xvYW5zLm15Y2diLmNvbYIebG9hbnMu
bXlmaW5hbmNpYWxyZXNvdXJjZXMub3JnghFsb2Fucy5NV0FCYW5rLmNvbYIObG9h
bnMuYm10Yy5jb22CEGxvYW5zLmZpc2NhbC5vcmeCFmxvYW5zLndlYnN0ZXJmaXJz
dC5jb22CEWxvYW5zLnN0YXJvbmUub3Jngg9sb2Fucy50bGNjdS5vcmeCDmxvYW5z
LmxmY3Uub3JnghVsb2Fucy5mbmJsYWdyYW5nZS5jb22CFGxvYW5zLmF2aWRpYWJh
bmsuY29tghZsb2Fucy5mb3J0YnJhZ2dmY3Uub3JnghZsb2Fucy5maXJzdG1pZHdl
c3QuY29tghJsb2Fucy5hbWVyaWFuYS5jb22CG2xvYW5zLnRoZXBhcnRuZXJzaGlw
ZmN1LmNvbYIPbG9hbnMuYnVzZXkuY29tgg9sb2Fucy5tYWZjdS5vcmeCFWxvYW5z
LmVkdWNhdGlvbmN1LmNvbYIWbG9hbnMuZ2F0ZWNpdHliYW5rLmNvbYIXbG9hbnMu
ZmFtaWx5Zmlyc3RueS5jb22CF2xvYW5zLmNlbnRyYWxjaXR5Y3UuY29tghZsb2Fu
cy5tYWluc3RyZWV0Y3Uub3Jnghlsb2Fuc3Rlc3QucHlyYW1heGJhbmsuY29tghVs
b2Fucy5weXJhbWF4YmFuay5jb22CEGxvYW5zLm9seWZlZC5jb22CHmxvYW5zLmNo
b2ljZWZpbmFuY2lhbGdyb3VwLmNvbTAJBgNVHRMEAjAAMA4GA1UdDwEB/wQEAwIF
oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwQwYDVR0gBDwwOjA4Bgpg
hkgBhvhFAQc2MCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LnZlcmlzaWduLmNv
bS9jcHMwHwYDVR0jBBgwFoAUDURcFlNEwYJ+HSCrJfQBY9i+eaUwRQYDVR0fBD4w
PDA6oDigNoY0aHR0cDovL1NWUlNlY3VyZS1HMy1jcmwudmVyaXNpZ24uY29tL1NW
UlNlY3VyZUczLmNybDB2BggrBgEFBQcBAQRqMGgwJAYIKwYBBQUHMAGGGGh0dHA6
Ly9vY3NwLnZlcmlzaWduLmNvbTBABggrBgEFBQcwAoY0aHR0cDovL1NWUlNlY3Vy
ZS1HMy1haWEudmVyaXNpZ24uY29tL1NWUlNlY3VyZUczLmNlcjANBgkqhkiG9w0B
AQUFAAOCAQEAOSTeaQfKKIIlN/qwvI2MhRcfER4MQoM14+QfEBgelKDUrZl4X3Al
IfJEpOr1AmQ7cU9Gaxs01ml68vb3oUdEuijZZ3HE73ak8PlM8WduVbSXUJdVimdI
jJiiRmIOX8POmCPF+vD/1Qts00nTx/SH/GwyNXRpZ20Ts4erFgDKO5vRK5SVy07a
jSaOfc6I1rQFFempTXTRPpldVdgriOClFmen82NqUqcb/9FkDfkK/EIFvBRDiaYf
FOOvYo/XiEI8xR4NpNOM2Li7tb6YwIpqAXph2DjMdhgId4aP105m80Qs13/IxDdB
eTGpal0vemNgdPULuSt5OqHFL+cD0jg7HQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGNCXpA1XyNT+kvfipP7
RITIMpLWcaJtBvSZKKTyK7odZRNLY6S7P4fI7nKcmhLmnvPFRVl+GO0PlWlED0O5
36KiPK9sfbMo/ZVtZU4M0B2YmsKJn+nbjZpM2S5aplo8So9cDtSWASkFDI6EDmMp
YuYC8jokFXsAJgb3l+OQ1r2qisN/2S7JF1HpouhbAT2CgDw/FRNqTBV6W5VEqLOZ
UtbcsVOaggKu2dfNLf67g5+YPTnXGpdU9Iw3muPXv/UWbhDx2bgsG7VbQhAEHpFr
WLlpCzzBxN1aB/8R9dXG5Gs3lkNJhvPdHouI6p8o8mnLm5HDGprJsNlwxYFwyxhk
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 123700588034453964274638248682111092686
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)10'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 Secure Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-10-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wisconsin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Brown Deer'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Metavante Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Corporate Account - 38'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'loans.bssbank.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25801560776187772775167609826909191906981299250901732365570362020746468326069668103873132404898679492977726468015470496140542168860770444683296587613791846415034761429360089037424775205957171197305705438263308839852297601214110056974270457470666739108035955293118369984405137786817272177062983095312244283118373073014381496622704103655342967713371036674174368448586620803639958539803514671490862405181826541429153758978329704722128225863672417142034909597083677385131274428033679633741646288907046767769395892783220041752099158295466139392546409691992176647876037704271098184192303405158181933189656320423583525921923
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (783 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loans.wsbonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loans.firstscotia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loans.centralstatecu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loans.genisyscu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loans.wtnb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loans.myfirstfarmers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loans.classicbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loans.guadalupenational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loans.bssbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loans.mycgb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loans.myfinancialresources.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loans.MWABank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loans.bmtc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loans.fiscal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loans.websterfirst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loans.starone.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loans.tlccu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loans.lfcu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loans.fnblagrange.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loans.avidiabank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loans.fortbraggfcu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loans.firstmidwest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loans.ameriana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loans.thepartnershipfcu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loans.busey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loans.mafcu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loans.educationcu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loans.gatecitybank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loans.familyfirstny.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loans.centralcitycu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loans.mainstreetcu.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loanstest.pyramaxbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loans.pyramaxbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loans.olyfed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loans.choicefinancialgroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d445c165344c1827e1d20ab25f40163d8be79a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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