search.yves-rocher.de

- LABORATOIRES DE BIOLOGIE VEGETALE YVES ROCHER -

Issued by

About this certificate

This digital certificate with serial number 10:54:f5:7c:b9:90:1e:99:db:ef:96:eb:cf:04:81:4a was issued on by VeriSign Trust Network.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • CAs must include keyIdentifer field of AKI in all non-self-issued certificates (RFC 5280: 4.2.1.1)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

LABORATOIRES DE BIOLOGIE VEGETALE YVES ROCHER

Organization: LABORATOIRES DE BIOLOGIE VEGETALE YVES ROCHER
Organization unit: Morbihan
Organization unit: Terms of use at www.verisign.com/rpa (c)05
State / Province: Morbihan
Locality: La Gacilly
Country: FR

VeriSign Trust Network

Organization: VeriSign Trust Network
Organization unit: VeriSign, Inc.
Organization unit: VeriSign International Server CA - Class 3
Organization unit: www.verisign.com/CPS Incorp.by Ref. LIABILITY LTD.(c)97 VeriSign

This certificate has expire since

Certificate Details

Serial Number (hex): 10:54:f5:7c:b9:90:1e:99:db:ef:96:eb:cf:04:81:4a
Serial Number (int): 21708779940749582559456928567589634378
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId:

Fingerprint (sha1): 1a:73:43:1e:3e:d8:59:21:48:ab:33:58:78:d7:02:c2:ed:9e:ca:ec
Fingerprint (sha256): e0:8d:eb:44:9a:63:d8:3e:8a:1c:30:b4:d7:d5:6b:8c:5c:46:61:66:6c:52:2c:31:d3:71:4f:a6:2d:dd:a5:39

Issuing Certificate URL: http://SVRIntl-aia.verisign.com/SVRIntl-aia.cer

Revocation information

OCSP Server: http://ocsp.verisign.com
CRL Distribution Point: http://SVRIntl-crl.verisign.com/SVRIntl.crl

Check the revocation status for certificate search.yves-rocher.de

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for search.yves-rocher.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication
Netscape Server-Gated Cryptography

Extensions

7 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name yves-rocher.de

(limited to 100 certificates)
www.yves-rocher.fr
www.yves-rocher.fr
www.yves-rocher.fr
survey.yves-rocher.fr
san-16-s50.tlsprovisioning.exacttarget.com
t-www.yves-rocher.at
prod.yves-rocher.de
search.yves-rocher.at
www.yves-rocher.fr
www.yves-rocher.fr
san-16-s50.tlsprovisioning.exacttarget.com
survey.yves-rocher.fr
www.yves-rocher.de
survey.yves-rocher.fr
survey.yves-rocher.fr
www.yves-rocher.fr
news.yves-rocher.de
t-www.yves-rocher.at
san-16-s50.tlsprovisioning.exacttarget.com
t.nl.yves-rocher.de
search.yves-rocher.de
t-www.yves-rocher.at
survey.yves-rocher.fr
san-16-s50.tlsprovisioning.exacttarget.com
search.yves-rocher.at
versand.yves-rocher.de
san-16-s50.tlsprovisioning.exacttarget.com
t.nl.yves-rocher.de
san-16-s50.tlsprovisioning.exacttarget.com
secureorder.yves-rocher.de
www.yves-rocher.fr
t.nl.yves-rocher.de
www.yves-rocher.fr
survey.yves-rocher.fr
secureorder.m.yves-rocher.fr
survey.yves-rocher.fr
search.yves-rocher.at
news.yves-rocher.de
secureorder.m.yvesrocher.com.tr
secureorder.m.yves-rocher.fr
secureorder.yves-rocher.de
secureorder.yves-rocher.de
www.yves-rocher.fr
www.yves-rocher.fr
www.yves-rocher.fr
san-16-s50.tlsprovisioning.exacttarget.com
www.yves-rocher.de
www.yves-rocher.fr
www.yves-rocher.fr
t.nl.yves-rocher.de
www.yves-rocher.de
nocdn-w.yves-rocher.fr
secureorder.yves-rocher.de
secureorder.yves-rocher.de
search.yves-rocher.at
san-16-s50.tlsprovisioning.exacttarget.com
secureorder.yves-rocher.de
news.yves-rocher.de
news.yves-rocher.de
www.yves-rocher.fr
versand.yves-rocher.de
secureorder.yves-rocher.de
www.yves-rocher.fr
san-16-s50.tlsprovisioning.exacttarget.com
search.yves-rocher.de
secureorder.yves-rocher.de
survey.yves-rocher.fr
news.yves-rocher.de
secureorder.yves-rocher.de
www.yves-rocher.fr
survey.yves-rocher.fr
prod.yves-rocher.de
san-16-s50.tlsprovisioning.exacttarget.com
search.yves-rocher.de
www.yves-rocher.fr
prod.yves-rocher.de
search.yves-rocher.at
www.yves-rocher.fr
san-16-s50.tlsprovisioning.exacttarget.com
www.yves-rocher.fr
san-16-s50.tlsprovisioning.exacttarget.com
certforssl247apiA.yves-rocher.de
secureorder.m.yvesrocher.com.tr
versand.yves-rocher.de
secureorder.yves-rocher.de
t.nl.yves-rocher.de
www.yves-rocher.fr
survey.yves-rocher.fr

Certificate

The complete raw certificate details for search.yves-rocher.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8LESm1HRPaRIjXl2pTx
pB5/nxMQhJUQQ/QbzFCszaeZ52B4LaU2I3sMYBGWLUogMIlB3dnPECm3NNxKNrVa
7VNKnxEJn3KPHg3uYjLb8FFRZa2r4na2Aj8kYW2kLrCCWi/1P26qZABlBs7j0KZW
Bt3as0/LiaOXsnsYp0K33EG63dGSPQ/+H9+jXTZ0nsX7SW5WMBPXaVf4RtGDRAcB
erKGcLSH4qVKPYpCpeVK6NBrq34Xz340L2VGfkJ4H5EMC7+e2PSFtltapNun0g7r
2kRhm2BcF3UNx+uRoyB3DE7SBzuafJKh3AFopaK1zBtOYMsGailGM808lIusItmE
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21708779940749582559456928567589634378
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign International Server CA - Class 3'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.verisign.com/CPS Incorp.by Ref. LIABILITY LTD.(c)97 VeriSign'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2010-10-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-11-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Morbihan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'La Gacilly'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'LABORATOIRES DE BIOLOGIE VEGETALE YVES ROCHER'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Morbihan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Terms of use at www.verisign.com/rpa (c)05'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'search.yves-rocher.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23197652878046304329083293766487441579186340709537258132074898380451701279401424668863794995068550279674826541790407678621990826289466419473724951992132745860513209536358087621868237842489277996587615866042187511700522810785253779148969861014473262453515010061082167948720498410656567556029161915729180881001982914228132509748870819799713723409362503789796845072909381030600623327350274681542843188336884501799845309629812163262199004545666718413133220638105870090602339472096904887132897378866958085620689485701073379893142256063247747620526198929028501284925844617950845721055462093376209828171528846598222435156999
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.23.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRIntl-crl.verisign.com/SVRIntl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.4.1 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRIntl-aia.verisign.com/SVRIntl-aia.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/gif'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															4b6bb92896060cbbd052389b29ac4b078b210518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://logo.verisign.com/vslogo1.gif'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (1024 bits)
		0083a0368057d9d1dfc5afcbdf0539ed468b858d9d74c3733debb9b2cec01be744583c729224c2633f6dd15f8b1b5c5248652d70bb8da95eeeb160311b3038502fe4eff249e1b90f2f511ca1ed700471102f5013007cb06ed377c04079935d472c10a82c44accaa4951d2afa90f77041dfe914dedfae8b7ab8b8de382fa935b833