bsbip1-admin.lbl.gov

- Lawrence Berkeley National Laboratory -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number dd:a5:a5:4d:0c:6b:0e:aa:00:00:00:00:50:e9:9a:a5 was issued on by Entrust, Inc..

With 79 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Lawrence Berkeley National Laboratory

Organization: Lawrence Berkeley National Laboratory
State / Province: California
Locality: Berkeley
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): dd:a5:a5:4d:0c:6b:0e:aa:00:00:00:00:50:e9:9a:a5
Serial Number (int): 294619468752121015024054997069029022373
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 6d:18:6b:ca:45:65:18:4e:70:27:70:63:24:43:ff:26:ef:36:d1:a8
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): eb:25:66:00:34:bc:56:ea:12:db:79:fd:ac:20:ec:b7:08:38:7a:f4
Fingerprint (sha256): 00:8f:e4:21:32:84:e6:79:6a:37:f2:b4:44:df:48:90:d8:d5:07:c1:97:2f:72:4f:2d:e5:07:9d:3a:cc:cd:51

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate bsbip1-admin.lbl.gov

79

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bsbip1-admin.lbl.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bsbip1-admin.lbl.gov
affiliate.lbl.gov
alfcms.lbl.gov
accidentreport.lbl.gov
alsreader.lbl.gov
alstraining.lbl.gov
apscanprd.lbl.gov
alsprocedures.lbl.gov
archibus.lbl.gov
amendmentipa.lbl.gov
blt.lbl.gov
cats.lbl.gov
chess.lbl.gov
baltic.lbl.gov
chess.qa.lbl.gov
cms.lbl.gov
cog.lbl.gov
coursebuilder.lbl.gov
ds.lbl.gov
ebuy.lbl.gov
cogweb.lbl.gov
coral.lbl.gov
ergoeval.lbl.gov
events.lbl.gov
ewrpprocedures.lbl.gov
facdrawings.lbl.gov
ehstelemetry.lbl.gov
fms88.lbl.gov
fms88prd.psft8.lbl.gov
fmsprd.psft.lbl.gov
foundry-admin.lbl.gov
foundry-proposals.lbl.gov
foundry-instruments.lbl.gov
hms.lbl.gov
harc.lbl.gov
hris.lbl.gov
hrgsra.lbl.gov
hrsrv.hrpsft.lbl.gov
keyservices.lbl.gov
labsanalysis.lbl.gov
lblwebservice.lbl.gov
ldrd.lbl.gov
lets.lbl.gov
lpr.lbl.gov
lessonslearned.lbl.gov
radar.lbl.gov
sjha.lbl.gov
skillsoft.lbl.gov
snowplow.lbl.gov
tad.lbl.gov
trainingcredit.lbl.gov
upk.lbl.gov
trex.lbl.gov
trex.trvl.lbl.gov
ventdata.lbl.gov
visitorpass.lbl.gov
wastereq.lbl.gov
worelease.lbl.gov
wpc-am.lbl.gov
workrequest.lbl.gov
rems.lbl.gov
alsscheduler.lbl.gov
fmssrv72.qa.lbl.gov
ams.prd.lbl.gov
ams.lbl.gov
letsmobile.lbl.gov
irbprd.lbl.gov
fmsprd.lbl.gov
als-esaf.lbl.gov
hr9prd.hr9psft.lbl.gov
pses-app.lbl.gov
etl-app01.lbl.gov
auditax.lbl.gov
cogweb2.lbl.gov
grantprd.lbl.gov
hra.lbl.gov
pses.lbl.gov
maximo.fac.dev.lbl.gov
maximo.als.dev.lbl.gov

Other certificates including the domain name lbl.gov

(limited to 100 certificates)
sni.cloudflaressl.com
watershed.lbl.gov
5692462144159744-fe3.pantheonsite.io
nanowiki.lbl.gov
sciencesearch-ncem.lbl.gov
bcp.lbl.gov
sni.cloudflaressl.com
iprequest.lbl.gov
carpepm.almonds.com
sni.cloudflaressl.com
5648554290839552-fe1.pantheonsite.io
cuwip.physics.berkeley.edu
ess-dive.lbl.gov
slidecam-camera.lbl.gov
peabody.lbl.gov
pjfischer.lbl.gov
eesatough.lbl.gov
5769720821186560-fe3.pantheonsite.io
5756433131896832-fe1.pantheonsite.io
5631943370604544-fe1.pantheonsite.io
5757334940811264-fe4.pantheonsite.io
bsbip1-admin.lbl.gov
sni.cloudflaressl.com
5709068098338816-fe3.pantheonsite.io
5643365030821888-fe1.pantheonsite.io
ergoeval.lbl.gov
sni.cloudflaressl.com
ssl937631.cloudflaressl.com
qmm.lbl.gov
babe.lbl.gov
5756433131896832-fe1.pantheonsite.io
flexlab.lbl.gov
calendar.sdzsafaripark.org
conferences.lbl.gov
ee.lbl.gov
sni.cloudflaressl.com
foundry2.lbl.gov
sxworkshop.lbl.gov
5652720409116672-fe3.pantheonsite.io
postdocresources.lbl.gov
5768939674009600-fe3.pantheonsite.io
5650082896543744-fe3.pantheonsite.io
matgen8.lbl.gov
ssl937633.cloudflaressl.com
sni.cloudflaressl.com
www.3scale.net
sni.cloudflaressl.com
sni.cloudflaressl.com
5709068098338816-fe3.pantheonsite.io
5721489412194304-fe1.pantheonsite.io
sni.cloudflaressl.com
dnscontacts.lbl.gov
5650082896543744-fe3.pantheonsite.io
sni.cloudflaressl.com
cdn-test.battlefields.org
5695414665740288-fe2.pantheonsite.io
p3hpc2018.lbl.gov
5768939674009600-fe3.pantheonsite.io
phywebb.lbl.gov
sni.cloudflaressl.com
nancynano.lbl.gov
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
eapx02.lbl.gov
foundry2.lbl.gov
5656619568332800-fe3.pantheonsite.io
spt.lbl.gov
5656619568332800-fe3.pantheonsite.io
5769720821186560-fe3.pantheonsite.io
5709068098338816-fe3.pantheonsite.io
cascade.lbl.gov
waterenergy.lbl.gov
ecep.lbl.gov
callxpresswpm.lbl.gov
bl831.als.lbl.gov
5650082896543744-fe3.pantheonsite.io
chns120.courseresource.yale.edu
shirley.lbl.gov
www.3scale.net
sni.cloudflaressl.com
flexo.lbl.gov
5721489412194304-fe1.pantheonsite.io
energystorage.lbl.gov
www.3scale.net
friendsofberkeleylab.lbl.gov
ultrafast.lbl.gov
5643365030821888-fe1.pantheonsite.io
cuwip.physics.berkeley.edu
www.3scale.net
5649391675244544-fe2.pantheonsite.io
www-afrd.lbl.gov
5692462144159744-fe3.pantheonsite.io
ssl744665.cloudflaressl.com
onthemove.lbl.gov
5757334940811264-fe4.pantheonsite.io
5652720409116672-fe3.pantheonsite.io
sharp.lbl.gov
5692462144159744-fe3.pantheonsite.io

Certificate

The complete raw certificate details for bsbip1-admin.lbl.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtabWbaAHihsnnwEbkuc
2XYfNnHb9wpXFAPMQV3K3YfiL0hY0KPLzhTgYmzkcjmWuPp04yYCD3Xh8vXOf9Vd
B+88t/4DcFdnR2aFYGFYQGEbKsWNq5zzxTwaoXbIHTjZ1yatNelEEjOVbL2/IGX/
7RzPQ3VLvyn+1XzlbS4Jn9lNKGpTPq+WC/5XDlojYSblgspOMyP1wMxcLdEvz0pY
nB4gMeevLGTNJlpcB03sTQiW6wRFJi3OI/8YO6JfUGXIjMc5TcvyNzgeOowV7D80
+PzdWC/6iaqwfbZVd0VPca9NweRJ+AYJoVZYPdhcScHw/msdOzUyTkNikwSICDTC
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294619468752121015024054997069029022373
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-01 16:09:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 16:39:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berkeley'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lawrence Berkeley National Laboratory'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bsbip1-admin.lbl.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24596057739276065486700182003116298023914459513336466538821240398212931445326667312220377696017596535137132191161729539364222012963265931973637509243200085339104865283064700397063407740621745937278600661750438411133950939482860617026469512367452496159976950309866660465127907565602052756146429366631575007803483392476582316021722339836138851908662627030569643725572291757997152445166143420235869996683877895322632420970457406953193683301214279188090931812234619451070252939341400936924959780232241731160026018973909708027472861808718237715980062546920051506105112397518429521953166137731184576327189106829195425923691
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1446 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsbip1-admin.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affiliate.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alfcms.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accidentreport.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alsreader.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alstraining.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apscanprd.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alsprocedures.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archibus.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amendmentipa.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blt.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cats.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chess.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baltic.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chess.qa.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cog.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coursebuilder.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ds.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebuy.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogweb.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coral.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ergoeval.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ewrpprocedures.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facdrawings.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ehstelemetry.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fms88.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fms88prd.psft8.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmsprd.psft.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundry-admin.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundry-proposals.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundry-instruments.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hms.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harc.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hris.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrgsra.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrsrv.hrpsft.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keyservices.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labsanalysis.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lblwebservice.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ldrd.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lets.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lpr.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lessonslearned.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radar.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjha.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skillsoft.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snowplow.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tad.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trainingcredit.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upk.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trex.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trex.trvl.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ventdata.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitorpass.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wastereq.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worelease.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpc-am.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workrequest.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rems.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alsscheduler.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmssrv72.qa.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ams.prd.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ams.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'letsmobile.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irbprd.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmsprd.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'als-esaf.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hr9prd.hr9psft.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pses-app.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etl-app01.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auditax.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cogweb2.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grantprd.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hra.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pses.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maximo.fac.dev.lbl.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maximo.als.dev.lbl.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6d186bca4565184e702770632443ff26ef36d1a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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