finapp.allmyaccounts.test2.bankofamerica.com

- Bank of America Corporation -

Issued by Entrust Certification Authority - L1M

About this certificate

This digital certificate with serial number 6e:82:56:3a:44:3d:22:f4:00:00:00:00:54:d0:b6:3b was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bank of America Corporation

Company registration number: 2927442
Organization: Bank of America Corporation
State / Province: Illinois
Locality: Chicago
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 6e:82:56:3a:44:3d:22:f4:00:00:00:00:54:d0:b6:3b
Serial Number (int): 146891827031528503686429709650229245499
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 00:d4:ca:71:ef:7e:bf:fa:38:c1:dd:32:34:d7:bd:79:41:9b:3f:4e
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): 19:a3:1d:bc:98:f7:fa:1e:0d:da:f0:89:92:a5:09:ca:fd:1b:36:30
Fingerprint (sha256): 00:9b:f0:d9:98:02:e0:93:74:d5:00:0f:af:19:d5:a1:85:a9:be:de:1b:22:37:d7:b3:c0:d4:78:ce:79:31:b7

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for certificate finapp.allmyaccounts.test2.bankofamerica.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for finapp.allmyaccounts.test2.bankofamerica.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

finapp.allmyaccounts.test2.bankofamerica.com

Other certificates including the domain name bankofamerica.com

(limited to 100 certificates)
dcpr-apac.bankofamerica.com
b2bservice-dev4.ecnp.bankofamerica.com
elink-mbi-s.bankofamerica.com
atmhold-tt.bankofamerica.com
abwebpay-mbod.bankofamerica.com
webatm-test-dev1b-pipB.bankofamerica.com
webatm-test-cer1a-pipD.bankofamerica.com
fix-mtls-prod-out-ma-order.bankofamerica.com
CAPTIVESERVICE.BANKOFAMERICA.COM
mqt.qtjrchin.bankofamerica.com
secure.bankofamerica.com
travelcenter2.bankofamerica.com
directsso.bankofamerica.com
gpx-discover-diners-pulse-lle-clientcert.ecnp.bankofamerica.com
testingNotifications-CertAdminPlzApprove.bankofamerica.com
origin-bac-assets-cert.ecnp.bankofamerica.com
sso-prd.bankofamerica.com
eib-vgs-sit1.bankofamerica.com
cpo-accelerate-websvcs-test2.bankofamerica.com
usvarchvp2isa01.bankofamerica.com
ibsshopsafedev6.bankofamerica.com
rxserve-9H.bankofamerica.com
Standard_SSL_Digicert_CASpec.bankofamerica.com
globalcommissionpayments.bankofamerica.com
appb1.paymentsinvoicing.bankofamerica.com
secure-devps.ecnp.bankofamerica.com
mservice-qa5.ecnp.bankofamerica.com
mservice-qaps.ecnp.bankofamerica.com
bl-qip.emea.bankofamerica.com
cldirect.bankofamerica.com
fbrm-pssit.bankofamerica.com
sbbankers.ltngp2dev.bankofamerica.com
wmobile.bankofamerica.com
escrowonline-lt.bankofamerica.com
socialapp-pt1.ecnp.bankofamerica.com
MO8XCHRS002.bankofamerica.com
winsso-stg.sm.bankofamerica.com
oos0i.lbxatl.bankofamerica.com
CRDTCTR-70336-nCinoClientAuth-BFUAT.bankofamerica.com
outlookanywhere.bankofamerica.com
epass-uat.bankofamerica.com
eftx-pt1.ecnp.bankofamerica.com
NDM.9M33.bankofamerica.com
mqt.mub1chin.bankofamerica.com
ssologon-deveast.bankofamerica.com
finapp.allmyaccounts.test2.bankofamerica.com
boardvantage-uat.bankofamerica.com
portalb2b-rch.bankofamerica.com
ftp-vmsdf1.bankofamerica.com
uat-authorprimary-merch.bankofamerica.com
travelcenter.bankofamerica.com
cmbsi-uat1.bankofamerica.com
travelpaymentsystem.bankofamerica.com
winsso-prd.sm.bankofamerica.com
rvdealer-cit.bankofamerica.com
ftp-hbs.bankofamerica.com
safepass-cpo.bankofamerica.com
cictsc3a.9s.bankofamerica.com
secure-preview1.ecnp.bankofamerica.com
corp.bankofamerica.com
origin-bac-assets-dev.ecnp.bankofamerica.com
everest-qa.bankofamerica.com
racf-1R.bankofamerica.com
fbrm.bankofamerica.com
symphony-online-dr-vip.bankofamerica.com
rmbs.bankofamerica.com
WAS.prodeu01.bankofamerica.com
crm.fxqa.ml.com
corp.bankofamerica.com
ecsb.bankofamerica.com
elink-as2h8.bankofamerica.com
portal.bankofamerica.com
bofacapital-certs.bankofamerica.com
mqp.mqwxchin.bankofamerica.com
bofacapital-certs-pp.bankofamerica.com
viewinv-techtest.bankofamerica.com
cicpvx62.1s.bankofamerica.com
remotepc-us.bankofamerica.com
akamai-san10.exacttarget.com
tx8aiucm02403.bankofamerica.com
secure-review1.ecnp.bankofamerica.com
socialapp-devflex.ecnp.bankofamerica.com
mlqua400.bankofamerica.com
support-services.bankofamerica.com
ustxrdncu01aac0001.network.bankofamerica.com
soap-aci1.bankofamerica.com
mqp.qpc1chin.bankofamerica.com
ecds-uat.bankofamerica.com
mservice-dev2.ecnp.bankofamerica.com
ccpsbob.bankofamerica.com
cporms-test.bankofamerica.com
resfcmbs.bankofamerica.com
IMSPW3CA.1S.bankofamerica.com
globalroutingdirectory.bankofamerica.com
aeadmin.bankofamerica.com
fedsso.bankofamerica.com
rest-cert2.ecnp.bankofamerica.com
psgws.bankofamerica.com
cboapp01.bankofamerica.com
eib-hrt-cit2.bankofamerica.com

Certificate

The complete raw certificate details for finapp.allmyaccounts.test2.bankofamerica.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIpsreajAK9hwOhPrK9h
yfvuOnD99Zd9oCvejNjNDT3UYCe+tJuwyqSGgI4jV514IDF3u+e4D2aGTx7sErwu
75wcxosMVNhm2cH5stX/1NjduXS5zO3WZ+T6SqjTUTL4tUXx/0M+lo4PEY4l94PX
M0thykeP+1iLUcyeOZTf1v6ePrwv/oAE24WZUzQbt5VFxXTYXyhkUmsPYPFuTVgR
9rZEKG9aGMvJ5oVsHkZq7gQbjkHTuXXiYYLBgOrSe6QUi5bT8y0+XA0t7WiPeRSU
naZh4YcT7agMXUAWFlB4hd+Hb8AQhyA62ect0ua2J6cMLR0RINFF7PzFrUZIunBh
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 146891827031528503686429709650229245499
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-03 19:11:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-03 19:41:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chicago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bank of America Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2927442'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'finapp.allmyaccounts.test2.bankofamerica.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24306014232568328110553598614971825190146328950288087078283817344498741768406151347656319257516852506065975665747969687329768460434601986250147444868852952950488016085190743572446247791631937409735651063145669367454156237699631867800497535854204381917955140669541230229786274911474740465580765595431814510984510700409748319097171478705878764578264895988414307917789131500471250980333251434693161812386724679080694363292581224236669733940397363885215778226540909530767279871763688644831999612000099667547485752368285214787197483887529248930322717054591135753306942378030825459036082892168805736034981484637419446755599
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finapp.allmyaccounts.test2.bankofamerica.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							00d4ca71ef7ebffa38c1dd3234d7bd79419b3f4e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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