vendorvalidations.expeditors.com
- Expeditors International of Washington, Inc. -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number 20:67:35:bb:79:c6:34:05:00:00:00:00:50:ea:5b:59 was issued on by Entrust, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Expeditors International of Washington, Inc.
Organization:
Expeditors International of Washington, Inc.
State / Province:
Washington
Locality: Seattle
Country: US
Locality: Seattle
Country: US
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 20:67:35:bb:79:c6:34:05:00:00:00:00:50:ea:5b:59Serial Number (int): 43071192262609078040581345731664304985
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId: d5:09:92:29:64:a0:b4:cf:66:a4:84:c5:0a:84:39:24:85:b9:4c:49
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): 02:6d:ff:04:c6:30:d7:c0:9f:ad:9d:2e:07:a3:16:c2:cd:95:d5:8a
Fingerprint (sha256): 00:ba:f2:ae:98:e4:65:3b:3c:a5:3f:a8:03:67:22:ed:84:17:a1:0a:7e:eb:e0:b6:66:93:21:df:b6:1b:22:de
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate vendorvalidations.expeditors.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for vendorvalidations.expeditors.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
vendorvalidations.expeditors.com
www.vendorvalidations.expeditors.com
www.vendorvalidations.expeditors.com
Other certificates including the domain name expeditors.com
(limited to 100 certificates)
accesss4bc.expeditors.com
beta-booking.expeditors.com
mobility-sentry3.expeditors.com
login.expeditors.com
vendorvalidations.expeditors.com
access01.expeditors.com
*.expeditors.com
omb.expeditors.com
login.expeditors.com
idp.expeditors.com
*.expeditors.com
atsprojectcargo.expeditors.com
m.expeditors.com
wifi.expeditors.com
reports.expeditors.com
gitlab.expeditors.com
data.b2bt.expeditors.com
login.expeditors.com
analytics.expeditors.com
limited.global.expeditors.com
www.expeditors.com
info.expeditors.com
m.expeditors.com
cdm.expeditors.com
portal.expeditors.com
investor.expeditors.com
Trace.Expeditors.com
web.expeditors.com
agent.expeditors.com
httpsadapter-test.expeditors.com
analytics.expeditors.com
secure0058.hubspot.com
api.expeditors.com
analytics.expeditors.com
reports.expeditors.com
atsprojectcargo.expeditors.com
limited.global.expeditors.com
*.b2bt.expeditors.com
ecsat.expeditors.com
ecco.expeditors.com
dmapp.expeditors.com
go2expo.expeditors.com
chq-s4bpool1.expeditors.com
go2expo.expeditors.com
frm.expeditors.com
msf-elp.expeditors.com
chq-s4bpool1.expeditors.com
relay.expeditors.com
atsprojectcargo.expeditors.com
api.expeditors.com
agent.expeditors.com
client-auth.b2bp.expeditors.com
ras-global.expeditors.com
booking.expeditors.com
caralloc-demo.expeditors.com
ecco.expeditors.com
webtalk.expeditors.com
relay.expeditors.com
secure0058.hubspot.com
boardportal.expeditors.com
frm.expeditors.com
secure0058.hubspot.com
vr.expeditors.com
caralloc-demo.expeditors.com
webtalk.expeditors.com
mobility-tools.expeditors.com
login.expeditors.com
secure0058.hubspot.com
go.expeditors.com
secure0058.hubspot.com
info.expeditors.com
help.expeditors.com
*.expeditors.com
customzone.expeditors.com
secure0058.hubspot.com
go.expeditors.com
cdm.expeditors.com
go.expeditors.com
test01.expeditors.com
go.expeditors.com
trace.expeditors.com
m.expeditors.com
webmail-lhr.expeditors.com
reports.expeditors.com
go2expo-preview.expeditors.com
secureserviceapi.expeditors.com
m.expeditors.com
omb2.expeditors.com
demo-booking.expeditors.com
trace.expeditors.com
*.expeditors.com
booking.expeditors.com
login.expeditors.com
trace.expeditors.com
frm.expeditors.com
go2expo-preview.expeditors.com
idp.expeditors.com
reporting.expeditors.com
msf-elp.expeditors.com
*.expeditors.com
beta-booking.expeditors.com
mobility-sentry3.expeditors.com
login.expeditors.com
vendorvalidations.expeditors.com
access01.expeditors.com
*.expeditors.com
omb.expeditors.com
login.expeditors.com
idp.expeditors.com
*.expeditors.com
atsprojectcargo.expeditors.com
m.expeditors.com
wifi.expeditors.com
reports.expeditors.com
gitlab.expeditors.com
data.b2bt.expeditors.com
login.expeditors.com
analytics.expeditors.com
limited.global.expeditors.com
www.expeditors.com
info.expeditors.com
m.expeditors.com
cdm.expeditors.com
portal.expeditors.com
investor.expeditors.com
Trace.Expeditors.com
web.expeditors.com
agent.expeditors.com
httpsadapter-test.expeditors.com
analytics.expeditors.com
secure0058.hubspot.com
api.expeditors.com
analytics.expeditors.com
reports.expeditors.com
atsprojectcargo.expeditors.com
limited.global.expeditors.com
*.b2bt.expeditors.com
ecsat.expeditors.com
ecco.expeditors.com
dmapp.expeditors.com
go2expo.expeditors.com
chq-s4bpool1.expeditors.com
go2expo.expeditors.com
frm.expeditors.com
msf-elp.expeditors.com
chq-s4bpool1.expeditors.com
relay.expeditors.com
atsprojectcargo.expeditors.com
api.expeditors.com
agent.expeditors.com
client-auth.b2bp.expeditors.com
ras-global.expeditors.com
booking.expeditors.com
caralloc-demo.expeditors.com
ecco.expeditors.com
webtalk.expeditors.com
relay.expeditors.com
secure0058.hubspot.com
boardportal.expeditors.com
frm.expeditors.com
secure0058.hubspot.com
vr.expeditors.com
caralloc-demo.expeditors.com
webtalk.expeditors.com
mobility-tools.expeditors.com
login.expeditors.com
secure0058.hubspot.com
go.expeditors.com
secure0058.hubspot.com
info.expeditors.com
help.expeditors.com
*.expeditors.com
customzone.expeditors.com
secure0058.hubspot.com
go.expeditors.com
cdm.expeditors.com
go.expeditors.com
test01.expeditors.com
go.expeditors.com
trace.expeditors.com
m.expeditors.com
webmail-lhr.expeditors.com
reports.expeditors.com
go2expo-preview.expeditors.com
secureserviceapi.expeditors.com
m.expeditors.com
omb2.expeditors.com
demo-booking.expeditors.com
trace.expeditors.com
*.expeditors.com
booking.expeditors.com
login.expeditors.com
trace.expeditors.com
frm.expeditors.com
go2expo-preview.expeditors.com
idp.expeditors.com
reporting.expeditors.com
msf-elp.expeditors.com
*.expeditors.com
Certificate
The complete raw certificate details for vendorvalidations.expeditors.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHizCCBnOgAwIBAgIQIGc1u3nGNAUAAAAAUOpbWTANBgkqhkiG9w0BAQsFADCB ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0x ODExMjAxODUzMTNaFw0yMDExMjAxOTIzMTJaMIGWMQswCQYDVQQGEwJVUzETMBEG A1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHU2VhdHRsZTE1MDMGA1UEChMsRXhw ZWRpdG9ycyBJbnRlcm5hdGlvbmFsIG9mIFdhc2hpbmd0b24sIEluYy4xKTAnBgNV BAMTIHZlbmRvcnZhbGlkYXRpb25zLmV4cGVkaXRvcnMuY29tMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WTV8vTu9RpY5H7IJmUxWZBlStJNVlG/bLHa CgnVfQ5l5RZwygwFiASsZH5SWKx/nxS/aeFMsjky6NBU3Uno+fOW5+1Uxg6Wsk2L ghPoiDAujpV4ibJ3Lz2pEWQaTL9/vV0RcbA/n9HbddT0KIRL2px2c/saUpA1KZHi JwZYaLdkYWe+Ow01k59vgkpLXZyw4A0mE91E3q6P4x4iaPYoiarSlsN+tprpUNib b2mNoTeZ70B4SFrbggQtZZtohZvOFEWF/nOwRB38YlenlNGMDDJS8cdjKxyMvira VEdkY+P82ibzFv3Hcs9TD3X1J1J3QNylYrzIJIX2bmPCuJvFSQIDAQABo4IDrTCC A6kwUQYDVR0RBEowSIIgdmVuZG9ydmFsaWRhdGlvbnMuZXhwZWRpdG9ycy5jb22C JHd3dy52ZW5kb3J2YWxpZGF0aW9ucy5leHBlZGl0b3JzLmNvbTCCAfYGCisGAQQB 1nkCBAIEggHmBIIB4gHgAHUAh3W/51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq/16g gw8AAAFnMpOgGAAABAMARjBEAiAg+tFTM6ipmBP6+lJ7cRFJtPuzJS5IzKyap65S cg7PZAIgLASuADmETuTbrne53m94pXxw61xYGfC5rpzehJjWszQAdwBWFAaaL9fC 7NP14b1Esj7HRna5vJkRXMDvlJhV1onQ3QAAAWcyk6A3AAAEAwBIMEYCIQD3i20O uRzPmI6WfPKoYKEtC6QhDEtEQog/uZqyoBo/bQIhAInVEFX+2q6HGlkWVhCS0ofn AxObs21ufwBsfox3m2zOAHcAVYHUwhaQNgFK6gubVzxT8MDkOHhwJQgXL6OqHQcT 0wwAAAFnMpOgOQAABAMASDBGAiEAmbDQy+lX/fEWkmDfTO7CUjxy3CKs5zfzUWci +IPNODMCIQDBpsX2WpURdgjXHEj9nfhCrPy2E+u/5WK6a7CZvkuu6wB1ALvZ37wf inG1k5Qjl6qSe0c4V5UKq1LoGpCWZDaOHtGFAAABZzKToAUAAAQDAEYwRAIgGPCr GPq3Of70hEOvQUvDnN4Z5KXL8XoDFPmF+yICuXICIFebFG73VfqpxhsJK7PkaY0z L4p2j91YnphVX2Iok4BjMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEF BQcDATAzBgNVHR8ELDAqMCigJqAkhiJodHRwOi8vY3JsLmVudHJ1c3QubmV0L2xl dmVsMWsuY3JsMEsGA1UdIAREMEIwNgYKYIZIAYb6bAoBBTAoMCYGCCsGAQUFBwIB FhpodHRwOi8vd3d3LmVudHJ1c3QubmV0L3JwYTAIBgZngQwBAgIwaAYIKwYBBQUH AQEEXDBaMCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5lbnRydXN0Lm5ldDAzBggr BgEFBQcwAoYnaHR0cDovL2FpYS5lbnRydXN0Lm5ldC9sMWstY2hhaW4yNTYuY2Vy MB8GA1UdIwQYMBaAFIKicHTdvFM/z3vU981/p2DGCky/MB0GA1UdDgQWBBTVCZIp ZKC0z2akhMUKhDkkhblMSTAJBgNVHRMEAjAAMA0GCSqGSIb3DQEBCwUAA4IBAQAB 0/mbYBo/SjnZvqhROHNB/7pJ5aATWBH96FpgalAtFqvDEnkmtEMLJo4OpAwd3gJ9 8e/gc3E1/rtoffh5DbICCXdRvf7SGWxza+ZRFaXEeGRUcgyn+R+Gxe1BUEbY1YUk yN6PokMnAuRlX2xsU5CljNGyxYrqkgPf3kZUfzCGBBAd7emBL7aromMkLi9kelpM UG4/nNePMgdfYTGcVmNQXCma4X+e0LHh8QrsqcrlRuL1Z2xjoalYUiR3lfE8ccK3 ujVj39Oa0fPUeKvsS4NpUCoWw4SMAeMC0cSAtdrgzwGmjxVA1ytVJjL5Sf0+UH1X /IpQWeuxD/Yd/p4I0XSo -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WTV8vTu9RpY5H7IJmUx WZBlStJNVlG/bLHaCgnVfQ5l5RZwygwFiASsZH5SWKx/nxS/aeFMsjky6NBU3Uno +fOW5+1Uxg6Wsk2LghPoiDAujpV4ibJ3Lz2pEWQaTL9/vV0RcbA/n9HbddT0KIRL 2px2c/saUpA1KZHiJwZYaLdkYWe+Ow01k59vgkpLXZyw4A0mE91E3q6P4x4iaPYo iarSlsN+tprpUNibb2mNoTeZ70B4SFrbggQtZZtohZvOFEWF/nOwRB38YlenlNGM DDJS8cdjKxyMviraVEdkY+P82ibzFv3Hcs9TD3X1J1J3QNylYrzIJIX2bmPCuJvF SQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 43071192262609078040581345731664304985 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-20 18:53:13 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-20 19:23:12 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Seattle' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Expeditors International of Washington, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vendorvalidations.expeditors.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27948389353378746750149114581185520787817348923646879489814900893214290914123330071697693387530232639762697147708584733385542788937384543344215792218452259408203539988517962801347017766877194720309511584372299510172763580302501139688128910621284329684865711737243725466854677336535744232918504092551592192915903428393431823238069519512017177020842474878736990418688312495658288700733352465159847536241215360925722347689031143598804327866204405872620881859956843521054307279768622872223003329081749005689678848643505755825310598363565212632333585185905098290012536716041479232518680363409336209626219006984479873680713 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vendorvalidations.expeditors.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vendorvalidations.expeditors.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes) 01e00075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001673293a0180000040300463044022020fad15333a8a99813fafa527b711149b4fbb3252e48ccac9aa7ae52720ecf6402202c04ae0039844ee4dbae77b9de6f78a57c70eb5c5819f0b9ae9cde8498d6b3340077005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd000001673293a0370000040300483046022100f78b6d0eb91ccf988e967cf2a860a12d0ba4210c4b4442883fb99ab2a01a3f6d02210089d51055fedaae871a5916561092d287e703139bb36d6e7f006c7e8c779b6cce0077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001673293a039000004030048304602210099b0d0cbe957fdf1169260df4ceec2523c72dc22ace737f3516722f883cd3833022100c1a6c5f65a95117608d71c48fd9df842acfcb613ebbfe562ba6bb099be4baeeb007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed185000001673293a0050000040300463044022018f0ab18fab739fef48443af414bc39cde19e4a5cbf17a0314f985fb2202b9720220579b146ef755faa9c61b092bb3e4698d332f8a768fdd589e98555f6228938063 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d509922964a0b4cf66a484c50a84392485b94c49 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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