vpn.clarku.edu

- Trustees Of Clark University -

Issued by Entrust Certification Authority - L1M

About this certificate

This digital certificate with serial number 4e:3c:32:cc:b5:53:68:94:b1:d6:d0:d4:ac:19:61:d8 was issued on by Entrust, Inc..

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Trustees Of Clark University

Company registration number: 042111203
Organization: Trustees Of Clark University
State / Province: Massachusetts
Locality: Worcester
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4e:3c:32:cc:b5:53:68:94:b1:d6:d0:d4:ac:19:61:d8
Serial Number (int): 103992351821878484727393319341520413144
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: e3:83:cc:d1:89:fe:1b:44:06:b4:8d:a4:cb:1b:27:c2:78:78:c8:4b
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): eb:dc:f4:df:8b:0a:a5:d5:ba:89:f5:e7:e0:19:a7:e3:a6:ff:f8:d8
Fingerprint (sha256): 01:38:63:a9:60:28:5c:43:e1:be:94:15:0c:5e:2c:8d:9b:67:81:04:7e:bd:ec:27:e2:9a:3c:05:8d:ae:45:4e

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for certificate vpn.clarku.edu

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vpn.clarku.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vpn.clarku.edu
labrat.clarku.edu
globalprotect.clarku.edu
vpn2.clarku.edu
ouroboros.clarku.edu
pa-vpn1.clarku.edu
pa-vpn2.clarku.edu
test.vpn.clarku.edu
Yggdrasil.clarku.edu

Other certificates including the domain name clarku.edu

(limited to 100 certificates)
cluster.technolutions.net
isso.clarku.edu
mathcs.clarku.edu
gradstudies.clarku.edu
vpn.clarku.edu
*.goddard40.clarku.edu
prodinb.clarku.edu
goddard.microsearch.net
www.clarku.edu
useastucc5.acquia.com
clarkconnect.clarku.edu
cluster.technolutions.net
cluster.technolutions.net
cluster.technolutions.net
cicada.clarku.edu
biscuits.clarku.edu
gradstudies.clarku.edu
www2.clarku.edu
leep.clarku.edu
itshelp.clarku.edu
cluster.technolutions.net
exchange.clarku.edu
www2.clarku.edu
clarkconnect.clarku.edu
apply.clarku.edu
cluster.technolutions.net
simplek.clarku.edu
www.clarku.edu
cuweb.clarku.edu
commons.clarku.edu
cluster.technolutions.net
apps.clarku.edu
biscuits.clarku.edu
exchange.clarku.edu
webfs.clarku.edu
prodxtender.clarku.edu
clarkconnect.clarku.edu
cluster.technolutions.net
cluster.technolutions.net
biscuits.clarku.edu
ch003.screenshare.clarku.edu
technolutions.com
cluster.technolutions.net
apps.clarku.edu
apply.clarku.edu
cluster.technolutions.net
cluster.technolutions.net
useastucc5.acquia.com
cluster.technolutions.net
store.clarku.edu
clarknet.clarku.edu
Clarktube.Clarku.edu
goddard.microsearch.net
exchange.clarku.edu
clarknet.clarku.edu
crush.clarku.edu
woodhouse.clarku.edu
clarknow.testing.clarku.edu
goddard.microsearch.net
clarknet.clarku.edu
useastucc5.acquia.com
www2.clarku.edu
news.clarku.edu
cluster.technolutions.net
wordpress.test.clarku.edu
snowwhite.ad.clarku.edu
cluster.technolutions.net
adfs.clarku.edu
goddard.microsearch.net
cluster.technolutions.net
planning.clarku.edu
itshelp.clarku.edu
cluster.technolutions.net
cluster.technolutions.net
commons.clarku.edu
cluster.technolutions.net
cluster.technolutions.net
lists.clarku.edu
useastucc5.acquia.com
moodle.clarku.edu
www2.clarku.edu
access.clarku.edu
cluster.technolutions.net
goddard.microsearch.net
canvas.clarku.edu
apply.clarku.edu
clarkconnect.clarku.edu
www.clarku.edu
mathcs.clarku.edu
cluster.technolutions.net
acquia-sites.com
cluster.technolutions.net
discoverer.clarku.edu
access.clarku.edu
gradapply.clarku.edu
webapps.clarku.edu
www.clarku.edu
apply.clarku.edu
titaniumweb.clarku.edu
access-controller.clarku.edu

Certificate

The complete raw certificate details for vpn.clarku.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+Hu3HJRmjepnaEFtLSo
c0zNtiGrebJV6dm5CYouaN2X+EP/FjTDha0siSuBZjCYgz6Pj7hejnF1YHXUQaV8
z7QuQ86PaT/KzOI0WTSP0LZILQyNZkQ/71X1DI+kzd5ZXFwLCd8B1b7SSAT+SUqC
BbymzoV1Dn7S8WXOg78hfbGcJDqZ2vjx6fWaZSBW8q/TRXuVltblGGMMaerNL+vb
Oh2WinSk6DHru1E688T8dNFyfHcB2pZVi9TgsFYHhMQ4CnTkMJ130cOoLb6lodBv
Y/0IpnyEaoOj3SpUvcOW3x04jJivL2zNE+FmhqZsoQfJFzYKKoExAH6iXRm1/b5/
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 103992351821878484727393319341520413144
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-09 14:15:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-29 14:15:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Worcester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trustees Of Clark University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '042111203'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vpn.clarku.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25737787648052466469865713539019560319313412396333625278810279731571624922313660732454293679953991403701170367875976997223879108626331721667683350191053438852133748377456174236647637630359450118327171152396740845598656364409886112302405146290037288280522999115683281716657977395912592756782370529202570199960706449334953706896745490034917146758860510962095363922585894841546674854272587785877044719263973886872272424817710876686348243010233084744578077472285461506758666155003702252948877756950976250646939146759333384589588321017178778962890788412284458260581243761229054179527094647113618071409249793648227031875551
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e383ccd189fe1b4406b48da4cb1b27c27878c84b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (186 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.clarku.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labrat.clarku.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalprotect.clarku.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn2.clarku.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ouroboros.clarku.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pa-vpn1.clarku.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pa-vpn2.clarku.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.vpn.clarku.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Yggdrasil.clarku.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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