requestforevidence-portal-aue.ey.com

- Ernst & Young Nederland LLP -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number fc:2e:7d:3f:a1:2c:bd:c9:00:00:00:00:50:f3:0b:93 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ernst & Young Nederland LLP

Organization: Ernst & Young Nederland LLP
State / Province: Georgia
Locality: Alpharetta
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): fc:2e:7d:3f:a1:2c:bd:c9:00:00:00:00:50:f3:0b:93
Serial Number (int): 335206840935747272452488464749770771347
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 06:36:81:95:32:c0:c5:a1:2f:60:09:dc:df:69:c0:4a:16:8b:98:8a
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 4b:9e:d4:f8:bb:bd:6a:19:d4:04:07:c5:a1:a8:53:83:d5:f6:c5:fe
Fingerprint (sha256): 01:50:ef:df:e1:c3:24:de:5f:76:72:61:e9:3d:13:7e:5e:88:66:2f:05:1d:eb:ed:56:13:ca:be:19:89:66:f8

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate requestforevidence-portal-aue.ey.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for requestforevidence-portal-aue.ey.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

requestforevidence-portal-aue.ey.com
requestforevidence-portal-aue.scm.ey.com

Other certificates including the domain name ey.com

(limited to 100 certificates)
www.payrollportal.ey.com
lan-199-ext.ey.com
eycwa.ey.com
ameyrcf01.ey.com
uat-pmsketchbook.ey.com
gemcms-api.qa-fix.ey.com
tls.automattic.com
qa-coreservices-mobility.ey.com
de63u.ey.com
appleTest0805.ey.com
admin.eytaxbriefing.ey.com
cb.catalyst.ey.com
asegateway-aue.ey.com
apacadvisorybbwy.ey.com
avepoint.ey.net
questionapi-npe.etfv.ey.com
gateway-api-gwc.ey.com
idsftpstg1.ey.com
edna-uat.ey.com
www1.payrollportal.ey.com
eyots.nlg-uat.ey.com
tprp-sandbox.ey.com
de01.eydmz.net
lss-dev.ey.com
eyce-pptools-dev.ey.com
cert00078-azurecdn.akamaized.net
lan-184-ext.ey.com
globalmarkets.xd.ey.com
gtp-stage.ey.com
gateway-api-inc.ey.com
acuityportal.ey.com
athenaproxyapid.ey.com
cert00078-azurecdn.akamaized.net
aai-154-uat.ey.com
ameyrcs01.ey.com
plcarmen-stage.ey.com
cert00078-azurecdn.akamaized.net
tms-109.ey.com
lan-145-ext-we.ey.com
eyvapps-web-uss.ey.com
Analytics.ey.com
cert00042-azurecdn.akamaized.net
aramco-dev.superset.ey.com
survey.demo.change-insights.ey.com
validator.ey.com
slot1.admin.ttt.ey.com
mtt-staging.ey.com
eroom1e.ey.com
eyd-de.ey.com
reckitt.change-insights.ey.com
eyd-de.ey.com
cert00078-azurecdn.akamaized.net
spotfire-hk.ey.com
wotcbics2-stg.ey.com
d2.taxsuite.ey.com
base-api-uks.ey.com
paspricing-dev.ey.com
agility-ipaas-integration-nonprd.ey.com
ca-climate-analytics.ey.com
lan-227-ext.ey.com
dev-canadataxapps.ey.com
eventsink-eunorth-nonprod.ey.com
signinghub-uat.ey.com
ci-dxc-reporting-trac.ey.com
rise-uat.ey.com
webforms.ey.com
VATAnalyticsqa.ey.com
Usn101u.cloudapp.ey.net
www.rpnn.ey.com
askey-uat-web.ey.com
demo.vcsync.ey.com
cincinnatichildrens.eynavigate.ey.com
tasdigitalexperience-uat.ey.com
labpages.braze.com
us.eyos-wapi.ey.com
modelops-uat.eyfabric.ey.com
athenaq.ey.com
TestUpdateOwnerAzureKV20.ey.com
www.highq.com
vedlys.ey.com
AM02.EY.COM
admin.eytaxbriefing.ey.com
cesa22.tpweb.ey.com
neapp01.mdrnp.ey.com
tms3-stg.ey.com
uat.proposal-engine.knowledge-engine.ey.com
alumnihub-qa.ey.com
eyvapps-api-swn.ey.com
payrollcontrol-uat.ey.com
EYRCPAEDCF.EY.COM.ey.com
requestforevidence-portal-aue.ey.com
eyres.nlg.ey.com
Portal.catalyst.ey.com
Conversation-insights-digitalassistant.ey.com
au-ereview.ey.com
qa1-gcs-gsp-pathway.ey.com
uat-paansadminconsole.ey.com
web004.ey.com
cn-director.ey.com
POLTT.ey.com

Certificate

The complete raw certificate details for requestforevidence-portal-aue.ey.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHkzCCBnugAwIBAgIRAPwufT+hLL3JAAAAAFDzC5MwDQYJKoZIhvcNAQELBQAw
gboxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQL
Ex9TZWUgd3d3LmVudHJ1c3QubmV0L2xlZ2FsLXRlcm1zMTkwNwYDVQQLEzAoYykg
MjAxMiBFbnRydXN0LCBJbmMuIC0gZm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxLjAs
BgNVBAMTJUVudHJ1c3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBMMUswHhcN
MTkwNjEzMTg0OTI1WhcNMjEwNjEzMTkxOTI0WjCBiTELMAkGA1UEBhMCVVMxEDAO
BgNVBAgTB0dlb3JnaWExEzARBgNVBAcTCkFscGhhcmV0dGExJDAiBgNVBAoMG0Vy
bnN0ICYgWW91bmcgTmVkZXJsYW5kIExMUDEtMCsGA1UEAxMkcmVxdWVzdGZvcmV2
aWRlbmNlLXBvcnRhbC1hdWUuZXkuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEArnXDu/HhHvK79uVdx5RDnOcVQ9WMpz/ARjDOFLu9FdoaR3Xfc+R1
W6QgBHfxerhQOWE0H4NS7PlXc6v7CaBG/QXDZBfni1XGRqAW29wejWvPpnPHmSxS
wT/zSnKeCiUZ/zEr6elQ9ofk3PClRTilZt3mZa3SDil2C73FxJ0HcwyYC4waO/nV
8O4M6bpPVouglh4lUyMRI8nxC5mOdGpp6N3bZ6ALPl1LpeiuIyNFY7lfHXwCOdDc
kv9oermJVoRM23y9L02UkEzLxFeF78P61Sf5tWK0XVV+FayNbNXmzlTY9DlmIxrY
Vg+djk4H7kPfO0LODfpY0h6Ct0vQKhiSiQIDAQABo4IDwTCCA70wWQYDVR0RBFIw
UIIkcmVxdWVzdGZvcmV2aWRlbmNlLXBvcnRhbC1hdWUuZXkuY29tgihyZXF1ZXN0
Zm9yZXZpZGVuY2UtcG9ydGFsLWF1ZS5zY20uZXkuY29tMIIB+AYKKwYBBAHWeQIE
AgSCAegEggHkAeIAdwCHdb/nWXz4jEOZX73zbv9WjUdWNv9KtWDBtOr/XqCDDwAA
AWtSR84DAAAEAwBIMEYCIQDVK8zbXgJCjVw4IQAGmrLSwXTCuJ03t9SMuX+q6Tc9
eAIhAMpBLC8rbWQF2p/K41AN6iu0mXwkTfhKQJt9i0rADP6vAHYAVYHUwhaQNgFK
6gubVzxT8MDkOHhwJQgXL6OqHQcT0wwAAAFrUkfOEAAABAMARzBFAiEAkeZVaEm7
l+rKMVo9Ep5MV8a44IVyXBkKLKLraj1wR+QCIHbCc80L8dOeShNHjtKMaYpsA1jI
sRUHJk2Y1fxorXprAHYARJRlLrDuzq/EQAfYqP4owNrmgr7YyzG1P9MzlrW2gagA
AAFrUkfN/wAABAMARzBFAiB61m3iKB/LssmrU4B7Dww5iXNRXVHZqGVcqPBxnczk
FwIhAKRqz72sjCn0jjL/92us3m9XR6T1jCuWw9q7JTgWTWTwAHcA9lyUL9F3MCIU
VBgIMJRWjuNNExkzv98MLyALzE7xZOMAAAFrUkfN+gAABAMASDBGAiEA7tTUnHju
RKW9wxaaWeD8ott1YlN4mTwfrgZ4swfD/rUCIQDlli2SYaanQqd6WopTHmge43pg
8R/BczrOlrweVQZWijAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH
AwEGCCsGAQUFBwMCMDMGA1UdHwQsMCowKKAmoCSGImh0dHA6Ly9jcmwuZW50cnVz
dC5uZXQvbGV2ZWwxay5jcmwwSwYDVR0gBEQwQjA2BgpghkgBhvpsCgEFMCgwJgYI
KwYBBQUHAgEWGmh0dHA6Ly93d3cuZW50cnVzdC5uZXQvcnBhMAgGBmeBDAECAjBo
BggrBgEFBQcBAQRcMFowIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLmVudHJ1c3Qu
bmV0MDMGCCsGAQUFBzAChidodHRwOi8vYWlhLmVudHJ1c3QubmV0L2wxay1jaGFp
bjI1Ni5jZXIwHwYDVR0jBBgwFoAUgqJwdN28Uz/Pe9T3zX+nYMYKTL8wHQYDVR0O
BBYEFAY2gZUywMWhL2AJ3N9pwEoWi5iKMAkGA1UdEwQCMAAwDQYJKoZIhvcNAQEL
BQADggEBANE9GpjNHZpo5cQy+kYaATZqA7bsoo2mlRDDLYH5bwhJ9josZSTS5IAC
CWcoDevUbu6nDkZtXGwPY3GplMF1u4xb1YB0fO5o8+RMFlLSG3/jeQH2unsNX3j5
002kRWMP3qnx4zTEAjvxz8nEdzNXDb5+vAWxnsJ2NUeJjMOKbnMmVVaJ33f5QZnK
q9tVOTuMDpIdPqY+IwB6zBfgA0e7vnNa68Qy1JAuzh1TbCWzT1cf5wdycx8YpBb+
QvAYXbbP5uC2e+rubyNxjBt6+EIuccxTxp5Ox05qVz9xSnGiPELn5kGoYOHbaxy1
7xxhUX6yTNYeDwiz2ZQocqbG5hv5voQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnXDu/HhHvK79uVdx5RD
nOcVQ9WMpz/ARjDOFLu9FdoaR3Xfc+R1W6QgBHfxerhQOWE0H4NS7PlXc6v7CaBG
/QXDZBfni1XGRqAW29wejWvPpnPHmSxSwT/zSnKeCiUZ/zEr6elQ9ofk3PClRTil
Zt3mZa3SDil2C73FxJ0HcwyYC4waO/nV8O4M6bpPVouglh4lUyMRI8nxC5mOdGpp
6N3bZ6ALPl1LpeiuIyNFY7lfHXwCOdDckv9oermJVoRM23y9L02UkEzLxFeF78P6
1Sf5tWK0XVV+FayNbNXmzlTY9DlmIxrYVg+djk4H7kPfO0LODfpY0h6Ct0vQKhiS
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335206840935747272452488464749770771347
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-13 18:49:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-13 19:19:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Georgia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Alpharetta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ernst & Young Nederland LLP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'requestforevidence-portal-aue.ey.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22023536946095958407029128356830471959462599596464591803021960598349037781550317529218057503523978681133999507619724363022107108233732693551495362730681241608744743972243364954807341014167326675214094517511216097029511200356969180806282832155961747799809367908381030075767201127220022326715036985478348890191922066744275889676345038573676607759195923479000166612018143465510330587925329876360958515981220181267840026141683574020731348579379901982886129756276434552129848080360485837113100818353464131926050347895531299852092183785718382335394247180799757909349705904475636785064067640143817697852631076568959588799113
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'requestforevidence-portal-aue.ey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'requestforevidence-portal-aue.scm.ey.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (488 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0636819532c0c5a12f6009dcdf69c04a168b988a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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