nextcalendar.carleton.ca

- Carleton University -

Issued by Entrust Certification Authority - L1M

About this certificate

This digital certificate with serial number 53:7e:16:a5:a3:b7:03:1c:7b:a4:c7:74:cd:ac:fd:d3 was issued on by Entrust, Inc..

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Carleton University

Company registration number: 48590
Organization: Carleton University
State / Province: Ontario
Locality: Ottawa
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 53:7e:16:a5:a3:b7:03:1c:7b:a4:c7:74:cd:ac:fd:d3
Serial Number (int): 110980612390648805640962329596270542291
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 8b:c0:14:8e:7a:a5:a7:f7:6b:47:6d:9d:da:aa:62:08:0e:d0:19:57
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): 60:65:70:24:bf:d0:97:62:2c:88:6b:d8:2d:d4:3d:89:3b:b8:71:9a
Fingerprint (sha256): 01:c0:c9:49:26:0f:4c:c0:99:3a:3b:ef:b8:c5:37:07:84:ce:df:b8:43:f2:7a:bb:17:7a:11:d8:94:a3:75:6e

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for certificate nextcalendar.carleton.ca

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nextcalendar.carleton.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nextcalendar.carleton.ca
currcalendar.carleton.ca
calendar.carleton.ca

Other certificates including the domain name carleton.ca

(limited to 100 certificates)
atlas-wiki.physics.carleton.ca
finint01.cunet.carleton.ca
*.carleton.ca
planforgood.carleton.ca
timreview.carleton.ca
ccs-casdev3.carleton.ca
sciencedev.physics.carleton.ca
ir.library.carleton.ca
alumnimentors.carleton.ca
mimcufed.carleton.ca
cqads.carleton.ca
*.nwrc.carleton.ca
hotsoft.carleton.ca
gogs.carleton.ca
cas5.carleton.ca
ssscdev2.physics.carleton.ca
ojs.library.carleton.ca
mycareer.carleton.ca
inuktutlexicon.gcrc.carleton.ca
hotsoft.carleton.ca
nextcalendar.carleton.ca
itsgit.carleton.ca
owncloud.carleton.ca
linux.doe.carleton.ca
lakehurontreaties.gcrc.carleton.ca
scienceapps1.carleton.ca
banweb77.cunet.carleton.ca
cas5.carleton.ca
banweb53.cunet.carleton.ca
san-6-s10.tlsprovisioning.exacttarget.com
scienceapps.carleton.ca
journals.carleton.ca
cas5dev.carleton.ca
cg.scs.carleton.ca
sssc.carleton.ca
mvp.soft.carleton.ca
mailhost.math.carleton.ca
tpa.carleton.ca
science.carleton.ca
cas.carleton.ca
*.carleton.ca
gogs.carleton.ca
awc.carleton.ca
cutv.carleton.ca
*.scs.carleton.ca
its-apidev1.carleton.ca
docman.carleton.ca
itsccw02.cunet.carleton.ca
elections.ccss.carleton.ca
*.carleton.ca
mailhost.math.carleton.ca
cas5dev.carleton.ca
chernode.mae.carleton.ca
ssoman.carleton.ca
sssc.carleton.ca
wiki.math.carleton.ca
vlt.carleton.ca
bandoc02.cunet.carleton.ca
cqads-vm01.carleton.ca
tpa.carleton.ca
jupyterhub.physics.carleton.ca
doclib.carleton.ca
cqads-vm01.carleton.ca
simreporting.carleton.ca
banstg01.cunet.carleton.ca
science.carleton.ca
mattermost.carleton.ca
portalclonetest.carleton.ca
ccsadc04.cunet.carleton.ca
sikuatlas.gcrc.carleton.ca
architecture.carleton.ca
deap-radiopurity.physics.carleton.ca
lakehurontreaties.gcrc.carleton.ca
deapdb.physics.carleton.ca
honoursprojects.physics.carleton.ca
dges.carleton.ca
mvp.soft.carleton.ca
itsrds05.cunet.carleton.ca
gracilis.glel.carleton.ca
itsgit.carleton.ca
u-itsadc02.cunet-uat.carleton.ca
enrichment.math.carleton.ca
planforgood.carleton.ca
www.cuol.ca
sprottcareers.carleton.ca
iggrc.carleton.ca
adminweb.carleton.ca
ccss.carleton.ca
webwork.math.carleton.ca
people.math.carleton.ca
cutv.carleton.ca
earthsci.carleton.ca
sssc.carleton.ca
rcsctx.carleton.ca
rcs-citrix5.carleton.ca
deap-deltav.physics.carleton.ca
hereforgood.carleton.ca
ngn.sce.carleton.ca
banweb03.cunet.carleton.ca
ccss.carleton.ca

Certificate

The complete raw certificate details for nextcalendar.carleton.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxTmedABCSGHUU/li6P+v
xmBLQzILPmmD/j8N2vu2SCG4zGZPVcZKbw2w23SwQ6EvVtEdP6Pyphi0+Ee+xB76
XsITh1aifxf6vyGbGLYYLH5q2ex03pxo+IyWNC6wpnTY/3/WA6ZpuMWfDv7NzwDF
DLAIP7NE/KXNyABnyZA0HlyvcV3WukeNUBaHxW5Cwbf5+PJKgZ8sj/4mQEfxyRL+
VeS7yzDjajlisDuTH9leN+u9xZicd1qIA6rZDGiPkQ4nRcuSbmv/pFcLOed866sJ
/h5lALbFc037mViZk57BvwJhGBgo/ALUK/50ZPJrYGpQ0l0/CyjMDuVrgTPPN1Cg
WfdvsFJ73m0cHcdWz+jyQRJmQlYUbJCLhotgkn9nYvI9KFILH+7NCR+8TLJPT2bL
7h3bTjZKhbiAzr5kMSIHHvfYe56vuLGI3E4EiDRYLTiJYiPOCs6kwha6LtMxBOkb
/7kopI/vsW5h31OAK5o833p3a+ktWqdPUTBEzdzJ2XCZpDJH6N+/9nx/8SfOBQ4/
JPetaLtvbRtm2lJV//lQfSRYi10o8FpVZc9OjZsaED3xaoUhgP22xdZmiAUwN4Dd
UxFOozlTKElQ6X7A2VHHu3yIW9sIeS0qE6I4OOKF8oIRmET3Rjfw+VvIpeUQ7b3C
7XwFiFD9pJ9wwY32FDEG0ukCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 110980612390648805640962329596270542291
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-27 17:14:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-19 17:14:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ottawa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Carleton University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '48590'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nextcalendar.carleton.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 804608103424625245726553363337418169480874387700596867782631122626273182875915295785092188075673857806682764117812996443988953846895973495413455860883752707750993928263447499268805520456966509543567197268652491632247552705817811472307897624656488832573976660989600665003616372362046557044377905889972883128665831633812229038384038867019050434711747031913805400304029992679261571532667748800730266729058518769139252744512045787898652229918244208649072959103751502435074765849525288634436571242877425220631064311882590244130378725271824078968385241001471806167596558516662473313475187555835859717447440546196934011362579174688488122675799325246165974376112853232878347639177742569467046813140702856102288716220832293884150861911518813166865684044457168031168458758823863395482087029106001071058995575257810116411585798901876538099854130999402725584712262169692701865981168159832649703221798251880351490857271897967809873781357438312071742969029916552884746121471606993643925979611442492090926172035933004728314314133230857912790703459463670234058814983552081097358483565860138208614810935802542857152358267854300658308378736772773336454671690264164682771094416058636832819757227097703639662670970355973042153776857687257338740224742121
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8bc0148e7aa5a7f76b476d9ddaaa62080ed01957
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextcalendar.carleton.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'currcalendar.carleton.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calendar.carleton.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000ed07990182fff28df39f2448a7f31edcc501597406fad8fac7ade1ab424a15a416fb448c4ed0b349e1b50d6f6a6bab0fc5ac08b8a3e3a9adeccc14c11baf715fa5c74eb547339b7f10f760bf42c54c0a38de77fd090687bbd1ed2ea93fe41a318dd437c515e75d404c7b163da359c00af4817377b2604297f8f819524fc5b3e42ce7e97001be006e4ed58158160b3d1ddecf729f8594d5e113051e19b2daf1e5fc5a3e0cffd06322b7fcd2d20f07e629efbf1a420cd72d765398826ac77a046dfd617f0dc7a5c97a73ead6673b3ecd58de38bea8232d0cbb32241ea0423a45092e45d60831f563d860b6955bebce1eaca11f763e01629c780e269fdf3ed234f