stg1-ss1.experian.com

- Experian Information Solutions, Inc. -

Issued by Entrust Certification Authority - L1M

About this certificate

This digital certificate with serial number 27:3d:17:84:34:a4:82:21:63:ac:07:c7:8a:5e:46:77 was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Experian Information Solutions, Inc.

Company registration number: 812947
Organization: Experian Information Solutions, Inc.
State / Province: Texas
Locality: Allen
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 27:3d:17:84:34:a4:82:21:63:ac:07:c7:8a:5e:46:77
Serial Number (int): 52157098913812778268595343065580717687
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 69:32:7f:97:88:cf:2b:15:fe:37:02:1a:74:a7:e0:46:82:cf:46:09
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): e9:36:17:a9:55:99:34:9a:ed:24:bf:b1:45:63:44:73:7e:2a:4e:84
Fingerprint (sha256): 01:db:27:39:00:dd:fa:1d:61:db:f6:a0:81:98:7d:70:84:f4:64:b8:3d:65:97:d2:76:ec:6c:ae:8d:4a:94:2d

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for certificate stg1-ss1.experian.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stg1-ss1.experian.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stg1-ss1.experian.com

Other certificates including the domain name experian.com

(limited to 100 certificates)
prext.unify.uk.experian.com
psn.secure.wasp.uk.experian.com
eic-image.uk.experian.com
secure.wiseconsumer.uk.experian.com
beta-in-api.experian.com
stg-gateway.secure.experian.com
ww2.experian.com
*.datafabricpreprod.cdsw.experian.com
crp.h4cs.wapp.hunter.uk.experian.com
stageservicedeliveryplatform.uk.experian.com
www.mchsecrp.it.wapp.hunter.uk.experian.com
ss3.experian.com
das.uk.experian.com
5672591746400256-fe3.pantheonsite.io
sandbox.experian.com
secure-aie.experian.com
uathosted.bankwizardabsolute.uk.experian.com
stg1-ss1.experian.com
pages.e.usa.experian.com
newdaypccms.uat.uk.experian.com
www.autocheck.uk.experian
usx2-lyn-rp01.us.experian.local
mdmreg1.experian.com
auth-eub-test.experian.com
retain.uk.experian.com
imperva.com
ug-sav.uk.experian.com
ukid.eih03.uk.experian.com
UKX2-ISE-Monitor01.uk.experian.com
identityiq.uat.uk.experian.com
www.mchse.wapp.hunter.uk.experian.com
permissions.irt.uk.experian.com
sandbox-uk-api.experian.com
ascendportal.experian.com
secure.wasp.uat.uk.experian.com
secure.e-series.uk.experian.com
hpes.experian.com
identityiq.qat.uk.experian.com
usmkpsynsc.experian.com
incapsula.com
emsevents.experian.com
bnpl.experian.com
u6aeh5cx.fraudnet.experian.com
permissions.prod.uk.experian.com
qat.crosscore.experian.com
newprod.ie.wsrv.hunter.uk.experian.com
dev-spla-api.experian.com
stg1-fed.experian.com
www.mchseuat.nl.wsrv.hunter.uk.experian.com
ss1-ectst001vc.ec.experian.com
imperva.com
secure.e-series.uk.experian.com
sit.login.crosscore.uk.experian.com
images.proveid.experian.com
stg1-ss1.experian.com
dm-sgw1-us.experian.com
itdr-webadmin.uk.experian.com
stm.experian.com
wynsz2kd.test.fraudnet.experian.com
data.nl.experian.com
Amex.PCCM.experian.com
ukx1rpad1-mgmt.uk.experian.com
postemobile-trs.uk.experian.com
idp.int.idaas.uk.experian.com
appsext.unify.uk.experian.com
ukid.eih02.uk.experian.com
wapp.hunter.eu.experian.com
uat-nec-data-link.experian.com
amrs.uk.experian.com
test-uk-api.experian.com
5672591746400256-fe3.pantheonsite.io
intelviz.experian.com
ukid.eih01.uk.experian.com
us-mdm1.experian.com
syncfs-nab.experian.com
www.mchsecrp.wsrv.hunter.uk.experian.com
nordic.experian.com
us-mail.experian.com
velocity.experian.com
irt.caisma.uk.experian.com
uat-ukbsproxy.uk.experian.com
cma.uk.experian.com
sandbox-eu-api.experian.com
pks.experian.com
bankwizardondemand.uk.experian.com
mtvhpccowe.uat.uk.experian.com
cr-securemail.experian.com
staging.bwonline.uk.experian.com
www.mchsecrp.wapp.hunter.uk.experian.com
MQPD.UK.EXPERIAN.COM
customerdataengine.experian.com
qa-smeservices.uk.experian.com
devautodoc.proveid.experian.com
ss2.experian.com
anjuna.status.polaris.synopsys.com
caisma.uk.experian.com
api-dataexchange.experian.com
uat-uk.intact.uk.experian.com
ww2.experian.com
idm.uat.admin.uk.experian.com

Certificate

The complete raw certificate details for stg1-ss1.experian.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SLXJJU5TjSd73Oappqs
8DeYlPFyL3mtV+lfcN1BXzrojQlQYGW30/zfNNZZsyL7Z0ynJ+mK9Hy8dqMJ6IV0
fCpUbLRE5m7VLnQxey+OMDDs+xKyoo/gZPMTvJ7+DMIVRwkSTMBCReqy/sy1xGxj
PlKq6l30pcHcytmf52dqudyI/33l1NU2vOzOlyoulSMYnxlsbs+TOTTloHqrT7q7
hQ3tjiPwb92DdvQ4jKmT0bUIeZNlxiG7wcWPu+t0eDY/owCOA4hebqONlOefaYzB
SoEVD/QCG94Qx4cuULhkg+DJERVJ6ZpsDcFEfGT/rrsAR3ht9nQv7zt/6HZ4/2f8
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 52157098913812778268595343065580717687
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-01 22:26:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-28 22:26:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Allen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ohio'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Experian Information Solutions, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '812947'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stg1-ss1.experian.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28420799059893942694713999904837588831971889800456797383804867727442984860842697156345936622346956922728265256588189924946263048146679604360867521065127988739470841800272255991926852128702836279172019500410234706897746680219485748742957501611032719934982013908099827791112144793049290399398796763143862541229828780004369236303085125305383164211263454535924557989376001073047363079576429922218551878659068441628257453367086889547819886289662155072796138733705917397764354563114837937467714520542823463249196505589959387240643088642370107124076563889387733573800988357985433947547243826968659292906799335001336545016937
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							69327f9788cf2b15fe37021a74a7e04682cf4609
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg1-ss1.experian.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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