www.cprit.texas.gov

- Cancer Prevention and Research Institute of Texas -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number d1:da:ea:47:6a:a0:d4:76:00:00:00:00:50:ec:14:07 was issued on by Entrust, Inc..

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Cancer Prevention and Research Institute of Texas

Organization: Cancer Prevention and Research Institute of Texas
State / Province: Texas
Locality: Austin
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): d1:da:ea:47:6a:a0:d4:76:00:00:00:00:50:ec:14:07
Serial Number (int): 278945323576254645354173583613433222151
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 96:df:94:b8:bf:37:f9:d7:1d:3c:3f:17:24:6f:8a:cd:73:1e:e0:da
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): ef:f4:1a:8d:32:c5:be:b5:97:c1:b3:1f:3e:38:59:81:7e:4b:af:37
Fingerprint (sha256): 02:5c:2d:ae:d2:be:8d:be:84:17:0b:f4:fd:f1:6c:f9:95:f2:29:1b:f4:7d:2d:90:a7:fd:80:6a:ab:9d:db:62

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate www.cprit.texas.gov

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cprit.texas.gov

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.cprit.texas.gov
cprit.texas.gov
www.cprit.state.tx.us
cprit.state.tx.us

Other certificates including the domain name texas.gov

(limited to 100 certificates)
ptad-lms.cpa.texas.gov
www.prb.texas.gov
iteamsdev.dshs.texas.gov
ersview.ers.texas.gov
ccharchive.dps.texas.gov
crcg.hhs.texas.gov
*.comptroller.texas.gov
www80.tceq.texas.gov
cud.texas.gov
owa.ers.texas.gov
app.tmd.texas.gov
imperva.com
iteamstraining.dshs.texas.gov
incapsula.com
childsupport.oag.texas.gov
incapsula.com
www.highq.com
www80.tceq.texas.gov
incapsula.com
www.license.state.tx.us
erpfindmo.cpa.texas.gov
incapsula.com
www.volunteer.tdem.texas.gov
terponline.tceq.texas.gov
2021annualreport.cprit.texas.gov
apps.hhs.texas.gov
tiscc.texas.gov
txsubscribealerts.dps.texas.gov
fs.txo365demo.dcs.dir.texas.gov
webmail.tesrs.texas.gov
*.dir.texas.gov
www.txvendordrug.com
opuc.texas.gov
fs.tdcj.texas.gov
tiden.tceq.texas.gov
apps.txrc.texas.gov
tgpc.texas.gov
www.taylorcounty.texas.gov
www3.stg-dps.texas.gov
faq.sll.texas.gov
slrmtraining.tsl.texas.gov
guides.sll.texas.gov
incapsula.com
tmd.texas.gov
*.oag.texas.gov
incapsula.com
filer.trs.texas.gov
benweb.ers.texas.gov
ssb.texas.gov
www.directory.tsswcb.texas.gov
www.cprit.texas.gov
drawbridge.dev-dps.texas.gov
pdwdata.tceq.texas.gov
incapsula.com
incapsula.com
ssb.state.tx.us
ssl-wg1.revizesites.com
LyncAccess.tabc.texas.gov
grants.tsl.texas.gov
annualreportsui.dob.texas.gov
incapsula.com
erphcmdmo.cpa.texas.gov
cpahorizon.cpa.texas.gov
vlbms.glo.texas.gov
incapsula.com
tier2-ut.tceq.texas.gov
*.lbb.texas.gov
*.tdi.texas.gov
svcivr.ers.texas.gov
erpphireash.cpa.texas.gov
webapps2.rrc.texas.gov
www.ers.texas.gov
*.lrl.texas.gov
websupport.glo.texas.gov
vpn.cud.texas.gov
incapsula.com
*.gov.texas.gov
www.help.tsswcb.texas.gov
stageapps2.portal.texas.gov
iwmsm.dps.texas.gov
sftp-edts-uat.hhs.texas.gov
www-test.tdlr.texas.gov
ccharchive.dps.texas.gov
contracts.hhs.texas.gov
imperva.com
incapsula.com
fs.tpwd.texas.gov
tea4svdogfish.tea.state.tx.us
veterinary.texas.gov
slrmtraining.tsl.texas.gov
enthcmonbtst.cpa.texas.gov
webmail.trs.texas.gov
www.highq.com
tea4avsmitty.tea.state.tx.us
ssl-wg1.revizesites.com
www.highq.com
www.drawbridge.dps.texas.gov
recovery.texas.gov
*.cpa.texas.gov
chrstest.dshs.texas.gov

Certificate

The complete raw certificate details for www.cprit.texas.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIkDCCB3igAwIBAgIRANHa6kdqoNR2AAAAAFDsFAcwDQYJKoZIhvcNAQELBQAw
gboxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQL
Ex9TZWUgd3d3LmVudHJ1c3QubmV0L2xlZ2FsLXRlcm1zMTkwNwYDVQQLEzAoYykg
MjAxMiBFbnRydXN0LCBJbmMuIC0gZm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxLjAs
BgNVBAMTJUVudHJ1c3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBMMUswHhcN
MTkwMTEyMDMzNDAyWhcNMjEwNDExMDQwNDAxWjCBiDELMAkGA1UEBhMCVVMxDjAM
BgNVBAgTBVRleGFzMQ8wDQYDVQQHEwZBdXN0aW4xOjA4BgNVBAoTMUNhbmNlciBQ
cmV2ZW50aW9uIGFuZCBSZXNlYXJjaCBJbnN0aXR1dGUgb2YgVGV4YXMxHDAaBgNV
BAMTE3d3dy5jcHJpdC50ZXhhcy5nb3YwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw
ggIKAoICAQDRqyDRJPfqklKy0DBHGcID7QqFPsP9cXJ4HMCkMKLqwvIlXD0BbEiX
4u9S2uzK4Y5zUWPKi5VZAuI8wqOcInofKKqt1bwEF089QKOmtKNj+T4pLZNvRO7i
MQPZxe4+iUppbXNx7MhGCLRFLdcvCtycdcRYRBpFchXb9ShQ5PIxqOzmMVO/J+QD
eDuotWUVi9jtapm+NKp51Vzn3+X/293V9BjVXM/xalLsmpuvNb4krKP93UtdXTek
ne9CZoIxULaa0cizfmatGRBdOnpsfM8QlVyNNzUG+rTF3FeqrB9TLooqH1ieeHAK
Fzpfl/dvaS5NCFbc9anbRhiY2DFO8kggpo9rrBiN7Co9D3etOreDxRDPKqIoFfrB
dThv17I79Bxz6ZsmF2gLJZZWziTyoZBIB2DeCsWaEFhB0360Yf3KvPK6B3TdGTWe
XfDK/r/IoCJM43Lz9KWpWNtGZk/lEPWv5NBsIRCnrzSfE9wxCHm3wzlXV4+ViVZC
uiEKwah0Zo+Na01fnaXixPstka8BtMRPDqKnAM8UxRyRnWCwNCFvQmE6BLsELg6a
irpVRBTvzkFA10Z/LQ8R9uF0MqXIXtyDmUreXaIklZzy+Nr3gS5iZwQHK0yWzNVE
RGRMghKN3JQaK844oqhi95USqWYHQ/zMcAsOVBJRQXop392249k+twIDAQABo4ID
vzCCA7swWQYDVR0RBFIwUIITd3d3LmNwcml0LnRleGFzLmdvdoIPY3ByaXQudGV4
YXMuZ292ghV3d3cuY3ByaXQuc3RhdGUudHgudXOCEWNwcml0LnN0YXRlLnR4LnVz
MIIB9gYKKwYBBAHWeQIEAgSCAeYEggHiAeAAdgCHdb/nWXz4jEOZX73zbv9WjUdW
Nv9KtWDBtOr/XqCDDwAAAWhAOyD5AAAEAwBHMEUCIQDZXZ4caSwCUTLmx67d/SPG
XsIgpRXjRTRnJD3r6YA0fQIgaXFru+TvbbMpUEcNt4bTN2/Ygm2DuyWk8gn0GMwI
hN4AdQBWFAaaL9fC7NP14b1Esj7HRna5vJkRXMDvlJhV1onQ3QAAAWhAOyEKAAAE
AwBGMEQCIAXwxo+l1s4qHaQ5iaRxZGAvAUw4vp9bIwFu97AEKIQZAiBtZXfFCpva
JZso8tuC6dSav12NBJDtwtrIxCprXin0nAB3AESUZS6w7s6vxEAH2Kj+KMDa5oK+
2MsxtT/TM5a1toGoAAABaEA7IQ8AAAQDAEgwRgIhAIwJZFKB/jRVaQ6T5JDUnXsg
K0yVUbnNFkc2qh6kz5ARAiEA1wh8KsxqVgxLL9PnHWoFgG0eJPIJL1pTynrJfSoB
vOEAdgCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAWhAOyICAAAE
AwBHMEUCIQCbcYEySPvPE+Hh8KsIGvoddzr7U88kzOY3ZNibAQt6+QIgEl/DZkYa
YA3xjTt0YEaxUhqBAEogF3uwiXltKjwIxB4wDgYDVR0PAQH/BAQDAgWgMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAzBgNVHR8ELDAqMCigJqAkhiJodHRw
Oi8vY3JsLmVudHJ1c3QubmV0L2xldmVsMWsuY3JsMEsGA1UdIAREMEIwNgYKYIZI
AYb6bAoBBTAoMCYGCCsGAQUFBwIBFhpodHRwOi8vd3d3LmVudHJ1c3QubmV0L3Jw
YTAIBgZngQwBAgIwaAYIKwYBBQUHAQEEXDBaMCMGCCsGAQUFBzABhhdodHRwOi8v
b2NzcC5lbnRydXN0Lm5ldDAzBggrBgEFBQcwAoYnaHR0cDovL2FpYS5lbnRydXN0
Lm5ldC9sMWstY2hhaW4yNTYuY2VyMB8GA1UdIwQYMBaAFIKicHTdvFM/z3vU981/
p2DGCky/MB0GA1UdDgQWBBSW35S4vzf51x08Pxckb4rNcx7g2jAJBgNVHRMEAjAA
MA0GCSqGSIb3DQEBCwUAA4IBAQB3Z3kyFRx33VAQ2VD7x82E3YzbNVZkMmIrJsoP
oreljOHpAgj7dFsFm9HRcYsV9GwnZA/YkgfmkLjUWoPPefR5XjiUapPqtCsxfMp3
tvhHKOXQopvgaOHFQ9eBeInXKz1VSVz+Q/dJGHBDcK8u4CYK+htyhpi4e1yhQiIB
K5fSlt9qYum4hDL8ImmMInMvzIore6sICkBMK6A/b63QGWP/G7tQdMD2XEl/5xll
y8bNrthgwrTeWu85qw0XcRpChpILIHzePg16Mb4QpjC8wQlPXVapKNOchjcojKy9
S9BCrNndy+jDIfOOffydExcvv6hHdd5bpeAcusvKFYQvqbH8
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0asg0ST36pJSstAwRxnC
A+0KhT7D/XFyeBzApDCi6sLyJVw9AWxIl+LvUtrsyuGOc1FjyouVWQLiPMKjnCJ6
HyiqrdW8BBdPPUCjprSjY/k+KS2Tb0Tu4jED2cXuPolKaW1zcezIRgi0RS3XLwrc
nHXEWEQaRXIV2/UoUOTyMajs5jFTvyfkA3g7qLVlFYvY7WqZvjSqedVc59/l/9vd
1fQY1VzP8WpS7JqbrzW+JKyj/d1LXV03pJ3vQmaCMVC2mtHIs35mrRkQXTp6bHzP
EJVcjTc1Bvq0xdxXqqwfUy6KKh9YnnhwChc6X5f3b2kuTQhW3PWp20YYmNgxTvJI
IKaPa6wYjewqPQ93rTq3g8UQzyqiKBX6wXU4b9eyO/Qcc+mbJhdoCyWWVs4k8qGQ
SAdg3grFmhBYQdN+tGH9yrzyugd03Rk1nl3wyv6/yKAiTONy8/SlqVjbRmZP5RD1
r+TQbCEQp680nxPcMQh5t8M5V1ePlYlWQrohCsGodGaPjWtNX52l4sT7LZGvAbTE
Tw6ipwDPFMUckZ1gsDQhb0JhOgS7BC4Omoq6VUQU785BQNdGfy0PEfbhdDKlyF7c
g5lK3l2iJJWc8vja94EuYmcEBytMlszVRERkTIISjdyUGivOOKKoYveVEqlmB0P8
zHALDlQSUUF6Kd/dtuPZPrcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278945323576254645354173583613433222151
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-12 03:34:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-11 04:04:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Austin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cancer Prevention and Research Institute of Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cprit.texas.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 855372727835225715855221390042188293309793568443139960325165770357826013238493088924544236758134216166514413823164502671464544414529022231961523879495727045448749104358068964888285378737206931500785573229411997677852644094814153285124177259880815992257373764189071424948319307969651076563632760892269429528570916989669608384777725455010692655789770661929996215429483174024598695160278067436614338367682467123488379666819821740389530217751982349930478486437891605606436558888411345231908720886097649856257323929127999044127951372482181857231247909518689572901652294599880304506751857108452498407684303718198698456529192894868363096859169974032681143669731592806759457567884841562710385833629385417162083742643529263097327595038228004318863830109010967776266565613687304699768585233115252880646471309856143048609679983801457548073255889417924827838454685681132481583459496350366404233179514278232201397276923067669553365227635774822981869732340363631763110180239878561448137686992438795076533825085032505091228852272492350159777098300100773811769750410651694536329962394154815644869215170743370271188393484586735527393952961647505286443522358374015639666897341571587970377994641202070701392321340156039426808188981739687033180339650231
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cprit.texas.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cprit.texas.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cprit.state.tx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cprit.state.tx.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							96df94b8bf37f9d71d3c3f17246f8acd731ee0da
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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