ADFSTokenDecrypting.edsdomokxix.eds.com

- DXC Technology -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 4e:b1:ce:be:c2:db:7e:9f:00:00:00:00:50:e5:6e:17 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

DXC Technology

Organization: DXC Technology
State / Province: Texas
Locality: Plano
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4e:b1:ce:be:c2:db:7e:9f:00:00:00:00:50:e5:6e:17
Serial Number (int): 104603013505218777142124020877595340311
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 96:d1:08:53:48:99:ec:03:3a:6f:80:04:4d:1e:47:4c:a0:37:e0:07
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): e9:94:fc:32:e0:86:80:fb:78:5f:05:69:51:1a:c2:85:68:16:d5:d3
Fingerprint (sha256): 03:34:70:58:e7:99:8a:f7:e4:59:1e:72:f7:97:c6:7c:21:a5:7c:73:78:98:7c:d8:8b:a2:ae:6c:39:17:ef:d5

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate ADFSTokenDecrypting.edsdomokxix.eds.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ADFSTokenDecrypting.edsdomokxix.eds.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ADFSTokenDecrypting.edsdomokxix.eds.com
www.ADFSTokenDecrypting.edsdomokxix.eds.com

Other certificates including the domain name eds.com

(limited to 100 certificates)
servicedesk1.za.eds.com
netitne1.dygnn1a.sys.eds.com
netiftp.saipc1a.sys.eds.com
WEP10B1.PLIPC3E.SYS.EDS.COM
delphi.eds.com
TEST.CH28AS.SYS.EDS.COM
QUT3CHIN.UKIPC1G.SYS.EDS.COM
NETIFTPI.DYIPC1D.SYS.EDS.COM
www.ah.dwweb.eds.com
www.pl.dwweb-eds.com
usrnwcwst407.folsom.calwin.eds.com
QUT3CHIN.UKIPC1G.SYS.EDS.COM
voap.be.eds.com
pcmddv10.edev.elabs.eds.com
www.bes.ca.eds.com
NDMZ.IBM309G2.UK.EDS.COM
netiftp.chgnn1a.sys.eds.com
ADFSTokenDecrypting.edsdomokxix.eds.com
netitne.chgnn1a.sys.eds.com
adm.aldea.svcs.hp.com
blackandveatch.aldea.svcs.hp.com
aaservicerequest.sea.eds.com
netiftp.chgnn1b.sys.eds.com
odm-cert.bes.svcs.hpe.com
JES2S002.DADNN3A.SYS.EDS.COM
lcscwa.eds.com
ahold.aldea.svcs.hp.com
netiftp.ahipc1k.sys.eds.com
NETIFTP.PLIPC3C.SYS.EDS.COM
hptest.wellmark.eds.com
QUT3CHIN.UKIPC1G.SYS.EDS.COM
usahselit103.svcs.entsvcs.net
voap.be.eds.com
dwcitrix.bw200.apac.sdn.eds.com
NETITNE.OKIPC1B.SYS.EDS.COM
ahold.aldea.svcs.hp.com
rtp.aldea.svcs.hp.com
QAQCICC1.CHIPC1A.SYS.EDS.COM
dwcitrix.frade.emea.sdn.eds.com
NETISFT.BOCT.SYS.EDS.COM
eonpl.iweb.eds.com
rdi.eds.com
FTPROXSE.DYIPC1D.SYS.EDS.COM
usrnbcwst405.folsom.calwin.eds.com
fra.lra.sdn.eds.com
pcmddv01.edev.elabs.eds.com
jes2s002.boct.sys.eds.com
netiftp.plipc3e.sys.eds.com
ip.aldea.svcs.hp.com
kraft.aldea.svcs.hp.com
pwb.alxix.slg.eds.com
usahselit103.svcs.entsvcs.net
usrnwcwpr407.folsom.calwin.eds.com
pcmddv10.edev.elabs.eds.com
QUT3CHIN.UKIPC1G.SYS.EDS.COM
ddrt.cert.sea.eds.com
odm-prod.bes.svcs.hpe.com
mb.aldea.svcs.hp.com
QUT3CHIN.UKIPC1G.SYS.EDS.COM
QUT3CHIN.UKIPC1G.SYS.EDS.COM
ausyzlvrcua001o-preprod-rcuwebportal.au.eds.com
delphi.eds.com
netitne.plipc1c.sys.eds.com
aqt.aldea.svcs.hp.com
aasus.amer.eds.com
mo.openbillexpress.eds.com
hpwsmm06.airservices.eds.com
CPA0CWFP.OKIPC1B.SYS.EDS.COM
ddrt.sea.eds.com
www.ah.dwweb.eds.com
pawaux04.poca.uk.eds.com
QUT3CHIN.UKIPC1G.SYS.EDS.COM
sharesprovpv.airservices.eds.com
CICSMMN.CHIPC1A.SYS.EDS.COM
*.edsdomokxix.eds.com
hpwsmp01.airservices.eds.com
cardinal.aldea.svcs.hp.com
sharesas.eds.com
apl.aldea.svcs.hp.com
am.aldea.svcs.hp.com
netitne.plipc1c.sys.eds.com
client-HPE-3DS-proda.caas.rcu.au.eds.com
pro.alxix.slg.eds.com
QUT3CHIN.UKIPC1G.SYS.EDS.COM
hsc.cert.sea.eds.com
ftp.elit.eds.com
netiftp.chgnn1b.sys.eds.com
qsa6chin.dyipc1b.sys.eds.com
intvm.sys.eds.com
sha.sys.eds.com
IPVSRV.PLIPC3C.SYS.EDS.COM
QST7CHIN.OKIPC1B.SYS.EDS.COM
pln-sdn.dwweb.eds.com
zasmreporting.za.eds.com
JES2S002.DADNN3A.SYS.EDS.COM
TCPFTP.ENGBLUE.SYS.EDS.COM
bwd.lra.sdn.eds.com
access.staging.ecsuc.elabs.eds.com
lync-web-ext.Ecsuc.elabs.eds.com
am-training.aries.svcs.hp.com

Certificate

The complete raw certificate details for ADFSTokenDecrypting.edsdomokxix.eds.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIQTrHOvsLbfp8AAAAAUOVuFzANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0x
ODA3MjYxNjUxNDlaFw0yMDA3MjYxNzIxNDhaMHgxCzAJBgNVBAYTAlVTMQ4wDAYD
VQQIEwVUZXhhczEOMAwGA1UEBxMFUGxhbm8xFzAVBgNVBAoTDkRYQyBUZWNobm9s
b2d5MTAwLgYDVQQDEydBREZTVG9rZW5EZWNyeXB0aW5nLmVkc2RvbW9reGl4LmVk
cy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdvbtvJiJV0GoQ
k/VsxvmL0bNaoZIiRvZLoVOFk7KXrySc6UaDtWDeJ9JNVnQYD0A33yAumBIZ8wPg
AJ2vQwBUV3QQmdtHSChf4bJCNjAcMZZkRn7AcwOHCLnr4ew5G2smCjAwKUmkpkFQ
RqXF8gQypaOGcNS+cIN2ko85IYF2HZgyhc4NP+LGUyNdrXeloagWim9zr8wGdO22
Mwo5w0Ij76REEgzGZw4IehSYtKvqtJ0RpotVyELnK2Vih2T3eaiG9EHlyTRav6/6
hEVcbDXdftwMKbsfXmYfKqddlh4XViY7YPIcUfjHDsTBpvhWXxLU25GX6Koc4gHU
S845CrLBAgMBAAGjggHgMIIB3DATBgorBgEEAdZ5AgQDAQH/BAIFADBfBgNVHREE
WDBWgidBREZTVG9rZW5EZWNyeXB0aW5nLmVkc2RvbW9reGl4LmVkcy5jb22CK3d3
dy5BREZTVG9rZW5EZWNyeXB0aW5nLmVkc2RvbW9reGl4LmVkcy5jb20wDgYDVR0P
AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAzBgNVHR8E
LDAqMCigJqAkhiJodHRwOi8vY3JsLmVudHJ1c3QubmV0L2xldmVsMWsuY3JsMEsG
A1UdIAREMEIwNgYKYIZIAYb6bAoBBTAoMCYGCCsGAQUFBwIBFhpodHRwOi8vd3d3
LmVudHJ1c3QubmV0L3JwYTAIBgZngQwBAgIwaAYIKwYBBQUHAQEEXDBaMCMGCCsG
AQUFBzABhhdodHRwOi8vb2NzcC5lbnRydXN0Lm5ldDAzBggrBgEFBQcwAoYnaHR0
cDovL2FpYS5lbnRydXN0Lm5ldC9sMWstY2hhaW4yNTYuY2VyMB8GA1UdIwQYMBaA
FIKicHTdvFM/z3vU981/p2DGCky/MB0GA1UdDgQWBBSW0QhTSJnsAzpvgARNHkdM
oDfgBzAJBgNVHRMEAjAAMA0GCSqGSIb3DQEBCwUAA4IBAQAppw5q+UCJOogirQhn
z4cCUUG+R5fw5V+TWXLzDfs5J/IwK3YnypxkkkNCz7klGvelNUYZf//+R8LQp9+/
Hgm4kxKlbEWPxB131v8o/gYpuOOZulr+7sD+AHJFFk2XifDJUOwPqdrz32uVrUVA
w4/rIIcbVH9zxZGCiFNBgoOLuctKNRGrYKHXB6/0FCAvphyVdLDeGrImau2K6oFU
1aChVdnrCApZ+jt/LOHNGRYl7fgj2TNPTDKvbOqe+AiHvfYSPs93t+eM//3SFsdo
IU4+upyXiV6+/ITrTqDu6tEkM5y88cdYvIZgWYVSWEbaKuLAiX49vhVy2ddgvLdP
cZQ2
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnb27byYiVdBqEJP1bMb5
i9GzWqGSIkb2S6FThZOyl68knOlGg7Vg3ifSTVZ0GA9AN98gLpgSGfMD4ACdr0MA
VFd0EJnbR0goX+GyQjYwHDGWZEZ+wHMDhwi56+HsORtrJgowMClJpKZBUEalxfIE
MqWjhnDUvnCDdpKPOSGBdh2YMoXODT/ixlMjXa13paGoFopvc6/MBnTttjMKOcNC
I++kRBIMxmcOCHoUmLSr6rSdEaaLVchC5ytlYodk93mohvRB5ck0Wr+v+oRFXGw1
3X7cDCm7H15mHyqnXZYeF1YmO2DyHFH4xw7Ewab4Vl8S1NuRl+iqHOIB1EvOOQqy
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 104603013505218777142124020877595340311
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-26 16:51:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-26 17:21:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Plano'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DXC Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ADFSTokenDecrypting.edsdomokxix.eds.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19912974297153230186414236223302830931135259067310192395323715655531631041032534884862610789273031494720042728491842959718602803819622299890699680652751516735521993321731513425287608243161609458596342721415261068092820623071029708099939113361324935668170108536846135996651607235039404712458059527198383738285132699435913399824082008911830385068801830650299668401010609320280376555182935987321685460547778054992423359350774045080357435869042941771706861393531579387234847715180817399222958775878285112693119748453066702923928523462903471658055529374594451164385851904375984287755016083302407797365316056377684644246209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ADFSTokenDecrypting.edsdomokxix.eds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ADFSTokenDecrypting.edsdomokxix.eds.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							96d108534899ec033a6f80044d1e474ca037e007
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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