sts2.ga.johnsoncontrols.com

- Johnson Controls, Inc. -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 26:b0:ff:f1:59:79:aa:93:00:00:00:00:50:f2:66:9d was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Johnson Controls, Inc.

Organization: Johnson Controls, Inc.
State / Province: Wisconsin
Locality: Milwaukee
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 26:b0:ff:f1:59:79:aa:93:00:00:00:00:50:f2:66:9d
Serial Number (int): 51429699223056281358876050160759236253
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: f7:50:38:61:ff:32:8d:65:61:46:49:b8:da:65:3b:3b:99:18:7d:ad
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 97:2a:62:3b:6f:31:4e:c9:31:6e:23:12:d7:77:89:94:45:26:e4:00
Fingerprint (sha256): 03:40:3d:69:49:33:54:31:8a:e8:d4:02:16:bd:64:09:e4:c3:40:29:24:70:39:81:81:bb:ea:8e:af:fb:35:f1

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate sts2.ga.johnsoncontrols.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sts2.ga.johnsoncontrols.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sts2.ga.johnsoncontrols.com
www.sts2.ga.johnsoncontrols.com

Other certificates including the domain name johnsoncontrols.com

(limited to 100 certificates)
imperva.com
imperva.com
auvpn1.johnsoncontrols.com
imperva.com
samlssoc.johnsoncontrols.com
sm04-sdc.jci.com
csd.johnsoncontrols.com
imperva.com
be-ebusiness-support.eu.johnsoncontrols.com
incapsula.com
wwwqa.colps.johnsoncontrols.com
www.china.powersolutions.johnsoncontrols.com
incapsula.com
sts2.ga.johnsoncontrols.com
ssosamlqa.ga.johnsoncontrols.com
pa.johnsoncontrols.com
incapsula.com
mucntr.johnsoncontrols.com
bejih.com
ssoimqa.ga.johnsoncontrols.com
ocp1.pdc1.jci.ocp.johnsoncontrols.com
johnsoncontrols.com
myemail.johnsoncontrols.com
incapsula.com
incapsula.com
incapsula.com
cgeuapp13.johnsoncontrols.com
mx.clarios.com
ssoformxcpqa.ga.johnsoncontrols.com
imperva.com
mypanoptixdemo.johnsoncontrols.com
bejih.com
imperva.com
imperva.com
cgproducts.johnsoncontrols.com
incapsula.com
incapsula.com
imperva.com
incapsula.com
ar1.johnsoncontrols.com
jobs.johnsoncontrols.com
incapsula.com
myappsdev.johnsoncontrols.com
imperva.com
imperva.com
imperva.com
meetings.johnsoncontrols.com
YUM-Brands.johnsoncontrols.com
incapsula.com
imperva.com
kantech.sterigenics.schaumburg.johnsoncontrols.com
sdt-sit.johnsoncontrols.com
CCCyberSchool.johnsoncontrols.com
incapsula.com
incapsula.com
pa2.eu.johnsoncontrols.com
elearning.johnsoncontrols.com
imperva.com
*.mypanoptixstaging.johnsoncontrols.com
bejih.com
easyparts.johnsoncontrols.com
rscadmin.johnsoncontrols.com
eidp.jci.com
aasdsloth.gsm.cornell.edu
imperva.com
incapsula.com
www.jcihost.com
incapsula.com
kantech.sterigenics.schaumburg.johnsoncontrols.com
johnsoncontrols.com
incapsula.com
incapsula.com
*.go.solutions.johnsoncontrols.com
imperva.com
incapsula.com
incapsula.com
www.mexico.powersolutions.johnsoncontrols.com
easyparts-support.johnsoncontrols.com
bejih.com
ssosaml.ga.johnsoncontrols.com
secure.cg.johnsoncontrols.com
incapsula.com
www.china.powersolutions.johnsoncontrols.com
investors.johnsoncontrols.com
incapsula.com
investors.johnsoncontrols.com
incapsula.com
skmtprod.johnsoncontrols.com
imperva.com
JohnsonControls.com
xnet.johnsoncontrols.com
imperva.com
www.battery.johnsoncontrols.com
incapsula.com
imperva.com
incapsula.com
B0324S03.Go.JohnsonControls.com
incapsula.com
incapsula.com
incapsula.com

Certificate

The complete raw certificate details for sts2.ga.johnsoncontrols.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFizCCBHOgAwIBAgIQJrD/8Vl5qpMAAAAAUPJmnTANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0x
OTA1MzAxNDUwNTJaFw0yMDA2MjkxNTIwNTFaMHwxCzAJBgNVBAYTAlVTMRIwEAYD
VQQIEwlXaXNjb25zaW4xEjAQBgNVBAcTCU1pbHdhdWtlZTEfMB0GA1UEChMWSm9o
bnNvbiBDb250cm9scywgSW5jLjEkMCIGA1UEAxMbc3RzMi5nYS5qb2huc29uY29u
dHJvbHMuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVpMVoxH
AB3C7ho6oCP0S24THofJ20axuGvPAoK+BLACmemnQOCSvZLv/6QZ/ieDpEF8ur6/
8wuoHs6PBT4cBhqrjJwlbH6iDiDbtuikvO0XTheGJX5xx1vFz+5ICdH250nN0Csx
j1l/9DuKSpJTo1B8SAmwLNXrDAF4MDUvG9Y5f5e/KL5ii79Bs/Kw5PWcBAGZnnN6
SbEyaoxREpQYJwcGwCe+ReGJYs1Z2+DVhcEVKGyqQQQizuxR4MvCRXITUBC99PtV
iFXhyQ9WNFBCQNIpyF+JhJy+CN+gP9armG3bt6zIDcVhLoitQDXgah29DYOe8tHl
vOO/Ipn/VMbfWwIDAQABo4IByDCCAcQwEwYKKwYBBAHWeQIEAwEB/wQCBQAwRwYD
VR0RBEAwPoIbc3RzMi5nYS5qb2huc29uY29udHJvbHMuY29tgh93d3cuc3RzMi5n
YS5qb2huc29uY29udHJvbHMuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwMwYDVR0fBCwwKjAooCagJIYiaHR0cDovL2Ny
bC5lbnRydXN0Lm5ldC9sZXZlbDFrLmNybDBLBgNVHSAERDBCMDYGCmCGSAGG+mwK
AQUwKDAmBggrBgEFBQcCARYaaHR0cDovL3d3dy5lbnRydXN0Lm5ldC9ycGEwCAYG
Z4EMAQICMGgGCCsGAQUFBwEBBFwwWjAjBggrBgEFBQcwAYYXaHR0cDovL29jc3Au
ZW50cnVzdC5uZXQwMwYIKwYBBQUHMAKGJ2h0dHA6Ly9haWEuZW50cnVzdC5uZXQv
bDFrLWNoYWluMjU2LmNlcjAfBgNVHSMEGDAWgBSConB03bxTP8971PfNf6dgxgpM
vzAdBgNVHQ4EFgQU91A4Yf8yjWVhRkm42mU7O5kYfa0wCQYDVR0TBAIwADANBgkq
hkiG9w0BAQsFAAOCAQEACbAmvFLQ4LkzaUir+zngvjb4/yFuJjLwg0rWo8snTApS
AnzcNJzlK9udFoSEmlW1ZF/SbrlFGmK3XxUv3kcZGxsOyQv54tOraJNEed5lr53W
VplWCYnrZjat+fdgSkdUE+R8nZ07tYBIAMZpyKVD227bnxua9Klq6s3cjGDiWEeA
OL4ulHyZTYvf9nWwlIzVOXNenrFkjd74R0BAw/2oDNYkpj+WxncN5nCw3Peva+q/
s1xv3IDxki0wLFd5GWVpy3nrg0wC4AX6kci9StJe4MBNbiPrsO4X2gUvgnZqa40t
ZXxVrhvIZqkuPioZS2blzvjrPVS6P0thNpHDAeVaKw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVpMVoxHAB3C7ho6oCP0
S24THofJ20axuGvPAoK+BLACmemnQOCSvZLv/6QZ/ieDpEF8ur6/8wuoHs6PBT4c
BhqrjJwlbH6iDiDbtuikvO0XTheGJX5xx1vFz+5ICdH250nN0Csxj1l/9DuKSpJT
o1B8SAmwLNXrDAF4MDUvG9Y5f5e/KL5ii79Bs/Kw5PWcBAGZnnN6SbEyaoxREpQY
JwcGwCe+ReGJYs1Z2+DVhcEVKGyqQQQizuxR4MvCRXITUBC99PtViFXhyQ9WNFBC
QNIpyF+JhJy+CN+gP9armG3bt6zIDcVhLoitQDXgah29DYOe8tHlvOO/Ipn/VMbf
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 51429699223056281358876050160759236253
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-30 14:50:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-29 15:20:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wisconsin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Milwaukee'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Johnson Controls, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sts2.ga.johnsoncontrols.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24408520558278176617619180011888572092896270903149132948309209367195371019367302217300713242236822437672989379940914682444508585196976188728834634793800005843356305294933382913875443371969143141413965223223405015833451637620124243268854853741777916559698567039769935408635323623979890367450442690883900812078300226256173515144098639466813536023158976295046853717641757265783363039288637630367052532186889847119351989282604051732668655674863675095873003360334216933061851049291903955313612452291659457962316186200650051110605046048745695861794029411115770719359252544697062232264009480097078737319743353741781410176859
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sts2.ga.johnsoncontrols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sts2.ga.johnsoncontrols.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f7503861ff328d65614649b8da653b3b99187dad
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0009b026bc52d0e0b9336948abfb39e0be36f8ff216e2632f0834ad6a3cb274c0a52027cdc349ce52bdb9d1684849a55b5645fd26eb9451a62b75f152fde47191b1b0ec90bf9e2d3ab68934479de65af9dd65699560989eb6636adf9f7604a475413e47c9d9d3bb5804800c669c8a543db6edb9f1b9af4a96aeacddc8c60e258478038be2e947c994d8bdff675b0948cd539735e9eb1648ddef8474040c3fda80cd624a63f96c6770de670b0dcf7af6beabfb35c6fdc80f1922d302c5779196569cb79eb834c02e005fa91c8bd4ad25ee0c04d6e23ebb0ee17da052f82766a6b8d2d657c55ae1bc866a92e3e2a194b66e5cef8eb3d54ba3f4b613691c301e55a2b