it.jci.com
- Johnson Controls, Inc. -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number 5d:6d:64:ac:12:1a:c1:4e:00:00:00:00:50:e1:bc:b2 was issued on by Entrust, Inc..
With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Johnson Controls, Inc.
Organization:
Johnson Controls, Inc.
State / Province:
Wisconsin
Locality: Milwaukee
Country: US
Locality: Milwaukee
Country: US
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 5d:6d:64:ac:12:1a:c1:4e:00:00:00:00:50:e1:bc:b2Serial Number (int): 124186205839384865115743764708461755570
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: d0:94:e2:3f:ec:aa:ae:9e:dc:63:82:ab:29:ff:22:c6:09:8c:32:6d
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): 91:cc:5c:48:1e:ff:66:a0:ba:7c:7e:52:2c:0a:fb:31:42:25:25:45
Fingerprint (sha256): 03:85:6e:c9:d8:f3:1a:a9:e9:fd:34:2e:0c:87:68:77:37:bb:28:53:ff:7b:ba:07:55:73:d4:4d:ab:d8:fa:7e
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate it.jci.com
7
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for it.jci.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
it.jci.com
UserApi.it.jci.com
SubmissionApi.it.jci.com
IntegrationApi.it.jci.com
RequestOfferingApi.it.jci.com
globalidgen.it.jci.com
www.it.jci.com
UserApi.it.jci.com
SubmissionApi.it.jci.com
IntegrationApi.it.jci.com
RequestOfferingApi.it.jci.com
globalidgen.it.jci.com
www.it.jci.com
Other certificates including the domain name jci.com
(limited to 100 certificates)
imperva.com
imperva.com
www.it.jci.com
imperva.com
marine.jci.com
jira.jci.com
sm04-sdc.jci.com
imperva.com
travelmke01qa.jci.com
guestnetfrankfurt-auth.jci.com
incapsula.com
citrixportal.jci.com
incapsula.com
it.jci.com
incapsula.com
imperva.com
webmail.o365.jci.com
johnsoncontrols.com
on.jci.com
incapsula.com
incapsula.com
apiservicesqa.jci.com
incapsula.com
alpt.jci.com
webmail.jci.com
imperva.com
imperva.com
paymentmanager.jci.com
stagingjohnsoncontrols.jci.com
imperva.com
incapsula.com
incapsula.com
imperva.com
smforms.na.jci.com
incapsula.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
incapsula.com
incapsula.com
securityreporting.corp.na.jci.com
imperva.com
eidp.jci.com
imperva.com
incapsula.com
www.jcihost.com
incapsula.com
managedvideo.jci.com
prodinsight.tyco.com
eiapiqa.uk.jci.com
johnsoncontrols.com
incapsula.com
incapsula.com
imperva.com
incapsula.com
incapsula.com
peoplepicker.jci.com
duediligenceonlineform.jci.com
prod.fis.ga.jci.com
incapsula.com
devsynchronybearings.jci.com
metasys.jci.com
incapsula.com
incapsula.com
exactviewrtw.jci.com
agsm.jci.com
eimftdev-adminst.us.jci.com
imperva.com
securityreporting.corp.na.jci.com
imperva.com
paymentmanager.jci.com
travelbur02.jci.com
incapsula.com
imperva.com
incapsula.com
mysite.jci.com
us.managedaccess.jci.com
tdf.jci.com
incapsula.com
incapsula.com
it.jci.com
incapsula.com
imperva.com
incapsula.com
bemea-apps.jci.com
imperva.com
frontliner-qa.jci.com
imperva.com
imperva.com
jcibts-swm-sb.jci.com
conferencing.ga.jci.com
imperva.com
jcibts-swm-sb.jci.com
incapsula.com
incapsula.com
eidpqa.jci.com
MatchMaster.jci.com
incapsula.com
imperva.com
www.it.jci.com
imperva.com
marine.jci.com
jira.jci.com
sm04-sdc.jci.com
imperva.com
travelmke01qa.jci.com
guestnetfrankfurt-auth.jci.com
incapsula.com
citrixportal.jci.com
incapsula.com
it.jci.com
incapsula.com
imperva.com
webmail.o365.jci.com
johnsoncontrols.com
on.jci.com
incapsula.com
incapsula.com
apiservicesqa.jci.com
incapsula.com
alpt.jci.com
webmail.jci.com
imperva.com
imperva.com
paymentmanager.jci.com
stagingjohnsoncontrols.jci.com
imperva.com
incapsula.com
incapsula.com
imperva.com
smforms.na.jci.com
incapsula.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
incapsula.com
incapsula.com
securityreporting.corp.na.jci.com
imperva.com
eidp.jci.com
imperva.com
incapsula.com
www.jcihost.com
incapsula.com
managedvideo.jci.com
prodinsight.tyco.com
eiapiqa.uk.jci.com
johnsoncontrols.com
incapsula.com
incapsula.com
imperva.com
incapsula.com
incapsula.com
peoplepicker.jci.com
duediligenceonlineform.jci.com
prod.fis.ga.jci.com
incapsula.com
devsynchronybearings.jci.com
metasys.jci.com
incapsula.com
incapsula.com
exactviewrtw.jci.com
agsm.jci.com
eimftdev-adminst.us.jci.com
imperva.com
securityreporting.corp.na.jci.com
imperva.com
paymentmanager.jci.com
travelbur02.jci.com
incapsula.com
imperva.com
incapsula.com
mysite.jci.com
us.managedaccess.jci.com
tdf.jci.com
incapsula.com
incapsula.com
it.jci.com
incapsula.com
imperva.com
incapsula.com
bemea-apps.jci.com
imperva.com
frontliner-qa.jci.com
imperva.com
imperva.com
jcibts-swm-sb.jci.com
conferencing.ga.jci.com
imperva.com
jcibts-swm-sb.jci.com
incapsula.com
incapsula.com
eidpqa.jci.com
MatchMaster.jci.com
incapsula.com
Certificate
The complete raw certificate details for it.jci.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHwjCCBqqgAwIBAgIQXW1krBIawU4AAAAAUOG8sjANBgkqhkiG9w0BAQsFADCB ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0x ODA0MTMxNDQxMjJaFw0yMDA0MTMxNTExMjFaMGsxCzAJBgNVBAYTAlVTMRIwEAYD VQQIEwlXaXNjb25zaW4xEjAQBgNVBAcTCU1pbHdhdWtlZTEfMB0GA1UEChMWSm9o bnNvbiBDb250cm9scywgSW5jLjETMBEGA1UEAxMKaXQuamNpLmNvbTCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAKOtLxk3DJBU4jBy/W0QVsg1HG9rn9KZ 2n0hhjQAm/qR07vlZgqWThJbM+mU9wzcGlw8N/igPrnJbW99KNtJV5Ed6meBLzDY k2b+7lZqtN5kXpPrrZMKJb6OFkaVzns6qPPByXb3cje5s3joMuoPzgo+oHwjMi7B QApvUYSyKky1RBcc2DBL6to6g8PfL8ZyGbzHCXLf3lTFeRSKkTjsAjfPFG7LPSvS HUI2m9oGJsCvis0HcgFhJcdS1uMeDH9q3GgxKW14eOqObjkXp73ZGpZE4vHnWa9l CvnswQBPKKfIUcinZnrOM+2STpeJrrc5IpevAzA2vOpNLYf5nxDkWkkCAwEAAaOC BBAwggQMMIGnBgNVHREEgZ8wgZyCCml0LmpjaS5jb22CElVzZXJBcGkuaXQuamNp LmNvbYIYU3VibWlzc2lvbkFwaS5pdC5qY2kuY29tghlJbnRlZ3JhdGlvbkFwaS5p dC5qY2kuY29tgh1SZXF1ZXN0T2ZmZXJpbmdBcGkuaXQuamNpLmNvbYIWZ2xvYmFs aWRnZW4uaXQuamNpLmNvbYIOd3d3Lml0LmpjaS5jb20wggH4BgorBgEEAdZ5AgQC BIIB6ASCAeQB4gB2AFWB1MIWkDYBSuoLm1c8U/DA5Dh4cCUIFy+jqh0HE9MMAAAB Yr+PnnMAAAQDAEcwRQIgbrNsZxvAUdC5XNqpHS6GdZ85aElKBv8JS4imSOtPE2wC IQCX5cIOp2mHtcAcqScb+shh7kqmpZm+VtObLd6O48kjlgB3AN3rHSt6DU+mIIuB rYFocH4ujp0B1VyIjT0RxM227L7MAAABYr+PnrEAAAQDAEgwRgIhAN3yjyP8rNd9 V4t9pbzjfbbkK4UgHMIUWrM2OuOIWNHSAiEA0gsgveXDMm4lmZY6h24atDxOzAPO shmA3AkpmYPuA1AAdwC72d+8H4pxtZOUI5eqkntHOFeVCqtS6BqQlmQ2jh7RhQAA AWK/j550AAAEAwBIMEYCIQCdidCnb9UxSebbAJZPCGel8YCe22sdM5lz5WMp6IEF hgIhAKtDBZUqArWnuss+OO2P3C072Y9h1qbk2mKZiHESBp9aAHYApLkJkLQYWBSH uxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFiv4+eegAABAMARzBFAiEAzjGFO/Rm 4Ux3sew/XJIBOM/GkHH7pHV2jm5Ey5U15IkCIE9OcrhJF0zUiZZ6WpUgULbeSoed 6/TrLCV/mIYkabnpMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwMwYDVR0fBCwwKjAooCagJIYiaHR0cDovL2NybC5lbnRydXN0 Lm5ldC9sZXZlbDFrLmNybDBLBgNVHSAERDBCMDYGCmCGSAGG+mwKAQUwKDAmBggr BgEFBQcCARYaaHR0cDovL3d3dy5lbnRydXN0Lm5ldC9ycGEwCAYGZ4EMAQICMGgG CCsGAQUFBwEBBFwwWjAjBggrBgEFBQcwAYYXaHR0cDovL29jc3AuZW50cnVzdC5u ZXQwMwYIKwYBBQUHMAKGJ2h0dHA6Ly9haWEuZW50cnVzdC5uZXQvbDFrLWNoYWlu MjU2LmNlcjAfBgNVHSMEGDAWgBSConB03bxTP8971PfNf6dgxgpMvzAdBgNVHQ4E FgQU0JTiP+yqrp7cY4KrKf8ixgmMMm0wCQYDVR0TBAIwADANBgkqhkiG9w0BAQsF AAOCAQEAR1RC7WbuduG7W0K1K80p2zbvEEkaundjRvf11sTIXyEsmNFE8cgF5OCm 2j3lEBmrIexBfpdnrkiojTDh6VkgztOIjJohXwGyV4y4xEw3pEaB51dnOd3nJmcS VEDw3c35JeO2jdOFO5ICKtqHyN4EAaeonTxxtKA06G2spNcO1BksHNhSLGu/CedG +eFf+v9l7zSQhu/bLq92tvydaOmqp+/GcHJC9wPkHoV5Sh8ny3GMVNZX2y9JtMiK khTeP4x1rgEvs4cuPY6k2XK/JDLbiO0mg8i+k1Iz6ApRRW3Wa3VGKsV/PDw9hFHx So0VXJ9tpg+6Kdha6tssQkXoSUt1aA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo60vGTcMkFTiMHL9bRBW yDUcb2uf0pnafSGGNACb+pHTu+VmCpZOElsz6ZT3DNwaXDw3+KA+ucltb30o20lX kR3qZ4EvMNiTZv7uVmq03mRek+utkwolvo4WRpXOezqo88HJdvdyN7mzeOgy6g/O Cj6gfCMyLsFACm9RhLIqTLVEFxzYMEvq2jqDw98vxnIZvMcJct/eVMV5FIqROOwC N88Ubss9K9IdQjab2gYmwK+KzQdyAWElx1LW4x4Mf2rcaDEpbXh46o5uORenvdka lkTi8edZr2UK+ezBAE8op8hRyKdmes4z7ZJOl4mutzkil68DMDa86k0th/mfEORa SQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 124186205839384865115743764708461755570 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-13 14:41:22 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-13 15:11:21 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wisconsin' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Milwaukee' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Johnson Controls, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'it.jci.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20662243912175496331488780034581343122214368355968488525819699239645684142976260160097364055458736124153175934534316526900219589606431657390277489405414565429329141083800922174647172892688036200562855937335128567988923575709477977793027009042748976476144507122756366667022984956758802790812513445798236349690288847570796804419930857389912406696704669577456378492623409469040584217853686830370634517972833333590582397822765130802087030032832389780899231660032298322130577111448310974004115046638159858126695493581190906980042627656456375573145109699500288160502613964687852854541868801070002775560991709620816148978249 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (159 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.jci.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'UserApi.it.jci.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'SubmissionApi.it.jci.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'IntegrationApi.it.jci.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'RequestOfferingApi.it.jci.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalidgen.it.jci.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.it.jci.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (488 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes) 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 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d094e23fecaaae9edc6382ab29ff22c6098c326d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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