static2-qa2.chasecdn.com

- JPMorgan Chase and Co. -

Issued by Entrust Certification Authority - L1M

About this certificate

This digital certificate with serial number 7e:71:71:41:31:38:99:fc:74:ab:ca:3b:19:bb:a2:13 was issued on by Entrust, Inc..

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

JPMorgan Chase and Co.

Company registration number: 691011
Organization: JPMorgan Chase and Co.
State / Province: New York
Locality: New York
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 7e:71:71:41:31:38:99:fc:74:ab:ca:3b:19:bb:a2:13
Serial Number (int): 168071754091262804080046234016700670483
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 0d:37:ca:e5:5f:d8:2b:f8:cc:ae:80:3a:c9:90:cb:67:2f:77:31:5e
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): 49:18:7a:16:ce:3a:9b:32:89:86:fe:57:15:53:41:86:30:c4:0c:b9
Fingerprint (sha256): 03:89:e7:ba:04:c8:50:17:0c:e4:04:9f:50:02:7d:7c:f5:4a:74:5c:46:07:d8:fc:a2:0f:b4:d0:43:38:45:ef

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for certificate static2-qa2.chasecdn.com

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for static2-qa2.chasecdn.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

static2-qa2.chasecdn.com
static2-qa1.chasecdn.com
asset-qa1.chase.com
static2-qa1.edgeuat.cldlb.jpmchase.com
us-west-2-static2-qa3.edgeuat.cldlb.jpmchase.com
static2-qa4.edgeuat.cldlb.jpmchase.com
us-east-1-static2-uat.edgeuat.cldlb.jpmchase.com
asset-perf.chase.com
us-east-1-static2-qa4.edgeuat.cldlb.jpmchase.com
us-west-2-static2-qa2.edgeuat.cldlb.jpmchase.com
static2-qa2.edgeuat.cldlb.jpmchase.com
static2-qa3.chasecdn.com
us-east-1-static2-perf.edgeuat.cldlb.jpmchase.com
us-west-2-static2-perf.edgeuat.cldlb.jpmchase.com
asset-qa2.chase.com
static2-perf.edgeuat.cldlb.jpmchase.com
static2-perf.chasecdn.com
us-west-2-static2-qa1.edgeuat.cldlb.jpmchase.com
static2-qa4.chasecdn.com
us-east-1-static2-qa1.edgeuat.cldlb.jpmchase.com
us-west-2-static2-qa4.edgeuat.cldlb.jpmchase.com
us-east-1-static2-qa3.edgeuat.cldlb.jpmchase.com
us-east-1-static2-qa2.edgeuat.cldlb.jpmchase.com
static2-qa3.edgeuat.cldlb.jpmchase.com

Other certificates including the domain name chasecdn.com

(limited to 100 certificates)
sitesqa1-edge.uat.aws.jpmchase.net
secure2-qa2.chasecdn.com
static2-qa2.chasecdn.com
alerts.static-qa.chasecdn.com
static2-qa2.chasecdn.com
ur.static.chasecdn.com
secure-qa2.chasecdn.com
static-qa.chasecdn.com
secure2-qa2.chasecdn.com
secure-qa2.chasecdn.com
secure-qa3.chasecdn.com
secure-ist2.chasecdn.com
static.chasecdn.com
secure.chasecdn.com
static.chasecdn.com
static-qa.chasecdn.com
secure-qa1.chasecdn.com
ur.static.chasecdn.com
ur.static.chasecdn.com
ur.static-qa.chasecdn.com
static.chasecdn.com
securecdnq1.chasecdn.com
secure-qa1.chasecdn.com
static2-qa2.chasecdn.com
static2.chasecdn.com
secure-qa3.chasecdn.com
secure.chasecdn.com
static.chasecdn.com
secure-qa2.chasecdn.com
ur.static-qa.chasecdn.com
secure-qa3.chasecdn.com
static-qa.chasecdn.com
secure.chasecdn.com
secure-qa2.chasecdn.com
secure-qa3.chasecdn.com
static.chasecdn.com
static-qa.chasecdn.com
static.chasecdn.com
secure-qa1.chasecdn.com
static2-perf.chasecdn.com
static-qa.chasecdn.com
secure2-qa2.chasecdn.com
static2-qa1.chasecdn.com
secure-qa3.chasecdn.com
ur.static.chasecdn.com
secure-qa3.chasecdn.com
aemutils.prod.chase.com
alerts.static.chasecdn.com
static.chasecdn.com
static.chasecdn.com
aemutils.prod.chase.com
static2-qa1.chasecdn.com
secure2.chasecdn.com
secure.chasecdn.com
aemutils.prod.chase.com
static-qa.chasecdn.com
secure-ist1.chasecdn.com
aemutils.prod.chase.com
static-qa.chasecdn.com
ur.static.chasecdn.com
secure.chasecdn.com
static2-qa2.chasecdn.com
secure-qa1.chasecdn.com
secure.chasecdn.com
static2-qa2.chasecdn.com
static.chasecdn.com
secure-qa4.chasecdn.com
secure.chasecdn.com
static2.chasecdn.com
static-qa.chasecdn.com
ur.static.chasecdn.com
secure.chasecdn.com
static2.chasecdn.com
secure2-qa2.chasecdn.com
ur.static-qa.chasecdn.com
static.chasecdn.com
secure-qa4.chasecdn.com
secure-qa1.chasecdn.com
static.chasecdn.com
static2-perf.chasecdn.com
ur.static-qa.chasecdn.com

Certificate

The complete raw certificate details for static2-qa2.chasecdn.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4APb8Ktf7N5Xxz6UXwdr
V4Z60x8WWZ15mUwPiJ/YNZsG4hSna2eIvpWm9stb4ZKcNq+35HuWLQtByxoGNee4
fVmR4TzY92Lr0SH4PmACpHvW5Vc+XivDqeTCx4vSjgQujtSvxfOvB359888qu6XO
IIwn1dBclp0DmIbmLzRpbVW2G/5RwMp4l1lG7+NWtwKMuQAi9mstG0/bD4Ssmz3p
1tEqVdZOOknVS2mXg3xDgsNy+z5tYw+TBVQpkAQ0TWzgETB0ibjjbwLW+cC4muIe
E31wuCchevawu8rtzblGzRIEOdeigj2JanL5rTHKAbqllvZjrJcPxLNcBRzkXk5w
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 168071754091262804080046234016700670483
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-12 20:57:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-12 20:57:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JPMorgan Chase and Co.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '691011'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'static2-qa2.chasecdn.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28279283325787052220518699474557138637849174063362725000120882074668789829919778867733532999996032268136187909541376761635938107553942439083750688427767769893789999980744693885782978392152299121797987749943067873679901232754755485853490335832176180213174995896508522783548398112674695370189671855714530799703030458434727929001813507529945305084252305557440564621717853946798771659851991865733167069564237828970763730513117981822209944434650514869282007956363408983115370324949063698989211677495525095582859145284217843088505760168877099652480367260426002629758460065309135706736713187528213132697204421079735305400457
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0d37cae55fd82bf8ccae803ac990cb672f77315e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (952 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2-qa2.chasecdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2-qa1.chasecdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asset-qa1.chase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2-qa1.edgeuat.cldlb.jpmchase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-west-2-static2-qa3.edgeuat.cldlb.jpmchase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2-qa4.edgeuat.cldlb.jpmchase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-east-1-static2-uat.edgeuat.cldlb.jpmchase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asset-perf.chase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-east-1-static2-qa4.edgeuat.cldlb.jpmchase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-west-2-static2-qa2.edgeuat.cldlb.jpmchase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2-qa2.edgeuat.cldlb.jpmchase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2-qa3.chasecdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-east-1-static2-perf.edgeuat.cldlb.jpmchase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-west-2-static2-perf.edgeuat.cldlb.jpmchase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asset-qa2.chase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2-perf.edgeuat.cldlb.jpmchase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2-perf.chasecdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-west-2-static2-qa1.edgeuat.cldlb.jpmchase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2-qa4.chasecdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-east-1-static2-qa1.edgeuat.cldlb.jpmchase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-west-2-static2-qa4.edgeuat.cldlb.jpmchase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-east-1-static2-qa3.edgeuat.cldlb.jpmchase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-east-1-static2-qa2.edgeuat.cldlb.jpmchase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2-qa3.edgeuat.cldlb.jpmchase.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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