*.three.co.uk
- Hutchison 3G UK Ltd -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number 80:ce:0b:fa:df:e1:f7:2e:00:00:00:00:50:e4:c4:15 was issued on by Entrust, Inc..
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Hutchison 3G UK Ltd
Organization:
Hutchison 3G UK Ltd
State / Province:
BE
Locality: Maidenhead
Country: GB
Locality: Maidenhead
Country: GB
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 80:ce:0b:fa:df:e1:f7:2e:00:00:00:00:50:e4:c4:15Serial Number (int): 171211039596162007730268385849754567701
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 85:5a:4c:63:f5:93:bf:b0:da:d4:91:5f:dc:a7:48:c8:36:1b:58:e7
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): 54:e6:41:81:c4:a5:be:4f:6c:4d:a1:6f:5d:9c:fc:2c:03:c1:b3:dc
Fingerprint (sha256): 03:c6:ad:13:dc:be:0e:f0:ac:69:49:c8:84:a4:35:89:78:08:6a:81:04:6c:be:c4:28:80:05:a5:13:b7:03:e9
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate *.three.co.uk
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.three.co.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.three.co.uk
three.co.uk
*.three.ie
MR1-WCS-LYAPP01.corpuk.net
MR1-WCS-LYAPP02.corpuk.net
officewebapps01.three.co.uk
three.co.uk
*.three.ie
MR1-WCS-LYAPP01.corpuk.net
MR1-WCS-LYAPP02.corpuk.net
officewebapps01.three.co.uk
Other certificates including the domain name three.co.uk
(limited to 100 certificates)
f.chat3.three.co.uk
mva.testbed.three.co.uk
smetrics.three.co.uk
owa.three.co.uk
hem-webservices.three.co.uk
www.businesstools.three.co.uk
users-pdt.three.co.uk
warehouse.three.co.uk
jobs.three.co.uk
secure06.lithium.com
secure07.stage.lithium.com
*.three.co.uk
connect.three.co.uk
three.co.uk
2nddomain.three.co.uk
sslcertificate2.queue-it.net
www.three.co.uk
preprod-store.three.co.uk
sslcertificate2.queue-it.net
test-staging-active.three.co.uk
mail.three.co.uk
three.co.uk
accessories.three.co.uk
secure06.lithium.com
secure06.lithium.com
locator.three.co.uk
smetrics.three.co.uk
obsp03clust-dfe-vip.it.three.co.uk
mconsole.three.co.uk
three.co.uk
www.three.co.uk
blog1.three.co.uk
smobile.three.co.uk
2nddomain.three.co.uk
man-webservices.three.co.uk
secure07.stage.lithium.com
intranet.three.co.uk
secure06.lithium.com
b2c-mobile-buat.testbed.three.co.uk
mifioffers.three.co.uk
hem-webservices.three.co.uk
profile.three.co.uk
test-staging-active.three.co.uk
secure07.stage.lithium.com
repair.three.co.uk
reseller-test.three.co.uk
threeanalyst.three.co.uk
threerescue.three.co.uk
m.services.three.co.uk
staging-active.three.co.uk
sslcertificate2.queue-it.net
wholesale.three.co.uk
mail.three.co.uk
qc.three.co.uk
mail.three.co.uk
business.three.co.uk
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
misp.three.co.uk
secure06.lithium.com
fila.ingressorapido.com.br
sslcertificate2.queue-it.net
locator.three.co.uk
sghp.three.co.uk
smetrics.three.co.uk
sslcertificate2.queue-it.net
my3.three.co.uk
test-staging-active.three.co.uk
ses.three.co.uk
sslcertificate2.queue-it.net
intranet.three.co.uk
secure07.stage.lithium.com
auth.three.co.uk
intranet.three.co.uk
accessories.three.co.uk
dl.threerescue.three.co.uk
three.co.uk
three.co.uk
sslcertificate2.queue-it.net
www.businesstools.three.co.uk
me.three.co.uk
mva.testbed.three.co.uk
threerescue.three.co.uk
access.three.co.uk
mstrprod.three.co.uk
secure06.lithium.com
sslcertificate2.queue-it.net
registration.three.co.uk
api-webservices.three.co.uk
mva.testbed.three.co.uk
smetrics.three.co.uk
owa.three.co.uk
hem-webservices.three.co.uk
www.businesstools.three.co.uk
users-pdt.three.co.uk
warehouse.three.co.uk
jobs.three.co.uk
secure06.lithium.com
secure07.stage.lithium.com
*.three.co.uk
connect.three.co.uk
three.co.uk
2nddomain.three.co.uk
sslcertificate2.queue-it.net
www.three.co.uk
preprod-store.three.co.uk
sslcertificate2.queue-it.net
test-staging-active.three.co.uk
mail.three.co.uk
three.co.uk
accessories.three.co.uk
secure06.lithium.com
secure06.lithium.com
locator.three.co.uk
smetrics.three.co.uk
obsp03clust-dfe-vip.it.three.co.uk
mconsole.three.co.uk
three.co.uk
www.three.co.uk
blog1.three.co.uk
smobile.three.co.uk
2nddomain.three.co.uk
man-webservices.three.co.uk
secure07.stage.lithium.com
intranet.three.co.uk
secure06.lithium.com
b2c-mobile-buat.testbed.three.co.uk
mifioffers.three.co.uk
hem-webservices.three.co.uk
profile.three.co.uk
test-staging-active.three.co.uk
secure07.stage.lithium.com
repair.three.co.uk
reseller-test.three.co.uk
threeanalyst.three.co.uk
threerescue.three.co.uk
m.services.three.co.uk
staging-active.three.co.uk
sslcertificate2.queue-it.net
wholesale.three.co.uk
mail.three.co.uk
qc.three.co.uk
mail.three.co.uk
business.three.co.uk
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
misp.three.co.uk
secure06.lithium.com
fila.ingressorapido.com.br
sslcertificate2.queue-it.net
locator.three.co.uk
sghp.three.co.uk
smetrics.three.co.uk
sslcertificate2.queue-it.net
my3.three.co.uk
test-staging-active.three.co.uk
ses.three.co.uk
sslcertificate2.queue-it.net
intranet.three.co.uk
secure07.stage.lithium.com
auth.three.co.uk
intranet.three.co.uk
accessories.three.co.uk
dl.threerescue.three.co.uk
three.co.uk
three.co.uk
sslcertificate2.queue-it.net
www.businesstools.three.co.uk
me.three.co.uk
mva.testbed.three.co.uk
threerescue.three.co.uk
access.three.co.uk
mstrprod.three.co.uk
secure06.lithium.com
sslcertificate2.queue-it.net
registration.three.co.uk
api-webservices.three.co.uk
Certificate
The complete raw certificate details for *.three.co.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIRAIDOC/rf4fcuAAAAAFDkxBUwDQYJKoZIhvcNAQELBQAw gboxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQL Ex9TZWUgd3d3LmVudHJ1c3QubmV0L2xlZ2FsLXRlcm1zMTkwNwYDVQQLEzAoYykg MjAxMiBFbnRydXN0LCBJbmMuIC0gZm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxLjAs BgNVBAMTJUVudHJ1c3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBMMUswHhcN MTgwNzExMTAyMTU4WhcNMTkwNzI5MTA1MTU3WjBlMQswCQYDVQQGEwJHQjELMAkG A1UECBMCQkUxEzARBgNVBAcTCk1haWRlbmhlYWQxHDAaBgNVBAoTE0h1dGNoaXNv biAzRyBVSyBMdGQxFjAUBgNVBAMMDSoudGhyZWUuY28udWswggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQCYzihWgV7uHslp77tynKdbfnD5iytljn1feSjM aGjUrzzfWScOLRWuevrWbrvvVtfJiCl9SZU/idpEhHPS1pZ7AAHD412FfNl/lGcH +IQ64519l3MX8FQzsBr7ubPYPPGVCj5eohjxr8hDxv7s7MgGygBt51gVBaF9dvgA kPoiXxscv1Zbw35IJddkgmQIS3Qr6zjPFTaScNmq2TrYVH2A4MFXm5HEgfxHZDpa OzoEazW38OxoW5f7ieEEDpWjhuJxOKxpcNTVGsMKGknXWX4eWC2b7xQhv/6+Pnge AWC/RWjlGl0UTtPjmtk7aXnFIZ+9tkOJBq7KQwDiGIJp41zBAgMBAAGjggN3MIID czCBhgYDVR0RBH8wfYINKi50aHJlZS5jby51a4ILdGhyZWUuY28udWuCCioudGhy ZWUuaWWCGk1SMS1XQ1MtTFlBUFAwMS5jb3JwdWsubmV0ghpNUjEtV0NTLUxZQVBQ MDIuY29ycHVrLm5ldIIbb2ZmaWNld2ViYXBwczAxLnRocmVlLmNvLnVrMIIBgAYK KwYBBAHWeQIEAgSCAXAEggFsAWoAdgCHdb/nWXz4jEOZX73zbv9WjUdWNv9KtWDB tOr/XqCDDwAAAWSI+BzYAAAEAwBHMEUCIQChmmvcIFmLeq/4nYbXDL7E516OXmy1 +7GEMLHmjMN5DAIgUOXg0JacYCInR0cFEtU8FPHTVqzecR/8sNp68ratk58AdwBV gdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAWSI+BzhAAAEAwBIMEYC IQC0uAB620gSSZIA8PRBSFeS9dL3lYvJMt1RCRFUk/0jJgIhAOv1cn/7WPnTMhEn JcaZe4Hwr89T3vr/o1QnWDh0GNs/AHcAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUuga kJZkNo4e0YUAAAFkiPgc4gAABAMASDBGAiEAj4k8MBWtJcmp++hw1/cxQaWED83l LKTrQocrkfuq16sCIQC2eyXQlPmJslD9Tv3V7Omy73MLaAtdOyhoPw7wRCsZljAO BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDMG A1UdHwQsMCowKKAmoCSGImh0dHA6Ly9jcmwuZW50cnVzdC5uZXQvbGV2ZWwxay5j cmwwSwYDVR0gBEQwQjA2BgpghkgBhvpsCgEFMCgwJgYIKwYBBQUHAgEWGmh0dHA6 Ly93d3cuZW50cnVzdC5uZXQvcnBhMAgGBmeBDAECAjBoBggrBgEFBQcBAQRcMFow IwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLmVudHJ1c3QubmV0MDMGCCsGAQUFBzAC hidodHRwOi8vYWlhLmVudHJ1c3QubmV0L2wxay1jaGFpbjI1Ni5jZXIwHwYDVR0j BBgwFoAUgqJwdN28Uz/Pe9T3zX+nYMYKTL8wHQYDVR0OBBYEFIVaTGP1k7+w2tSR X9ynSMg2G1jnMAkGA1UdEwQCMAAwDQYJKoZIhvcNAQELBQADggEBAGy2ZUaI38yq tj01tE9v99slE6EFdoslsEeQ43n/BF3aU5xAc9TKMCdFyqTIG3KwGyZ0MzCn8Uou o23Mi39G4tJY+ZjwXDWv+fUHykere6BvJU2mOvgJVyfcTxYsTN7yeK+5rdMKCGWP O4k78CBWrKk702hv9HTCjUTQztUy13li4rzgUmM28QSimKc8JNFO+sIy0lKy2QEt Y8gJ9pKBIpHh8t/hOuNinldDvFfY8zdOBjm8zJlTB0VolXAmNIxT2idpCm7D7Pnt IGuJ5L8TjF0kjY1773t6z2r7kDhz/X+YpCWFd7zbI1Ft3nORjpCE2d7nYvnzJ5YF 2zPMWzICoTA= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmM4oVoFe7h7Jae+7cpyn W35w+YsrZY59X3kozGho1K8831knDi0Vrnr61m6771bXyYgpfUmVP4naRIRz0taW ewABw+NdhXzZf5RnB/iEOuOdfZdzF/BUM7Aa+7mz2DzxlQo+XqIY8a/IQ8b+7OzI BsoAbedYFQWhfXb4AJD6Il8bHL9WW8N+SCXXZIJkCEt0K+s4zxU2knDZqtk62FR9 gODBV5uRxIH8R2Q6Wjs6BGs1t/DsaFuX+4nhBA6Vo4bicTisaXDU1RrDChpJ11l+ Hlgtm+8UIb/+vj54HgFgv0Vo5RpdFE7T45rZO2l5xSGfvbZDiQauykMA4hiCaeNc wQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 171211039596162007730268385849754567701 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-11 10:21:58 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-29 10:51:57 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maidenhead' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hutchison 3G UK Ltd' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.three.co.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19289882441514937209860584485860401693328630713880906779588645219347528223890561606353669506853379614555461673872616458760553026682938375450670320763845730837302572174102769459177072846693781680772595679865487722902463405535533312522021246218924553258946894280665646502053022352465271787299165221138484783361766589043789051985505149154018607987514540536605849361979068609288529267768192882652403668965517964796290542731786088307398658869937734182657334908988071499325016595259406403385139504804909159573926771766631203745829164452672642007069349884064399922987528421979244577792071760414045924496560337039670932364481 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.three.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'three.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.three.ie' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'MR1-WCS-LYAPP01.corpuk.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'MR1-WCS-LYAPP02.corpuk.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'officewebapps01.three.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) 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 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 855a4c63f593bfb0dad4915fdca748c8361b58e7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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