mail.cambiumlearning.com

- Cambium Learning Group, Inc. -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 09:df:54:86:c0:f4:f3:1d:00:00:00:00:50:e3:0f:9e was issued on by Entrust, Inc..

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Cambium Learning Group, Inc.

Organization: Cambium Learning Group, Inc.
State / Province: Texas
Locality: Dallas
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:df:54:86:c0:f4:f3:1d:00:00:00:00:50:e3:0f:9e
Serial Number (int): 13122648560215240924728551504443805598
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 55:bd:bc:16:f8:e1:90:7e:31:85:a4:fe:c7:34:4c:26:0d:7a:f7:59
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): df:6a:60:b4:97:cc:25:2f:77:8b:c7:8a:fc:fd:59:d2:92:fb:80:1a
Fingerprint (sha256): 04:03:a7:2b:36:46:61:12:24:0e:8f:0a:6f:e2:9b:e3:c4:d4:9d:0f:c0:82:91:e6:b0:46:c1:b5:1d:b9:7a:c5

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate mail.cambiumlearning.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.cambiumlearning.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.cambiumlearning.com
autodiscover.kurzweiledu.com
autodiscover.voyagersopris.com
autodiscover.explorelearning.com
autodiscover.learninga-z.com
autodiscover.cambiumlearning.com

Other certificates including the domain name cambiumlearning.com

(limited to 100 certificates)
mail.cambiumlearning.com
unanet.cambiumlearning.com
unanet.cambiumlearning.com
dev.unanet.cambiumlearning.com
mail.cambiumlearning.com
qa.kws.cambiumlearning.com
email2.cambiumlearning.com
edi.cambiumlearning.com
kws.cambiumlearning.com
sso.cambiumlearning.com
vpntest.mi.cambiumlearning.com
support.cambiumlearning.com
secure.cambiumlearning.com
support.cambiumlearning.com
sslvpn.cambiumlearning.com
support.cambiumlearning.com
zabbix.mi.cambiumlearning.com
sslvpn.cambiumlearning.com
*.cambiumlearning.com
secure.cambiumlearning.com
mail.cambiumlearning.com
ftp2.cambiumlearning.com
unanet.cambiumlearning.com
*.cambiumlearning.com
connect.cambiumlearning.com
kws.cambiumlearning.com
mail.cambiumlearning.com
unanet.cambiumlearning.com
micucmsub.cambiumlearning.com
micucmsub.cambiumlearning.com
store.cambiumlearning.com
sslvpn.cambiumlearning.com
unanet.cambiumlearning.com
vpntest.mi.cambiumlearning.com
kws.cambiumlearning.com
backup.cambiumlearning.com
ingenius.cambiumlearning.com
unanet.cambiumlearning.com
miucmraexpe.cambiumlearning.com
mail.cambiumlearning.com
ingenius.cambiumlearning.com
dev.ingenius.cambiumlearning.com
store.cambiumlearning.com
sslvpn.cambiumlearning.com
*.cambiumlearning.com
mail.cambiumlearning.com
sslvpn.cambiumlearning.com
qa.kws.cambiumlearning.com
zabbix.tx.cambiumlearning.com
unanet.cambiumlearning.com
unanet.cambiumlearning.com
sso.cambiumlearning.com
as2.cambiumlearning.com
edi.cambiumlearning.com
email.cambiumlearning.com
store.cambiumlearning.com
pre.edi.cambiumlearning.com
txucmraexpe.cambiumlearning.com
zabbix.tx.cambiumlearning.com
backup.cambiumlearning.com
voip.cambiumlearning.com
micucmsub.cambiumlearning.com
vpntest.mi.cambiumlearning.com
store.cambiumlearning.com
*.cambiumlearning.com
store.cambiumlearning.com
support.cambiumlearning.com
store.cambiumlearning.com
vpntest.mi.cambiumlearning.com
*.cambiumlearning.com
sso.cambiumlearning.com
unanet.cambiumlearning.com
vpntest.mi.cambiumlearning.com
support.cambiumlearning.com
sslvpn.cambiumlearning.com
mail.cambiumlearning.com
support.cambiumlearning.com
micucmsub.cambiumlearning.com
*.cambiumlearning.com
Unity.cambiumlearning.com
ingenius.cambiumlearning.com
mail.cambiumlearning.com
mail.cambiumlearning.com
as2.cambiumlearning.com
unanet.cambiumlearning.com
txucmraexpe.cambiumlearning.com

Certificate

The complete raw certificate details for mail.cambiumlearning.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIH6DCCBtCgAwIBAgIQCd9UhsD08x0AAAAAUOMPnjANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0x
ODA1MjMyMDU0MDlaFw0yMDA4MDEyMTI0MDhaMHgxCzAJBgNVBAYTAlVTMQ4wDAYD
VQQIEwVUZXhhczEPMA0GA1UEBxMGRGFsbGFzMSUwIwYDVQQKExxDYW1iaXVtIExl
YXJuaW5nIEdyb3VwLCBJbmMuMSEwHwYDVQQDExhtYWlsLmNhbWJpdW1sZWFybmlu
Zy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiwwDyMYvGfXHy
Vjq2BOdV0QJolx+32uD2CVU+CAXu14KlDtNtpNwuPh2BErzfQi2Ax1uVgcFdM9Id
zxAsj6ieGjoOfZ2L6XN7mxIXn7lNEdoP7FEGge7hxOYPFLRZwJd3o4Jno2a57yMA
cMbaA0PGJeQmOx07ydW756SMW0/CcIB+SzXZ9imPw+EXuRJsF1vXnHPpc+bZiMG+
x1BcMa5w+dfsuaU+yvwlL8fHFNtjE8z1+k1gsxkixngEQCO8VXOCc777OCdeIm+s
pkved2Bj7RNtkLiJScwtB7MxesdLloSRujnRvSTK2201emep6gq/vfSBW2FaQJNz
EEx0s3CVAgMBAAGjggQpMIIEJTCBxQYDVR0RBIG9MIG6ghhtYWlsLmNhbWJpdW1s
ZWFybmluZy5jb22CHGF1dG9kaXNjb3Zlci5rdXJ6d2VpbGVkdS5jb22CHmF1dG9k
aXNjb3Zlci52b3lhZ2Vyc29wcmlzLmNvbYIgYXV0b2Rpc2NvdmVyLmV4cGxvcmVs
ZWFybmluZy5jb22CHGF1dG9kaXNjb3Zlci5sZWFybmluZ2Etei5jb22CIGF1dG9k
aXNjb3Zlci5jYW1iaXVtbGVhcm5pbmcuY29tMIIB8wYKKwYBBAHWeQIEAgSCAeME
ggHfAd0AdgBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAWOO40jv
AAAEAwBHMEUCIAmvsDkjdcZqdEPMf3tFh/nPOAg3dSzZrOzlNKr8WPKrAiEAp8tv
8+PJmMNV/e7I2Yp6lnnwDrZqQk3BX+tAqwO2wpEAdQDd6x0reg1PpiCLga2BaHB+
Lo6dAdVciI09EcTNtuy+zAAAAWOO40jaAAAEAwBGMEQCIGL3CZpYDTWuAPOF6rw0
odbybe3AzDysWHh/pkk7guJmAiAHczqBT+dlevsyfNqhi5AZ6dJVarDqJ14JUnnf
i16p/QB1AFYUBpov18Ls0/XhvUSyPsdGdrm8mRFcwO+UmFXWidDdAAABY47jSS0A
AAQDAEYwRAIgGzOYP78I0AV1f150gWL+NuHhDuTlamzC56UThRbH1QUCICvuCWnw
CbO+Oz9g3k7hZMQXA1SNrh80yavD7pwBtQuhAHUApLkJkLQYWBSHuxOizGdwCjw1
mAT5G9+443fNDsgN3BAAAAFjjuNI/AAABAMARjBEAiB7sTUwqokbZIOJWTHHZOYx
iuQ2ckxIHRQwWcVYQ2GFtgIgRWXFr2YEMPKrhUHelqZZqE+SdGsTPRMWt3Vka0bJ
ImgwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjAzBgNVHR8ELDAqMCigJqAkhiJodHRwOi8vY3JsLmVudHJ1c3QubmV0L2xldmVs
MWsuY3JsMEsGA1UdIAREMEIwNgYKYIZIAYb6bAoBBTAoMCYGCCsGAQUFBwIBFhpo
dHRwOi8vd3d3LmVudHJ1c3QubmV0L3JwYTAIBgZngQwBAgIwaAYIKwYBBQUHAQEE
XDBaMCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5lbnRydXN0Lm5ldDAzBggrBgEF
BQcwAoYnaHR0cDovL2FpYS5lbnRydXN0Lm5ldC9sMWstY2hhaW4yNTYuY2VyMB8G
A1UdIwQYMBaAFIKicHTdvFM/z3vU981/p2DGCky/MB0GA1UdDgQWBBRVvbwW+OGQ
fjGFpP7HNEwmDXr3WTAJBgNVHRMEAjAAMA0GCSqGSIb3DQEBCwUAA4IBAQAqsepa
adFZJO2rcWMLstPrCKUs5URprBKWNlWUA9FSXgkyiNPcZ/xoPRd1b209hPob46ag
MI0FPeQIASeuaaknY20d7mDgGT2R9/iQG9zTASjsw/76Jh6ijxGny7ydONMvorUH
fmBF4Oo2n5E2QRZ8ezuhyJzJXvP0tskndMphGhBX9yjGyfOMrZ9KF+irvjpryVgi
WKtYAZsadPOdRa4lEnBAkQD0zxPPP3z2layz2U4qHuVRU8V6Cr+8cpqyhGg1QloN
GE3n3o7mqyqFYMXZ0BsreU2juG6WnxiCWdDizqIINLQIvjzamzlUyeXRMYNU9uLr
w6xxqCujh/eqL+4h
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sMA8jGLxn1x8lY6tgTn
VdECaJcft9rg9glVPggF7teCpQ7TbaTcLj4dgRK830ItgMdblYHBXTPSHc8QLI+o
nho6Dn2di+lze5sSF5+5TRHaD+xRBoHu4cTmDxS0WcCXd6OCZ6Nmue8jAHDG2gND
xiXkJjsdO8nVu+ekjFtPwnCAfks12fYpj8PhF7kSbBdb15xz6XPm2YjBvsdQXDGu
cPnX7LmlPsr8JS/HxxTbYxPM9fpNYLMZIsZ4BEAjvFVzgnO++zgnXiJvrKZL3ndg
Y+0TbZC4iUnMLQezMXrHS5aEkbo50b0kytttNXpnqeoKv730gVthWkCTcxBMdLNw
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13122648560215240924728551504443805598
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-23 20:54:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-01 21:24:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dallas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cambium Learning Group, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.cambiumlearning.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28626016828548593321105282405606038536806768627107999240042879183040046002085264005259059363376316894606138911321993572067034892486577988984605827644926704980192378846354429256393038800776612647298182944493155948635452522660002729464926776147096515348008188459499419453041403440811985022295501535564132445749572118983640915946693291711492530436152712804594374282838249258497984445490023683131303214602857652849363844271146208895103262492202440248858475171520024673018543271878555456987901526883248893838021809435587110811621991291862294719981724035404195945355590662413517506681520205644408667163737571320104117039253
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (189 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.cambiumlearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.kurzweiledu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.voyagersopris.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.explorelearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.learninga-z.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.cambiumlearning.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (479 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							55bdbc16f8e1907e3185a4fec7344c260d7af759
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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