WEB.SMITH.QUEENSU.CA
- Queen's University at Kingston -
Issued by Entrust Certification Authority - L1M
About this certificate
This digital certificate with serial number e3:8b:98:72:0c:81:cf:cb:00:00:00:00:54:cd:85:63 was issued on by Entrust, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Queen's University at Kingston
Company registration number:
1841-10-16
Organization: Queen's University at Kingston
Organization unit: Smith School of Business
Organization: Queen's University at Kingston
Organization unit: Smith School of Business
State / Province:
Ontario
Locality: Kingston
Country: CA
Locality: Kingston
Country: CA
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): e3:8b:98:72:0c:81:cf:cb:00:00:00:00:54:cd:85:63Serial Number (int): 302459576268653278692706296288861062499
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 8f:1d:01:7b:fd:5e:8f:13:17:88:8c:91:42:b7:11:02:14:85:89:f3
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a
Fingerprint (sha1): e8:01:bd:40:f4:7d:40:de:0f:d1:31:22:5a:0b:7e:17:3e:75:12:a7
Fingerprint (sha256): 04:17:28:28:27:2d:ce:b4:f9:b8:08:65:a0:9b:43:14:a0:dc:ed:a4:7c:b1:86:87:31:6c:37:a8:0b:5a:50:13
Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1m.crl
Check the revocation status for certificate WEB.SMITH.QUEENSU.CA
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for WEB.SMITH.QUEENSU.CA
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
WEB.SMITH.QUEENSU.CA
WEB.PROD.BUSINESS.QUEENSU.CA
WEB.PROD.BUSINESS.QUEENSU.CA
Other certificates including the domain name QUEENSU.CA
(limited to 100 certificates)
Certificate
The complete raw certificate details for WEB.SMITH.QUEENSU.CA in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG6TCCBdGgAwIBAgIRAOOLmHIMgc/LAAAAAFTNhWMwDQYJKoZIhvcNAQELBQAw gboxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQL Ex9TZWUgd3d3LmVudHJ1c3QubmV0L2xlZ2FsLXRlcm1zMTkwNwYDVQQLEzAoYykg MjAxNCBFbnRydXN0LCBJbmMuIC0gZm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxLjAs BgNVBAMTJUVudHJ1c3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBMMU0wHhcN MTcwNzEwMTE0MzU1WhcNMTkwMTMxMTIxMzUyWjCB4zELMAkGA1UEBhMCQ0ExEDAO BgNVBAgTB09udGFyaW8xETAPBgNVBAcTCEtpbmdzdG9uMRMwEQYLKwYBBAGCNzwC AQMTAkNBMScwJQYDVQQKEx5RdWVlbidzIFVuaXZlcnNpdHkgYXQgS2luZ3N0b24x GjAYBgNVBA8TEUdvdmVybm1lbnQgRW50aXR5MSEwHwYDVQQLExhTbWl0aCBTY2hv b2wgb2YgQnVzaW5lc3MxEzARBgNVBAUTCjE4NDEtMTAtMTYxHTAbBgNVBAMTFFdF Qi5TTUlUSC5RVUVFTlNVLkNBMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC AgEAk/eWHerVOzw3UYLYMDkDjuQH/6OO67OBQE5rJEEzvMDdOND6xqnLY2WT0L5N unwTLtVmMtlKo8qgd0hPhtMeDDBNx2wIGDVgSO3hddfQrwsosdFGFjO9yVUBKgXs +nGtn/sWNHHYZR7+rCAG+zlKNwFLv29YTUCY2wu4ANXAhNoM8XqeCYxxJtRZZjr2 S1WYfqPIAB52Ffw8oFxGPxeIPQ9ZmOv1OUlTQcBrTVpjT2RxxDKobm60PF+VX5dn jU16HAQd9Y7B24j3ro2fxAIp3OkR7p0KizEo/F+YsV9zTpT5u6GE8FMKoHvDRwRJ rpjNpAWHn+puSoFT3ZSbVbUoJzFrK5gpknCrnJ+Jbvj1cW3XLtQ13oTFj1uTDg86 xMDF0QivfUzFzCREB1LszXx1wsGZa+GvKifzi15C1nDmz62XDztHf6ZICSvesc93 DFU64niQmzCy9JCNSzoHwoR3yF/T4jPzvxK/h9nMtBncxGECTwfgeeNYHo3t90dL Mb8iYNXIpTn8SH1gOU5z2Q095YSf1PG7tN85GsWvs7rNK1itxEkd2qlmdV033LPL WX0mscre9ugSbqfj1gxiePDuZRL0QzwhKTCbS/3ltrQqTELR2yPALooqQb2TKz3U ir0sQ/72R8RHLJAknPLu7HgrgE/syVyda7+AanleodcWFYMCAwEAAaOCAb0wggG5 MBMGCisGAQQB1nkCBAMBAf8EAgUAMD0GA1UdEQQ2MDSCFFdFQi5TTUlUSC5RVUVF TlNVLkNBghxXRUIuUFJPRC5CVVNJTkVTUy5RVUVFTlNVLkNBMA4GA1UdDwEB/wQE AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwaAYIKwYBBQUHAQEE XDBaMCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5lbnRydXN0Lm5ldDAzBggrBgEF BQcwAoYnaHR0cDovL2FpYS5lbnRydXN0Lm5ldC9sMW0tY2hhaW4yNTYuY2VyMDMG A1UdHwQsMCowKKAmoCSGImh0dHA6Ly9jcmwuZW50cnVzdC5uZXQvbGV2ZWwxbS5j cmwwSgYDVR0gBEMwQTA2BgpghkgBhvpsCgECMCgwJgYIKwYBBQUHAgEWGmh0dHA6 Ly93d3cuZW50cnVzdC5uZXQvcnBhMAcGBWeBDAEBMB8GA1UdIwQYMBaAFMP30LUq MK2vDZEhcDlU3byJcMc6MB0GA1UdDgQWBBSPHQF7/V6PExeIjJFCtxECFIWJ8zAJ BgNVHRMEAjAAMA0GCSqGSIb3DQEBCwUAA4IBAQB0FGgkSA0L2nkon+6BLrLnnU/+ lIWqusPiy10b9trnRgn1DjZ81YjWi+jC+V/rgmjdRelzU4MrvKvdgzYQWpl4XcgJ HViDspSorsGVgedukfdTp92CmFQVUD1Qn6PMZTvCI8bX5r+eIeiwe8gmv6VXn4LV lnkEApPPo25aSlIJn0JWvW5+2EuMica/pc50ZpnUrgGBgPvt5t96V4q4GdJr2l82 +RY0AoywWOsaoRubBngYfD/oC7FZ23ISV1XW7B1pr92trg3tOS0jaWXwSTHiyYc9 o/Co0QSHIWEjE4tXyU/6VonzXpmnXkEFKFm2afMSWv2LyOdBk66MR2uWWVmq -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAk/eWHerVOzw3UYLYMDkD juQH/6OO67OBQE5rJEEzvMDdOND6xqnLY2WT0L5NunwTLtVmMtlKo8qgd0hPhtMe DDBNx2wIGDVgSO3hddfQrwsosdFGFjO9yVUBKgXs+nGtn/sWNHHYZR7+rCAG+zlK NwFLv29YTUCY2wu4ANXAhNoM8XqeCYxxJtRZZjr2S1WYfqPIAB52Ffw8oFxGPxeI PQ9ZmOv1OUlTQcBrTVpjT2RxxDKobm60PF+VX5dnjU16HAQd9Y7B24j3ro2fxAIp 3OkR7p0KizEo/F+YsV9zTpT5u6GE8FMKoHvDRwRJrpjNpAWHn+puSoFT3ZSbVbUo JzFrK5gpknCrnJ+Jbvj1cW3XLtQ13oTFj1uTDg86xMDF0QivfUzFzCREB1LszXx1 wsGZa+GvKifzi15C1nDmz62XDztHf6ZICSvesc93DFU64niQmzCy9JCNSzoHwoR3 yF/T4jPzvxK/h9nMtBncxGECTwfgeeNYHo3t90dLMb8iYNXIpTn8SH1gOU5z2Q09 5YSf1PG7tN85GsWvs7rNK1itxEkd2qlmdV033LPLWX0mscre9ugSbqfj1gxiePDu ZRL0QzwhKTCbS/3ltrQqTELR2yPALooqQb2TKz3Uir0sQ/72R8RHLJAknPLu7Hgr gE/syVyda7+AanleodcWFYMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 302459576268653278692706296288861062499 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-10 11:43:55 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-31 12:13:52 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kingston' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Queen's University at Kingston' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Smith School of Business' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1841-10-16' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WEB.SMITH.QUEENSU.CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 603653241919321246125371983406906088713101275865594258510628984388512164263160234741613754691569010250669201556842560499455660217494272389926830812028322808373171919363064659070423973990790606080684856910110761402055841704364999500579261861923083349986825452475329164321985586952804136459993295739750626866864436630119417925805950093057405256707522117472682246941100225104740610035149861148255341051951810603634732376239269502914450995784084763335014708770008722989834280475479326071282431304838220848127324487999231136050717841400765906459342510622045990837090422497792200697687044819833699706486616398902462470547254267407145550098161744400334013512878603563503827260712520753284980304965234369057367329395240045545964299148823882736178665811664103712188809518728045952360502336754654987798981298053061885232803298903551262073130827960710585058772858319334706915486776038497132198951047926606557186494234219778163046102292526398231835938521480087798445907709402072583833896020336316612714233529380843260455086511157723998733414074041768229595969770291891655946879923301265623520319192237103922554290250145778797331612694320979911955332864497008895290969688304532326194468466529983098855925432539920097035300855276104974670925010307 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'WEB.SMITH.QUEENSU.CA' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'WEB.PROD.BUSINESS.QUEENSU.CA' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8f1d017bfd5e8f1317888c9142b71102148589f3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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