ITIMMPCIMASTER1.ucalgary.ca

- University of Calgary (Governors of the University of Calgary) -

Issued by Entrust Certification Authority - L1M

About this certificate

This digital certificate with serial number 22:65:b3:2d:17:1f:c9:49:00:00:00:00:54:cf:67:ed was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Calgary (Governors of the University of Calgary)

Company registration number: 1966-4-29
Organization: University of Calgary (Governors of the University of Calgary)
Organization unit: Information Technologies
State / Province: Alberta
Locality: Calgary
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 22:65:b3:2d:17:1f:c9:49:00:00:00:00:54:cf:67:ed
Serial Number (int): 45721807963142106528686462712234862573
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 77:be:a6:6e:a3:e3:70:18:c0:d7:a1:7d:e5:45:80:c4:2e:85:d2:48
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): 9d:67:6e:36:58:be:60:d9:7d:d3:63:fe:c8:92:71:54:d4:96:f1:b6
Fingerprint (sha256): 04:e1:f0:bc:69:bb:b0:f6:9d:48:8b:40:1a:c4:4d:d6:0a:9c:b9:d3:93:13:4e:11:09:8d:65:98:03:b4:76:06

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for certificate ITIMMPCIMASTER1.ucalgary.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ITIMMPCIMASTER1.ucalgary.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ITIMMPCIMASTER1.ucalgary.ca

Other certificates including the domain name ucalgary.ca

(limited to 100 certificates)
www.cstaab-test.cpsc.ucalgary.ca
cmddb.cpsc.ucalgary.ca
csus.cpsc.ucalgary.ca
www2.pugpig.com
capca.ucalgary.ca
largedisplaysinurbanlife.cpsc.ucalgary.ca
securesf.ucalgary.ca
ucalgary.ca
vsbdev.my.ucalgary.ca
discover.cpsc.ucalgary.ca
workrooms.ucalgary.ca
careers.talemetry.com
infrastructure.ucalgary.ca
ads-tl01.ucalgary.ca
careers.talemetry.com
secrets.cpsc.ucalgary.ca
cmddb.cpsc.ucalgary.ca
complexity.cpsc.ucalgary.ca
uconnectlabs.com
em.ucalgary.ca
voicesip.ucalgary.ca
saulwww.saulmain.cpsc.ucalgary.ca
*.ucweb.ucalgary.ca
pjl.ucalgary.ca
amploadvance.com
re18.org
bugzilla.cpsc.ucalgary.ca
largedisplaysinurbanlife.cpsc.ucalgary.ca
ucalgary.ca
5755424754106368-fe2.pantheonsite.io
akamaisecure2.qualtrics.com
ucalgary.ca
ucpl.admin.ucalgary.ca
barclaylab.ucalgary.ca
leadership.ucalgary.ca
asonam.cpsc.ucalgary.ca
smlweb.cpsc.ucalgary.ca
anslow.cpsc.ucalgary.ca
innovis.cpsc.ucalgary.ca
quicr.cru.ucalgary.ca
saulmain.cpsc.ucalgary.ca
arctic.ucalgary.ca
ucalgary.ca
cacsaic.cpsc.ucalgary.ca
bugzilla.cpsc.ucalgary.ca
viewcount.cpsc.ucalgary.ca
5638404075159552-fe2.pantheonsite.io
5753952654065664-fe1.pantheonsite.io
ucalgary.ca
careers.talemetry.com
ucalgary.ca
ucalgary.ca
alumni.cpsc.ucalgary.ca
rio.med.ucalgary.ca
mdoerk.cpsc.ucalgary.ca
vls.cs.ucalgary.ca
vidstudy.cpsc.ucalgary.ca
rms-dev.ucalgary.ca
dataexperience.cpsc.ucalgary.ca
www2.pugpig.com
uconnectlabs.com
alhajj.cpsc.ucalgary.ca
5755424754106368-fe2.pantheonsite.io
bigpics.cpsc.ucalgary.ca
5631943370604544-fe1.pantheonsite.io
curiolab.cpsc.ucalgary.ca
hi-bi-bi.cpsc.ucalgary.ca
bigpics.cpsc.ucalgary.ca
netcommunity.ucalgary.ca
ITIMMPCIMASTER1.ucalgary.ca
ucalgary.ca
acctman.ucalgary.ca
ucalgary.ca
curriculumlinks.ucalgary.ca
smlweb.cpsc.ucalgary.ca
voicesip.ucalgary.ca
ucalgary.ca
ucalgary.ca
wjwillett.cpsc.ucalgary.ca
itsoviewsrv01.ucalgary.ca
jungletest.cpsc.ucalgary.ca
5755424754106368-fe2.pantheonsite.io
c15668.uc.ucalgary.ca
foreman.leoleung.cpsc.ucalgary.ca
5701241594183680-fe4.pantheonsite.io
ucalgary.ca
ucalgary.ca
genopheno.ucalgary.ca
ilab.ucalgary.ca
alumni.cpsc.ucalgary.ca
voicesip.ucalgary.ca
innovis.cpsc.ucalgary.ca
foreman.leoleung.cpsc.ucalgary.ca
soma-sin.cpsc.ucalgary.ca
em.ucalgary.ca
csgs.cpsc.ucalgary.ca
foscube.cpsc.ucalgary.ca
quicr.cru.ucalgary.ca
iteachcs.org
acmicpc.cpsc.ucalgary.ca

Certificate

The complete raw certificate details for ITIMMPCIMASTER1.ucalgary.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4b2fglimxqIjG5eDHk3
BxzKX5KyMuSt10Of3F+jDKPX+sG9OWsJMfvHNsQqyQ4oKYF6FL4Z1aUIR7iXcSVp
3cMDYUilZe4Whrw4qKMd9fT1xePYLMpY2g1B99QnBkcjj54Awi6GbQVphal7hDE0
IkqOd7SmavtpJ5IBvjHernNHAIXhUbMsT3Ss4Hoc1NvfTpPKQu6kOFJsVK/xLDxu
vmmI1srUaEAgxNwyZaTbt98niTiuPpG9bXXx8t8mmgxGIOKKjHDIDiv4Vja0I+U0
LCXRKo7kt0fiG6NpWm7+2YbE/4sp7KXSci+i3lQVPIyuc+WWV1fiVe2I9bJgHXwO
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 45721807963142106528686462712234862573
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-01 21:27:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-01 21:57:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Alberta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Calgary'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Alberta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Calgary (Governors of the University of Calgary)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Technologies'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1966-4-29'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ITIMMPCIMASTER1.ucalgary.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26197881795020814388235189642270027709602822708687556727542324603235808939438638882209088384793679241551871990355136410734049974304510613316154154835437298856842974874865818237180920147934159647872250069192995200930672080725610139205605344318715649294503139606843163725250425504771814684992126589538053284763327671600210257146677248973386958310913457179919083381948634087092242277559601748284070282159753044357291879964045571577033175101034026080467165508826581703351004996868160710996937247238230371897710863235331769257866930304083565621854754006822335775167851952141460100159087178348345111746977600755230847012569
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ITIMMPCIMASTER1.ucalgary.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							77bea66ea3e37018c0d7a17de54580c42e85d248
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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