xtregtest.nycsca.org
- New York City School Construction Authority -
Issued by Entrust Certification Authority - L1C
About this certificate
This digital certificate with serial number 4c:1e:2d:96 was issued on by Entrust, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
New York City School Construction Authority
Organization:
New York City School Construction Authority
State / Province:
New York
Locality: Long Island City
Country: US
Locality: Long Island City
Country: US
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 4c:1e:2d:96Serial Number (int): 1277046166
Serial Number lenght: 31 bits, 4 octets
SubjectKeyId: ff:8c:77:1c:78:a4:c3:b9:38:26:93:55:a9:44:49:27:21:67:e2:83
AuthorityKeyId: 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d
Fingerprint (sha1): 33:05:6c:9d:54:46:1f:e3:c2:46:69:72:9e:66:36:29:a6:23:eb:77
Fingerprint (sha256): 05:1f:99:a5:75:f3:27:c9:0e:a5:16:ee:8b:10:1f:02:ac:c2:83:4e:b5:6e:be:81:2b:fc:7b:40:e5:63:3f:c1
Issuing Certificate URL: http://aia.entrust.net/2048-l1c.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1c.crl
Check the revocation status for certificate xtregtest.nycsca.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for xtregtest.nycsca.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
xtregtest.nycsca.org
Other certificates including the domain name nycsca.org
(limited to 100 certificates)
afstest.nycsca.org
smstest.nycsca.org
ifatest.nycsca.org
gethelp.nycsca.org
xtregtest.nycsca.org
uidev.nycsca.org
edocs.nycsca.org
adlds.nycsca.org
extwsdev.nycsca.org
extranet.nycsca.org
partnerstest.nycsca.org
msg.nycsca.org
erfp.nycsca.org
erfp.nycsca.org
dobusiness.nycsca.org
tobss.nycsca.org
partners.nycsca.org
scacsg.nycsca.org
bidset.nycsca.org
extwsdev.nycsca.org
cmwsprod.nycsca.org
ssrs.nycsca.org
msg.nycsca.org
partnerstest.nycsca.org
ifa.nycsca.org
extwsuat.nycsca.org
app.mylcm.com
extranetnew.nycsca.org
tk.nycsca.org
ifa.nycsca.org
erfpuat.nycsca.org
portal.nycsca.org
extranet.nycsca.org
cmwsprod.nycsca.org
tobss.nycsca.org
ifauat2016.nycsca.org
tobssuat.nycsca.org
dobusiness.nycsca.org
extwsuat.nycsca.org
laborlaw.nycsca.org
filepad.nycsca.org
adlds.nycsca.org
SCAENEC02.nycsca.org
dobusiness.nycsca.org
SCAENEC01.nycsca.org
laborlaw.nycsca.org
extranet.nycsca.org
partners.nycsca.org
tobss.nycsca.org
sda.nycsca.org
enfovdatest.nycsca.org
dobusiness.nycsca.org
webmail.nycsca.org
laborlaw.nycsca.org
xtregtest.nycsca.org
tobssuat.nycsca.org
adldstest.nycsca.org
Webmail.NYCSCA.ORG
ifaqa.nycsca.org
bidset.nycsca.org
ui.nycsca.org
partners.nycsca.org
smstest.nycsca.org
bidset.nycsca.org
cmwsprod.nycsca.org
ifauat.nycsca.org
portaluat.nycsca.org
tobss.nycsca.org
survey.nycsca.org
laborlaw.nycsca.org
ifa.nycsca.org
ifa.nycsca.org
filepad.nycsca.org
erfpuat.nycsca.org
bidsettest.nycsca.org
laborlaw.nycsca.org
erfp.nycsca.org
smstest.nycsca.org
laborlaw.nycsca.org
sts.nycsca.org
cmwstest.nycsca.org
extranet.nycsca.org
partners.nycsca.org
sitescheduling.nycsca.org
llis.nycsca.org
uiuat.nycsca.org
tobss.nycsca.org
www.nycsca.org
tobss.nycsca.org
dobusinesstest.nycsca.org
dobusiness.nycsca.org
extws.nycsca.org
webmail.nycsca.org
gcu.nycsca.org
webmail.nycsca.org
scacswfe01.nycsca.org
laborlaw.nycsca.org
scacsg.nycsca.org
scazlsrvuat01.nycsca.org
partners.nycsca.org
smstest.nycsca.org
ifatest.nycsca.org
gethelp.nycsca.org
xtregtest.nycsca.org
uidev.nycsca.org
edocs.nycsca.org
adlds.nycsca.org
extwsdev.nycsca.org
extranet.nycsca.org
partnerstest.nycsca.org
msg.nycsca.org
erfp.nycsca.org
erfp.nycsca.org
dobusiness.nycsca.org
tobss.nycsca.org
partners.nycsca.org
scacsg.nycsca.org
bidset.nycsca.org
extwsdev.nycsca.org
cmwsprod.nycsca.org
ssrs.nycsca.org
msg.nycsca.org
partnerstest.nycsca.org
ifa.nycsca.org
extwsuat.nycsca.org
app.mylcm.com
extranetnew.nycsca.org
tk.nycsca.org
ifa.nycsca.org
erfpuat.nycsca.org
portal.nycsca.org
extranet.nycsca.org
cmwsprod.nycsca.org
tobss.nycsca.org
ifauat2016.nycsca.org
tobssuat.nycsca.org
dobusiness.nycsca.org
extwsuat.nycsca.org
laborlaw.nycsca.org
filepad.nycsca.org
adlds.nycsca.org
SCAENEC02.nycsca.org
dobusiness.nycsca.org
SCAENEC01.nycsca.org
laborlaw.nycsca.org
extranet.nycsca.org
partners.nycsca.org
tobss.nycsca.org
sda.nycsca.org
enfovdatest.nycsca.org
dobusiness.nycsca.org
webmail.nycsca.org
laborlaw.nycsca.org
xtregtest.nycsca.org
tobssuat.nycsca.org
adldstest.nycsca.org
Webmail.NYCSCA.ORG
ifaqa.nycsca.org
bidset.nycsca.org
ui.nycsca.org
partners.nycsca.org
smstest.nycsca.org
bidset.nycsca.org
cmwsprod.nycsca.org
ifauat.nycsca.org
portaluat.nycsca.org
tobss.nycsca.org
survey.nycsca.org
laborlaw.nycsca.org
ifa.nycsca.org
ifa.nycsca.org
filepad.nycsca.org
erfpuat.nycsca.org
bidsettest.nycsca.org
laborlaw.nycsca.org
erfp.nycsca.org
smstest.nycsca.org
laborlaw.nycsca.org
sts.nycsca.org
cmwstest.nycsca.org
extranet.nycsca.org
partners.nycsca.org
sitescheduling.nycsca.org
llis.nycsca.org
uiuat.nycsca.org
tobss.nycsca.org
www.nycsca.org
tobss.nycsca.org
dobusinesstest.nycsca.org
dobusiness.nycsca.org
extws.nycsca.org
webmail.nycsca.org
gcu.nycsca.org
webmail.nycsca.org
scacswfe01.nycsca.org
laborlaw.nycsca.org
scacsg.nycsca.org
scazlsrvuat01.nycsca.org
partners.nycsca.org
Certificate
The complete raw certificate details for xtregtest.nycsca.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIETB4tljANBgkqhkiG9w0BAQUFADCBsTELMAkGA1UEBhMC VVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xOTA3BgNVBAsTMHd3dy5lbnRydXN0 Lm5ldC9ycGEgaXMgaW5jb3Jwb3JhdGVkIGJ5IHJlZmVyZW5jZTEfMB0GA1UECxMW KGMpIDIwMDkgRW50cnVzdCwgSW5jLjEuMCwGA1UEAxMlRW50cnVzdCBDZXJ0aWZp Y2F0aW9uIEF1dGhvcml0eSAtIEwxQzAeFw0xMjEwMjkxNzE1NThaFw0xNTEwMzAw NjA1NDhaMIGQMQswCQYDVQQGEwJVUzERMA8GA1UECBMITmV3IFlvcmsxGTAXBgNV BAcTEExvbmcgSXNsYW5kIENpdHkxNDAyBgNVBAoTK05ldyBZb3JrIENpdHkgU2No b29sIENvbnN0cnVjdGlvbiBBdXRob3JpdHkxHTAbBgNVBAMTFHh0cmVndGVzdC5u eWNzY2Eub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzJzRvKG RDpuV+q/6l+U1Rpy9PZRUAf2YCC9vir00E97YAFgsV7rzU7m9nq1oJUQ+hCvz/rl iazXWgbhZqNYrTXNiqnkFvkPzf2NOaMq+Kw9lsjWWvda5Qw/zmEE/IlY1ItBdd1/ 2wJwNlgqvfOLmxwtaVCImtigyA5aPlW+NLzzvpIKgLx3Uk7Yf62J7/+jBQYWmHcM aLyLPR2TCmyLYsjfB0tygHVT4ucU+CjoIN31FyD2jcqnBrNPlS/x9QBWOHXe+XXw oGxPJeb8OjTmlCPUCqaLOjiY6BQJ1n/qXL08WPS/5vQKFqP2OjDrOlkQVqDSkA/v hPt6etLwqysPswIDAQABo4IBeTCCAXUwCwYDVR0PBAQDAgWgMBMGA1UdJQQMMAoG CCsGAQUFBwMBMDMGA1UdHwQsMCowKKAmoCSGImh0dHA6Ly9jcmwuZW50cnVzdC5u ZXQvbGV2ZWwxYy5jcmwwZAYIKwYBBQUHAQEEWDBWMCMGCCsGAQUFBzABhhdodHRw Oi8vb2NzcC5lbnRydXN0Lm5ldDAvBggrBgEFBQcwAoYjaHR0cDovL2FpYS5lbnRy dXN0Lm5ldC8yMDQ4LWwxYy5jZXIwSgYDVR0gBEMwQTA1BgkqhkiG9n0HSwIwKDAm BggrBgEFBQcCARYaaHR0cDovL3d3dy5lbnRydXN0Lm5ldC9ycGEwCAYGZ4EMAQIC MB8GA1UdEQQYMBaCFHh0cmVndGVzdC5ueWNzY2Eub3JnMB8GA1UdIwQYMBaAFB7x q4kG+EkPATN37hR67hl8kyhNMB0GA1UdDgQWBBT/jHcceKTDuTgmk1WpREknIWfi gzAJBgNVHRMEAjAAMA0GCSqGSIb3DQEBBQUAA4IBAQA23ugcQBEtHyk5gLqn0Dg2 JhJBwUQBRbw23lCzYCcb952q6ZHt/hjNXujO11y301OyOmpIteuF3JJT9Ld7kpit ftUslxAg3tyuBEei6FPtll4JVj8KM7SBGSMFCzUAMMeKXZt+EbB8xIpXgn0bxrGU TJ20G9dh9XrA4PbCVy0/Dttqc4ZTLRhRyQ8fh9n2N/XMyYdcYyAzE2R59PnWpuzx kJ3qREzCgDdcDj9ZeWoPIfB4/feU5Z3pvX2gwMLdhyfWegErPcdEUIGq4wLVDI06 /zgGttP7KIERjWHYmhJo0tCbGMW0BykMgDNVmnePKz7qVWJ9WIB/9M3lVuty4iND -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzJzRvKGRDpuV+q/6l+U 1Rpy9PZRUAf2YCC9vir00E97YAFgsV7rzU7m9nq1oJUQ+hCvz/rliazXWgbhZqNY rTXNiqnkFvkPzf2NOaMq+Kw9lsjWWvda5Qw/zmEE/IlY1ItBdd1/2wJwNlgqvfOL mxwtaVCImtigyA5aPlW+NLzzvpIKgLx3Uk7Yf62J7/+jBQYWmHcMaLyLPR2TCmyL YsjfB0tygHVT4ucU+CjoIN31FyD2jcqnBrNPlS/x9QBWOHXe+XXwoGxPJeb8OjTm lCPUCqaLOjiY6BQJ1n/qXL08WPS/5vQKFqP2OjDrOlkQVqDSkA/vhPt6etLwqysP swIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1277046166 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1C' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-10-29 17:15:58 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-30 06:05:48 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Long Island City' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York City School Construction Authority' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'xtregtest.nycsca.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24136394219313162463646501139217160218761739215530128426572453965662860013318341389051748538384433108234203197601784333163589049738591755630001465960476064115266384053004042259421054143442354971124087982719000517438116670727709655634926739559544826561980297648555034094275999621578484865558985880053064031065520967597665637905378021407028189413958503854259048813522536340156583381379440348227525020537083158184535066020403893595293027002887546891369904313806231906568472894068469649124849921571539680785071134138039808074432635678301458399326837691794445547943826861317188354961636398245003489850286326761266384408499 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1c.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/2048-l1c.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xtregtest.nycsca.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1ef1ab8906f8490f013377ee147aee197c93284d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ff8c771c78a4c3b938269355a94449272167e283 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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