www.barclayscorporate.com

- Barclays PLC -

Issued by Entrust Certification Authority - L1M

About this certificate

This digital certificate with serial number ed:36:67:d9:cf:8c:a5:49:00:00:00:00:54:cf:5d:ba was issued on by Entrust, Inc..

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Barclays PLC

Company registration number: 00048839
Organization: Barclays PLC
Organization unit: Web and Infrastructure Services EXPI SIELF-001-002
State / Province: London
Locality: London
Country: GB

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ed:36:67:d9:cf:8c:a5:49:00:00:00:00:54:cf:5d:ba
Serial Number (int): 315309525376319811472404312638308179386
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: e1:10:c3:29:2a:ab:96:a0:ad:8e:62:d1:2a:d3:80:d6:cf:3a:38:d5
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): 82:d0:34:90:31:e7:a9:dc:9a:34:25:c2:97:05:b1:10:62:02:48:d2
Fingerprint (sha256): 05:26:e6:28:5f:56:98:33:fa:0f:40:b7:d5:fc:03:aa:dd:df:53:b6:f0:fe:7d:5b:49:b5:49:4d:5b:3d:23:c1

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for certificate www.barclayscorporate.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.barclayscorporate.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.barclayscorporate.com
www.1.barclayscorporate.com
www-pi.barclayscorporate.com
www.fxrates.uk.barclays
www-gem.barclayscorporate.com
www.corporatebankingsupport.uk.barclays

Other certificates including the domain name barclayscorporate.com

(limited to 100 certificates)
www-uat.barclayscorporate.com
investmentbank-uat.barclays.com
www.sf.barclayscorporate.com
www.twc.barclayscorporate.com
www.barclayscorporate.com
www-uat.barclayscorporate.com
www.1.barclayscorporate.com
investmentbank-uat.barclays.com
signingsoftware.barclayscorporate.com
www-qa.fxrates.uk.barclays
research.barclayscorporate.com
research-uat.barclayscorporate.com
www-qa.barclayscorporate.com
www-qa.fxrates.uk.barclays
www-qa.barclayscorporate.com
www-uat.barclayscorporate.com
www.barclayscorporate.com
international.barclays.com
www-qa.barclayscorporate.com
signingsoftware.barclayscorporate.com
signingsoftware.barclayscorporate.com
www-uat.barclayscorporate.com
www-uat.barclayscorporate.com
www-qa.fxrates.uk.barclays
www.twc.barclayscorporate.com
research.barclayscorporate.com
www.barclayscorporate.com
www.barclayscorporate.com
www.twc.barclayscorporate.com
www.barclayscorporate.com
www.twc.barclayscorporate.com
www.barclayscorporate.com
research-qa.barclayscorporate.com
investmentbank-uat.barclays.com
research-qa.barclayscorporate.com
investmentbank-uat.barclays.com
www.barclayscorporate.com
international.barclays.com
www.barclayscorporate.com
www.barclayscorporate.com
www.media.barclayscorporate.com
international.barclays.com
www-uat.barclayscorporate.com
www-qa.barclayscorporate.com
www.twc.barclayscorporate.com
international.barclays.com
www.media.barclayscorporate.com
signingsoftware.barclayscorporate.com
www.barclayscorporate.com
ask.barclayscorporate.com
www.sf.barclayscorporate.com
research.barclayscorporate.com
contingency.barclayscorporate.com
www-qa.barclayscorporate.com
www.barclayscorporate.com
international.barclays.com
research-uat.barclayscorporate.com
www-qa.barclayscorporate.com
www-qa.barclayscorporate.com
www.sf.barclayscorporate.com
research-uat.barclayscorporate.com
international.barclays.com
investmentbank-uat.barclays.com
www.sf.barclayscorporate.com
www.barclayscorporate.com
signingsoftware.barclayscorporate.com
www-qa.barclayscorporate.com
www-qa.barclayscorporate.com
investmentbank-uat.barclays.com
international.barclays.com
www-uat.barclayscorporate.com
www-qa.fxrates.uk.barclays
www-uat.barclayscorporate.com
signingsoftware.barclayscorporate.com
www.media.barclayscorporate.com
www.sf.barclayscorporate.com
international.barclays.com
www.barclayscorporate.com
www.1.barclayscorporate.com
investmentbank-uat.barclays.com
international.barclays.com
international.barclays.com
research.barclayscorporate.com
www-qa.barclayscorporate.com
investmentbank-uat.barclays.com
www.barclayscorporate.com
www-uat.barclayscorporate.com
investmentbank-uat.barclays.com
www.barclayscorporate.com
www.twc.barclayscorporate.com
signingsoftware.barclayscorporate.com
www.barclayscorporate.com
www.sf.barclayscorporate.com
www.twc.barclayscorporate.com
contingency.barclayscorporate.com
www.barclayscorporate.com
www-uat.barclayscorporate.com
research.barclayscorporate.com
www.twc.barclayscorporate.com
research-qa.barclayscorporate.com

Certificate

The complete raw certificate details for www.barclayscorporate.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyD/iXS8KZPaqivgnlJO
gmsmn7ABJH8zJMxHnFmeztxVj2veo2h5b0h1j+FnD1q0Od9FvHLMwcUBHUOciFoK
SpwRmA3lOPPYoBzI0LPd7thT7Sp9lK0TbGi4ffLAmVlxbyYh7yI/JMkcdp8C1nuN
OST9McAJ4Y6i6z1iOTyA+j4BbWC1O0WRd69ywXedcRoPBU4p6CCJZdblqpqqBn6w
41QQxgc4VnsxP4HlyTrS63kKoVfv1UCHZiv3XX49Q56CAH/+fFV5r1rHvxSN5dgX
a1LI7npka605hNVNvjp4AjrtODInDGqDgp3moKw0WujATOmMpXVi1KSIjVeJEFBZ
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315309525376319811472404312638308179386
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-22 08:03:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-22 08:33:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Barclays PLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Web and Infrastructure Services EXPI SIELF-001-002'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00048839'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.barclayscorporate.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21098068943860083708544522430919584140546882184979298961680736441916325558874268782855091235865647690047082085306762243860810062108757527519043075115119625519774969402422949575539304706616840633855582653472836591732679827148745340840453146922323413980362123468307538900404000552168530794004843061979266731912426925965684552114111402063592533042502361215123751877239691190181753223932316854148425507147627736134865662540322649060372137052491575996529710278119057667680786000826077750241413059923115033494874425277420441708384927078972242550003457673800566518634501860171377038403283173860640123400700964599137911724329
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (186 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barclayscorporate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1.barclayscorporate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-pi.barclayscorporate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fxrates.uk.barclays'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-gem.barclayscorporate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corporatebankingsupport.uk.barclays'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e110c3292aab96a0ad8e62d12ad380d6cf3a38d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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