ucalgary.ca

- University of Calgary (Governors of the University of Calgary) -

Issued by Entrust Certification Authority - L1M

About this certificate

This digital certificate with serial number f7:2d:82:08:6a:ab:75:be:00:00:00:00:54:cf:37:3c was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Calgary (Governors of the University of Calgary)

Company registration number: 1966-4-29
Organization: University of Calgary (Governors of the University of Calgary)
Organization unit: Information Technologies
State / Province: Alberta
Locality: Calgary
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): f7:2d:82:08:6a:ab:75:be:00:00:00:00:54:cf:37:3c
Serial Number (int): 328555605697594756059770578743508023100
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 28:16:9e:7a:ce:f4:b0:df:66:d6:69:3d:ef:7a:f6:af:b0:95:c1:99
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): 11:16:ba:66:8c:73:86:a3:54:2e:ed:f6:56:04:69:bf:65:00:47:c3
Fingerprint (sha256): 05:ca:6a:b7:f4:f8:e4:66:85:98:f0:b1:09:8d:78:cb:b5:c3:6b:ae:02:69:b5:69:8b:1e:e7:1d:46:2f:97:35

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for certificate ucalgary.ca

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ucalgary.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ucalgary.ca
shibboleth.ucalgary.ca

Other certificates including the domain name ucalgary.ca

(limited to 100 certificates)
www.cstaab-test.cpsc.ucalgary.ca
cmddb.cpsc.ucalgary.ca
csus.cpsc.ucalgary.ca
www2.pugpig.com
capca.ucalgary.ca
largedisplaysinurbanlife.cpsc.ucalgary.ca
securesf.ucalgary.ca
ucalgary.ca
vsbdev.my.ucalgary.ca
discover.cpsc.ucalgary.ca
workrooms.ucalgary.ca
careers.talemetry.com
infrastructure.ucalgary.ca
ads-tl01.ucalgary.ca
careers.talemetry.com
secrets.cpsc.ucalgary.ca
cmddb.cpsc.ucalgary.ca
complexity.cpsc.ucalgary.ca
uconnectlabs.com
em.ucalgary.ca
voicesip.ucalgary.ca
saulwww.saulmain.cpsc.ucalgary.ca
*.ucweb.ucalgary.ca
pjl.ucalgary.ca
amploadvance.com
re18.org
bugzilla.cpsc.ucalgary.ca
largedisplaysinurbanlife.cpsc.ucalgary.ca
ucalgary.ca
5755424754106368-fe2.pantheonsite.io
akamaisecure2.qualtrics.com
ucalgary.ca
ucpl.admin.ucalgary.ca
barclaylab.ucalgary.ca
leadership.ucalgary.ca
asonam.cpsc.ucalgary.ca
smlweb.cpsc.ucalgary.ca
anslow.cpsc.ucalgary.ca
innovis.cpsc.ucalgary.ca
quicr.cru.ucalgary.ca
saulmain.cpsc.ucalgary.ca
arctic.ucalgary.ca
ucalgary.ca
cacsaic.cpsc.ucalgary.ca
bugzilla.cpsc.ucalgary.ca
viewcount.cpsc.ucalgary.ca
5638404075159552-fe2.pantheonsite.io
5753952654065664-fe1.pantheonsite.io
ucalgary.ca
careers.talemetry.com
ucalgary.ca
ucalgary.ca
alumni.cpsc.ucalgary.ca
rio.med.ucalgary.ca
mdoerk.cpsc.ucalgary.ca
vls.cs.ucalgary.ca
vidstudy.cpsc.ucalgary.ca
rms-dev.ucalgary.ca
dataexperience.cpsc.ucalgary.ca
www2.pugpig.com
uconnectlabs.com
alhajj.cpsc.ucalgary.ca
5755424754106368-fe2.pantheonsite.io
bigpics.cpsc.ucalgary.ca
5631943370604544-fe1.pantheonsite.io
curiolab.cpsc.ucalgary.ca
hi-bi-bi.cpsc.ucalgary.ca
bigpics.cpsc.ucalgary.ca
netcommunity.ucalgary.ca
ITIMMPCIMASTER1.ucalgary.ca
ucalgary.ca
acctman.ucalgary.ca
ucalgary.ca
curriculumlinks.ucalgary.ca
smlweb.cpsc.ucalgary.ca
voicesip.ucalgary.ca
ucalgary.ca
ucalgary.ca
wjwillett.cpsc.ucalgary.ca
itsoviewsrv01.ucalgary.ca
jungletest.cpsc.ucalgary.ca
5755424754106368-fe2.pantheonsite.io
c15668.uc.ucalgary.ca
foreman.leoleung.cpsc.ucalgary.ca
5701241594183680-fe4.pantheonsite.io
ucalgary.ca
ucalgary.ca
genopheno.ucalgary.ca
ilab.ucalgary.ca
alumni.cpsc.ucalgary.ca
voicesip.ucalgary.ca
innovis.cpsc.ucalgary.ca
foreman.leoleung.cpsc.ucalgary.ca
soma-sin.cpsc.ucalgary.ca
em.ucalgary.ca
csgs.cpsc.ucalgary.ca
foscube.cpsc.ucalgary.ca
quicr.cru.ucalgary.ca
iteachcs.org
acmicpc.cpsc.ucalgary.ca

Certificate

The complete raw certificate details for ucalgary.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jVTYECXRSP+SVgZPZEE
8vfhpCaoU8xrnlZSyjNVFnyTB1xhbYpC6hT8jVb+XU09KWDY9dCoyv1IWh5IILMO
p9+i6ZLv7moNTNzyvShuSwUvNXpRYLWT5O2qd1aaXF6AJLYSEIGZjtUD8Ld4xDnw
HpwYH8TyhL4JEqjq6UAKch4KGPF+OjVmzmbi0ikah0Pv0P7GvAHGiFJgeNIygnHs
RKjTUqNTmzGsJ9eGP9n7n7pPIpKgMaAKq4wAhYI8R7TA7y7aL/AIJ61Fud81ZGE5
gdh2OrKMXaMNIK+ytIIh6PfqOZcLQZgVqsgJbny2S5cUvOzoDSNnml4jzFt6ZMk+
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328555605697594756059770578743508023100
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-29 19:55:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-29 20:25:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Alberta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Calgary'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Alberta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Calgary (Governors of the University of Calgary)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Technologies'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1966-4-29'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ucalgary.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28556152798868461251628343961106741187240475119296555306119886296089235044125404136734288955494954711710728585013130230206808667262061095745872611535302751880162384859661530632863348041541703946691715522030806515639383825808980803247768867039739715353227667953818866500847781191210272041231922792799747871604838325599764133042185436462098802227939009443603474214095051568615012916921196675088162875001016040348687859822785937145438285194750100588701587107103913928947534415407463049810151487517209557461418044916041073337570286376564288734543122026195534019937155812646153966537464693478389623239258362265871409823439
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucalgary.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shibboleth.ucalgary.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							28169e7acef4b0df66d6693def7af6afb095c199
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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