secure.myclient.oldmutual.co.za

- Old Mutual (South Africa) -

Issued by Entrust Certification Authority - L1A

About this certificate

This digital certificate with serial number 45:6f:85:bf was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Certificates typically do not have multiple attributes in a single RDN (subject). This may be an error. (lint.AWSLabs certlint)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Old Mutual (South Africa)

Company registration number: 1998/012276/06
Organization: Old Mutual (South Africa)
Organization unit: OMSTA Technology Web Infrastructure
State / Province: Western Cape
Locality: Cape Town
Country: ZA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: AND ADDITIONAL TERMS GOVERNING USE AND RELIANCE
Organization unit: CPS CONTAINS IMPORTANT LIMITATIONS OF WARRANTIES AND LIABILITY
Organization unit: www.entrust.net/CPS is incorporated by reference
Organization unit: (c) 2006 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 45:6f:85:bf
Serial Number (int): 1164936639
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: 70:3d:fa:ee:c4:0b:10:6c:41:1e:f2:ce:64:b2:67:8d:55:a7:aa:87
AuthorityKeyId: 7e:b7:fc:4c:26:e6:b0:7a:fb:54:e2:3c:45:73:c6:43:90:5e:28:04

Fingerprint (sha1): 13:04:b8:e1:2f:a6:df:31:a1:8d:c0:df:28:42:eb:12:f5:ef:fd:76
Fingerprint (sha256): 06:42:2e:d5:3f:c4:01:16:48:b5:f7:61:d6:09:c6:6f:05:cb:1d:b6:88:5a:84:eb:93:52:b1:20:29:47:16:78


Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1a.crl

Check the revocation status for certificate secure.myclient.oldmutual.co.za

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure.myclient.oldmutual.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name oldmutual.co.za

(limited to 100 certificates)
unai-test.nonprod.my.oldmutual.co.za
secure.finrisc.oldmutual.co.za
static-dev.nonprod.my.oldmutual.co.za
*.extranet.oldmutual.co.za
secure.mycorporatebusiness.oldmutual.co.za
static-dev.nonprod.my.oldmutual.co.za
momapi.dev.digital.oldmutual.co.za
secure.rfa.oldmutual.co.za
secure.fsa.oldmutual.co.za
secure.gsservice.oldmutual.co.za
*.demo.nonprod.my.oldmutual.co.za
www.sander-catering.cateringportal.io
nomtxt.com
npw-auto-test-qa.nonprod.digitalplatform.oldmutual.co.za
secure.cis.oldmutual.co.za
*.extranet.oldmutual.co.za
*.nonprod.my.oldmutual.co.za
pdrest.oldmutual.co.za
unai-test-east.nonprod.my.oldmutual.co.za
unai-test.nonprod.my.oldmutual.co.za
am.pp.oldmutual.co.za
secure.eb.oldmutual.co.za
secure.dcc.oldmutual.co.za
secure.fc.oldmutual.co.za
secure.channelbiuportal.oldmutual.co.za
dev.contrastpharma.com
secure.omkonecttraining.oldmutual.co.za
unai-test.nonprod.my.oldmutual.co.za
secure.eb.oldmutual.co.za
secure.myclient.oldmutual.co.za
pizza.notprometey.pro
*.extranet.oldmutual.co.za
vacancies.oldmutual.co.za
sts.oldmutual.co.za
my.qa.oldmutual.co.za
secure.dcc.oldmutual.co.za
sso.dev.oldmutual.co.za
secure.adviserweb.training.oldmutual.co.za
secure.productsolutions.oldmutual.co.za
secure.adviserweb.pp.oldmutual.co.za
secure.rewards.oldmutual.co.za
secure.myportfolio.oldmutual.co.za
secure.fc.oldmutual.co.za
sftpweb.oldmutual.co.za
secure.myportfolio.oldmutual.co.za
secure.dcc.oldmutual.co.za
www.nanoelectricim.com
secure.rumba.oldmutual.co.za
iopservices.oldmutual.co.za
secure.omkonect.training.oldmutual.co.za
secure.omkonect.oldmutual.co.za
secure.omem.oldmutual.co.za
rms.oldmutual.co.za
static.my.oldmutual.co.za
api.p1l.oldmutual.co.za
secure.omkonect.oldmutual.co.za
secure.pfmisportal.pp.oldmutual.co.za
secure.finrisc.oldmutual.co.za
iwyze.oldmutual.co.za
unai-test-dev.nonprod.my.oldmutual.co.za
secure.rocs.oldmutual.co.za
frontoffice.oldmutual.co.za
roombooking.oldmutual.co.za
momapi.digital.oldmutual.co.za
Secure.mycorporatebusiness.qa.oldmutual.co.za
secure.fsa.oldmutual.co.za
secure.unittrusts.oldmutual.co.za
secure.gateway.oldmutual.co.za
secsftp.oldmutual.co.za
secure.unittrusts.oldmutual.co.za
secure.omem.oldmutual.co.za
secure.rafpfops.oldmutual.co.za
secure.isc.oldmutual.co.za
secure.omkonecttraining.oldmutual.co.za
secure.rocs.oldmutual.co.za
*.crm.oldmutual.co.za
secure.hrms.oldmutual.co.za
api.magnify.qa.oldmutual.co.za
sftp.oldmutual.co.za
secure.finrisc.oldmutual.co.za
calculators.nonprod.my.oldmutual.co.za
secure.productsolutions.oldmutual.co.za
secure.isc.oldmutual.co.za
secure.fc.oldmutual.co.za
secure.mfc.oldmutual.co.za
new-public-web-qa.nonprod.digitalplatform.oldmutual.co.za
portal.oldmutual.co.za
new-public-web-anch.digitalplatform.oldmutual.co.za
secure.mfc.oldmutual.co.za
secure.omut.oldmutual.co.za
secure.mfc.oldmutual.co.za
test.oldmutual.co.za
opensearch.digital.oldmutual.co.za
secure.adviserweb.oldmutual.co.za
iopservices.oldmutual.co.za
Secure.omwealth.oldmutual.co.za
secure.myservice.oldmutual.co.za
assets-qa.nonprod.my.oldmutual.co.za
*.nonprod.my.oldmutual.co.za
api.mfcwizzit.qa.oldmutual.co.za

Certificate

The complete raw certificate details for secure.myclient.oldmutual.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzramhYciAZ6peJdNnoJ
bBoaJfAINIxz7Oq0fFr9VA+VrkhEQDP3IharI6xaagT12f2DEdJClzV3zIvTODRy
uVkq9YiwnwlIsA/umRxXrgsBuTn3sZaAffceQtgxwsS3xePEn6FnYxMW02REagRW
BniY5QGdPbHKkvDYmyZVlWr8aIkzq9JmwTTjcA4iaBC08SEnQuswCpw6Fof/rUur
rLQyFNwEpa2DcigFwgVOT49tnbh0fYWooQmpPvtGZpQJbkPYOpo91wxq2G1UR53/
buMuek2t2L/jmDopL65lgL4cK0kxrqqffDHpDqWlXaB1j69uHjquDf+EJ5ilEASU
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1164936639
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AND ADDITIONAL TERMS GOVERNING USE AND RELIANCE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CPS CONTAINS IMPORTANT LIMITATIONS OF WARRANTIES AND LIABILITY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/CPS is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2006 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1A'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2009-09-22 07:27:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-09-22 08:06:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Western Cape'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cape Town'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Old Mutual (South Africa)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'V1.0, Clause 5.(b)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OMSTA Technology Web Infrastructure'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1998/012276/06'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure.myclient.oldmutual.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21110818875825945985726333496518768823426846220726390590533894981386860194076820261113324814757569285561308783070427967848807965540523236606432325409958815052537133424056431606074790458854683026587732836987007710702822683559817394426506888671146459887058213002573718332565838455701719911912422635468231126110651253216204584589063505771622411898580266105765270487293008337574978098712690509977873253518066189084684070659691136582050175489357126697419475572246964005030974250677338035942769821504626712018844470183025768076429205628489053183038099301953421408845072021222260692031401913986220941312340602135030624720127
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.16 (privateKeyUsagePeriod)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 32303039303932323037323733305a
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '20110922080641Z'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1a.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (342 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [84 104 101 32 69 110 116 114 117 115 116 32 69 86 32 83 83 76 32 67 101 114 116 105 102 105 99 97 116 105 111 110 32 80 114 97 99 116 105 99 101 32 83 116 97 116 101 109 101 110 116 32 40 67 80 83 41 32 97 118 97 105 108 97 98 108 101 32 97 116 32 119 119 119 46 101 110 116 114 117 115 116 46 110 101 116 47 99 112 115 32 105 115 32 104 101 114 101 98 121 32 105 110 99 111 114 112 111 114 97 116 101 100 32 105 110 116 111 32 121 111 117 114 32 117 115 101 32 111 114 32 114 101 108 105 97 110 99 101 32 111 110 32 116 104 105 115 32 67 101 114 116 105 102 105 99 97 116 101 46 32 84 104 105 115 32 67 80 83 32 99 111 110 116 97 105 110 115 32 108 105 109 105 116 97 116 105 111 110 115 32 111 110 32 119 97 114 114 97 110 116 105 101 115 32 97 110 100 32 108 105 97 98 105 108 105 116 105 101 115 46 32 67 111 112 121 114 105 103 104 116 32 40 99 41 32 50 48 48 54 32 69 110 116 114 117 115 116 32 76 105 109 105 116 101 100]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7eb7fc4c26e6b07afb54e23c4573c643905e2804
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							703dfaeec40b106c411ef2ce64b2678d55a7aa87
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.65.0 (entrustVersInfo)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:27|false] GeneralString 'V7.1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
								0328
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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