mophin1.dhss.mo.gov

- State of Missouri, Office of Administration -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number d9:79:b5:86:2d:09:c0:a8:00:00:00:00:50:e5:99:72 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

State of Missouri, Office of Administration

Organization: State of Missouri, Office of Administration
Organization unit: Office of Administration
State / Province: Missouri
Locality: Jefferson City
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): d9:79:b5:86:2d:09:c0:a8:00:00:00:00:50:e5:99:72
Serial Number (int): 289074424751860111994701069235672947058
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: bd:e1:08:0b:78:0e:af:44:83:f2:c4:5f:c1:66:ee:e5:c7:d3:c6:21
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 7a:15:fb:ab:2a:3c:0a:61:f4:f8:b6:7f:2f:55:01:e6:b8:be:e0:6e
Fingerprint (sha256): 07:0b:9e:ec:7d:56:c9:e5:49:04:1e:0b:0b:75:f5:bc:50:e7:28:65:f4:52:00:51:e8:06:33:a9:56:6d:b3:d6

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate mophin1.dhss.mo.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mophin1.dhss.mo.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mophin1.dhss.mo.gov

Other certificates including the domain name mo.gov

(limited to 100 certificates)
apidata-dev.dese.mo.gov
renew.pr.mo.gov
mo.gov
Securemail.mo.gov
Mail.sos.mo.gov
www.mostops.ago.mo.gov
www.courts.mo.gov
imperva.com
momail.mo.gov
5685057352105984-fe4.pantheonsite.io
airwatch4.mo.gov
incapsula.com
stoadf.treasurer.mo.gov
5659822271758336-fe3.pantheonsite.io
webmail2.auditor.mo.gov
mail.senate.mo.gov
mdc5test.mdc.mo.gov
mo.gov
oscna0013.courts.mo.gov
5658638538506240-fe4.pantheonsite.io
achieve.escoffier.edu
www.training.oa.mo.gov
appadmin-dev.dese.mo.gov
on.mo.gov
5685057352105984-fe4.pantheonsite.io
mo.gov
MoLogin.mo.gov
s1.sos.mo.gov
pr.mo.gov
cbafs.mo.gov
media.senate.mo.gov
lists.mo.gov
securemail.mo.gov
mcs.modot.mo.gov
mail.house.mo.gov
www.mshp.dps.mo.gov
mo.gov
WWW.MO.GOV
mo.gov
imperva.com
www.mosac.mo.gov
publicdefender.mo.gov
imperva.com
imperva.com
nature.mdc.mo.gov
incapsula.com
imperva.com
mo.gov
incapsula.com
vpn.sos.mo.gov
vpn.psc.mo.gov
achieve.escoffier.edu
www.MissouriEmployer.dss.mo.gov
molisapitest.legislativeoversight.mo.gov
*.house.mo.gov
medesfdshprod.dss.mo.gov
lyncaccess.modot.mo.gov
5659822271758336-fe3.pantheonsite.io
moaccount.mo.gov
incapsula.com
connect.mdc.mo.gov
incapsula.com
5658638538506240-fe4.pantheonsite.io
mo2fss.mo.gov
5659822271758336-fe3.pantheonsite.io
myworkspace.mo.gov
moadfs.mo.gov
achieve.escoffier.edu
extra.mdc.mo.gov
imperva.com
mymdc.mo.gov
mo.gov
legislativeoversight.mo.gov
ucceegainws.state.mo.us
5685057352105984-fe4.pantheonsite.io
connector-c.mshp.dps.mo.gov
mophin1.dhss.mo.gov
cobra.mshp.dps.mo.gov
www3.modot.mo.gov
mosso.mo.gov
5659822271758336-fe3.pantheonsite.io
mymdc.mo.gov
uisidestest.labor.mo.gov
imperva.com
5658638538506240-fe4.pantheonsite.io
remoteaccess.sos.mo.gov
incapsula.com
machs.mo.gov
achieve.escoffier.edu
*.courts.mo.gov
incapsula.com
www.courts.mo.gov
Evetest.mo.gov
mail.senate.mo.gov
incapsula.com
achieve.escoffier.edu
Airwatch1.mo.gov
gisblue.mdc.mo.gov
mo.gov
imperva.com

Certificate

The complete raw certificate details for mophin1.dhss.mo.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgIRANl5tYYtCcCoAAAAAFDlmXIwDQYJKoZIhvcNAQELBQAw
gboxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQL
Ex9TZWUgd3d3LmVudHJ1c3QubmV0L2xlZ2FsLXRlcm1zMTkwNwYDVQQLEzAoYykg
MjAxMiBFbnRydXN0LCBJbmMuIC0gZm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxLjAs
BgNVBAMTJUVudHJ1c3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBMMUswHhcN
MTgwNzMxMTYwMDQxWhcNMjAwNzMxMTYzMDQxWjCBsDELMAkGA1UEBhMCVVMxETAP
BgNVBAgTCE1pc3NvdXJpMRcwFQYDVQQHEw5KZWZmZXJzb24gQ2l0eTE0MDIGA1UE
ChMrU3RhdGUgb2YgTWlzc291cmksIE9mZmljZSBvZiBBZG1pbmlzdHJhdGlvbjEh
MB8GA1UECxMYT2ZmaWNlIG9mIEFkbWluaXN0cmF0aW9uMRwwGgYDVQQDExNtb3Bo
aW4xLmRoc3MubW8uZ292MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
k8if4/SlOTUT/Os2vAJivl/PTFTT69Lcn/d+e8CUcGbNr23SIGTjmMhfPvyWgREn
yUMRnikOOGHBNKkWji8Kxp4xvtDZIuhqFB6E1C2J3p13M3f8YhI6as6NuqgfuX2T
R0dfXk8k1H/35wozKV9Ab8m0NCoen5T3TcT7ClEYZ1yIHgUCdv8e6Jj2gPSXmelC
DFKtr3czz3dpabAUljRKc4q88EDtrs8lh0PrRhotRcJw1vEWxBSC9nPtkrgTqAzZ
COKfi4CX78vgCf3AuDjGXzMrFyYTAp7vcpb+Sx8c2YEsci4SmftqGuRYQ23zEyF8
t2frryenJk0hfp8IXE6F6wIDAQABo4IBnzCCAZswEwYKKwYBBAHWeQIEAwEB/wQC
BQAwHgYDVR0RBBcwFYITbW9waGluMS5kaHNzLm1vLmdvdjAOBgNVHQ8BAf8EBAMC
BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDMGA1UdHwQsMCowKKAm
oCSGImh0dHA6Ly9jcmwuZW50cnVzdC5uZXQvbGV2ZWwxay5jcmwwSwYDVR0gBEQw
QjA2BgpghkgBhvpsCgEFMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly93d3cuZW50cnVz
dC5uZXQvcnBhMAgGBmeBDAECAjBoBggrBgEFBQcBAQRcMFowIwYIKwYBBQUHMAGG
F2h0dHA6Ly9vY3NwLmVudHJ1c3QubmV0MDMGCCsGAQUFBzAChidodHRwOi8vYWlh
LmVudHJ1c3QubmV0L2wxay1jaGFpbjI1Ni5jZXIwHwYDVR0jBBgwFoAUgqJwdN28
Uz/Pe9T3zX+nYMYKTL8wHQYDVR0OBBYEFL3hCAt4Dq9Eg/LEX8Fm7uXH08YhMAkG
A1UdEwQCMAAwDQYJKoZIhvcNAQELBQADggEBAIqsm0hoRBBZHqSHlDO7AJlGkKBE
cFyC26uMQI1Gm+tPYkftM1rUvtveT3QRONmBwKgXKsL7c0wvfAhjt+g2Y9dAHUAx
q9m5QeE8PPorUPgPVKQjJH16U38OQH/h45GIALnfVgBgiSQ6zqk2bW1PHxNaZkT1
ltTO/VIFqKKDO3u2kPSbtts9gxq43N//Awe3Q4bXiB2HxTLY6XZENE27koBKhyNT
+fZlGApTz7IOGi7fyspkyxvqm2JkGm+y/ZZNi8e0B8lZkjLUlmOMO5O+8cfdXXJ5
rFMqR3hz9UqQQzsKhpQPfC8xgUHE/SKVqdQQN4PvOZeZoy7EtEh1XnNEtCI=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8if4/SlOTUT/Os2vAJi
vl/PTFTT69Lcn/d+e8CUcGbNr23SIGTjmMhfPvyWgREnyUMRnikOOGHBNKkWji8K
xp4xvtDZIuhqFB6E1C2J3p13M3f8YhI6as6NuqgfuX2TR0dfXk8k1H/35wozKV9A
b8m0NCoen5T3TcT7ClEYZ1yIHgUCdv8e6Jj2gPSXmelCDFKtr3czz3dpabAUljRK
c4q88EDtrs8lh0PrRhotRcJw1vEWxBSC9nPtkrgTqAzZCOKfi4CX78vgCf3AuDjG
XzMrFyYTAp7vcpb+Sx8c2YEsci4SmftqGuRYQ23zEyF8t2frryenJk0hfp8IXE6F
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289074424751860111994701069235672947058
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-31 16:00:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-31 16:30:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Missouri'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jefferson City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'State of Missouri, Office of Administration'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Office of Administration'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mophin1.dhss.mo.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18655962493735447290000137022684013442019034602339791898064135960023094881139657303234092645709459828338183389094306952881303096539232362160852599594936489669107995896920919549414925785938311783885912163834017436715256256356508118131635667122684742541694571964609773847399938160248104268141594013713593831704393255169926353859401662342107689521927801434666442169982540753356307723309944710616009301940100828146469868804392556034710385057511108308897384497818803149606158253594769759487449515243400935115394526080336584521008960320928198329988288072265706235436490837691112486041058085716933470803376604950907088438763
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mophin1.dhss.mo.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bde1080b780eaf4483f2c45fc166eee5c7d3c621
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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