nr5.fmr.com
- FMR LLC -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number 78:10:ff:18:79:e2:e4:33:00:00:00:00:50:f7:e2:f9 was issued on by Entrust, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
FMR LLC
Organization:
FMR LLC
Organization unit: EI
Organization unit: EI
State / Province:
Massachusetts
Locality: Boston
Country: US
Locality: Boston
Country: US
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 78:10:ff:18:79:e2:e4:33:00:00:00:00:50:f7:e2:f9Serial Number (int): 159595610197573274572773245517877994233
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 88:d5:8e:94:fa:eb:b1:e5:a0:ab:10:2e:b5:cc:71:d0:9a:20:43:36
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): 55:ca:2c:49:e7:0d:1c:00:4e:b0:c6:30:d7:cc:58:7c:26:1b:df:c1
Fingerprint (sha256): 07:0e:cf:1b:32:b7:82:67:de:1d:8e:56:0f:e8:27:e8:2c:69:e9:50:ad:9f:da:24:f9:53:59:5e:67:17:0b:08
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate nr5.fmr.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for nr5.fmr.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
nr5.fmr.com
Other certificates including the domain name fmr.com
(limited to 100 certificates)
finpcs.fmr.com
ihubwspin.fmr.com
trnhps.fmr.com
guidancetoolsre2.fmr.com
bigidco2006.fmr.com
voiceloginpac.fmr.com
ei1559vwin.fmr.com
incomeplannerqa1.fmr.com
qrpin.fmr.com
dojo3s30014.rtp1.hadoop.fmr.com
fpsqaprod.fmr.com
uaocat.streetscape.com
gsyswfmxrtpd003.fmr.com
dojo3s10038.fmr.com
aps.fidelity.com
cajaqaprod.fmr.com
autocompleteqa1.fmr.com
iwsqawebapps.aws-nonprod.fmr.com
pacvts.fmr.com
secureecg.fmr.com
dojo7s10004.rtp1.hadoop.fmr.com
vc2coma2418193np.fmr.com
fac2-ws-portalchannel.fmr.com
autocompletepin.fmr.com
wi-proxy-nws-pac-mmk.fmr.com
fac2-ws-advisorchannel.fmr.com
browncat.fmr.com
eimd-chainlite-dev.fmr.com
travelrule-test-global.aw079.c.fidelity.com
accountopeninglc5.fmr.com
ilv.fidelity.com
wchierarchyuat.fmr.com
wexhcemnp.fmr.com
customerportfolioperf.fmr.com
vlsitkms02rtp2.fmr.com
artifactory-onprem-edge.fmr.com
guidancepac.fmr.com
pacemuadminfi.fmr.com
watchtoolsre2.fmr.com
vc2coma2419213np.fmr.com
efras.fmr.com
logininternalibglc5.fmr.com
dojo7s10016.fmr.com
accountmaintqa1.fmr.com
digitalre1.fmr.com
fastlinkqa4olb.fmr.com
nb-ceres.fmr.com
ewpacpt.fmr.com
bigidco2005.fmr.com
accountsqa4.fmr.com
cssacpt.fmr.com
moneymovementlc6.fmr.com
apikm-externaluat.fmr.com
nfiwswscat.fmr.com
dojo7e30001.fmr.com
dojo3s10021.fmr.com
hive-prod.fmr.com
dojo3s10017.fmr.com
portfolioreviewre2.fmr.com
fhb-outbounds-flattener-api-dit.fmr.com
ditmbl4.fmr.com
metricspac.fmr.com
termquoteqa1.fmr.com
lyncdiscover.fidelity.com
trnilv.fmr.com
fasmisqa1.fmr.com
demotest.fmr.com
fsemulatorpac.fmr.com
nwsint.fmr.com
vllabmn02oma2.fmr.com
catanws.fmr.com
dojo3s10022.fmr.com
wwwqa1.fmr.com
finnbps.fmr.com
emailre2.fmr.com
portfolioreviewpac.fmr.com
hue-lab.fmr.com
eresearchqaprod.fmr.com
kfk3b1001.rtp1.hadoop.fmr.com
pasosspin.fmr.com
guidancetoolspac.fmr.com
ei-fmd-prd-behindF5.fmr.com
myguidanceqa1.fmr.com
esign.fmr.com
moneyfirstsqa4.fmr.com
fullviewre.fmr.com
fircd-nonprod-sso.fmr.com
qpn6chin.fmr.com
hs2-uat.fmr.com
pincws.fmr.com
prd2-md-userconnect.fmr.com
dojo3m30002.fmr.com
ecc-splunk-npd-master.ecc-sscs.aws-nonprod.fmrcloud.com
bigiddb2001.fmr.com
oltxstage.fmr.com
catambl.fmr.com
VC2CRTP1307605.fmr.com
ebsp1app.fmr.com
bigidco2002.fmr.com
nr5.fmr.com
ihubwspin.fmr.com
trnhps.fmr.com
guidancetoolsre2.fmr.com
bigidco2006.fmr.com
voiceloginpac.fmr.com
ei1559vwin.fmr.com
incomeplannerqa1.fmr.com
qrpin.fmr.com
dojo3s30014.rtp1.hadoop.fmr.com
fpsqaprod.fmr.com
uaocat.streetscape.com
gsyswfmxrtpd003.fmr.com
dojo3s10038.fmr.com
aps.fidelity.com
cajaqaprod.fmr.com
autocompleteqa1.fmr.com
iwsqawebapps.aws-nonprod.fmr.com
pacvts.fmr.com
secureecg.fmr.com
dojo7s10004.rtp1.hadoop.fmr.com
vc2coma2418193np.fmr.com
fac2-ws-portalchannel.fmr.com
autocompletepin.fmr.com
wi-proxy-nws-pac-mmk.fmr.com
fac2-ws-advisorchannel.fmr.com
browncat.fmr.com
eimd-chainlite-dev.fmr.com
travelrule-test-global.aw079.c.fidelity.com
accountopeninglc5.fmr.com
ilv.fidelity.com
wchierarchyuat.fmr.com
wexhcemnp.fmr.com
customerportfolioperf.fmr.com
vlsitkms02rtp2.fmr.com
artifactory-onprem-edge.fmr.com
guidancepac.fmr.com
pacemuadminfi.fmr.com
watchtoolsre2.fmr.com
vc2coma2419213np.fmr.com
efras.fmr.com
logininternalibglc5.fmr.com
dojo7s10016.fmr.com
accountmaintqa1.fmr.com
digitalre1.fmr.com
fastlinkqa4olb.fmr.com
nb-ceres.fmr.com
ewpacpt.fmr.com
bigidco2005.fmr.com
accountsqa4.fmr.com
cssacpt.fmr.com
moneymovementlc6.fmr.com
apikm-externaluat.fmr.com
nfiwswscat.fmr.com
dojo7e30001.fmr.com
dojo3s10021.fmr.com
hive-prod.fmr.com
dojo3s10017.fmr.com
portfolioreviewre2.fmr.com
fhb-outbounds-flattener-api-dit.fmr.com
ditmbl4.fmr.com
metricspac.fmr.com
termquoteqa1.fmr.com
lyncdiscover.fidelity.com
trnilv.fmr.com
fasmisqa1.fmr.com
demotest.fmr.com
fsemulatorpac.fmr.com
nwsint.fmr.com
vllabmn02oma2.fmr.com
catanws.fmr.com
dojo3s10022.fmr.com
wwwqa1.fmr.com
finnbps.fmr.com
emailre2.fmr.com
portfolioreviewpac.fmr.com
hue-lab.fmr.com
eresearchqaprod.fmr.com
kfk3b1001.rtp1.hadoop.fmr.com
pasosspin.fmr.com
guidancetoolspac.fmr.com
ei-fmd-prd-behindF5.fmr.com
myguidanceqa1.fmr.com
esign.fmr.com
moneyfirstsqa4.fmr.com
fullviewre.fmr.com
fircd-nonprod-sso.fmr.com
qpn6chin.fmr.com
hs2-uat.fmr.com
pincws.fmr.com
prd2-md-userconnect.fmr.com
dojo3m30002.fmr.com
ecc-splunk-npd-master.ecc-sscs.aws-nonprod.fmrcloud.com
bigiddb2001.fmr.com
oltxstage.fmr.com
catambl.fmr.com
VC2CRTP1307605.fmr.com
ebsp1app.fmr.com
bigidco2002.fmr.com
nr5.fmr.com
Certificate
The complete raw certificate details for nr5.fmr.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIQeBD/GHni5DMAAAAAUPfi+TANBgkqhkiG9w0BAQsFADCB ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0x OTA5MjgxMjI5NThaFw0yMTA5MjgxMjU5NTZaMGsxCzAJBgNVBAYTAlVTMRYwFAYD VQQIEw1NYXNzYWNodXNldHRzMQ8wDQYDVQQHEwZCb3N0b24xEDAOBgNVBAoTB0ZN UiBMTEMxCzAJBgNVBAsTAkVJMRQwEgYDVQQDEwtucjUuZm1yLmNvbTCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAJy5ZsyUX2enDZO+OY4s6iZqUHIgwzTp 4uM8OI8KitHddqlNNJC3XcwSwommisWBjbojns70rWVoVMGlFOV67B4v5RGN6jge tcRqlyiMk7Fj53mAh/uXSg8BgcUvi0EZi2Ysr4RjBhp7nHddUHAWSG0D+VTYrpMa iMHqF6N9ri6HVaShhAU7iO8jiPwiSn8av1/+Oe1HOI4ZWNVU7nDjX4ITN0NU8+wI ZJCYQ/rBGkcQwz5utoj12d00xl9DMCp8EquaiKLyXwW07nmU/JIUruruuNhKvfHt 6ga76qeHYgCwX46oNcTgEdWzDffq1Kbj+L3EMhRXf0qU+ggEHnUSoC8CAwEAAaOC AZcwggGTMBMGCisGAQQB1nkCBAMBAf8EAgUAMBYGA1UdEQQPMA2CC25yNS5mbXIu Y29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwMwYDVR0fBCwwKjAooCagJIYiaHR0cDovL2NybC5lbnRydXN0Lm5ldC9sZXZl bDFrLmNybDBLBgNVHSAERDBCMDYGCmCGSAGG+mwKAQUwKDAmBggrBgEFBQcCARYa aHR0cDovL3d3dy5lbnRydXN0Lm5ldC9ycGEwCAYGZ4EMAQICMGgGCCsGAQUFBwEB BFwwWjAjBggrBgEFBQcwAYYXaHR0cDovL29jc3AuZW50cnVzdC5uZXQwMwYIKwYB BQUHMAKGJ2h0dHA6Ly9haWEuZW50cnVzdC5uZXQvbDFrLWNoYWluMjU2LmNlcjAf BgNVHSMEGDAWgBSConB03bxTP8971PfNf6dgxgpMvzAdBgNVHQ4EFgQUiNWOlPrr seWgqxAutcxx0JogQzYwCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAQEAmknf rjXHuQfXqhLqKiKWE1v0Qqv9DoN6fwD6h8uBocp56dNzGGO9swwtQ1+AJU0wqJQ3 qYYvUxYhpqY2tKYXNqkwIzI+jpjXBlKEbuxBehdTI6Fl0aIxvqqTLCx/x8ipdTi0 fBp6ovGSuHHgWdabSCXvmX9UoyMQcqh8IJ9YJvpUHBsF2EoCiUfnRMFis5018Q4r KDbHy7oIzgM06KpZYJ/FmnDK9WfCjUlZrhJZVVi6StLQATpnMl3NZ6x6sX3O/xFl Swo4pNKE4izar2zn8DhX4x969Ki1wFt9fWgoFDzoWVOjzCmKN+Xbgqsy4fOE0xWg 65znDOYID5ay3JW07g== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLlmzJRfZ6cNk745jizq JmpQciDDNOni4zw4jwqK0d12qU00kLddzBLCiaaKxYGNuiOezvStZWhUwaUU5Xrs Hi/lEY3qOB61xGqXKIyTsWPneYCH+5dKDwGBxS+LQRmLZiyvhGMGGnucd11QcBZI bQP5VNiukxqIweoXo32uLodVpKGEBTuI7yOI/CJKfxq/X/457Uc4jhlY1VTucONf ghM3Q1Tz7AhkkJhD+sEaRxDDPm62iPXZ3TTGX0MwKnwSq5qIovJfBbTueZT8khSu 6u642Eq98e3qBrvqp4diALBfjqg1xOAR1bMN9+rUpuP4vcQyFFd/SpT6CAQedRKg LwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 159595610197573274572773245517877994233 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-28 12:29:58 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-28 12:59:56 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Boston' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FMR LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EI' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nr5.fmr.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19784600490968729522776257174231329048324199809086322766105371468119469629505788923649203785188129156541714146384877485030095678739929702631291206496096506231632054101154087492343177156616187980234142773735143838977231243820146240091180406296923295922343878812661629930053762893715818833433316748582257162292134590011935382072288713015103132124312025523437943786238201356021223957353884239357384561832676448685941241846494244548466909025112622859164288989859461192706905566108042114317028919244681774698477521914745532643977477019819443244952888498760345636103335841495973641966865571996686230121586499150686975074351 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nr5.fmr.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 88d58e94faebb1e5a0ab102eb5cc71d09a204336 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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