mail-uk.o365.ey.com

- Ernst and Young -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 17:34:cc:9c:be:c5:9a:45:08:7e:c3:cf:8d:92:b3:75 was issued on by Entrust, Inc..

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ernst and Young

Organization: Ernst and Young
State / Province: New Jersey
Locality: Secaucus
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 17:34:cc:9c:be:c5:9a:45:08:7e:c3:cf:8d:92:b3:75
Serial Number (int): 30846393369890412049869787939703272309
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: aa:d9:aa:87:9d:55:4f:b5:99:4b:04:48:c1:20:0e:62:94:55:99:d8
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 9a:fd:6a:31:c8:14:68:16:64:eb:ce:f8:57:57:f1:4a:81:ac:1c:5e
Fingerprint (sha256): 07:56:ec:54:5a:46:95:36:64:5e:68:39:04:30:70:40:56:9c:0d:a6:ed:75:ec:4c:98:50:d3:ed:a5:e6:09:44

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate mail-uk.o365.ey.com

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail-uk.o365.ey.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail-uk.o365.ey.com
*.pod51544.outlook.com
autodiscover.can.ey.com
autodiscover.eur.ey.com
autodiscover.ey.com
autodiscover.eygs.mail.onmicrosoft.com
autodiscover.eygs.onmicrosoft.com
autodiscover.gbr.ey.com
autodiscover.nam.ey.com
gbrp267-provisioning.internal.outlook.com
mail1.ey.com
mail2.ey.com
mail-ca.ey.com
mail-ca.o365.ey.com
mail-eu.ey.com
mail-eu.o365.ey.com
mail-uk.ey.com
mail-us.ey.com
mail-us.o365.ey.com
pod51544.outlook.com
pod51544ip.outlook.com
pod51544-pri.outlook.com
pod51544psh.outlook.com

Other certificates including the domain name ey.com

(limited to 100 certificates)
www.payrollportal.ey.com
lan-199-ext.ey.com
eycwa.ey.com
ameyrcf01.ey.com
gemcms-api.qa-fix.ey.com
tls.automattic.com
qa-coreservices-mobility.ey.com
de63u.ey.com
appleTest0805.ey.com
admin.eytaxbriefing.ey.com
cb.catalyst.ey.com
apacadvisorybbwy.ey.com
avepoint.ey.net
gateway-api-gwc.ey.com
idsftpstg1.ey.com
edna-uat.ey.com
www1.payrollportal.ey.com
eyots.nlg-uat.ey.com
tprp-sandbox.ey.com
de01.eydmz.net
lss-dev.ey.com
cert00078-azurecdn.akamaized.net
lan-184-ext.ey.com
globalmarkets.xd.ey.com
gtp-stage.ey.com
gateway-api-inc.ey.com
athenaproxyapid.ey.com
cert00078-azurecdn.akamaized.net
ameyrcs01.ey.com
plcarmen-stage.ey.com
cert00078-azurecdn.akamaized.net
lan-145-ext-we.ey.com
eyvapps-web-uss.ey.com
Analytics.ey.com
cert00042-azurecdn.akamaized.net
validator.ey.com
slot1.admin.ttt.ey.com
mtt-staging.ey.com
eroom1e.ey.com
eyd-de.ey.com
reckitt.change-insights.ey.com
eyd-de.ey.com
cert00078-azurecdn.akamaized.net
spotfire-hk.ey.com
wotcbics2-stg.ey.com
d2.taxsuite.ey.com
paspricing-dev.ey.com
agility-ipaas-integration-nonprd.ey.com
lan-227-ext.ey.com
eventsink-eunorth-nonprod.ey.com
signinghub-uat.ey.com
ci-dxc-reporting-trac.ey.com
rise-uat.ey.com
webforms.ey.com
VATAnalyticsqa.ey.com
Usn101u.cloudapp.ey.net
www.rpnn.ey.com
askey-uat-web.ey.com
tasdigitalexperience-uat.ey.com
labpages.braze.com
us.eyos-wapi.ey.com
athenaq.ey.com
www.highq.com
vedlys.ey.com
AM02.EY.COM
cesa22.tpweb.ey.com
neapp01.mdrnp.ey.com
uat.proposal-engine.knowledge-engine.ey.com
alumnihub-qa.ey.com
eyvapps-api-swn.ey.com
payrollcontrol-uat.ey.com
requestforevidence-portal-aue.ey.com
eyres.nlg.ey.com
Portal.catalyst.ey.com
Conversation-insights-digitalassistant.ey.com
qa1-gcs-gsp-pathway.ey.com
uat-paansadminconsole.ey.com
web004.ey.com
cn-director.ey.com
POLTT.ey.com
culturEYsurvey-ua.ey.com
cert00078-azurecdn.akamaized.net
www.highq.com
*.attacksim.ey.com
cpssows.ey.com
dxc-public-assets-trac.ey.com
www.ey.com
eventsink-eunorth-nonprod.ey.com
lan-demo-int.ey.com
CIS1C.EY.COM
de41.ey.com
amsf.ey.com
Taxchatapi.ey.com
LER-uat.ey.com
ccn-api-usn.ey.com
spotfire-sg.ey.com
dev-gcs-gsp-pathway.ey.com
ogs-uat2.ey.com
discover-qa.ey.com
eyintelligentchecklists-jpe.ey.com

Certificate

The complete raw certificate details for mail-uk.o365.ey.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1T/ZiEVWsFS6TOlWMo6a
2w/qsX9xRVJ2mDpX29u9tOAyKMv6l+UMgcDpKDCW12T9OxAvKd9sXDTZZUJ3ZfYU
8Uf6458vD4hlX+8Jt5EC2bFLXRbaXTq1vntkdM7FhwOKUduPrYaFyfJpiHKsvDxi
ivd5OL5MUvEGFtDh4A9xXqUIytfpd6E1pWReci6WfpXpz5uyJUBDlef8vdSoqwYi
8Ig+lhNAauTbAQySNad8MOAAdvilSDqDMFe0uM+B6tOD1lQrojo2IkbvbzK6kMOA
gafOT0MI2+6bnFxE0VptzXbMzxtv4KKLD121rMV2gzrX7AaoBgFJxYYRkKrM+l+4
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 30846393369890412049869787939703272309
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-15 00:28:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-15 00:28:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Secaucus'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ernst and Young'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail-uk.o365.ey.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26920244435863944103229740633507838425227192756232927852335205272489161058472367170332018321065625688185759226947867716127785231075660651283755266394148707360988198989342537264198692822866517458577512419889951780009412194814242138845314863611500347948684505139898667540147713814523541003466095479694368532628493034853626437077541441348715247619306877989981512144116046240628646597692092606349644893363807955698979753326135170732044212036547329996517513474586083623837190615346539543443219532699705472729340451861657070084856557474749889954902938652254042356118538166744148558164168411647339850099590550968569039927517
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aad9aa879d554fb5994b0448c1200e62945599d8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (540 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail-uk.o365.ey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pod51544.outlook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.can.ey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.eur.ey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.eygs.mail.onmicrosoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.eygs.onmicrosoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.gbr.ey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.nam.ey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gbrp267-provisioning.internal.outlook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail1.ey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail2.ey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail-ca.ey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail-ca.o365.ey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail-eu.ey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail-eu.o365.ey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail-uk.ey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail-us.ey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail-us.o365.ey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pod51544.outlook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pod51544ip.outlook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pod51544-pri.outlook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pod51544psh.outlook.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							01670075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000185132e533d0000040300463044022078232535a3b517f94f75d7f44fad904bf3b5d431b054e56cd0461bd894e7271002200827f5461ae125751a56fe4e9ede352bd3bd637745d6ab62ffaa69b3b8a61b27007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a00000185132e533f000004030047304502201a6f9a1c373f0f56bb6b09ec24cf081131a9115d9a9b7bd9147e4ee572c38474022100b27cc6b19cd8040baa922057d6308e87b3a08f630ee965639447c9737da42915007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000185132e53ac0000040300473045022100fa82df8586600800ae058a82396c590c1652f4f49fa683c716143424e686d25f022065105f3ac228087d967c6c319ae96a3b3bfc6f64eba7de1a59b34c314704f68a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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