adeosecured.adeo.com

- ADEO Services -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number ed:73:cc:e3:7f:ca:dc:fe:00:00:00:00:50:e3:f2:13 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

ADEO Services

Organization: ADEO Services
Locality: Ronchin
Country: FR

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ed:73:cc:e3:7f:ca:dc:fe:00:00:00:00:50:e3:f2:13
Serial Number (int): 315628304775658445603226604204909130259
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: c5:96:da:05:7b:28:30:a4:7d:f8:46:2b:e3:77:43:1f:db:46:b6:21
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 33:52:8f:48:2f:ff:c2:b4:f3:ec:0a:96:6a:7e:82:f1:3d:f9:34:93
Fingerprint (sha256): 08:6c:d5:aa:42:78:81:59:b5:b3:97:4b:e5:07:0a:19:35:f7:35:d0:b5:58:52:a3:9a:c0:8d:65:42:45:c2:81

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate adeosecured.adeo.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for adeosecured.adeo.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adeosecured.adeo.com

Other certificates including the domain name adeo.com

(limited to 100 certificates)
adeo3.map.fastly.net
adeo.map.fastly.net
adeo.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
adeo7.map.fastly.net
dns-vetting1m.map.fastly.net
dns-vetting1j.map.fastly.net
adeo.map.fastly.net
support15.cdnetworks.net
support9.cdnetworks.net
support5.cdnetworks.net
support3.cdnetworks.net
support.cdnetworks.net
adeo2.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
support3.cdnetworks.net
adeo.map.fastly.net
dns-vetting1l.map.fastly.net
support10.cdnetworks.net
support5.cdnetworks.net
dns-vetting1-mims-pawel.map.fastly.net
support3.cdnetworks.net
support10.cdnetworks.net
dns-vetting1l.map.fastly.net
adeo4.map.fastly.net
support10.cdnetworks.net
test.myupbox.adeo.com
support9.cdnetworks.net
adeo.map.fastly.net
adeo.map.fastly.net
dns-vetting1k.map.fastly.net
adeo5.map.fastly.net
support.cdnetworks.net
dns-vetting1j.map.fastly.net
support10.cdnetworks.net
support10.cdnetworks.net
dns-vetting1l.map.fastly.net
adeo.map.fastly.net
dns-vetting1j.map.fastly.net
laas.adeo.com
support10.cdnetworks.net
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1k.map.fastly.net
support3.cdnetworks.net
adeo2.map.fastly.net
support9.cdnetworks.net
support9.cdnetworks.net
support10.cdnetworks.net
internal.partenaire.supplier.adeo.com
support3.cdnetworks.net
adeo.map.fastly.net
dns-vetting1l.map.fastly.net
support9.cdnetworks.net
support9.cdnetworks.net
support15.cdnetworks.net
support9.cdnetworks.net
support3.cdnetworks.net
support3.cdnetworks.net
dns-vetting1j.map.fastly.net
adeo.map.fastly.net
adeo3.map.fastly.net
support9.cdnetworks.net
support9.cdnetworks.net
dns-vetting1j.map.fastly.net
dns-vetting1k.map.fastly.net
adeo2.map.fastly.net
support5.cdnetworks.net
support15.cdnetworks.net
support10.cdnetworks.net
support9.cdnetworks.net
dns-vetting1k.map.fastly.net
dns-vetting1k.map.fastly.net
support15.cdnetworks.net
support10.cdnetworks.net
support.cdnetworks.net
dns-vetting1k.map.fastly.net
support3.cdnetworks.net
backstage.mirrori.co
adeo2.map.fastly.net
dns-vetting1l.map.fastly.net
adeo5.map.fastly.net
adeo2.map.fastly.net
support10.cdnetworks.net
support9.cdnetworks.net
dns-vetting1m.map.fastly.net
dns-vetting1k.map.fastly.net
adeo.map.fastly.net
dns-vetting1j.map.fastly.net
adeo3.map.fastly.net
adeo4.map.fastly.net
adeosecured.adeo.com
support10.cdnetworks.net
support10.cdnetworks.net
support3.cdnetworks.net
support3.cdnetworks.net
support15.cdnetworks.net
support9.cdnetworks.net
support.cdnetworks.net
dns-vetting1j.map.fastly.net
dns-vetting1m.map.fastly.net

Certificate

The complete raw certificate details for adeosecured.adeo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIRAO1zzON/ytz+AAAAAFDj8hMwDQYJKoZIhvcNAQELBQAw
gboxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQL
Ex9TZWUgd3d3LmVudHJ1c3QubmV0L2xlZ2FsLXRlcm1zMTkwNwYDVQQLEzAoYykg
MjAxMiBFbnRydXN0LCBJbmMuIC0gZm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxLjAs
BgNVBAMTJUVudHJ1c3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBMMUswHhcN
MTgwNjE4MTUzMDE0WhcNMjAwNjE4MTYwMDEzWjBWMQswCQYDVQQGEwJGUjEQMA4G
A1UEBxMHUm9uY2hpbjEWMBQGA1UEChMNQURFTyBTZXJ2aWNlczEdMBsGA1UEAxMU
YWRlb3NlY3VyZWQuYWRlby5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCtKcv1MOv0jFlXMMYZOBH16bEKD9D4S54aXfm1MvxyxsCCj7Z7y4w797sQ
KuazchBCg+vKrIbUofsFfKcU/rEHrdgLxavXM8nCwyTQaG1Y4af8e3lIBVgN6HcU
d4XWOlcrLWV5npdIK7Yu6rA2ybLkDOHZH8o6+ounMv8Q67Ksgn+b/kVIZD1nXj+G
2WiXbpgLKQHhca7//74t06uUc2EaCmtYE/QjRweomcUuSB0brvwle+xO90rPtJnV
dQvPXJ0KBSb62LjCt/0Q9FtfLv2YuKZW12Npj0jYZ8FZjT3KvduKlf7dIimKfEHA
pe1yFu2TsMdZrZUxPkaJ4v8gMlU9AgMBAAGjggGgMIIBnDATBgorBgEEAdZ5AgQD
AQH/BAIFADAfBgNVHREEGDAWghRhZGVvc2VjdXJlZC5hZGVvLmNvbTAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDMGA1UdHwQs
MCowKKAmoCSGImh0dHA6Ly9jcmwuZW50cnVzdC5uZXQvbGV2ZWwxay5jcmwwSwYD
VR0gBEQwQjA2BgpghkgBhvpsCgEFMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly93d3cu
ZW50cnVzdC5uZXQvcnBhMAgGBmeBDAECAjBoBggrBgEFBQcBAQRcMFowIwYIKwYB
BQUHMAGGF2h0dHA6Ly9vY3NwLmVudHJ1c3QubmV0MDMGCCsGAQUFBzAChidodHRw
Oi8vYWlhLmVudHJ1c3QubmV0L2wxay1jaGFpbjI1Ni5jZXIwHwYDVR0jBBgwFoAU
gqJwdN28Uz/Pe9T3zX+nYMYKTL8wHQYDVR0OBBYEFMWW2gV7KDCkffhGK+N3Qx/b
RrYhMAkGA1UdEwQCMAAwDQYJKoZIhvcNAQELBQADggEBALrtnYvYURyzSCKTBrjm
kbA5PkScxDHGkhBqCDCojPRjLHHKia44926YT86FIJpFpDVw93/n+IEjTLg3bJAr
chAKmkG8VQybkh7mK5nwyyv7yyJZCl+Gu0VPL1bav4jxWMMwfdPaaOgsbKfTVp7H
MOxuCvzgKFp/WRyatUOptwy4hALgKtyvnGtGhh03T4RZyVD9+Q65kElCmxNZh0Hj
NQ0+T1RKJ9mifxObB5YygIwg0HVCF5xhRS6McNbvpyOuxk9Sk4ZbBwcJpE96zOZn
Idn3CRnrLKH1OUvyuthHtjyQRkx3Bq34EBKrsvA4MPahWnWyzwi6XAVxLhohBoZI
BnA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSnL9TDr9IxZVzDGGTgR
9emxCg/Q+EueGl35tTL8csbAgo+2e8uMO/e7ECrms3IQQoPryqyG1KH7BXynFP6x
B63YC8Wr1zPJwsMk0GhtWOGn/Ht5SAVYDeh3FHeF1jpXKy1leZ6XSCu2LuqwNsmy
5Azh2R/KOvqLpzL/EOuyrIJ/m/5FSGQ9Z14/htlol26YCykB4XGu//++LdOrlHNh
GgprWBP0I0cHqJnFLkgdG678JXvsTvdKz7SZ1XULz1ydCgUm+ti4wrf9EPRbXy79
mLimVtdjaY9I2GfBWY09yr3bipX+3SIpinxBwKXtchbtk7DHWa2VMT5GieL/IDJV
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315628304775658445603226604204909130259
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-18 15:30:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-18 16:00:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ronchin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ADEO Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'adeosecured.adeo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21859837485035578420880212280834889040537420915529955183331520577227125512326736606232100218473249335033934305583280389359738321490528145307671457155357802408399284185652971881370321975198471035686758893906603701905446283257458220363800310884569122194229097859390353198234247537150709043472465608999460264828179764886702344303147341782188617938063282583802043957921726388404737314557763638023454960115344979510433683218424547323936180524932650628664748545661231673577289604239043335772195375810910943892431509287377462533650780815301959236869951459721670398327153399325402739014366244809581872249373587833497169581373
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adeosecured.adeo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c596da057b2830a47df8462be377431fdb46b621
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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