SFBwebextna.cargill.com

- Cargill, Incorporated -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 44:66:0f:64:3f:c2:5d:52:44:47:87:72:8d:05:97:4b was issued on by Entrust, Inc..

With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Cargill, Incorporated

Organization: Cargill, Incorporated
State / Province: Minnesota
Locality: Wayzata
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 44:66:0f:64:3f:c2:5d:52:44:47:87:72:8d:05:97:4b
Serial Number (int): 90917430171637665902445057642538047307
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 7d:4a:44:aa:2a:e9:00:58:c3:50:65:2f:83:aa:5d:5a:94:8b:18:c8
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): d6:3b:fd:e3:ad:98:9c:c5:9c:1f:2d:34:66:d3:cb:42:04:4e:93:4c
Fingerprint (sha256): 08:7b:f1:30:11:8c:6a:aa:0b:9f:d0:df:c9:22:a1:d5:16:52:94:70:c2:aa:96:c6:5c:2a:b6:99:42:6d:fc:ac

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate SFBwebextna.cargill.com

28

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for SFBwebextna.cargill.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

SFBwebextna.cargill.com
LSWebExtOC.cargill.com
lswebextna.cargill.com
euwebapppool.cargill.com
lswebextjp.cargill.com
eastmeetingshare.cargill.com
lswebextla.cargill.com
sfbwebexteu.cargill.com
sfbwebextla.cargill.com
westmeetingshareOOS.cargill.com
eastmeetingshareOOS.cargill.com
eastmeetings.cargill.com
sfbwebextap.cargill.com
lswebextap.cargill.com
westmeetings.cargill.com
Lyncdiscover.cargill.com
Lyncdiscover.crgl-thirdparty.com
Lyncdiscover.cargillfeedjv.com
Lyncdiscover.cargillyantaijv.com
Lyncdiscover.tegporto.com.br
Lyncdiscover.agxkr-thirdparty.com
Lyncdiscover.awb.com.au
Lyncdiscover.provimi.com
Lyncdiscover.provimi-na.com
Lyncdiscover.vn.provimi.com
sfbwebexteuwgc.cargill.com
Lyncdiscover.agresource.ca
Lyncdiscover.diamondv.com

Other certificates including the domain name cargill.com

(limited to 100 certificates)
lsaena03.cargill.com
cargill371-cfw.gw.cargill.com
eln.qa.cargill.com
apiportalunisolution.cargill.com
cuposgluapi.ar.cargill.com
jp.vpn.cargill.com
tableau.cargill.com
proxy.userprovisioning-preprod.cargill.com
erp-preprod.cargill.com
uk.employee.cargill.com
sfimage.cargill.com
uxq2fcs.admin.cargill.com
www.glimsonline.com
www.br.cda.cargill.com
proxya10.facturasmexico.cargill.com
sapcarrier.cargill.com
www.infoservice.cargill.com
cargill.com
cfse.cargill.com
boatviewn2.cargill.com
jobs.cargill.com
boomi.eu.cargill.com
itsmtest.cargill.com
protein.preferences.cargill.com
click.info.cargill.com
milkcalculator.cargill.com
proxyA10.frete.br.cargill.com
sftna1.cargill.com
sfdc-h5-dev.cargill.com
akamai-san88.exacttarget.com
sapcarrier.cargill.com
www.nacmsop.corn.cargill.com
profile-prepord.cargill.com
www.facturasmexico.cargill.com
consumerdesign.cargill.com
*.tgrc.cargill.com
www.emailtracker.cargill.com
view.riskmanagement.cargill.com
emeamerchandisestore.cargill.com
www.emailtracker.cargill.com
www.saleslogix.can.cargill.com
www.facturasmexico.cargill.com
SFBwebextna.cargill.com
www.gold.cargill.com
www.emailtracker.cargill.com
www.rdsnet.cargill.com
www.emailtracker.cargill.com
apiservices.na.cargill.com
proxya10-erp-test.cargill.com
portal-preprod.cargill.com
management.cargill.com
www.mycargill.com
fsso-qa.cargill.com
lsnapool01.cargill.com
prohanedhdb.admin.cargill.com
www.portalfrete.br.cargill.com
akamai-san88.exacttarget.com
tarc.cargill.com
fsso-qa.cargill.com
proxy.userprovisioning.cargill.com
transferwebservicepcert.na.can.cargill.com
csd-bot.cargill.com
csd-bot.cargill.com
uk.employee.cargill.com
cloud.info.cargill.com
fibi.preferences.cargill.com
www.emailtracker.cargill.com
tarc-cgitest2.cargill.com
domino.meat.cargill.com
www.cqnftp.cargill.com
proxy1-transportation8hm.cargill.com
proxya10-tranportation8-preprod.cargill.com
innovation.cargill.com
pages.info.cargill.com
proxya10.facturasmexico.cargill.com
proxy1-transportation8hm-test.cargill.com
www.cargill.com
wstransferdataservice.na.can.cargill.com
cargill.com
rpadeg001.cargill.com
nl.vpn.cargill.com
*.cargill.com
*.cargill.com
br.employee.cargill.com
www.fibi.preferences.cargill.com
uk.employee.cargill.com
cgi.wssprod.cargill.com
sfbwebexteuwgc.cargill.com
www.nl.cda.cargill.com
wsauthorizationmanager.na.can.cargill.com
prod.wcm.cargill.com
cmsapi2.cargill.com
csr2.cargill.com
www.cargillshareholder.cargill.com
proxyA10.frete.br.cargill.com
lsnapool01.cargill.com
*.na.can.cargill.com
fsso.cargill.com
br.employee.cargill.com
portal-preprod.cargill.com

Certificate

The complete raw certificate details for SFBwebextna.cargill.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CaG/JThcLi++hxhHdFu
a5BuLE1hCDMew8ddQvrwlAhREvbhkpoS8/i/fgwABgowX1kaotajDG3gpInRN7g8
ngx5bGAu5oY1rvsgybiTQ2ydlFp9F/IsSC6zM5SO7FYj5mdOdG9BN2klI/Oiilud
Kk4/C55aqLu+4tgShN8pQva8044rNSUgKTR4hiL1K1K8s8m78IqhPyNIYj2S5uvl
Rs88RdFCMP80zqMkK7T6Nf2suAWpWc2duZn/kOiToMOz6lgmDygrZdUVYdLFcrQY
3lEfrLs4Cl40n1gofNkYSSj2/fZT7nT1EepUknz0ni4CYNO5CGYfBFBMjQJXSJi0
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 90917430171637665902445057642538047307
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-30 15:00:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-30 15:00:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wayzata'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cargill, Incorporated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SFBwebextna.cargill.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28296378827963950915635622306236784210994962374445892452384240364477014408176621291133081778849276264239392666428957839159423675622451915392293097635699755454760030649755461027449749736107948563806370170610904944241959617574433232649149902823835660298478867610845256958104359351062995366160798510979509482628844711925911946666581344510317948682280528054732847916624502215097496190268711836145215298336052076098525569744762842036471916543752549913677105096068586111181897602010013022888476751005405590346687248241955776322177972431854978566238199805164452886340664728116537132179710978930520315516618025652308967732381
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7d4a44aa2ae90058c350652f83aa5d5a948b18c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (781 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'SFBwebextna.cargill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LSWebExtOC.cargill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lswebextna.cargill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'euwebapppool.cargill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lswebextjp.cargill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastmeetingshare.cargill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lswebextla.cargill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbwebexteu.cargill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbwebextla.cargill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westmeetingshareOOS.cargill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastmeetingshareOOS.cargill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastmeetings.cargill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbwebextap.cargill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lswebextap.cargill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westmeetings.cargill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.cargill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.crgl-thirdparty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.cargillfeedjv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.cargillyantaijv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.tegporto.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.agxkr-thirdparty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.awb.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.provimi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.provimi-na.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.vn.provimi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbwebexteuwgc.cargill.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.agresource.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.diamondv.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a00000182ef447b63000004030047304502200cea269e769061a5fe61bf388d41566c4dd8d3aceb87080ecfdf44c6020e161a022100d15fcaff732a105dc13435bfa39feee1ad4498b12c95d949d1d0c6bf4baeb2ad0076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000182ef447b7100000403004730450221008445011cd7b24d272ee74d14137fa2f6a92c7bac41ff91ff21f01819452615d8022021807e5a0aad4be687ff6319820d5a29601cd1a91ad1c68d7bb53f8106aef179007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000182ef447b6700000403004830460221008211acc433bd113317c4d53475da5556d031c1bad1e496d17706c3eb3084efb5022100ae8afb6bbf045b3c194efade2f135390ac67f4551fe6a464cf6e38c8f42296b7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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