*.brfprevidencia.com.br
- BRF S.A -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number 2d:b8:88:15:fc:e2:cc:56:46:7a:7f:d2:8d:43:e2:46 was issued on by Entrust, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
BRF S.A
Organization:
BRF S.A
State / Province:
Santa Catarina
Locality: Itajai
Country: BR
Locality: Itajai
Country: BR
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 2d:b8:88:15:fc:e2:cc:56:46:7a:7f:d2:8d:43:e2:46Serial Number (int): 60773402582053536655522546658666865222
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId: 5f:43:c2:b3:2a:93:e1:37:21:48:64:10:23:fb:f6:13:14:47:00:9d
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): 42:c9:9a:6f:bc:8e:2d:f8:d7:9f:5e:6c:eb:ab:b0:8a:7a:77:9d:ed
Fingerprint (sha256): 08:d7:03:c4:cd:4a:83:62:69:3b:3b:94:b1:4c:da:fd:1e:03:cc:24:2b:e4:02:d9:9a:2a:8a:0c:2f:7d:3b:b4
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate *.brfprevidencia.com.br
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.brfprevidencia.com.br
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.brfprevidencia.com.br
brfprevidencia.com.br
brfprevidencia.com.br
Other certificates including the domain name brfprevidencia.com.br
(limited to 100 certificates)
brf-br.com
*.brfprevidencia.com.br
mobile.brfprevidencia.com.br
imperva.com
brfprevidencia.com.br
www.brfprevidencia.com.br
dev.amigoindica.brfprevidencia.com.br
mobile.brfprevidencia.com.br
*.brfprevidencia.com.br
brf-br.com
brf-br.com
brf-br.com
imperva.com
imperva.com
brf-br.com
imperva.com
brfprevidencia.com.br
brf-br.com
brf-br.com
amigoindica.brfprevidencia.com.br
mobile.brfprevidencia.com.br
imperva.com
mobile.brfprevidencia.com.br
brf-br.com
brf-br.com
*.brfprevidencia.com.br
mobile.brfprevidencia.com.br
imperva.com
brfprevidencia.com.br
www.brfprevidencia.com.br
dev.amigoindica.brfprevidencia.com.br
mobile.brfprevidencia.com.br
*.brfprevidencia.com.br
brf-br.com
brf-br.com
brf-br.com
imperva.com
imperva.com
brf-br.com
imperva.com
brfprevidencia.com.br
brf-br.com
brf-br.com
amigoindica.brfprevidencia.com.br
mobile.brfprevidencia.com.br
imperva.com
mobile.brfprevidencia.com.br
brf-br.com
brf-br.com
Certificate
The complete raw certificate details for *.brfprevidencia.com.br in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG3TCCBcWgAwIBAgIQLbiIFfzizFZGen/SjUPiRjANBgkqhkiG9w0BAQsFADCB ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y MjAzMjkxMzExMDFaFw0yMzA0MjcxMzExMDFaMGsxCzAJBgNVBAYTAkJSMRcwFQYD VQQIEw5TYW50YSBDYXRhcmluYTEPMA0GA1UEBxMGSXRhamFpMRAwDgYDVQQKEwdC UkYgUy5BMSAwHgYDVQQDDBcqLmJyZnByZXZpZGVuY2lhLmNvbS5icjCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAKs5GeAUr2VDxg+2HiKitYQ+6l+To4Ra 6BZTiqdsDC7PMpzxginUL3FTKmP1SltQPgj6n4dUGwpuY+PMt08Me1F7XVP5CwI0 ftElFhggpAvehiynDRvsM1+NDjleNwKS65PCFXvYw7wcOGBlTBhFiuLM4f3DQqCk AGIyPgvk/8Aw+NbWPuh+R0/ViR+A9jjV5pSoYkns7Zd+YlaIrISGSYQ5sWHc6iLN W+XozJNlo0WlSHiDk8gCIACa3wC6zOEnnqPLeKAJspQdKzN4+m2x+aqZY/1SYtk5 DFEtoLF5neI4ZELLamycG4nE9JWwPeey117WaJc9tcTZydPEzKE9le0CAwEAAaOC AyswggMnMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFF9DwrMqk+E3IUhkECP79hMU RwCdMB8GA1UdIwQYMBaAFIKicHTdvFM/z3vU981/p2DGCky/MGgGCCsGAQUFBwEB BFwwWjAjBggrBgEFBQcwAYYXaHR0cDovL29jc3AuZW50cnVzdC5uZXQwMwYIKwYB BQUHMAKGJ2h0dHA6Ly9haWEuZW50cnVzdC5uZXQvbDFrLWNoYWluMjU2LmNlcjAz BgNVHR8ELDAqMCigJqAkhiJodHRwOi8vY3JsLmVudHJ1c3QubmV0L2xldmVsMWsu Y3JsMDkGA1UdEQQyMDCCFyouYnJmcHJldmlkZW5jaWEuY29tLmJyghVicmZwcmV2 aWRlbmNpYS5jb20uYnIwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF BwMBBggrBgEFBQcDAjBMBgNVHSAERTBDMDcGCmCGSAGG+mwKAQUwKTAnBggrBgEF BQcCARYbaHR0cHM6Ly93d3cuZW50cnVzdC5uZXQvcnBhMAgGBmeBDAECAjCCAX4G CisGAQQB1nkCBAIEggFuBIIBagFoAHcAtz77JN+cTbp18jnFulj0bF38Qs96nzXE nh0JgSXttJkAAAF/1c0ZWwAABAMASDBGAiEA/15kq7CLFqIw0gPeXQ9jcMSEROYq tC25g5z97OAQQSYCIQD+PjXiM+1Dr7zVm9gXsXr0TYmWbHJX2wzL/s40PGencQB1 ALNzdwfhhFD4Y4bWBancEQlKeS2xZwwLh9zwAw55NqWaAAABf9XNGXwAAAQDAEYw RAIgKggmG4VKgKqi32lY3JQeKDcyMlHMRFcsfPXAeOp5rAYCIAh8ZHqMHuzUMrdg H4qGM3YscRvW1vpDgDDhbdaHjPywAHYArfe++nz/EMiLnT2cHj4YarRnKV3PsQwk yoWGNOvcgooAAAF/1c0ZUwAABAMARzBFAiAAuefP4dR1W14WNlnQ6EN5JIUcea2R r0m9xMtJHXyeCAIhAKplhUgceedFmfNkstAzLRTuUP0z5dHCnBTMGvOt1pSXMA0G CSqGSIb3DQEBCwUAA4IBAQBpMcCAAsEzcYfpYkbuDn1GGbTmjfMFNnbCNZDXcbDp VbGrpcVHGMse2dWcFt5R0Uaz04s+tcCy268a0I9BoGiRN+V0l2+xe5zsA/uexxHp yRgJ9tnukqTQH7Yl4AMFdhb8F7AXVjJXd9SC5FC9cplgP9J3ct3PnL8p4eGQjIkI p37D3v1OMsgXeNcaTgOFa+StF0hvMa5PMLaK77+hNjbUsnEq7xu95DPBJpclSPji rd3zAvbMAEuSzuGyxUtyZcajv1iXoARYdkp9d/YP5nppOGlClewfSSlLQlScqIbV Kcj/LCFHQijOoCkTF2NhL99vcalxBvXPDrApwCRXVJjL -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzkZ4BSvZUPGD7YeIqK1 hD7qX5OjhFroFlOKp2wMLs8ynPGCKdQvcVMqY/VKW1A+CPqfh1QbCm5j48y3Twx7 UXtdU/kLAjR+0SUWGCCkC96GLKcNG+wzX40OOV43ApLrk8IVe9jDvBw4YGVMGEWK 4szh/cNCoKQAYjI+C+T/wDD41tY+6H5HT9WJH4D2ONXmlKhiSeztl35iVoishIZJ hDmxYdzqIs1b5ejMk2WjRaVIeIOTyAIgAJrfALrM4Seeo8t4oAmylB0rM3j6bbH5 qplj/VJi2TkMUS2gsXmd4jhkQstqbJwbicT0lbA957LXXtZolz21xNnJ08TMoT2V 7QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 60773402582053536655522546658666865222 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-29 13:11:01 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-27 13:11:01 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Santa Catarina' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Itajai' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BRF S.A' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.brfprevidencia.com.br' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21614907738948989832162549359916517838239386784697994965499021540681843561620345709352897054762174205835853006632541045625883163421327792846720451904327661565520436238058623510334331978212454351844385920463909097361560436203368794544318755057856170552108109347498954659314576681495060789606785041589097657352711694343794395014001568421200086253221849045475074758827315858649877868063056902324617218562939503502128388249702776890493910521687375488985400220654184126776685183482042515525850907708772317924934295102627761542310561406753151557354640238902756364694283168007334766096530728870602278876409872009222315415021 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5f43c2b32a93e1372148641023fbf6131447009d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brfprevidencia.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brfprevidencia.com.br' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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