perf-www.liucanada.com

- Liberty Mutual Group -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 63:8c:d5:b3:9f:69:4b:dd:00:00:00:00:50:f6:f7:f9 was issued on by Entrust, Inc..

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: GRS
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 63:8c:d5:b3:9f:69:4b:dd:00:00:00:00:50:f6:f7:f9
Serial Number (int): 132324827527323627171457955967880591353
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 50:9a:75:3a:8e:8e:05:e7:8d:79:82:80:ae:c9:1c:77:21:d6:e2:f6
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 45:ff:40:96:76:37:87:3b:fd:68:4a:f5:23:97:1c:11:05:a5:d0:e1
Fingerprint (sha256): 0b:74:8a:e7:be:85:37:ed:fa:4e:73:47:7d:e8:be:53:6d:04:3b:83:31:ac:11:18:0f:ad:3d:f5:14:d7:e8:40

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate perf-www.liucanada.com

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for perf-www.liucanada.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

perf-www.liucanada.com
dev2-lfanalytics.aws.lmig.com
uat.liucargo.com
uat.liu-eil.com
uat-www.liu-latinamerica.com
test.primerofianzas.info
qa-qiservicing.libertymutualsurety.com
qa-qi.libertymutualsurety.com
ps-qi.libertymutualsurety.com
ps-bfl.libertymutualsurety.com
perf-www.lms.ae-libertyiu.com
perf-www.liu-usa.com
perf-www.ae-libertyiu.com
perf-qi.libertymutualsurety.com
perf-bfl.libertymutualsurety.com
perf-agents.libertymutualsurety.com
passport-test.lmig.com

Other certificates including the domain name liucanada.com

(limited to 100 certificates)
perf-www.liucanada.com
perf-www.liucanada.com
www.libertyiu.com
perf-www.liucanada.com
test-risk-lifecycle-id.libertymutual.com
perf-www.liucanada.com
risk-lifecycle-id.libertymutual.com
www.liucanada.com
perf-www.liucanada.com
risk-lifecycle-id.libertymutual.com
www.libertyiu.com
risk-lifecycle-id.libertymutual.com
risk-lifecycle-id.libertymutual.com
test-www.libertyiu.com
risk-lifecycle-id.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
risk-lifecycle-id.libertymutual.com
www.liucanada.com
perf-www.liucanada.com
perf-www.liucanada.com
www.libertyiu.com
www.libertyiu.com
perf-www.liucanada.com
test-www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
test-www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
test-www.libertyiu.com
test-www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
risk-lifecycle-id.libertymutual.com
www.libertyiu.com
perf-www.liucanada.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
www.libertyiu.com
perf-www.liucanada.com
www.libertyiu.com
perf-www.liucanada.com
www.libertyiu.com
www.libertyiu.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
perf-www.liucanada.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
test-www.libertyiu.com
www.libertyiu.com
risk-lifecycle-id.libertymutual.com
perf-www.liucanada.com
test-www.libertyiu.com
test-www.libertyiu.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
perf-www.liucanada.com
test-risk-lifecycle-id.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
test-www.libertyiu.com
www.liucanada.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
perf-www.liucanada.com
test-www.libertyiu.com
www.libertyiu.com
www.libertyiu.com
www.libertyiu.com
perf-www.liucanada.com
www.liucanada.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
test-www.libertyiu.com
perf-www.liucanada.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
test-www.libertyiu.com
perf-www.liucanada.com
test-www.libertyiu.com
perf-www.liucanada.com
perf-www.liucanada.com
test-www.libertyiu.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
test-www.libertyiu.com
perf-www.liucanada.com
test-www.libertyiu.com
perf-www.liucanada.com
www.libertyiu.com
tst-www.liucanada.com
test-risk-lifecycle-id.libertymutual.com
tst-www.liucanada.com
www.libertyiu.com
www.libertyiu.com
risk-lifecycle-id.libertymutual.com
www.libertyiu.com
perf-www.liucanada.com
test-risk-lifecycle-id.libertymutual.com

Certificate

The complete raw certificate details for perf-www.liucanada.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxDCzXuMlzMzvUx59xDp
RepTJYN6Bss0KRV3K68I/ZGqxA2x1kZOxZ2vy19VV/QZ5HlE1Uqjo/YVqbOOmKWg
FDFFMabuviKj4T10r/m6AHEdEdeK/uLTmfHNgu0OMQ4fZ2MgVgox43Fkue6CsxiG
T1mUwkcBE2D73hIQsPR/Ra1Ez9wfnHaGXlm7vlX4eAb72DnT3QeFpLIiOVnshP51
LNBp2jwmM/OIBIHe25QOFJqBDtrjIzHfkSKA/Ghkks/NeikkVU5UYONqf7js+ww4
bVilLTYFkLBYxRslD5qGfh3eBUsPwT8M6otF/GFtP4whhqU66G88rl/ONaCt8B/2
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 132324827527323627171457955967880591353
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-09 11:28:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-13 11:58:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GRS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'perf-www.liucanada.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26139594259437114999697557079027918888470478581781808604162695249502049203323816635361072194321625109630347703620215004193163338928555666390637250256398000512033362720621890261343004935942600501117151940465643121276969899492068859372450029556757501042184722611452665713533125922790802658666353567007028501929631063092542219649950919801198340314226220071416668125052594766306391178259419245780682986582856831344342656732026319872104175189714870129243042094052279757297965314605373410316817992141803074418641122915363287488592211269944968172649038798407785943942965665428789692845739857760345754477733607736390564443743
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (492 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.liucanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2-lfanalytics.aws.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.liucargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.liu-eil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.liu-latinamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.primerofianzas.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-qiservicing.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps-qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps-bfl.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.lms.ae-libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.liu-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.ae-libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-bfl.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-agents.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passport-test.lmig.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							509a753a8e8e05e78d798280aec91c7721d6e2f6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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