hostedaccess.tycois.com
- Johnson Controls, Inc. -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number a9:3f:66:89:97:90:a2:61:00:00:00:00:50:f6:0c:e6 was issued on by Entrust, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Johnson Controls, Inc.
Organization:
Johnson Controls, Inc.
State / Province:
Wisconsin
Locality: Milwaukee
Country: US
Locality: Milwaukee
Country: US
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): a9:3f:66:89:97:90:a2:61:00:00:00:00:50:f6:0c:e6Serial Number (int): 224968725696683402199690319403580525798
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: b1:8b:3b:17:4b:b3:ca:89:11:3d:09:fa:5a:86:f7:62:92:b5:a4:45
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): ac:cc:08:e5:bf:e6:ee:c7:44:8b:56:a8:f0:f3:50:92:5d:2f:25:d6
Fingerprint (sha256): 0c:2d:a6:7a:80:ce:2f:6d:ea:aa:ee:20:e6:94:80:8f:92:db:6e:4c:68:b5:74:64:9f:62:c2:8b:32:c4:4e:0d
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate hostedaccess.tycois.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for hostedaccess.tycois.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
hostedaccess.tycois.com
www.hostedaccess.tycois.com
www.hostedaccess.tycois.com
Other certificates including the domain name tycois.com
(limited to 100 certificates)
imperva.com
mivsp.tycois.com
imperva.com
cprod.broker03.tycois.com
imperva.com
incapsula.com
OpsMobAmpPROD.tycois.com
incapsula.com
incapsula.com
incapsula.com
imperva.com
incapsula.com
managedvideo.tycois.com
gomobility.tycois.com
imperva.com
imperva.com
incapsula.com
perf.compass.tycois.com
imperva.com
incapsula.com
gomobility.tycois.com
hostedaccess.tycois.com
imperva.com
incapsula.com
ecdev.broker05.tycois.com
incapsula.com
datasource.tycois.com
imperva.com
imperva.com
incapsula.com
usaur2apap7002.tycois.com
ampmo.tycois.com
incapsula.com
imperva.com
riskreviewservices.tycois.com
go.tycois.com
misentry.tycois.com
riskreviewservices.tycois.com
OPSMOBPRXWSUAT.TYCOIS.COM
imperva.com
www.tycois.com
ecprod.broker02.tycois.com
imperva.com
ecprod.broker02.tycois.com
incapsula.com
usaur2apap7002.tycois.com
imperva.com
incapsula.com
ccaweb.tycois.com
imperva.com
imperva.com
imperva.com
incapsula.com
tis-citrix-cornell.tycois.com
imperva.com
incapsula.com
incapsula.com
incapsula.com
datasource.tycois.com
managedvideo.tycois.com
riskreviewservices.tycois.com
imperva.com
imperva.com
imperva.com
imperva.com
ecprod.broker02.tycois.com
ecperf.broker02.tycois.com
ac.tycois.com
go.tycois.com
incapsula.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
incapsula.com
irismassnotification.tycois.com
incapsula.com
OpsMobAmpTest.tycois.com
OPSMOBPRXWSTEST.TYCOIS.COM
incapsula.com
incapsula.com
incapsula.com
tis-citrix.tycois.com
incapsula.com
cperf.broker04.tycois.com
imperva.com
incapsula.com
irismassnotification.tycois.com
imperva.com
accesscontrol.tycois.com
usaur2apap7002.tycois.com
ecperf.broker02.tycois.com
incapsula.com
datasource.tycois.com
ac.tycois.com
OpsMobWebProd.cfsad.com
ecprod.broker05.tycois.com
incapsula.com
imperva.com
mivsp.tycois.com
imperva.com
cprod.broker03.tycois.com
imperva.com
incapsula.com
OpsMobAmpPROD.tycois.com
incapsula.com
incapsula.com
incapsula.com
imperva.com
incapsula.com
managedvideo.tycois.com
gomobility.tycois.com
imperva.com
imperva.com
incapsula.com
perf.compass.tycois.com
imperva.com
incapsula.com
gomobility.tycois.com
hostedaccess.tycois.com
imperva.com
incapsula.com
ecdev.broker05.tycois.com
incapsula.com
datasource.tycois.com
imperva.com
imperva.com
incapsula.com
usaur2apap7002.tycois.com
ampmo.tycois.com
incapsula.com
imperva.com
riskreviewservices.tycois.com
go.tycois.com
misentry.tycois.com
riskreviewservices.tycois.com
OPSMOBPRXWSUAT.TYCOIS.COM
imperva.com
www.tycois.com
ecprod.broker02.tycois.com
imperva.com
ecprod.broker02.tycois.com
incapsula.com
usaur2apap7002.tycois.com
imperva.com
incapsula.com
ccaweb.tycois.com
imperva.com
imperva.com
imperva.com
incapsula.com
tis-citrix-cornell.tycois.com
imperva.com
incapsula.com
incapsula.com
incapsula.com
datasource.tycois.com
managedvideo.tycois.com
riskreviewservices.tycois.com
imperva.com
imperva.com
imperva.com
imperva.com
ecprod.broker02.tycois.com
ecperf.broker02.tycois.com
ac.tycois.com
go.tycois.com
incapsula.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
incapsula.com
irismassnotification.tycois.com
incapsula.com
OpsMobAmpTest.tycois.com
OPSMOBPRXWSTEST.TYCOIS.COM
incapsula.com
incapsula.com
incapsula.com
tis-citrix.tycois.com
incapsula.com
cperf.broker04.tycois.com
imperva.com
incapsula.com
irismassnotification.tycois.com
imperva.com
accesscontrol.tycois.com
usaur2apap7002.tycois.com
ecperf.broker02.tycois.com
incapsula.com
datasource.tycois.com
ac.tycois.com
OpsMobWebProd.cfsad.com
ecprod.broker05.tycois.com
incapsula.com
imperva.com
Certificate
The complete raw certificate details for hostedaccess.tycois.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIRAKk/ZomXkKJhAAAAAFD2DOYwDQYJKoZIhvcNAQELBQAw gboxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQL Ex9TZWUgd3d3LmVudHJ1c3QubmV0L2xlZ2FsLXRlcm1zMTkwNwYDVQQLEzAoYykg MjAxMiBFbnRydXN0LCBJbmMuIC0gZm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxLjAs BgNVBAMTJUVudHJ1c3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBMMUswHhcN MTkwODE5MjIxNzIwWhcNMjAwODE5MjI0NzE5WjB4MQswCQYDVQQGEwJVUzESMBAG A1UECBMJV2lzY29uc2luMRIwEAYDVQQHEwlNaWx3YXVrZWUxHzAdBgNVBAoTFkpv aG5zb24gQ29udHJvbHMsIEluYy4xIDAeBgNVBAMTF2hvc3RlZGFjY2Vzcy50eWNv aXMuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1M98q56a+Z5I hiF4XmsK6GFG2rw1pm+fItOSvpQUeTioA7jyxuk3AByT0m7sqe5WNsLhQDZ5AyRq vm17+5eDJm4t4a4e4/SOm66o7sw6lFPpt735ycfwiwTQha5fCkuabrpHOX+gefJv Le6S33CWF+nMH5KPWzu7h07BEmO3hC8AMiv/GiBFlCtUr39rfszAzRLh3zD7fwWT +pe/QrmBdxXuxhKeXFDbGTv8YPj2DVMftq7DrMOpm1npsUXFJS5ttktk3ZR+J8MO l/MUKDU4OdStElcAOfOI728QsrHO9PT/x7A3lgBr4b6XUJ7fYozeaqQG1QxjG9b+ bF492zLAlQIDAQABo4IDLTCCAykwPwYDVR0RBDgwNoIXaG9zdGVkYWNjZXNzLnR5 Y29pcy5jb22CG3d3dy5ob3N0ZWRhY2Nlc3MudHljb2lzLmNvbTCCAX4GCisGAQQB 1nkCBAIEggFuBIIBagFoAHcAXqdz+d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFx RVgAAAFsrBA+9gAABAMASDBGAiEA2N4Fw5As76M5LNV8sGow7FLBNw+k2mUZ8ojK JK4359QCIQCCWk/LeMKNstZ98LZmiIAWOoQhgtnu31e+vWYoS0W9OAB1AFWB1MIW kDYBSuoLm1c8U/DA5Dh4cCUIFy+jqh0HE9MMAAABbKwQP5gAAAQDAEYwRAIgEG+b FLzNTwlCzJ1hE0Elds1WG0U/pNXtIIqJKstqL08CIC60Dkg7FSr3szk4ngY6BNNt Y/3QpzcSjKJoFBj+LLVHAHYAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e 0YUAAAFsrBA+6QAABAMARzBFAiARtHh8CZ+D7NN3ITRztkUA55eT/aP7aN37AOMf 5SjEFwIhAKxfHFZeFVuJoQ8aD+w0DYGF3sKDocTgRpr6+J0BgJBlMA4GA1UdDwEB /wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwMwYDVR0fBCww KjAooCagJIYiaHR0cDovL2NybC5lbnRydXN0Lm5ldC9sZXZlbDFrLmNybDBLBgNV HSAERDBCMDYGCmCGSAGG+mwKAQUwKDAmBggrBgEFBQcCARYaaHR0cDovL3d3dy5l bnRydXN0Lm5ldC9ycGEwCAYGZ4EMAQICMGgGCCsGAQUFBwEBBFwwWjAjBggrBgEF BQcwAYYXaHR0cDovL29jc3AuZW50cnVzdC5uZXQwMwYIKwYBBQUHMAKGJ2h0dHA6 Ly9haWEuZW50cnVzdC5uZXQvbDFrLWNoYWluMjU2LmNlcjAfBgNVHSMEGDAWgBSC onB03bxTP8971PfNf6dgxgpMvzAdBgNVHQ4EFgQUsYs7F0uzyokRPQn6Wob3YpK1 pEUwCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAQEAb1MAawjE/g/DM1xF/tgf hkp2hztOzck7wmQ8r9aKAWH7ujX/jcLrQnH/hp5j+3yBeYIwqu5k/vImrkqB5fPI kkwp/GpOrldn2UTj+JkRiX4KlpPPzz6eGc7Q9cYIBDGhRSR1C9JjzwhlritkTNWV DJE1ZTnQXIChp8geL/4P47crvECNwqngMXBpVR6YYIvG1LHrxjqK36gfsS8tSbML ZYXCft2pmqEsWaz/JzUhsRmGaXaa80vPdWl7irywsUqzpMxcgjGdaYPDw8IeOWQg oR6bHV8osxRXagoQ92GWsj7qU1f0iPvHUE6jXOf5K/te7GxcJ0i862RQ7+y6tMGU Fg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1M98q56a+Z5IhiF4XmsK 6GFG2rw1pm+fItOSvpQUeTioA7jyxuk3AByT0m7sqe5WNsLhQDZ5AyRqvm17+5eD Jm4t4a4e4/SOm66o7sw6lFPpt735ycfwiwTQha5fCkuabrpHOX+gefJvLe6S33CW F+nMH5KPWzu7h07BEmO3hC8AMiv/GiBFlCtUr39rfszAzRLh3zD7fwWT+pe/QrmB dxXuxhKeXFDbGTv8YPj2DVMftq7DrMOpm1npsUXFJS5ttktk3ZR+J8MOl/MUKDU4 OdStElcAOfOI728QsrHO9PT/x7A3lgBr4b6XUJ7fYozeaqQG1QxjG9b+bF492zLA lQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 224968725696683402199690319403580525798 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-19 22:17:20 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-19 22:47:19 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wisconsin' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Milwaukee' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Johnson Controls, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hostedaccess.tycois.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26864836302757622077551656887042372240052266805960641561336911041772472844152331096184946584383386087200357875340214431825708832045812019564900718736353933457424223490846081955817456655032557060571515814737874575106917009254589944016443566666401734098644564719903723807366872640415707183045109271126512264019436918070804262096838194263879713317954443481703486479927794599179335330115910145100776365012912119531729508513486969530973315438192902135576580448409197366083579486371792352466226675810051145039232231571233221964724220080878600977103229824300331081628649656169506740109862875251634129365967521137393275158677 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hostedaccess.tycois.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hostedaccess.tycois.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 01680077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016cac103ef60000040300483046022100d8de05c3902cefa3392cd57cb06a30ec52c1370fa4da6519f288ca24ae37e7d4022100825a4fcb78c28db2d67df0b6668880163a842182d9eedf57bebd66284b45bd380075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016cac103f9800000403004630440220106f9b14bccd4f0942cc9d6113412576cd561b453fa4d5ed208a892acb6a2f4f02202eb40e483b152af7b339389e063a04d36d63fdd0a737128ca2681418fe2cb547007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016cac103ee90000040300473045022011b4787c099f83ecd377213473b64500e79793fda3fb68ddfb00e31fe528c417022100ac5f1c565e155b89a10f1a0fec340d8185dec283a1c4e0469afaf89d01809065 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b18b3b174bb3ca89113d09fa5a86f76292b5a445 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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