us01cppm03.internal.synopsys.com

- Synopsys, Inc. -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 42:2a:74:4d:e6:5d:f9:7e:00:00:00:00:50:e4:7e:28 was issued on by Entrust, Inc..

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Synopsys, Inc.

Organization: Synopsys, Inc.
State / Province: California
Locality: Mountain View
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 42:2a:74:4d:e6:5d:f9:7e:00:00:00:00:50:e4:7e:28
Serial Number (int): 87949483121240608117850233558729522728
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 63:f8:95:ab:5f:6c:f9:d4:d3:d2:5a:79:9f:3a:4f:a3:c1:a0:89:29
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): b5:e4:94:01:ac:43:7b:a0:1c:59:21:0c:51:7c:7b:37:b9:63:f4:b7
Fingerprint (sha256): 0f:7c:53:6e:75:f4:86:7e:3a:92:ba:86:ff:2d:c7:c6:f8:1e:0a:3e:18:a1:11:ab:91:66:3c:37:c5:d7:71:46

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate us01cppm03.internal.synopsys.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for us01cppm03.internal.synopsys.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

us01cppm03.internal.synopsys.com
us01gp.synopsys.com
guestportal.synopsys.com

Other certificates including the domain name synopsys.com

(limited to 100 certificates)
gitsnps.internal.synopsys.com
mdc-scs2.synopsys.com
cn.news.synopsys.com
polaris.synopsys.com
capco-status.polaris.synopsys.com
c53.status.diamondasaservice.com
mdc-ssl-gwy.synopsys.com
sca.synopsys.com
alerts.funda.nl
cyberarkepm.aws.synopsys.com
misc.synopsys.com
gettimely-status.polaris.synopsys.com
endpoint-security.status.broadcom.com
o365relay-out.synopsys.com
herbalife.status.polaris.synopsys.com
gettimely-status.polaris.synopsys.com
securitylearning.synopsys.com
nessus.synopsys.com
sig-confluence-test.internal.synopsys.com
scsvuc5.synopsys.com
smetrics.synopsys.com
jp01-vpn.synopsys.com
scsvuc2.synopsys.com
salesloft.synopsys.com
evalportalqa.synopsys.com
herbalife.status.polaris.synopsys.com
us02vwdosgsp.synopsys.com
scs5-admin.synopsys.com
anjuna.status.polaris.synopsys.com
in19cppm01.internal.synopsys.com
alerts.funda.nl
itsstatus.unc.edu
anjuna.status.polaris.synopsys.com
customer.synopsys.com
bizagi.status.polaris.synopsys.com
cn30-vpn.synopsys.com
cn08-scs1-admin.synopsys.com
indigo.training.synopsys.com
password.synopsys.com
stg-dbt-docs.sigdatainsights.cloudops.synopsys.com
indc-vpn.synopsys.com
clarks.status.polaris.synopsys.com
snpsdaeu.synopsys.com
c53.status.diamondasaservice.com
scs6.synopsys.com
am04-vpn.synopsys.com
scsvuc8.synopsys.com
c53.status.diamondasaservice.com
polaris.synopsys.com
automationhero.status.polaris.synopsys.com
c53.status.diamondasaservice.com
azfra1status.mambu.com
connect.synopsys.com
us01-vpn.synopsys.com
apistatus.returnpath.com
training.synopsys.com
qa.csod.synopsys.com
cn42cppm01.internal.synopsys.com
scs3.synopsys.com
api-status.360cities.net
anjuna.status.polaris.synopsys.com
alerts.funda.nl
*.synopsys.com
eventreg.synopsys.com
bizagi.status.polaris.synopsys.com
endpoint-security.status.broadcom.com
crk.status.cloudsigma.com
cl01-vpn.synopsys.com
sdc-aws.synopsys.com
solvnet.synopsys.com
reporting.synopsys.com
alerts.funda.nl
anjuna.status.polaris.synopsys.com
alerts.funda.nl
keyfactorpki.synopsys.com
*.synopsys.com
usocsr2dirpool.internal.synopsys.com
*.msp.synopsys.com
lplfinancial-status.polaris.synopsys.com
blogs.synopsys.com
herbalife.status.polaris.synopsys.com
blogs.synopsys.com
scsvuc3.synopsys.com
us01cppm03.internal.synopsys.com
dam-stage.author.synopsys.com
chat.synopsys.com
alerts.funda.nl
adtrust.wellsky.com
carlzeiss-status.polaris.synopsys.com
appspider.synopsys.com
capco-status.polaris.synopsys.com
gettimely-status.polaris.synopsys.com
cn.news.synopsys.com
carrier-status.polaris.synopsys.com
coresvc.synopsys.com
atlanticindustrie-status.polaris.synopsys.com
jp01-vpn.synopsys.com
*.polaris.synopsys.com
defensics-store.internal.synopsys.com
saaspv6-azure.cloud.synopsys.com

Certificate

The complete raw certificate details for us01cppm03.internal.synopsys.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFoDCCBIigAwIBAgIQQip0TeZd+X4AAAAAUOR+KDANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0x
ODA3MDMxODAwMjVaFw0yMDA3MDMxODMwMjRaMH4xCzAJBgNVBAYTAlVTMRMwEQYD
VQQIEwpDYWxpZm9ybmlhMRYwFAYDVQQHEw1Nb3VudGFpbiBWaWV3MRcwFQYDVQQK
Ew5TeW5vcHN5cywgSW5jLjEpMCcGA1UEAxMgdXMwMWNwcG0wMy5pbnRlcm5hbC5z
eW5vcHN5cy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsXRZZ
gnza+IuVSPhz+TYUEijf1nWJs+InjbH0GJ00gZlRg1+JsRnKfmZToVfFlCa0ia7L
RmgsWvni7L3kEGH2TZrMgM7Z7s1UTHgxSzJdvLlKiz7NNqoYNVxDAdKUWkPpPumz
94tkS5vgMF7hKYZNT+R7lwicukOjwpGsvSP+oVs2giwD7n2O5CsFitXxrXIZgTcm
3NcNjxHdk6bQefBeVuG+GbiE1f8IohU30Jjt1Wy2PlgOu4xw7o1npHVLLMnh6fjV
m5/AVtbhR6kcheJHtBYL3v2O7ZN6Bm//Ll86nrdoY9CWSJwVvoK9dzJ8OisNrpB5
AQ2/ZCK8AuICo881AgMBAAGjggHbMIIB1zATBgorBgEEAdZ5AgQDAQH/BAIFADBa
BgNVHREEUzBRgiB1czAxY3BwbTAzLmludGVybmFsLnN5bm9wc3lzLmNvbYITdXMw
MWdwLnN5bm9wc3lzLmNvbYIYZ3Vlc3Rwb3J0YWwuc3lub3BzeXMuY29tMA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwMwYDVR0f
BCwwKjAooCagJIYiaHR0cDovL2NybC5lbnRydXN0Lm5ldC9sZXZlbDFrLmNybDBL
BgNVHSAERDBCMDYGCmCGSAGG+mwKAQUwKDAmBggrBgEFBQcCARYaaHR0cDovL3d3
dy5lbnRydXN0Lm5ldC9ycGEwCAYGZ4EMAQICMGgGCCsGAQUFBwEBBFwwWjAjBggr
BgEFBQcwAYYXaHR0cDovL29jc3AuZW50cnVzdC5uZXQwMwYIKwYBBQUHMAKGJ2h0
dHA6Ly9haWEuZW50cnVzdC5uZXQvbDFrLWNoYWluMjU2LmNlcjAfBgNVHSMEGDAW
gBSConB03bxTP8971PfNf6dgxgpMvzAdBgNVHQ4EFgQUY/iVq19s+dTT0lp5nzpP
o8GgiSkwCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAQEA0G46soZ0IRysS1CT
hPagCH5oEyF1i82Lg+BIB4CIXlMtTLHmnNCfECpqueZopGPxElhkxpleILvMRYHl
tScDta97YW2kghpb25XEi51bjR3Rm8kvteZkhzBxsC6dXGghDcUt2hk7/nTz9tdK
6OQs5mcA2hdaP5dekAQWd4O6gYCqJSnscVSVCWzmT95IWPxsONWu123wIxBGeLUU
e6CydpLEJetA4nF9GNziVOoq4X8gJ/fy96Pd/Sz/JKPSJBArJhXkUiTM2rV/w1xD
MIJW/VuCACcd+DVrhlyp8MIzz0U2uPqvofd37EQDmj0oL/Vh9Z4Mte9hS4omuswO
JCU/Sg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7F0WWYJ82viLlUj4c/k2
FBIo39Z1ibPiJ42x9BidNIGZUYNfibEZyn5mU6FXxZQmtImuy0ZoLFr54uy95BBh
9k2azIDO2e7NVEx4MUsyXby5Sos+zTaqGDVcQwHSlFpD6T7ps/eLZEub4DBe4SmG
TU/ke5cInLpDo8KRrL0j/qFbNoIsA+59juQrBYrV8a1yGYE3JtzXDY8R3ZOm0Hnw
Xlbhvhm4hNX/CKIVN9CY7dVstj5YDruMcO6NZ6R1SyzJ4en41ZufwFbW4UepHIXi
R7QWC979ju2TegZv/y5fOp63aGPQlkicFb6CvXcyfDorDa6QeQENv2QivALiAqPP
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 87949483121240608117850233558729522728
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-03 18:00:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-03 18:30:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mountain View'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Synopsys, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'us01cppm03.internal.synopsys.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29838143032082425566501431041217211873098344296534219087436609888734947800561557360844058617927894853382637168124173152806354885188892583893389435342988920008161172904697252288243103160550700867878281722184662065571734847769943111018370229824874820042420925630716489281279827782929860756128115773699501430414160890957445463198945336707837749441495425939002845120072872100648280302511268522404152106843013807992353977162726673593756562986815646333517256472715801638008650670822536641843660948182716517310395690642508176929563986435411184603584731468060968543893567826751314938055876872184426437599385207951782928699189
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us01cppm03.internal.synopsys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us01gp.synopsys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guestportal.synopsys.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							63f895ab5f6cf9d4d3d25a799f3a4fa3c1a08929
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00d06e3ab28674211cac4b509384f6a0087e681321758bcd8b83e0480780885e532d4cb1e69cd09f102a6ab9e668a463f1125864c6995e20bbcc4581e5b52703b5af7b616da4821a5bdb95c48b9d5b8d1dd19bc92fb5e664873071b02e9d5c68210dc52dda193bfe74f3f6d74ae8e42ce66700da175a3f975e9004167783ba8180aa2529ec715495096ce64fde4858fc6c38d5aed76df023104678b5147ba0b27692c425eb40e2717d18dce254ea2ae17f2027f7f2f7a3ddfd2cff24a3d224102b2615e45224ccdab57fc35c43308256fd5b8200271df8356b865ca9f0c233cf4536b8faafa1f777ec44039a3d282ff561f59e0cb5ef614b8a26bacc0e24253f4a