ae2.063d.dedicated.lync.com

- Metropolitan Life Insurance Co -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 6b:45:af:d7:50:29:80:8b:00:00:00:00:50:ea:30:b8 was issued on by Entrust, Inc..

With 61 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Metropolitan Life Insurance Co

Organization: Metropolitan Life Insurance Co
State / Province: New York
Locality: Troy
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 6b:45:af:d7:50:29:80:8b:00:00:00:00:50:ea:30:b8
Serial Number (int): 142589230512769454887551771933355421880
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: f3:3d:c9:2f:ca:7d:b1:a2:84:a6:bd:26:07:ad:50:f5:48:56:e9:01
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): b1:f5:f8:e9:bd:e7:2a:c3:6d:15:42:ff:05:a1:8f:19:84:14:bb:e5
Fingerprint (sha256): 10:29:b6:e5:e4:70:7b:67:85:13:6d:db:8f:cd:bb:02:4d:f6:19:f4:e8:d9:b9:d1:05:37:0d:4a:45:5c:5e:43

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate ae2.063d.dedicated.lync.com

61

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ae2.063d.dedicated.lync.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ae2.063d.dedicated.lync.com
sipfed.063d.dedicated.lync.com
ae1.063d.dedicated.lync.com
dp1.063d.dedicated.lync.com
dp2.063d.dedicated.lync.com
sipfed.MetLife.com
sipfed.pnbmetlife.com
sipfed.alico.com
sipfed.metibp.com
sipfed.lumenlab.sg
sipfed.bidvmetlife.com.vn
sipfed.Metlife.ae
sipfed.metlife.be
sipfed.MetLife.bg
sipfed.metlife.bh
sipfed.metlife.com.kw
sipfed.Metlife.com.om
sipfed.metlife.com.tr
sipfed.metlife.cz
sipfed.metlife.es
sipfed.metlife.fr
sipfed.metlife.gr
sipfed.metlife.hu
sipfed.metlife.ie
sipfed.metlife.it
sipfed.metlife.lt
sipfed.metlife.lv
sipfed.metlife.pl
sipfed.metlife.pt
sipfed.metlife.qa
sipfed.metlife.rs
sipfed.metlife.ru
sipfed.metlife.sk
sipfed.metlife.ua
sipfed.metlife.uk.com
sipfed.metlifealico.com
sipfed.metlifealico.com.cy
sipfed.metlife-marketing.com
sipfed.metropolitanlife.ro
sipfed.metlife.com.co
sipfed.metlife.com.uy
sipfed.metlife.cl
sipfed.Metlife.com.ar
sipfed.Metlife.com.mx
sipfed.Metlifeafore.com.mx
sipfed.metlife.co.jp
sipfed.metlifealico.gr
sipfed.metlifeamslico.sk
sipfed.alico.ro
sipfed.alicopensii.ro
sipfed.metlifeamplico.lt
sipfed.metlifeamplico.lv
sipfed.metlifeamplico.pl
sipfed.alicogulf.com
sipfed.agenvita.metlife.it
sipfed.metlife.com.bd
sipfed.metlife.com.np
sipfed.metlife.com.eg
sipfed.metlife.jo
sipfed.metlife.com.lb
sipfed.provida.cl

Other certificates including the domain name lync.com

(limited to 100 certificates)
am1011dl50pl1.011d.dedicated.lync.com
am3027dl50wa1a.027D.mgd.msft.net
db3011dl50wa1a.mgdphg.emi.philips.com
sipfed.007d.dedicated.lync.com
apinternal.messenger.msn.com
images.partner.windowsphone.com
ucwa.lync.com
br1021dl50se05.021d.dedicated.lync.com
was.062d.dedicated.lync.com
sn1027dl50se02.027d.dedicated.lync.com
tk5012dl50se01.012d.dedicated.lync.com
ap2.007d.dedicated.lync.com
sn2055dl50se02.055d.dedicated.lync.com
br1009dl50se03.009d.dedicated.lync.com
ch1062dl50se04.062d.dedicated.lync.com
br1012dl50se03.012D.dedicated.lync.com
tk5009dl50se01.009d.dedicated.lync.com
sn2059dl60se01.059d.dedicated.lync.com
sn1029dl50se01.029d.dedicated.lync.com
cy1003dscomgw01.003d.dedicated.lync.com
056dCH1L40SE01.056d.dedicated.lync.com
ch1059dl50se02.059d.dedicated.lync.com
db3054dl50se02.054d.dedicated.lync.com
ap2.059d.dedicated.lync.com
sn1021dl50se01.021d.dedicated.lync.com
*.cqd.lync.com
ap2.059d.dedicated.lync.com
ap2.059d.dedicated.lync.com
tk5003dl50se01.003d.dedicated.lync.com
db3023dl50pl1.023d.dedicated.lync.com
ap2.033d.dedicated.lync.com
ap2.033d.dedicated.lync.com
db3054dl50wa1a.054d.mgd.msft.net
am1011dl50pl1.011d.dedicated.lync.com
sipfed.008F.federal.lync.com
am1023dl50pl1.023d.dedicated.lync.com
SkypeDCWA.mt.certdojo.lync.com
db3011dl50pl1.011d.dedicated.lync.com
sn1034dl50se01.034d.dedicated.lync.com
sn1023dl50pl1.023d.dedicated.lync.com
sn1020dl50se01.020d.dedicated.lync.com
br1005dl50se01.005d.dedicated.lync.com
phiham.CertDojoTest.lync.com
sn1019dl50se01.019d.dedicated.lync.com
033dCH1L40SE01.033d.dedicated.lync.com
edge.skype.com
edge.skype.com
sn1021dl50se05.021d.dedicated.lync.com
ap1.993d.dedicated.lync.com
db5027dscomgw01.027d.dedicated.lync.com
am1011dl50pl1.011d.dedicated.lync.com
sn1019dl50se05.019d.dedicated.lync.com
sn2067dl50se01.067d.dedicated.lync.com
am1023dl50pl1.023d.dedicated.lync.com
DCWAGenevaMonitoring.prod.lync.com
033dCH1L40SE01.033d.dedicated.lync.com
co1027dl50se01.027d.dedicated.lync.com
ch1062dl50se02.062d.dedicated.lync.com
am3050dl50se02.050d.dedicated.lync.com
co1027dl50se01.027d.dedicated.lync.com
ch1059dl60ed1.059d.dedicated.lync.com
am1067dl50se01.067d.dedicated.lync.com
ch1053dl50se02.053d.dedicated.lync.com
ae2.063d.dedicated.lync.com
am1023dl50pl1.023d.dedicated.lync.com
sipfed.059d.dedicated.lync.com
am1011dl50pl1.011d.dedicated.lync.com
oauth.003d.dedicated.lync.com
056dSN2L40SE01.056d.dedicated.lync.com
db3023dl50pl1.023d.dedicated.lync.com
db5027dscomgw01.027d.dedicated.lync.com
sn2062dl50se02.062d.dedicated.lync.com
tk5009dl50se02.009d.dedicated.lync.com
tsgw.online.lync.com
am1011dl50pl1.011d.dedicated.lync.com
tk5009dl50se04.009d.dedicated.lync.com
am1023dl50pl1.023d.dedicated.lync.com
*.online.lync.com
dm3003dl60pl1.003d.dedicated.lync.com
057dCH1L40SE02.057d.dedicated.lync.com
007dam1l40se01.007d.dedicated.lync.com
db3054dl50se02.054d.dedicated.lync.com
ch1053dl50se01.053d.dedicated.lync.com
sn2056dl50se06.056d.dedicated.lync.com
*.online.lync.com
db3007dl50se03.007d.dedicated.lync.com
am1019dl50se07.019d.dedicated.lync.com
co1029dl50se01.029d.dedicated.lync.com
tsgw-tip.online.lync.com
sn2059dl50wa1a.059d.mgd.msft.net
am1050dl50se01.050d.dedicated.lync.com
ch1032dl50se01.032d.dedicated.lync.com
edge.skype.com
db5027dl60pl1.027d.dedicated.lync.com
sipfed.online.lync.com
br1009dl50se02.009d.dedicated.lync.com
062dch1l40se03.062d.dedicated.lync.com
userpoolbe.online.lync.com
db3011dl50pl1.011d.dedicated.lync.com
sn2059dl50se02.059d.dedicated.lync.com

Certificate

The complete raw certificate details for ae2.063d.dedicated.lync.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHwF5jqsL/GooS5GhTnj
1g563c5LQ2ZGxjV1HjwCtvZSsZWkb4O7Dkf0Is+8vm27k3Zo1h2jFXEWDui/vpzD
7KDW14q4WPcexqv35tmSBo7WlV+7vqLGH87z+IOoJPQ4l3sNNwFBev1tkUnVS7jc
t7i2mCI3qFUPfZlpNcv927w4ADRUxNEryhaowv9MKwiHObLI6dNW0x3A5o2LB9H2
uWgfaU69cb9FNV6Ouk9Pigo5QbwY7xEvDJtHyqEYy+mNyVMgiWk6TbIZkHbokc5a
CXZeYqLadnS2VhGUQ8esfgQdTxRytoeM4jIgKYnkngiwseyxgBg1KEU3KyypebER
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 142589230512769454887551771933355421880
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-15 17:25:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-15 17:55:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Troy'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Metropolitan Life Insurance Co'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ae2.063d.dedicated.lync.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24298912596003583996850480878050792539366737864009599545937424368973680023401980506318530820333023176313873850360293305594874295362700312905032720513614807479330350835446050922318887164121137431594496669960007868018975496424656761979356572954043488959418770033567045183382178621345911051449206615510203513087326973120858543734831416613477453693998121412402106595432534179683198219394030395692241622119335792547652169519173481881720988414011460726097575019713830029553770712636732727401075166964216545879152275842198872337164906715585901867283694446341602008745079282939980723638456255572978660823161073121234558980379
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1371 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ae2.063d.dedicated.lync.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.063d.dedicated.lync.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ae1.063d.dedicated.lync.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dp1.063d.dedicated.lync.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dp2.063d.dedicated.lync.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.MetLife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.pnbmetlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.alico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.metibp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.lumenlab.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.bidvmetlife.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.Metlife.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.metlife.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.MetLife.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.metlife.bh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.metlife.com.kw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.Metlife.com.om'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.metlife.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.metlife.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.metlife.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.metlife.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.metlife.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.metlife.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.metlife.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.metlife.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.metlife.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.metlife.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.metlife.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.metlife.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.metlife.qa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.metlife.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.metlife.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.metlife.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.metlife.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.metlife.uk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.metlifealico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.metlifealico.com.cy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.metlife-marketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.metropolitanlife.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.metlife.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.metlife.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.metlife.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.Metlife.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.Metlife.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.Metlifeafore.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.metlife.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.metlifealico.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.metlifeamslico.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.alico.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.alicopensii.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.metlifeamplico.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.metlifeamplico.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.metlifeamplico.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.alicogulf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.agenvita.metlife.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.metlife.com.bd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.metlife.com.np'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.metlife.com.eg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.metlife.jo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.metlife.com.lb'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.provida.cl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f33dc92fca7db1a284a6bd2607ad50f54856e901
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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