sipfed.kpmg.com
- KPMG International -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number b6:b0:ca:d2:b5:b7:fb:8f:00:00:00:00:50:f3:e4:cb was issued on by Entrust, Inc..
With 76 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
KPMG International
Organization:
KPMG International
State / Province:
Noord-Holland
Locality: Amstelveen
Country: NL
Locality: Amstelveen
Country: NL
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): b6:b0:ca:d2:b5:b7:fb:8f:00:00:00:00:50:f3:e4:cbSerial Number (int): 242837453220850092318575321714884076747
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 48:39:2d:77:e9:ad:5e:5c:b2:ab:a1:4a:45:5c:f9:84:33:c2:70:61
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): f8:e2:0c:8b:99:68:55:b9:ee:1f:66:c6:6a:99:9e:6d:52:c5:8d:d2
Fingerprint (sha256): 12:de:fb:92:ad:4b:94:76:8a:e4:c1:b0:27:be:74:7c:93:db:d7:d6:df:dc:77:31:a7:21:d6:73:88:de:e2:0f
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate sipfed.kpmg.com
76
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for sipfed.kpmg.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
sipfed.kpmg.com
sipfed-ema2.kpmg.com
sipfed-ema3.kpmg.com
sipfed.kpmg.ca
sipfed.kpmg.co.th
sipfed.kpmg.co.tt
sipfed.kpmg.com.ar
sipfed.kpmg.com.bs
sipfed.kpmg.com.jm
sipfed.kpmg.com.kh
sipfed.kpmg.com.mt
sipfed.kpmg.com.mx
sipfed.kpmg.com.my
sipfed.kpmg.fi
sipfed.kpmg.gr
sipfed.kpmg.hu
sipfed.kpmg.is
sipfed.kpmg.pl
sipfed.kpmg.se
sipfed.kpmg.vc
sipfed.kpmg.vg
sipfed.kpmg.co.id
sipfed.kpmg.co.im
sipfed.kpmg.com.cy
sipfed.kpmg.com.sg
sipfed.kpmg.com.vn
sipfed.kpmg.es
sipfed.kpmg.gi
sipfed.kpmg.ky
sipfed.kpmg.si
sipfed.kpmg.sk
sipfed.advaitalegal.com
sipfed.bsraffiliates.com
sipfed.jp.kpmg.com
sipfed.kpmg.ag
sipfed.kpmg.at
sipfed.kpmg.az
sipfed.kpmg.bb
sipfed.kpmg.bm
sipfed.kpmg.bw
sipfed.kpmg.cm
sipfed.kpmg.co.am
sipfed.kpmg.co.nz
sipfed.kpmg.co.sz
sipfed.kpmg.co.tz
sipfed.kpmg.co.za
sipfed.kpmg.com.au
sipfed.kpmg.com.br
sipfed.kpmg.com.cn
sipfed.kpmg.com.tw
sipfed.kpmg.fr
sipfed.kpmg.ie
sipfed.kpmg.kg
sipfed.kpmg.kz
sipfed.kpmg.lu
sipfed.kpmg.mu
sipfed.kpmg.nl
sipfed.kpmg.sn
sipfed.kpmg.tc
sipfed.kpmg.ua
sipfed.ust-kpmg.com
sipfed.staging.kpmg.ca
sipfed.ng.kpmg.com
sipfed.kr.kpmg.com
sipfed.klaw.be
sipfed.kpmg.by
sipfed.kpmg.co.uk
sipfed.kpmg.it
sipfed.kpmg.lc
sipfed.kpmg.no
sipfed.meijburglegal.com
sipfed.kpmg.mc
sipfed.kpmg.tg
sipfed.kpmg.cg
sipfed.kpmg.cd
sipfed.kpmg.dz
sipfed-ema2.kpmg.com
sipfed-ema3.kpmg.com
sipfed.kpmg.ca
sipfed.kpmg.co.th
sipfed.kpmg.co.tt
sipfed.kpmg.com.ar
sipfed.kpmg.com.bs
sipfed.kpmg.com.jm
sipfed.kpmg.com.kh
sipfed.kpmg.com.mt
sipfed.kpmg.com.mx
sipfed.kpmg.com.my
sipfed.kpmg.fi
sipfed.kpmg.gr
sipfed.kpmg.hu
sipfed.kpmg.is
sipfed.kpmg.pl
sipfed.kpmg.se
sipfed.kpmg.vc
sipfed.kpmg.vg
sipfed.kpmg.co.id
sipfed.kpmg.co.im
sipfed.kpmg.com.cy
sipfed.kpmg.com.sg
sipfed.kpmg.com.vn
sipfed.kpmg.es
sipfed.kpmg.gi
sipfed.kpmg.ky
sipfed.kpmg.si
sipfed.kpmg.sk
sipfed.advaitalegal.com
sipfed.bsraffiliates.com
sipfed.jp.kpmg.com
sipfed.kpmg.ag
sipfed.kpmg.at
sipfed.kpmg.az
sipfed.kpmg.bb
sipfed.kpmg.bm
sipfed.kpmg.bw
sipfed.kpmg.cm
sipfed.kpmg.co.am
sipfed.kpmg.co.nz
sipfed.kpmg.co.sz
sipfed.kpmg.co.tz
sipfed.kpmg.co.za
sipfed.kpmg.com.au
sipfed.kpmg.com.br
sipfed.kpmg.com.cn
sipfed.kpmg.com.tw
sipfed.kpmg.fr
sipfed.kpmg.ie
sipfed.kpmg.kg
sipfed.kpmg.kz
sipfed.kpmg.lu
sipfed.kpmg.mu
sipfed.kpmg.nl
sipfed.kpmg.sn
sipfed.kpmg.tc
sipfed.kpmg.ua
sipfed.ust-kpmg.com
sipfed.staging.kpmg.ca
sipfed.ng.kpmg.com
sipfed.kr.kpmg.com
sipfed.klaw.be
sipfed.kpmg.by
sipfed.kpmg.co.uk
sipfed.kpmg.it
sipfed.kpmg.lc
sipfed.kpmg.no
sipfed.meijburglegal.com
sipfed.kpmg.mc
sipfed.kpmg.tg
sipfed.kpmg.cg
sipfed.kpmg.cd
sipfed.kpmg.dz
Other certificates including the domain name kpmg.com
(limited to 100 certificates)
accounts.amr.kpmg.com
mdm.cee.kpmg.com
cds4.cvent.com
tess10.us.kworld.kpmg.com
wp.linkes.kpmg.com
Maillab.kpmg.ca
kpmgclaraonazure.ema.kpmg.com
www.highq.com
auditchatbot2.kpmg.com
ngsclient.ext.dev.kpmg.com
www.highq.com
lbvpn.us.kpmg.com
akamaisecure3.qualtrics.com
staging.kpmg.com
vhstg.aspac.kpmg.com
origin-azureapps.ema.kworld.kpmg.com
portals.ema.kpmg.com
btp.ema.kpmg.com
portalqa.kpmg.com
sslras1dr.us.kpmg.com
cert00092-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
www.highq.com
www.highq.com
origin-azureapps.stg.amr.kpmg.com
portaluat.us.kpmg.com
kriterionmobile-qa.us.kworld.kpmg.com
solutions-analyticsuat.us.kpmg.com
cert00068-azurecdn.akamaized.net
cert00100-azurecdn.akamaized.net
lmscontent.us.kpmg.com
www.ptlinke.kpmg.com
selfserviceqa.kpmg.com
workspacesstg.ema.kpmg.com
www.highq.com
devkpmglinkworkforce.us.kworld.kpmg.com
cds4.cvent.com
lakehouseapi.us.kpmg.com
artifactory.us.kworld.kpmg.com
cds4.cvent.com
lab-uat-*.unify.us.kpmg.com
www.highq.com
WebSealIntSAMLFed.us.kworld.kpmg.com
accreditationdev01.kpmgdevcloud.kpmg.com
origin-azureapps.ema.kpmg.com
gfs-stg-2fa-ema.kworld.kpmg.com
mdm.ema.kpmg.com
workplace.us.kpmg.com
*.us.kpmg.com
oos.qa.us.kpmg.com
www.highq.com
apps.ng.kpmg.com
simp.us.kworld.kpmg.com
drmsmanager.us.kworld.kpmg.com
cert00031-azurecdn.akamaized.net
lab-eailogin-stg.us.kpmg.com
cert00088-azurecdn.akamaized.net
cert00031-azurecdn.akamaized.net
cqs.globalriskstg.kpmg.com
ngsclient.ext.dev.kpmg.com
godzilla.kpmg.com
kcentralintuat.us.kpmg.com
www.highq.com
www.highq.com
cert00059-azurecdn.akamaized.net
www.highq.com
cert00077-azurecdn.akamaized.net
www.highq.com
cert00092-azurecdn.akamaized.net
apps.ema.kpmg.com
kdox-service-uat.us.kpmg.com
www.highq.com
eccsandn1.godevazure1.kpmg.com
emersslvpn.us.kpmg.com
discovery.webpubsub.stg.kpmg.com
cert00077-azurecdn.akamaized.net
imi-uatreporting.kdev.services
cert00068-azurecdn.akamaized.net
www.mslinkeu.kpmg.com
cert00077-azurecdn.akamaized.net
kcentralint.us.kpmg.com
UPExchanges.us.kworld.kpmg.com
*.clientaccess.kpmg.com
origin-azureapps.stg.ema.kpmg.com
*.bio.kpmg.com
pivot.kpmg.com
www.highq.com
cert00068-azurecdn.akamaized.net
Kcfcapi.stg.ema.kpmg.com
www.highq.com
goazr1app266d.godevazure1.kpmg.com
cert00077-azurecdn.akamaized.net
mobileeas.ema.kpmg.com
akamaisecure4.qualtrics.com
lmclinkes.us.kworld.kpmg.com
author-kpmg-dev.us.kworld.kpmg.com
test_poc-ext.qa.kpmg.com
kpmglinkqa.amr.kpmg.com
sslraa3.us.kpmg.com
vhstg.amr.kpmg.com
mdm.cee.kpmg.com
cds4.cvent.com
tess10.us.kworld.kpmg.com
wp.linkes.kpmg.com
Maillab.kpmg.ca
kpmgclaraonazure.ema.kpmg.com
www.highq.com
auditchatbot2.kpmg.com
ngsclient.ext.dev.kpmg.com
www.highq.com
lbvpn.us.kpmg.com
akamaisecure3.qualtrics.com
staging.kpmg.com
vhstg.aspac.kpmg.com
origin-azureapps.ema.kworld.kpmg.com
portals.ema.kpmg.com
btp.ema.kpmg.com
portalqa.kpmg.com
sslras1dr.us.kpmg.com
cert00092-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
www.highq.com
www.highq.com
origin-azureapps.stg.amr.kpmg.com
portaluat.us.kpmg.com
kriterionmobile-qa.us.kworld.kpmg.com
solutions-analyticsuat.us.kpmg.com
cert00068-azurecdn.akamaized.net
cert00100-azurecdn.akamaized.net
lmscontent.us.kpmg.com
www.ptlinke.kpmg.com
selfserviceqa.kpmg.com
workspacesstg.ema.kpmg.com
www.highq.com
devkpmglinkworkforce.us.kworld.kpmg.com
cds4.cvent.com
lakehouseapi.us.kpmg.com
artifactory.us.kworld.kpmg.com
cds4.cvent.com
lab-uat-*.unify.us.kpmg.com
www.highq.com
WebSealIntSAMLFed.us.kworld.kpmg.com
accreditationdev01.kpmgdevcloud.kpmg.com
origin-azureapps.ema.kpmg.com
gfs-stg-2fa-ema.kworld.kpmg.com
mdm.ema.kpmg.com
workplace.us.kpmg.com
*.us.kpmg.com
oos.qa.us.kpmg.com
www.highq.com
apps.ng.kpmg.com
simp.us.kworld.kpmg.com
drmsmanager.us.kworld.kpmg.com
cert00031-azurecdn.akamaized.net
lab-eailogin-stg.us.kpmg.com
cert00088-azurecdn.akamaized.net
cert00031-azurecdn.akamaized.net
cqs.globalriskstg.kpmg.com
ngsclient.ext.dev.kpmg.com
godzilla.kpmg.com
kcentralintuat.us.kpmg.com
www.highq.com
www.highq.com
cert00059-azurecdn.akamaized.net
www.highq.com
cert00077-azurecdn.akamaized.net
www.highq.com
cert00092-azurecdn.akamaized.net
apps.ema.kpmg.com
kdox-service-uat.us.kpmg.com
www.highq.com
eccsandn1.godevazure1.kpmg.com
emersslvpn.us.kpmg.com
discovery.webpubsub.stg.kpmg.com
cert00077-azurecdn.akamaized.net
imi-uatreporting.kdev.services
cert00068-azurecdn.akamaized.net
www.mslinkeu.kpmg.com
cert00077-azurecdn.akamaized.net
kcentralint.us.kpmg.com
UPExchanges.us.kworld.kpmg.com
*.clientaccess.kpmg.com
origin-azureapps.stg.ema.kpmg.com
*.bio.kpmg.com
pivot.kpmg.com
www.highq.com
cert00068-azurecdn.akamaized.net
Kcfcapi.stg.ema.kpmg.com
www.highq.com
goazr1app266d.godevazure1.kpmg.com
cert00077-azurecdn.akamaized.net
mobileeas.ema.kpmg.com
akamaisecure4.qualtrics.com
lmclinkes.us.kworld.kpmg.com
author-kpmg-dev.us.kworld.kpmg.com
test_poc-ext.qa.kpmg.com
kpmglinkqa.amr.kpmg.com
sslraa3.us.kpmg.com
vhstg.amr.kpmg.com
Certificate
The complete raw certificate details for sipfed.kpmg.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIKojCCCYqgAwIBAgIRALawytK1t/uPAAAAAFDz5MswDQYJKoZIhvcNAQELBQAw gboxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQL Ex9TZWUgd3d3LmVudHJ1c3QubmV0L2xlZ2FsLXRlcm1zMTkwNwYDVQQLEzAoYykg MjAxMiBFbnRydXN0LCBJbmMuIC0gZm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxLjAs BgNVBAMTJUVudHJ1c3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBMMUswHhcN MTkwNzAzMTEzNDAwWhcNMjEwNTIwMTIwMzU5WjBxMQswCQYDVQQGEwJOTDEWMBQG A1UECBMNTm9vcmQtSG9sbGFuZDETMBEGA1UEBxMKQW1zdGVsdmVlbjEbMBkGA1UE ChMSS1BNRyBJbnRlcm5hdGlvbmFsMRgwFgYDVQQDEw9zaXBmZWQua3BtZy5jb20w ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBKyK5xph6yNfE0OcL6rvP 2ub7K+lMpbQieCq0jIcCjT1uB1K7YnG+WbqvKXxy7uVIZqkk3jv7ocTAvO3y73BI mkPAyXhDyKOXHbU/d3gC7wVnwQpRHBOvntKAt6+pZZnwWNpmUE1oaqR0lySJG2Rq 116AIk3iW0pHmkGaLDJ9m/RmkAfMyxn3mhrgaPoPjKpzl4O+pNucc5enB1TRKNnq 2OqAdtEzcXOJTmor1MCrFqch3yDSDtjg35goTuVQ4NubAB2dM3DHsuyiSFXp3Mk8 6+h003i8bLLH1VHx3OTXdRBLJSPylA3O6veoKemxON2MYPuhfy4bhUgdA2w4N2FT AgMBAAGjggbpMIIG5TATBgorBgEEAdZ5AgQDAQH/BAIFADCCBWYGA1UdEQSCBV0w ggVZgg9zaXBmZWQua3BtZy5jb22CFHNpcGZlZC1lbWEyLmtwbWcuY29tghRzaXBm ZWQtZW1hMy5rcG1nLmNvbYIOc2lwZmVkLmtwbWcuY2GCEXNpcGZlZC5rcG1nLmNv LnRoghFzaXBmZWQua3BtZy5jby50dIISc2lwZmVkLmtwbWcuY29tLmFyghJzaXBm ZWQua3BtZy5jb20uYnOCEnNpcGZlZC5rcG1nLmNvbS5qbYISc2lwZmVkLmtwbWcu Y29tLmtoghJzaXBmZWQua3BtZy5jb20ubXSCEnNpcGZlZC5rcG1nLmNvbS5teIIS c2lwZmVkLmtwbWcuY29tLm15gg5zaXBmZWQua3BtZy5maYIOc2lwZmVkLmtwbWcu Z3KCDnNpcGZlZC5rcG1nLmh1gg5zaXBmZWQua3BtZy5pc4IOc2lwZmVkLmtwbWcu cGyCDnNpcGZlZC5rcG1nLnNlgg5zaXBmZWQua3BtZy52Y4IOc2lwZmVkLmtwbWcu dmeCEXNpcGZlZC5rcG1nLmNvLmlkghFzaXBmZWQua3BtZy5jby5pbYISc2lwZmVk LmtwbWcuY29tLmN5ghJzaXBmZWQua3BtZy5jb20uc2eCEnNpcGZlZC5rcG1nLmNv bS52boIOc2lwZmVkLmtwbWcuZXOCDnNpcGZlZC5rcG1nLmdpgg5zaXBmZWQua3Bt Zy5reYIOc2lwZmVkLmtwbWcuc2mCDnNpcGZlZC5rcG1nLnNrghdzaXBmZWQuYWR2 YWl0YWxlZ2FsLmNvbYIYc2lwZmVkLmJzcmFmZmlsaWF0ZXMuY29tghJzaXBmZWQu anAua3BtZy5jb22CDnNpcGZlZC5rcG1nLmFngg5zaXBmZWQua3BtZy5hdIIOc2lw ZmVkLmtwbWcuYXqCDnNpcGZlZC5rcG1nLmJigg5zaXBmZWQua3BtZy5ibYIOc2lw ZmVkLmtwbWcuYneCDnNpcGZlZC5rcG1nLmNtghFzaXBmZWQua3BtZy5jby5hbYIR c2lwZmVkLmtwbWcuY28ubnqCEXNpcGZlZC5rcG1nLmNvLnN6ghFzaXBmZWQua3Bt Zy5jby50eoIRc2lwZmVkLmtwbWcuY28uemGCEnNpcGZlZC5rcG1nLmNvbS5hdYIS c2lwZmVkLmtwbWcuY29tLmJyghJzaXBmZWQua3BtZy5jb20uY26CEnNpcGZlZC5r cG1nLmNvbS50d4IOc2lwZmVkLmtwbWcuZnKCDnNpcGZlZC5rcG1nLmllgg5zaXBm ZWQua3BtZy5rZ4IOc2lwZmVkLmtwbWcua3qCDnNpcGZlZC5rcG1nLmx1gg5zaXBm ZWQua3BtZy5tdYIOc2lwZmVkLmtwbWcubmyCDnNpcGZlZC5rcG1nLnNugg5zaXBm ZWQua3BtZy50Y4IOc2lwZmVkLmtwbWcudWGCE3NpcGZlZC51c3Qta3BtZy5jb22C FnNpcGZlZC5zdGFnaW5nLmtwbWcuY2GCEnNpcGZlZC5uZy5rcG1nLmNvbYISc2lw ZmVkLmtyLmtwbWcuY29tgg5zaXBmZWQua2xhdy5iZYIOc2lwZmVkLmtwbWcuYnmC EXNpcGZlZC5rcG1nLmNvLnVrgg5zaXBmZWQua3BtZy5pdIIOc2lwZmVkLmtwbWcu bGOCDnNpcGZlZC5rcG1nLm5vghhzaXBmZWQubWVpamJ1cmdsZWdhbC5jb22CDnNp cGZlZC5rcG1nLm1jgg5zaXBmZWQua3BtZy50Z4IOc2lwZmVkLmtwbWcuY2eCDnNp cGZlZC5rcG1nLmNkgg5zaXBmZWQua3BtZy5kejAOBgNVHQ8BAf8EBAMCBaAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDMGA1UdHwQsMCowKKAmoCSGImh0 dHA6Ly9jcmwuZW50cnVzdC5uZXQvbGV2ZWwxay5jcmwwSwYDVR0gBEQwQjA2Bgpg hkgBhvpsCgEFMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly93d3cuZW50cnVzdC5uZXQv cnBhMAgGBmeBDAECAjBoBggrBgEFBQcBAQRcMFowIwYIKwYBBQUHMAGGF2h0dHA6 Ly9vY3NwLmVudHJ1c3QubmV0MDMGCCsGAQUFBzAChidodHRwOi8vYWlhLmVudHJ1 c3QubmV0L2wxay1jaGFpbjI1Ni5jZXIwHwYDVR0jBBgwFoAUgqJwdN28Uz/Pe9T3 zX+nYMYKTL8wHQYDVR0OBBYEFEg5LXfprV5csquhSkVc+YQzwnBhMAkGA1UdEwQC MAAwDQYJKoZIhvcNAQELBQADggEBAExaicW/ikcOb1ymKPYFUaKfXvvsIon6jQ03 ENCNeP/fJAHFifGHeMikICvAVffe4RMeP5yb/w03UqPcYRB5CgexdmMYRMlaIf8g Qs9LI0UrS9Hor1sjhqN8R5jdqAO/Pn/j3+O2MuHgIJV+RmaUIPlcgBn9QT3bTXGo 8gH5YG8xw8xP9a2Wd0hbajw2pVpJ3RlS0nr0l2XX2ehOskmWa04E1uGUWR1IYh5K vQvjPsi7qVWPLipeUVD6OYTP3oymn7k0dHQ9q8+zTnSC5a+/OYRoqPV3HWBZAjGy +68VysZ21jb85cWYu2ePG5dXMtmf46v7fRDvAiGn2f2BtPw+qNg= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSsiucaYesjXxNDnC+q7 z9rm+yvpTKW0IngqtIyHAo09bgdSu2Jxvlm6ryl8cu7lSGapJN47+6HEwLzt8u9w SJpDwMl4Q8ijlx21P3d4Au8FZ8EKURwTr57SgLevqWWZ8FjaZlBNaGqkdJckiRtk atdegCJN4ltKR5pBmiwyfZv0ZpAHzMsZ95oa4Gj6D4yqc5eDvqTbnHOXpwdU0SjZ 6tjqgHbRM3FziU5qK9TAqxanId8g0g7Y4N+YKE7lUODbmwAdnTNwx7LsokhV6dzJ POvodNN4vGyyx9VR8dzk13UQSyUj8pQNzur3qCnpsTjdjGD7oX8uG4VIHQNsODdh UwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 242837453220850092318575321714884076747 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-03 11:34:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-20 12:03:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amstelveen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KPMG International' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sipfed.kpmg.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24385263838870439198461458599450846298065082033385885230016709259786655955799316679542482934330242525552453950010713618995492782542413324816374165276402983049034227156552369698742569962863810249410921034885959086564866413654860499718403997446707139492903777763298746085509572971580123787952714419529209407639827208891830246132027889552388292637732046716009716423531798799660483421637027003982451002619403298303008297524975950989896363646165478334323700498403173346906993166495985862671393110035821528093433113923079258779991114202572892454520847695298333130503306933157593116371372992911730307396476131508794277978451 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1373 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed-ema2.kpmg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed-ema3.kpmg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.co.th' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.co.tt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.com.ar' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.com.bs' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.com.jm' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.com.kh' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.com.mt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.com.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.com.my' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.gr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.hu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.is' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.pl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.vc' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.vg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.co.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.co.im' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.com.cy' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.com.sg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.com.vn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.gi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.ky' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.si' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.sk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.advaitalegal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.bsraffiliates.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.jp.kpmg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.ag' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.at' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.az' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.bb' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.bm' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.bw' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.cm' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.co.am' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.co.nz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.co.sz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.co.tz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.co.za' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.com.au' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.com.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.com.cn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.com.tw' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.ie' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.kg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.kz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.lu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.mu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.sn' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.tc' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.ua' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.ust-kpmg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.staging.kpmg.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.ng.kpmg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kr.kpmg.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.klaw.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.by' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.lc' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.meijburglegal.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.mc' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.tg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.cg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.cd' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipfed.kpmg.dz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 48392d77e9ad5e5cb2aba14a455cf98433c27061 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 004c5a89c5bf8a470e6f5ca628f60551a29f5efbec2289fa8d0d3710d08d78ffdf2401c589f18778c8a4202bc055f7dee1131e3f9c9bff0d3752a3dc6110790a07b176631844c95a21ff2042cf4b23452b4bd1e8af5b2386a37c4798dda803bf3e7fe3dfe3b632e1e020957e46669420f95c8019fd413ddb4d71a8f201f9606f31c3cc4ff5ad9677485b6a3c36a55a49dd1952d27af49765d7d9e84eb249966b4e04d6e194591d48621e4abd0be33ec8bba9558f2e2a5e5150fa3984cfde8ca69fb93474743dabcfb34e7482e5afbf398468a8f5771d60590231b2fbaf15cac676d636fce5c598bb678f1b975732d99fe3abfb7d10ef0221a7d9fd81b4fc3ea8d8