*.averydennison.com
- Avery Dennison -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number 0c:44:aa:f3:6b:0b:c5:0a:00:00:00:00:50:ea:a7:57 was issued on by Entrust, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Avery Dennison
Organization:
Avery Dennison
State / Province:
California
Locality: Glendale
Country: US
Locality: Glendale
Country: US
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0c:44:aa:f3:6b:0b:c5:0a:00:00:00:00:50:ea:a7:57Serial Number (int): 16307279431004595229356114070683166551
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 8c:8a:04:5d:8a:29:57:3f:ef:fb:df:d8:ad:1c:c8:51:70:38:9a:c0
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): 96:93:ff:b6:43:4d:7a:50:a2:c9:f3:20:1f:b9:84:bb:da:4f:63:2a
Fingerprint (sha256): 13:27:a8:67:4e:8d:ce:e5:31:d3:61:98:6a:4d:7a:a6:7a:8a:42:1c:15:0a:ba:3a:ac:1b:94:28:f7:a1:d9:4f
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate *.averydennison.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.averydennison.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.averydennison.com
Other certificates including the domain name averydennison.com
(limited to 100 certificates)
gps.averydennison.com
leapfrog-ssl-15.gcs-web.com
mediacentral.averydennison.com
ceros2.map.fastly.net
vdtuat.averydennison.com
iceweb2.averydennison.com
SmartSD.averydennison.com
www.averydennison.com
san-003.ceros.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-15.gcs-web.com
san-003.ceros.com
www.witinnovate.averydennison.com
products.averydennison.com
www.ntp.averydennison.com
SmartSD.averydennison.com
webservices3.averydennison.com
cwa.averydennison.com
msf.averydennison.com
san-004.ceros.com
san-003.ceros.com
san-004.ceros.com
san-003.ceros.com
leapfrog-ssl-15.gcs-web.com
*.averydennison.com
supplychain.averydennison.com
mgll.averydennison.com
san-004.ceros.com
edwcognosproduction.averydennison.com
uk.sport.averydennison.com
visualize.averydennison.com
san-004.ceros.com
www.retailcompliance.averydennison.com
san-002.ceros.com
ceros2.map.fastly.net
san-004.ceros.com
cognonprodportal.averydennison.com
askted.averydennison.com
san-003.ceros.com
san-004.ceros.com
mgll.averydennison.com
icswarranty.averydennison.com
*.averydennison.com
leapfrog-ssl-15.gcs-web.com
san-004.ceros.com
embelex.averydennison.com
freshmarxconnect.averydennison.com
san-003.ceros.com
jobs.averydennison.com
idmmobproxy.averydennison.com
www.retailcompliance.averydennison.com
cwp.averydennison.com
www.averydennison.com
san-003.ceros.com
san-004.ceros.com
leapfrog-ssl-15.gcs-web.com
vanciveproductfinder.averydennison.com
san-003.ceros.com
beta.paxar-europe.com
san-004.ceros.com
test-la.averydennison.com
*.dlrgroup.com
webservices.averydennison.com
leapfrog-ssl-15.gcs-web.com
www.compliancexprs.averydennison.com
san-003.ceros.com
leapfrog-ssl-15.gcs-web.com
webservices3.averydennison.com
leapfrog-ssl-15.gcs-web.com
ceros2.map.fastly.net
san-004.ceros.com
intelligent-solutions.averydennison.com
crp.ap.averydennison.com
remoteapps.averydennison.com
san-004.ceros.com
broadcast.averydennison.com
ilab.averydennison.com
leapfrog-ssl-15.gcs-web.com
www.retailcompliance.averydennison.com
gwp-test.averydennison.com
san-002.ceros.com
san-004.ceros.com
askted.averydennison.com
coreseries.averydennison.com
leapfrog-ssl-15.gcs-web.com
san-004.ceros.com
leapfrog-ssl-15.gcs-web.com
san-003.ceros.com
san-003.ceros.com
www.ntp.averydennison.com
www.ntp.averydennison.com
san-003.ceros.com
www.ntp.averydennison.com
leapfrog-ssl-15.gcs-web.com
san-002.ceros.com
vdt.averydennison.com
leapfrog-ssl-15.gcs-web.com
san-003.ceros.com
www.myrbis.averydennison.com
*.averydennison.com
leapfrog-ssl-15.gcs-web.com
mediacentral.averydennison.com
ceros2.map.fastly.net
vdtuat.averydennison.com
iceweb2.averydennison.com
SmartSD.averydennison.com
www.averydennison.com
san-003.ceros.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-15.gcs-web.com
san-003.ceros.com
www.witinnovate.averydennison.com
products.averydennison.com
www.ntp.averydennison.com
SmartSD.averydennison.com
webservices3.averydennison.com
cwa.averydennison.com
msf.averydennison.com
san-004.ceros.com
san-003.ceros.com
san-004.ceros.com
san-003.ceros.com
leapfrog-ssl-15.gcs-web.com
*.averydennison.com
supplychain.averydennison.com
mgll.averydennison.com
san-004.ceros.com
edwcognosproduction.averydennison.com
uk.sport.averydennison.com
visualize.averydennison.com
san-004.ceros.com
www.retailcompliance.averydennison.com
san-002.ceros.com
ceros2.map.fastly.net
san-004.ceros.com
cognonprodportal.averydennison.com
askted.averydennison.com
san-003.ceros.com
san-004.ceros.com
mgll.averydennison.com
icswarranty.averydennison.com
*.averydennison.com
leapfrog-ssl-15.gcs-web.com
san-004.ceros.com
embelex.averydennison.com
freshmarxconnect.averydennison.com
san-003.ceros.com
jobs.averydennison.com
idmmobproxy.averydennison.com
www.retailcompliance.averydennison.com
cwp.averydennison.com
www.averydennison.com
san-003.ceros.com
san-004.ceros.com
leapfrog-ssl-15.gcs-web.com
vanciveproductfinder.averydennison.com
san-003.ceros.com
beta.paxar-europe.com
san-004.ceros.com
test-la.averydennison.com
*.dlrgroup.com
webservices.averydennison.com
leapfrog-ssl-15.gcs-web.com
www.compliancexprs.averydennison.com
san-003.ceros.com
leapfrog-ssl-15.gcs-web.com
webservices3.averydennison.com
leapfrog-ssl-15.gcs-web.com
ceros2.map.fastly.net
san-004.ceros.com
intelligent-solutions.averydennison.com
crp.ap.averydennison.com
remoteapps.averydennison.com
san-004.ceros.com
broadcast.averydennison.com
ilab.averydennison.com
leapfrog-ssl-15.gcs-web.com
www.retailcompliance.averydennison.com
gwp-test.averydennison.com
san-002.ceros.com
san-004.ceros.com
askted.averydennison.com
coreseries.averydennison.com
leapfrog-ssl-15.gcs-web.com
san-004.ceros.com
leapfrog-ssl-15.gcs-web.com
san-003.ceros.com
san-003.ceros.com
www.ntp.averydennison.com
www.ntp.averydennison.com
san-003.ceros.com
www.ntp.averydennison.com
leapfrog-ssl-15.gcs-web.com
san-002.ceros.com
vdt.averydennison.com
leapfrog-ssl-15.gcs-web.com
san-003.ceros.com
www.myrbis.averydennison.com
*.averydennison.com
Certificate
The complete raw certificate details for *.averydennison.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHNDCCBhygAwIBAgIQDESq82sLxQoAAAAAUOqnVzANBgkqhkiG9w0BAQsFADCB ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0x ODExMjkxNjI1MDNaFw0yMDExMjkxNjU1MDNaMGwxCzAJBgNVBAYTAlVTMRMwEQYD VQQIEwpDYWxpZm9ybmlhMREwDwYDVQQHEwhHbGVuZGFsZTEXMBUGA1UEChMOQXZl cnkgRGVubmlzb24xHDAaBgNVBAMMEyouYXZlcnlkZW5uaXNvbi5jb20wggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoGIeRtlxfIfht2xUqNjdSWRy/6n4l c0sJVJ6Hdqtf50W99y89CYCUqptzZMQtKlRuSfKKrcmrc82aUPfixZoyTJHZjZun ViJ+sFMkYlqanuqOInLgT7nPIzYCB1UAMdMoidb10+AvVDYbOjmTyl+LWpQt/JSL aWwzsgw+DGn4xBzM5Ci/PRuTT30A4lQC7Y9imI+r6/0NBmixC1/F9m4pX6iZ234l GG50Ih3fzQWkAIR0qy51tDFqrpR0CIi6SXLGxWBJWgPCTHahYasOLOr88w1ylcBW 3Wpqk0Ym02r9LJByvaTBUgKMBL7W0fR1GAECDBJoNuIxpvsjxQtsO9i3AgMBAAGj ggOBMIIDfTAeBgNVHREEFzAVghMqLmF2ZXJ5ZGVubmlzb24uY29tMIIB8wYKKwYB BAHWeQIEAgSCAeMEggHfAd0AdQCHdb/nWXz4jEOZX73zbv9WjUdWNv9KtWDBtOr/ XqCDDwAAAWdgZTR1AAAEAwBGMEQCIAGUt6GMXgaP8dIKcqdAJFsx5NkGGmrBUOJy xuWnbUBZAiBSPM+ZRXWOMcKIsa7z1PU9jxUA6O32r4XrGwZwlMyzKgB1AFWB1MIW kDYBSuoLm1c8U/DA5Dh4cCUIFy+jqh0HE9MMAAABZ2BlNIIAAAQDAEYwRAIgZCOS pyQy+T7DM9SOpOGiAaq6N1n0J5BH/WM8EI8BmJoCIBALVnC+7UjHSm7NHU7Hc9rS AXVEp92mK9UasweRJoblAHUAVhQGmi/XwuzT9eG9RLI+x0Z2ubyZEVzA75SYVdaJ 0N0AAAFnYGU0mAAABAMARjBEAiAbBn7pnLFq0IraaF0/ar7m5occZIeEoTw61iFh lsGtGAIgWma590FhiHUxTZ4k78Psxw7i5+VYFsGK5h0Sx9Eul9oAdgDuS723dc5g uuFCaR+r4Z5mow9+X7By2IMAxHuJeqj9ywAAAWdgZTRhAAAEAwBHMEUCIQC2GpPy zaX9LdSYe4WY58jBEjukX1VCgIkdvoAbN5nokQIgT9lXqSE0pg+chAFIqZ57IwuX I4kQ2oYRXWC1QDkyF8kwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF BwMBBggrBgEFBQcDAjAzBgNVHR8ELDAqMCigJqAkhiJodHRwOi8vY3JsLmVudHJ1 c3QubmV0L2xldmVsMWsuY3JsMEsGA1UdIAREMEIwNgYKYIZIAYb6bAoBBTAoMCYG CCsGAQUFBwIBFhpodHRwOi8vd3d3LmVudHJ1c3QubmV0L3JwYTAIBgZngQwBAgIw aAYIKwYBBQUHAQEEXDBaMCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5lbnRydXN0 Lm5ldDAzBggrBgEFBQcwAoYnaHR0cDovL2FpYS5lbnRydXN0Lm5ldC9sMWstY2hh aW4yNTYuY2VyMB8GA1UdIwQYMBaAFIKicHTdvFM/z3vU981/p2DGCky/MB0GA1Ud DgQWBBSMigRdiilXP+/739itHMhRcDiawDAJBgNVHRMEAjAAMA0GCSqGSIb3DQEB CwUAA4IBAQB5TkmTXCqQ8uIAunYQTUXnEJnP+gNSWkqoXdlZ2+Xqx8vMxoFFnc3x GrwPoIcpkYMblOW0F32wg8KVgUaQD2dOMuGdznFLmKE1jvyGlBNab6Gqlpd8bz6M 9gafrDEEihm8CiBQMPPDn0Ru0Lzuueu4q4CFeL/aaU9IRxA89vT4+ULwE9/GlLki GDX5WfpJqpSqVYZXDAZqej9PCVH9KnkqUeJ9As5Z9/Qd0gYut7YB++v+b94mRCbF b08qTq3z2twFq51+6uX5PUwuPdq8iAs5O85aHqjVcvCcJAh3LULcnUGPv2CFtdR5 uWAKm/ZxEpuiU4vdItz2veLYmuxPc7wX -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBiHkbZcXyH4bdsVKjY3 Ulkcv+p+JXNLCVSeh3arX+dFvfcvPQmAlKqbc2TELSpUbknyiq3Jq3PNmlD34sWa MkyR2Y2bp1YifrBTJGJamp7qjiJy4E+5zyM2AgdVADHTKInW9dPgL1Q2Gzo5k8pf i1qULfyUi2lsM7IMPgxp+MQczOQovz0bk099AOJUAu2PYpiPq+v9DQZosQtfxfZu KV+omdt+JRhudCId380FpACEdKsudbQxaq6UdAiIuklyxsVgSVoDwkx2oWGrDizq /PMNcpXAVt1qapNGJtNq/SyQcr2kwVICjAS+1tH0dRgBAgwSaDbiMab7I8ULbDvY twIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16307279431004595229356114070683166551 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-29 16:25:03 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-29 16:55:03 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Glendale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Avery Dennison' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.averydennison.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21220131214679901026021914858625310504755393284489078916564577945789243996849162950462639039249759312059961375374115491918422302785984651879862271661969058145288953080328088993855237730083938500931938069590431814544597584833937512961393367020152853634565638060023411892559416315265555453098991308779087536443222965701191433525516468027450654524707188768031923071381944297255481647350778654834703813178879855136177074476219779312086380398407326384765407400497782705595496793259300654591648314843541843653198635068854689368962949507430040602968268296830018771758334293939181181776169402806547659439821497858797027973303 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.averydennison.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (479 bytes) 01dd0075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016760653475000004030046304402200194b7a18c5e068ff1d20a72a740245b31e4d9061a6ac150e272c6e5a76d40590220523ccf9945758e31c288b1aef3d4f53d8f1500e8edf6af85eb1b067094ccb32a0075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001676065348200000403004630440220642392a72432f93ec333d48ea4e1a201aaba3759f4279047fd633c108f01989a0220100b5670beed48c74a6ecd1d4ec773dad2017544a7dda62bd51ab307912686e50075005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000016760653498000004030046304402201b067ee99cb16ad08ada685d3f6abee6e6871c648784a13c3ad6216196c1ad1802205a66b9f741618875314d9e24efc3ecc70ee2e7e55816c18ae61d12c7d12e97da007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000167606534610000040300473045022100b61a93f2cda5fd2dd4987b8598e7c8c1123ba45f554280891dbe801b3799e89102204fd957a92134a60f9c840148a99e7b230b97238910da86115d60b540393217c9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8c8a045d8a29573feffbdfd8ad1cc85170389ac0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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