nascng2.nasc.biz
- LafargeHolcim -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number 0b:fc:50:9c:e1:f6:ba:5e:00:00:00:00:50:ed:25:9f was issued on by Entrust, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
LafargeHolcim
Organization:
LafargeHolcim
State / Province:
Michigan
Locality: Dundee
Country: US
Locality: Dundee
Country: US
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0b:fc:50:9c:e1:f6:ba:5e:00:00:00:00:50:ed:25:9fSerial Number (int): 15931601784278898578789739035125163423
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 51:8e:b5:0f:79:a4:aa:27:bb:76:ae:f9:61:5d:d2:17:a3:d1:b5:f8
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): 1a:24:e2:af:23:23:68:75:8c:a0:27:e1:3e:2f:7f:5f:0b:99:ed:0e
Fingerprint (sha256): 13:6c:1b:ac:bc:87:d2:e3:e3:a8:c7:a8:df:d5:f9:55:1e:6a:9e:14:8c:10:ac:cd:68:fa:6a:4c:6a:07:0b:ef
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate nascng2.nasc.biz
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for nascng2.nasc.biz
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
nascng2.nasc.biz
www.nascng2.nasc.biz
www.nascng2.nasc.biz
Other certificates including the domain name nasc.biz
(limited to 100 certificates)
nascngs.nasc.biz
nascng2.nasc.biz
sps.nasc.biz
nascngs.nasc.biz
2work.nasc.biz
ibcm.nasc.biz
nascngd.nasc.biz
2work.nasc.biz
spd.nasc.biz
sps.nasc.biz
spd.nasc.biz
2work.nasc.biz
vpn.nasc.biz
spd.nasc.biz
sps.nasc.biz
nascng2.nasc.biz
www.nascng2.nasc.biz
iwork.nasc.biz
nascng2.nasc.biz
nascngp.nasc.biz
vpn.nasc.biz
traveler.nasc.biz
traveler.nasc.biz
vertex-prd.nasc.biz
nascngp.nasc.biz
2work.nasc.biz
nascngq.nasc.biz
spd.nasc.biz
vpnus.nasc.biz
2work.nasc.biz
vpnca.nasc.biz
nascngp.nasc.biz
spd.nasc.biz
nascng2.nasc.biz
nascngp.nasc.biz
nascngd.nasc.biz
vpnus.nasc.biz
vpn.nasc.biz
2work.nasc.biz
nascng2.nasc.biz
nascngd.nasc.biz
2work.nasc.biz
vpnca.nasc.biz
nascngd.nasc.biz
vertex-prd.nasc.biz
labvpn.nasc.biz
nascng2.nasc.biz
sps.nasc.biz
nascngs.nasc.biz
2work.nasc.biz
ibcm.nasc.biz
nascngd.nasc.biz
2work.nasc.biz
spd.nasc.biz
sps.nasc.biz
spd.nasc.biz
2work.nasc.biz
vpn.nasc.biz
spd.nasc.biz
sps.nasc.biz
nascng2.nasc.biz
www.nascng2.nasc.biz
iwork.nasc.biz
nascng2.nasc.biz
nascngp.nasc.biz
vpn.nasc.biz
traveler.nasc.biz
traveler.nasc.biz
vertex-prd.nasc.biz
nascngp.nasc.biz
2work.nasc.biz
nascngq.nasc.biz
spd.nasc.biz
vpnus.nasc.biz
2work.nasc.biz
vpnca.nasc.biz
nascngp.nasc.biz
spd.nasc.biz
nascng2.nasc.biz
nascngp.nasc.biz
nascngd.nasc.biz
vpnus.nasc.biz
vpn.nasc.biz
2work.nasc.biz
nascng2.nasc.biz
nascngd.nasc.biz
2work.nasc.biz
vpnca.nasc.biz
nascngd.nasc.biz
vertex-prd.nasc.biz
labvpn.nasc.biz
Certificate
The complete raw certificate details for nascng2.nasc.biz in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHQzCCBiugAwIBAgIQC/xQnOH2ul4AAAAAUO0lnzANBgkqhkiG9w0BAQsFADCB ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0x OTAyMDQxOTA2MDZaFw0yMTAyMDQxOTM2MDVaMGQxCzAJBgNVBAYTAlVTMREwDwYD VQQIEwhNaWNoaWdhbjEPMA0GA1UEBxMGRHVuZGVlMRYwFAYDVQQKEw1MYWZhcmdl SG9sY2ltMRkwFwYDVQQDExBuYXNjbmcyLm5hc2MuYml6MIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAtnTVbhHs72wwgV3gL87dhLVCxCt1/kdD3sJcvT/O O7xBfPugiFy1VkQVUPgKXw4Uc3Lf1WmNVBrwub7tywE6ROnw8Uys8DAXKYiqkimV XRJ6sCLTmmv0+gSHuxKXAAnRmPk4nuRqRedywuyjQiVSSnG6j8XqQfBo1LCqBLAG oRpMMc9whJJBTrhy+DB4wjOEW7XfTeDQsMd2k5vKpw9ZXc7rHP3ndblL9Z3jlkpS XM3djbTx7CsGQ08jvY2qRkH83Fo1d1w/MCLV4JKfz4PQaItHY7OqTrDhxSMJxwS1 lKpJVFe1kvXtVGpi/S5kSvXKF6ZRNyHGw/DgIjAbdroAhwIDAQABo4IDmDCCA5Qw MQYDVR0RBCowKIIQbmFzY25nMi5uYXNjLmJpeoIUd3d3Lm5hc2NuZzIubmFzYy5i aXowggH3BgorBgEEAdZ5AgQCBIIB5wSCAeMB4QB2AId1v+dZfPiMQ5lfvfNu/1aN R1Y2/0q1YMG06v9eoIMPAAABaLoCuYYAAAQDAEcwRQIgdacB3THsnnS3nE1EO/MA PsJkxqlMnPxDBHkGaegGiiUCIQC6w1jVaA0jS890RjBQJOFt+Q2pwk5V5DfS5FfM /ZQZSwB3AFYUBpov18Ls0/XhvUSyPsdGdrm8mRFcwO+UmFXWidDdAAABaLoCubgA AAQDAEgwRgIhAI8m3eU7PJXRFPpkVx37cW4aaX5v7+p7gy4sS78W8B4fAiEArlyf dEXdXFrOw4C0qoufOUez891rABhAt1o3JIBgXJsAdwBElGUusO7Or8RAB9io/ijA 2uaCvtjLMbU/0zOWtbaBqAAAAWi6ArmlAAAEAwBIMEYCIQD41oHuOfdb1EYeiJOh pLn/LJFn80FTG+yuB7V4VrOiOAIhALCEQvZP78IqC4+SO+K++VCTjxqPbOHQHWq3 7LtTQvFLAHUA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo/csAAAFougK5 wQAABAMARjBEAiBASqiYDLrBoTd9NkQzYsN3VMNday6R6LGb6nAHVFOAVgIgRb6H 0GfvbtjpcByI86YIC8tH57Iq63r6osR8JuJXHEUwDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAzBgNVHR8ELDAqMCigJqAkhiJo dHRwOi8vY3JsLmVudHJ1c3QubmV0L2xldmVsMWsuY3JsMEsGA1UdIAREMEIwNgYK YIZIAYb6bAoBBTAoMCYGCCsGAQUFBwIBFhpodHRwOi8vd3d3LmVudHJ1c3QubmV0 L3JwYTAIBgZngQwBAgIwaAYIKwYBBQUHAQEEXDBaMCMGCCsGAQUFBzABhhdodHRw Oi8vb2NzcC5lbnRydXN0Lm5ldDAzBggrBgEFBQcwAoYnaHR0cDovL2FpYS5lbnRy dXN0Lm5ldC9sMWstY2hhaW4yNTYuY2VyMB8GA1UdIwQYMBaAFIKicHTdvFM/z3vU 981/p2DGCky/MB0GA1UdDgQWBBRRjrUPeaSqJ7t2rvlhXdIXo9G1+DAJBgNVHRME AjAAMA0GCSqGSIb3DQEBCwUAA4IBAQAXl04pwG9SJyfaPMq9maf0FQhnnoPQn+tT Sqp6tXpoWCA9BrGWVZUauzIDZIJ4bB3dBEiRmOkiGj+VtdSOVVbe/O8QuVEPn+Il FVywIipG5eOfc5wMuymXfXxLb/aQ/WjH6YRvdGtjpiN4pP8241JhA9tQP6VEHMJP 2H7dcdSzPSWWmB+Br7pZm7/I7CkYSMNNPWAUels+un+NGiKd5WJUV2CDv29ppJjg XHJ4ZZlBqXrJ+7wAmGsQFjsdPeMyYqVfQl4GPISe21A5s0e6JHrt0msXn2mr1vqo Sa4wJhXD7TQftIs9hnYVY8uMIaCHi7H/8BDl7KXkqxkHm1sxaNEn -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnTVbhHs72wwgV3gL87d hLVCxCt1/kdD3sJcvT/OO7xBfPugiFy1VkQVUPgKXw4Uc3Lf1WmNVBrwub7tywE6 ROnw8Uys8DAXKYiqkimVXRJ6sCLTmmv0+gSHuxKXAAnRmPk4nuRqRedywuyjQiVS SnG6j8XqQfBo1LCqBLAGoRpMMc9whJJBTrhy+DB4wjOEW7XfTeDQsMd2k5vKpw9Z Xc7rHP3ndblL9Z3jlkpSXM3djbTx7CsGQ08jvY2qRkH83Fo1d1w/MCLV4JKfz4PQ aItHY7OqTrDhxSMJxwS1lKpJVFe1kvXtVGpi/S5kSvXKF6ZRNyHGw/DgIjAbdroA hwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 15931601784278898578789739035125163423 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-04 19:06:06 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-04 19:36:05 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dundee' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LafargeHolcim' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nascng2.nasc.biz' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23032984353871199034989805474654024797460524517253378587126694429364425208761834622381768950058258325318241939069639146614206538617990264401944658885364325582543643349492844401208949892574600510619992157634699701145736892960789404559971465944188640279844809950613159749236545598511688486844092698273015544411832990674899538894197196636910143404773851693301856203254464633682891981243896738441373595614669167930793112334794322332313430045761275852817472184108591860961162048950258908591264532118128403030039159799227484662929567952866963118060643792434428092105924328279066477820690527355914725409116965558782938185863 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nascng2.nasc.biz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nascng2.nasc.biz' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes) 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 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 518eb50f79a4aa27bb76aef9615dd217a3d1b5f8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0017974e29c06f522727da3ccabd99a7f41508679e83d09feb534aaa7ab57a6858203d06b19655951abb32036482786c1ddd04489198e9221a3f95b5d48e5556defcef10b9510f9fe225155cb0222a46e5e39f739c0cbb29977d7c4b6ff690fd68c7e9846f746b63a62378a4ff36e3526103db503fa5441cc24fd87edd71d4b33d2596981f81afba599bbfc8ec291848c34d3d60147a5b3eba7f8d1a229de56254576083bf6f69a498e05c7278659941a97ac9fbbc00986b10163b1d3de33262a55f425e063c849edb5039b347ba247aedd26b179f69abd6faa849ae302615c3ed341fb48b3d86761563cb8c21a0878bb1fff010e5eca5e4ab19079b5b3168d127