m.services.three.co.uk
- Hutchison 3G UK Ltd -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number 54:89:b5:ad:23:2e:37:7a:69:4c:84:10:e0:22:f3:62 was issued on by Entrust, Inc..
With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Hutchison 3G UK Ltd
Organization:
Hutchison 3G UK Ltd
Locality:
Reading
Country: GB
Country: GB
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 54:89:b5:ad:23:2e:37:7a:69:4c:84:10:e0:22:f3:62Serial Number (int): 112370181149050428548801879046921319266
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: a4:37:6d:5c:9b:3c:01:59:5d:5f:a8:15:26:09:84:f5:64:2c:f6:c0
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): 1e:bf:65:21:7f:82:99:32:57:78:2c:7d:9f:bb:22:af:67:35:4e:09
Fingerprint (sha256): 13:bb:64:12:f0:4c:1e:07:f4:8c:0e:c4:c0:78:70:03:89:94:01:bc:c3:5e:9d:ba:b6:d1:d0:7e:4a:af:15:b1
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate m.services.three.co.uk
11
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for m.services.three.co.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
m.services.three.co.uk
www.m.services.three.co.uk
t.services.three.co.uk
res.services.three.co.uk
m3.services.three.co.uk
t3.services.three.co.uk
res3.services.three.co.uk
m4.services.three.co.uk
t4.services.three.co.uk
res4.services.three.co.uk
www.res.services.three.co.uk
www.m.services.three.co.uk
t.services.three.co.uk
res.services.three.co.uk
m3.services.three.co.uk
t3.services.three.co.uk
res3.services.three.co.uk
m4.services.three.co.uk
t4.services.three.co.uk
res4.services.three.co.uk
www.res.services.three.co.uk
Other certificates including the domain name three.co.uk
(limited to 100 certificates)
f.chat3.three.co.uk
mva.testbed.three.co.uk
smetrics.three.co.uk
owa.three.co.uk
hem-webservices.three.co.uk
www.businesstools.three.co.uk
users-pdt.three.co.uk
warehouse.three.co.uk
jobs.three.co.uk
secure06.lithium.com
secure07.stage.lithium.com
*.three.co.uk
connect.three.co.uk
three.co.uk
2nddomain.three.co.uk
sslcertificate2.queue-it.net
www.three.co.uk
preprod-store.three.co.uk
sslcertificate2.queue-it.net
test-staging-active.three.co.uk
mail.three.co.uk
three.co.uk
accessories.three.co.uk
secure06.lithium.com
secure06.lithium.com
locator.three.co.uk
smetrics.three.co.uk
obsp03clust-dfe-vip.it.three.co.uk
mconsole.three.co.uk
three.co.uk
www.three.co.uk
blog1.three.co.uk
smobile.three.co.uk
2nddomain.three.co.uk
man-webservices.three.co.uk
secure07.stage.lithium.com
intranet.three.co.uk
secure06.lithium.com
b2c-mobile-buat.testbed.three.co.uk
mifioffers.three.co.uk
hem-webservices.three.co.uk
profile.three.co.uk
test-staging-active.three.co.uk
secure07.stage.lithium.com
repair.three.co.uk
reseller-test.three.co.uk
threeanalyst.three.co.uk
threerescue.three.co.uk
m.services.three.co.uk
staging-active.three.co.uk
sslcertificate2.queue-it.net
wholesale.three.co.uk
mail.three.co.uk
qc.three.co.uk
mail.three.co.uk
business.three.co.uk
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
misp.three.co.uk
secure06.lithium.com
fila.ingressorapido.com.br
sslcertificate2.queue-it.net
locator.three.co.uk
sghp.three.co.uk
smetrics.three.co.uk
sslcertificate2.queue-it.net
my3.three.co.uk
test-staging-active.three.co.uk
ses.three.co.uk
sslcertificate2.queue-it.net
intranet.three.co.uk
secure07.stage.lithium.com
auth.three.co.uk
intranet.three.co.uk
accessories.three.co.uk
dl.threerescue.three.co.uk
three.co.uk
three.co.uk
sslcertificate2.queue-it.net
www.businesstools.three.co.uk
me.three.co.uk
mva.testbed.three.co.uk
threerescue.three.co.uk
access.three.co.uk
mstrprod.three.co.uk
secure06.lithium.com
sslcertificate2.queue-it.net
registration.three.co.uk
api-webservices.three.co.uk
mva.testbed.three.co.uk
smetrics.three.co.uk
owa.three.co.uk
hem-webservices.three.co.uk
www.businesstools.three.co.uk
users-pdt.three.co.uk
warehouse.three.co.uk
jobs.three.co.uk
secure06.lithium.com
secure07.stage.lithium.com
*.three.co.uk
connect.three.co.uk
three.co.uk
2nddomain.three.co.uk
sslcertificate2.queue-it.net
www.three.co.uk
preprod-store.three.co.uk
sslcertificate2.queue-it.net
test-staging-active.three.co.uk
mail.three.co.uk
three.co.uk
accessories.three.co.uk
secure06.lithium.com
secure06.lithium.com
locator.three.co.uk
smetrics.three.co.uk
obsp03clust-dfe-vip.it.three.co.uk
mconsole.three.co.uk
three.co.uk
www.three.co.uk
blog1.three.co.uk
smobile.three.co.uk
2nddomain.three.co.uk
man-webservices.three.co.uk
secure07.stage.lithium.com
intranet.three.co.uk
secure06.lithium.com
b2c-mobile-buat.testbed.three.co.uk
mifioffers.three.co.uk
hem-webservices.three.co.uk
profile.three.co.uk
test-staging-active.three.co.uk
secure07.stage.lithium.com
repair.three.co.uk
reseller-test.three.co.uk
threeanalyst.three.co.uk
threerescue.three.co.uk
m.services.three.co.uk
staging-active.three.co.uk
sslcertificate2.queue-it.net
wholesale.three.co.uk
mail.three.co.uk
qc.three.co.uk
mail.three.co.uk
business.three.co.uk
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
misp.three.co.uk
secure06.lithium.com
fila.ingressorapido.com.br
sslcertificate2.queue-it.net
locator.three.co.uk
sghp.three.co.uk
smetrics.three.co.uk
sslcertificate2.queue-it.net
my3.three.co.uk
test-staging-active.three.co.uk
ses.three.co.uk
sslcertificate2.queue-it.net
intranet.three.co.uk
secure07.stage.lithium.com
auth.three.co.uk
intranet.three.co.uk
accessories.three.co.uk
dl.threerescue.three.co.uk
three.co.uk
three.co.uk
sslcertificate2.queue-it.net
www.businesstools.three.co.uk
me.three.co.uk
mva.testbed.three.co.uk
threerescue.three.co.uk
access.three.co.uk
mstrprod.three.co.uk
secure06.lithium.com
sslcertificate2.queue-it.net
registration.three.co.uk
api-webservices.three.co.uk
Certificate
The complete raw certificate details for m.services.three.co.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHxDCCBqygAwIBAgIQVIm1rSMuN3ppTIQQ4CLzYjANBgkqhkiG9w0BAQsFADCB ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y MzAxMDkxNTA3MDJaFw0yNDAyMDMxNTA3MDJaMF4xCzAJBgNVBAYTAkdCMRAwDgYD VQQHEwdSZWFkaW5nMRwwGgYDVQQKExNIdXRjaGlzb24gM0cgVUsgTHRkMR8wHQYD VQQDExZtLnNlcnZpY2VzLnRocmVlLmNvLnVrMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAnzmkQ42p6LfJ0Qg7s5tv8oqM8m4nxeohjv7JUqC0BNlphxBe 1gCE43qBRzpSw+WDDO6eZQ4p3c5VRxHyjBvd15B2vZrIGQQqY671M9NKDYOlJZri X12L7MpXZqwueWR2vSX1XZIJULyThpQu1Dwyr9wF8UlkSc3jvtSnb/BMIQMHa1r6 Df/Vk+vupNAAKnbIBEHLY0QfPITUz+dcDiBDFYuEuAEO0w9fJsPl0RUeTe+mMhYb i2MYQiAr1lklK0ZeslO4bkvksfA6sm5/IInVmVzmQ7YZwA6sh4HMrkW72Bajkd99 7xTaPIMTGRebBXeyHlZE3h8aYArmpSSRwnXbPQIDAQABo4IEHzCCBBswDAYDVR0T AQH/BAIwADAdBgNVHQ4EFgQUpDdtXJs8AVldX6gVJgmE9WQs9sAwHwYDVR0jBBgw FoAUgqJwdN28Uz/Pe9T3zX+nYMYKTL8waAYIKwYBBQUHAQEEXDBaMCMGCCsGAQUF BzABhhdodHRwOi8vb2NzcC5lbnRydXN0Lm5ldDAzBggrBgEFBQcwAoYnaHR0cDov L2FpYS5lbnRydXN0Lm5ldC9sMWstY2hhaW4yNTYuY2VyMDMGA1UdHwQsMCowKKAm oCSGImh0dHA6Ly9jcmwuZW50cnVzdC5uZXQvbGV2ZWwxay5jcmwwggErBgNVHREE ggEiMIIBHoIWbS5zZXJ2aWNlcy50aHJlZS5jby51a4Iad3d3Lm0uc2VydmljZXMu dGhyZWUuY28udWuCFnQuc2VydmljZXMudGhyZWUuY28udWuCGHJlcy5zZXJ2aWNl cy50aHJlZS5jby51a4IXbTMuc2VydmljZXMudGhyZWUuY28udWuCF3QzLnNlcnZp Y2VzLnRocmVlLmNvLnVrghlyZXMzLnNlcnZpY2VzLnRocmVlLmNvLnVrghdtNC5z ZXJ2aWNlcy50aHJlZS5jby51a4IXdDQuc2VydmljZXMudGhyZWUuY28udWuCGXJl czQuc2VydmljZXMudGhyZWUuY28udWuCHHd3dy5yZXMuc2VydmljZXMudGhyZWUu Y28udWswDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF BQcDAjBMBgNVHSAERTBDMDcGCmCGSAGG+mwKAQUwKTAnBggrBgEFBQcCARYbaHR0 cHM6Ly93d3cuZW50cnVzdC5uZXQvcnBhMAgGBmeBDAECAjCCAX4GCisGAQQB1nkC BAIEggFuBIIBagFoAHYAVYHUwhaQNgFK6gubVzxT8MDkOHhwJQgXL6OqHQcT0wwA AAGFlxIVMQAABAMARzBFAiEA054f92Zm/e3Y9Mvpde9lnD7M0E+nxQYZea0f3Heo ouACIHEw2SFz/WwAmwY0q/6inMr/cYpFdkO0+SRUfT2arwYbAHYAc9meiRtMlnig IH1HneayxhzQUV5xGSqMa4AQesF3crUAAAGFlxIVSwAABAMARzBFAiBptpJCQhVj yySeDIFBNIo388CPDWoeuZYCxY5y0HAJgAIhAKU4TlEh4felmLs5aaS84JYOCCSQ R/sSdCvssrUVBDxNAHYA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsA AAGFlxIVqAAABAMARzBFAiA2+C3Dt3dPDnzpicLytidssQ9Yu9F9RSDIedqyPKzH VAIhAJxx1h55z7YTZZN5L/MKqT0HotxHyMlEVZPFD3orWGH2MA0GCSqGSIb3DQEB CwUAA4IBAQCtRncCwQRNm5ReK90bUZaxNXIjZtj5jEzACH8q4IyRP1mShEu0cOo9 krR34JudtQtjtyDwW9+OcRIYUx37GaNnIngNaT2AGkP8YKFsVaJ4p7ZrGww2jDa9 r8bEVyb/ce5gsAi6ty2TkpJ+QwyDBD3o9TVt8Jm2P+GJhMfnLOJQTLpiIdcO8ebB mZSp6OmoJXJI8J3FSqUqCfW+fr2U6gcir+hQT/OLA8szBbQKp/QILiEFTnf0znvP V8T3q8l0qjE5kWiCJCAPfkj4VFwZEY5oAWUN0m6y7ZACkWdoJZlCl/+bblzqhMt3 JrofSRP8LzXw8pbeK1IBfkWtRciHBFk6 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzmkQ42p6LfJ0Qg7s5tv 8oqM8m4nxeohjv7JUqC0BNlphxBe1gCE43qBRzpSw+WDDO6eZQ4p3c5VRxHyjBvd 15B2vZrIGQQqY671M9NKDYOlJZriX12L7MpXZqwueWR2vSX1XZIJULyThpQu1Dwy r9wF8UlkSc3jvtSnb/BMIQMHa1r6Df/Vk+vupNAAKnbIBEHLY0QfPITUz+dcDiBD FYuEuAEO0w9fJsPl0RUeTe+mMhYbi2MYQiAr1lklK0ZeslO4bkvksfA6sm5/IInV mVzmQ7YZwA6sh4HMrkW72Bajkd997xTaPIMTGRebBXeyHlZE3h8aYArmpSSRwnXb PQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 112370181149050428548801879046921319266 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-09 15:07:02 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-03 15:07:02 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Reading' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hutchison 3G UK Ltd' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'm.services.three.co.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20100314649452706893433502133331061902569765881571039768147655939562753983716174521197349198895158522407651136979796747594283357607801656601705023979759103757810383938634193221985343200326501583620258573455440703350224046486184863476127032993121719351938910417241833615422616211265501582348896912880249144181310757091792799078383908416127240433705089557017627453748241718341379027861427799360614967686998132557511549480867717123627740773269492437957021541982716876994975531289690805632882647494425862212772619865219657515804677547825946355099905509442540849053072897132898996860936763943078345069684224254454992853821 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a4376d5c9b3c01595d5fa815260984f5642cf6c0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (290 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.services.three.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m.services.three.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.services.three.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'res.services.three.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm3.services.three.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't3.services.three.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'res3.services.three.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm4.services.three.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't4.services.three.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'res4.services.three.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.res.services.three.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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