hubselling.factor.bnpparibas.fr

- BNP PARIBAS SA -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 52:e2:ba:d1:85:3a:e3:d5:00:00:00:00:50:e6:a1:f1 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
Locality: Montreuil
Country: FR

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 52:e2:ba:d1:85:3a:e3:d5:00:00:00:00:50:e6:a1:f1
Serial Number (int): 110173943872496917224230124096300950001
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 96:6f:2c:ca:c6:b5:ec:b3:f1:dd:16:a5:9e:6f:6d:29:71:d8:de:64
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): f0:c0:a1:71:b8:40:8f:22:de:69:9a:d5:bc:7e:58:34:35:02:87:9f
Fingerprint (sha256): 13:ff:f0:01:af:5b:af:a4:a5:b5:bf:54:06:de:31:02:f2:2b:56:69:25:40:e2:2b:27:7d:c4:1b:a2:ab:02:bd

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate hubselling.factor.bnpparibas.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hubselling.factor.bnpparibas.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hubselling.factor.bnpparibas.fr

Other certificates including the domain name bnpparibas.fr

(limited to 100 certificates)
bnp16b.bnpparibas.com
bnp11b.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
extranetclients.repmfrance.bnpparibas.fr
iol-valuation-realestate.bnpparibas.fr
dspp.bnpparibas.fr
leaseoffers.leasingsolutions.bnpparibas.fr
bnp13b.bnpparibas.com
mail1.bnpparibas.fr
bnp03s.bnpparibas.com
extra-vendeur-realestate.staging.bnpparibas.fr
group.bnpparibas
leaseoffers.leasingsolutions.bnpparibas.fr
www.privalto.fr
carto.rentalsolutions.bnpparibas.fr
push.bnpparibas.com
bnp03s.bnpparibas.com
c00f0c4675b91fb8b918e4079a0b1bac1.bnpparibas.com
www.realestate.bnpparibas.fr
bnp02b.bnpparibas.com
leaseoffersu.leasingsolutions.bnpparibas.fr
newlo.leasingsolutions.bnpparibas.fr
www.espace.reim.bnpparibas.fr
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
bnp03s.bnpparibas.com
reim.bnpparibas.fr
easysurvey.realestate.bnpparibas.fr
extranet-vendeur-realestate.bnpparibas.fr
bnp02b.bnpparibas.com
bnp02b.bnpparibas.com
collect-bnl-test.bnpparibas.fr
collect.dcrm.bnpparibas.fr
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
bnppf-collect.staging.bnpparibas
leasingsolutions.bnpparibas.com
bnp13b.bnpparibas.com
easy.bnpparibas.fr
bnp02b.bnpparibas.com
bnp02b.bnpparibas.com
bnp02b.bnpparibas.com
investo.bnpparibas
leasingsolutions.bnpparibas.com
bnp13b.bnpparibas.com
bnp08b.bnpparibas.com
www.dspp.bnpparibas.fr
group.bnpparibas.com
bnp03b.bnpparibas.com
staging.international-buyers.bnpparibas.fr
3stepit.bnpparibas.fr
www.logement.bnpparibas.fr
gw2.leasingsolutions.bnpparibas.fr
leaseoffersu.leasingsolutions.bnpparibas.fr
bnp02b.bnpparibas.com
bnp03b.bnpparibas.com
bnp02b.bnpparibas.com
bnp03s.bnpparibas.com
mabanqueentreprise.bnpparibas
push.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
bnp02b.bnpparibas.com
c00f0c4675b91fb8b918e4079a0b1bac1.bnpparibas.com
hubselling.factor.bnpparibas.fr
international-buyers.bnpparibas.fr
dspp.bnpparibas.fr
bnp03s.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
bnp06b.bnpparibas.com
leasingsolutions.bnpparibas.com
france-titrisationrec-was7.bnpparibas.fr
bnp16b.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
3stepit.bnpparibas.fr
bnp02b.bnpparibas.com
international-buyers.bnpparibas.fr
bnp02b.bnpparibas.com
challenges.leasingsolutions.bnpparibas.fr
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.produitsdebourse.bnpparibas.fr
bnp02b.bnpparibas.com
bnp02b.bnpparibas.com
collect-bnppf.bnpparibas.fr
bnp05s.bnpparibas.com
bnp03s.bnpparibas.com
secure1.entreprises.bnpparibas.fr
bnp05s.bnpparibas.com
bnp03b.bnpparibas.com
patrimoine.reim.bnpparibas.fr
extranet.proprietaires.immobilier.bnpparibas.fr
staging.logement.bnpparibas.fr
bnp03s.bnpparibas.com
bnp16b.bnpparibas.com
staging.scpi.bnpparibas.fr
collect-bnl.staging.bnpparibas.fr
scpi-distributeurs.realestate.bnpparibas.fr
bnp13b.bnpparibas.com
bnp02b.bnpparibas.com
mutuelle.bnpparibas.fr
leaseoffers.leasingsolutions.bnpparibas.fr

Certificate

The complete raw certificate details for hubselling.factor.bnpparibas.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgIQUuK60YU649UAAAAAUOah8TANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0x
ODA4MjQxMzAyMTBaFw0yMDA4MjQxMzMyMTBaMGQxCzAJBgNVBAYTAkZSMRIwEAYD
VQQHEwlNb250cmV1aWwxFzAVBgNVBAoTDkJOUCBQQVJJQkFTIFNBMSgwJgYDVQQD
Ex9odWJzZWxsaW5nLmZhY3Rvci5ibnBwYXJpYmFzLmZyMIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEA1+rBgMsYY5nFMcl3v0jyIOLXpQNqecxY9IqnViAB
xkiXaVE1HmkPs7QZhmClb4XGQHvl4/E3qwO67NfW8lDbHmUfwRqx1NZjfIiXdb63
9WI+ZtksRffl6GkA3tW/EIwxR8i/tnSVDe5PiURTVyvwBSmW6tPGKKz9cnLR5r4x
V55Zh+6HAtLFDA3vek+VcoXJUidYju1Eo6zL4jdLOXpLw7uMWSwN+vQTXttjPo6R
J/zCUU/F63W2+bbkYIvIJ7t0Kd+l/mC68dUeTIBdNgayzklUfBHonuFtttjpbNyH
FyJoG5HQ1CfwWYkLSq3nHgMO72+oRtWfX7wlL97PDuyWEwIDAQABo4IBqzCCAacw
EwYKKwYBBAHWeQIEAwEB/wQCBQAwKgYDVR0RBCMwIYIfaHVic2VsbGluZy5mYWN0
b3IuYm5wcGFyaWJhcy5mcjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMDMGA1UdHwQsMCowKKAmoCSGImh0dHA6Ly9jcmwuZW50
cnVzdC5uZXQvbGV2ZWwxay5jcmwwSwYDVR0gBEQwQjA2BgpghkgBhvpsCgEFMCgw
JgYIKwYBBQUHAgEWGmh0dHA6Ly93d3cuZW50cnVzdC5uZXQvcnBhMAgGBmeBDAEC
AjBoBggrBgEFBQcBAQRcMFowIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLmVudHJ1
c3QubmV0MDMGCCsGAQUFBzAChidodHRwOi8vYWlhLmVudHJ1c3QubmV0L2wxay1j
aGFpbjI1Ni5jZXIwHwYDVR0jBBgwFoAUgqJwdN28Uz/Pe9T3zX+nYMYKTL8wHQYD
VR0OBBYEFJZvLMrGteyz8d0WpZ5vbSlx2N5kMAkGA1UdEwQCMAAwDQYJKoZIhvcN
AQELBQADggEBANmMHVQeCQicG6uOJQklYr2IZwzgqal/QHwXFG3eJQ1OjLOnFds2
+8MGXJvDQroXEFXgB4a1WNAFchzbCRqFlCeOl8QkkXyPmY41VFGc5KcRANPXU1OE
GVDCwbnE0N0X79TSPvR8s2uPZBqVGP/U1b7cNNI5sn+duykF9fQs+g6is4fQvKc2
I/9P/w/RvyyJ2eAqwROgACfXH7G9+mbAMqnrsJzPv1qT2KrTfAJqDLa9UMOesquo
78RmIWf+GLGkf2H5MePGKxvuKYx4azvI/SyntxwRw2xjiNeVb2ZHlMA7bLKjdd7S
JnN/cQIbr0aTV5AUhBZooW0QVt/dDrF4yiQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+rBgMsYY5nFMcl3v0jy
IOLXpQNqecxY9IqnViABxkiXaVE1HmkPs7QZhmClb4XGQHvl4/E3qwO67NfW8lDb
HmUfwRqx1NZjfIiXdb639WI+ZtksRffl6GkA3tW/EIwxR8i/tnSVDe5PiURTVyvw
BSmW6tPGKKz9cnLR5r4xV55Zh+6HAtLFDA3vek+VcoXJUidYju1Eo6zL4jdLOXpL
w7uMWSwN+vQTXttjPo6RJ/zCUU/F63W2+bbkYIvIJ7t0Kd+l/mC68dUeTIBdNgay
zklUfBHonuFtttjpbNyHFyJoG5HQ1CfwWYkLSq3nHgMO72+oRtWfX7wlL97PDuyW
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 110173943872496917224230124096300950001
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-24 13:02:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-24 13:32:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montreuil'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hubselling.factor.bnpparibas.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27256998002454628404577122151944782837837629792666827664135336796117501678437341722774429329399374174536757444249753263523423794436596952754399442689689625954011365946152698723458291459920332792859210719100611531558278338656111011077042473693330135171732242261265114504597802011267124416095342656728295279317470255876106776682001573031837198621823905511547746098664906974386041373855078445565886816662227658162131551070194790333297112727864228533696817679874006939213219599236961804315486879992279302557497531571719949689645738102037835175040771932026226205036809579401497951271853090191995323018491274032029239121427
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hubselling.factor.bnpparibas.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							966f2ccac6b5ecb3f1dd16a59e6f6d2971d8de64
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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