www.ustranscom.mil

- USTRANSCOM -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number df:29:28:6e:67:71:c1:35:00:00:00:00:50:fb:b6:20 was issued on by Entrust, Inc..

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

USTRANSCOM

Organization: USTRANSCOM
Organization unit: USTRANSCOM
State / Province: Illinois
Locality: Belleville
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): df:29:28:6e:67:71:c1:35:00:00:00:00:50:fb:b6:20
Serial Number (int): 296631547274732667249836442896786241056
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 67:18:91:f1:67:a7:17:c9:75:46:a4:9f:1f:ca:2f:f9:cd:fe:66:40
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 79:56:3e:84:25:d5:a2:ce:2a:a8:2a:b0:4b:da:74:25:e9:1d:63:19
Fingerprint (sha256): 14:47:56:08:f9:92:d2:9c:6b:40:2e:55:30:47:6b:0b:11:ff:2a:60:23:1d:e6:14:a8:30:df:ff:e1:29:02:37

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate www.ustranscom.mil

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ustranscom.mil

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ustranscom.mil
public02.ustranscom.mil
public01.ustranscom.mil

Other certificates including the domain name ustranscom.mil

(limited to 100 certificates)
pat.staging.sddc.ustranscom.mil
gtscleair.cre.sddc.ustranscom.mil
citrix.igc.ustranscom.mil
icodesgs-slp9.coop.sddc.army.mil
gtsclec08.cre.sddc.ustranscom.mil
extpsa.trac2es.ustranscom.mil
icodes.albany.sddc.army.mil
trac2eswbt.trac2es.ustranscom.mil
extappp1.trac2es.ustranscom.mil
icodes.albany.coop.sddc.army.mil
extidma.exercise.trac2es.ustranscom.mil
icodesgs-user3.cpe.sddc.ustranscom.mil
www.uat.igc-a.ustranscom.mil
beta.distribute.mil
gtsclewtr.cre.sddc.ustranscom.mil
icodes-tmm.albany.sddc.army.mil
gtsclec10.cre.sddc.ustranscom.mil
gtsclec02.cre.sddc.ustranscom.mil
gtsclec09.cre.sddc.ustranscom.mil
tasa.trac2es.ustranscom.mil
dataservices.igc.ustranscom.mil
extappp4.trac2es.ustranscom.mil
its-stage.ustranscom.mil
www.dma.mil
tpsa.trac2es.ustranscom.mil
tasp.trac2es.ustranscom.mil
icodesgs-slp4.train.sddc.army.mil
extappp2.trac2es.ustranscom.mil
pat.sddc.ustranscom.mil
cris.transcom.mil
www.ustranscom.mil
extpsa.trac2es.ustranscom.mil
extwfa.trac2es.ustranscom.mil
www.dma.mil
icodes-tmm.albany.coop.sddc.army.mil
its-stage.ustranscom.mil
remote.p3i.ustranscom.mil
gtsclec13.cre.sddc.ustranscom.mil
icodes-user1.motsu.coop.sddc.army.mil
twfp.trac2es.ustranscom.mil
icodes.navajo.sddc.army.mil
www.dma.mil
icodesgs-slp4.coop.sddc.army.mil
pat.staging.sddc.ustranscom.mil
extwfa.trac2es.ustranscom.mil
josac.ustranscom.mil
extwfp.trac2es.ustranscom.mil
www.dma.mil
www.trac2es.ustranscom.mil
icodesgs-slp3.sddc.army.mil
icodesgs-master.coop.sddc.army.mil
icodes-user1.albany.sddc.army.mil
extpsp.trac2es.ustranscom.mil
icodesgs-ssdm1.cpe.sddc.ustranscom.mil
icodesgs-slp0.coop.sddc.army.mil
extasa.trac2es.ustranscom.mil
its-stage.ustranscom.mil
notifications.igc-a.ustranscom.mil
icodesgs-user3.cae.sddc.ustranscom.mil
extappa2.trac2es.ustranscom.mil
ASA-VIP
sg.igc.ustranscom.mil
gtsclec11.cre.sddc.ustranscom.mil
icodesgs-lps1.train.sddc.army.mil
www.ustranscom.mil
www.dma.mil
remote.igc-test.ustranscom.mil
icodesgs-slp0.sddc.army.mil
sg.igc-test.ustranscom.mil
gtsclec07.cre.sddc.ustranscom.mil
ww2.ustranscom.mil
cdeview.ustranscom.mil
josac.ustranscom.mil
requirements.igc-dev.ustranscom.mil
remote.p3i.ustranscom.mil
sg.igc-a.ustranscom.mil
sg.igc.ustranscom.mil
www.cpa.ustranscom.mil
platapp01.ustranscom.mil
oneway.av.igc.ustranscom.mil
coinscoopas.maf.ustranscom.mil
icodesgs-lps1.sddc.army.mil
icodesgs-slp3.coop.sddc.army.mil
extappp3.trac2es.ustranscom.mil
extidma.trac2es.ustranscom.mil
icodes-user1.albany.coop.sddc.army.mil
remote.igc-test.ustranscom.mil
oneway.av.igc.ustranscom.mil
cris.ustranscom.mil
icodesgs-slp1.coop.sddc.army.mil
icodesgs-slp2.train.sddc.army.mil
gtsclec14.cre.sddc.ustranscom.mil
icodesgs.coop.sddc.army.mil
gtsclec04.cre.sddc.ustranscom.mil
distribute.mil
www.ustranscom.mil
www.igc-test.ustranscom.mil
icodesgs-user1.coop.sddc.army.mil
extappa4.trac2es.ustranscom.mil
ASA-User.ustranscom.mil

Certificate

The complete raw certificate details for www.ustranscom.mil in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgIRAN8pKG5nccE1AAAAAFD7tiAwDQYJKoZIhvcNAQELBQAw
gboxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQL
Ex9TZWUgd3d3LmVudHJ1c3QubmV0L2xlZ2FsLXRlcm1zMTkwNwYDVQQLEzAoYykg
MjAxMiBFbnRydXN0LCBJbmMuIC0gZm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxLjAs
BgNVBAMTJUVudHJ1c3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBMMUswHhcN
MTkxMjEyMTMxNTU4WhcNMjIwMTEzMTM0NTU4WjB8MQswCQYDVQQGEwJVUzERMA8G
A1UECBMISWxsaW5vaXMxEzARBgNVBAcTCkJlbGxldmlsbGUxEzARBgNVBAoTClVT
VFJBTlNDT00xEzARBgNVBAsTClVTVFJBTlNDT00xGzAZBgNVBAMTEnd3dy51c3Ry
YW5zY29tLm1pbDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJbckP09
JX+JMyb9AKnTrnEsNZbjEyA0vwBCB8sW1AQHE/grm+eOo8Gm0D8FXeixkn/DTqJZ
ady8z6LhM/Q1vk2os+7oPqQtGfGriuKCU4veS9XBDuj31WATVuhCf/Y2KPMuChXn
VYklx6xUUTP3K10UTiS9zDpTPjg0yrprrhdUtBVziDm6nBx+ia9vp7ryEsNaaTHa
w95rT+fdiR8Tqj0G2FfvdD/4U6M/Ve3NXpyhk6e9uBRamYLs3De+3FPUPdN5pV3K
TGE3bjgnPpkC0BTuyQ1MJKwrXfY6ZDr7pC+YfffvoPqm30j0332HEa0VRxdhTAqf
1SeKyFAziHS7U/UCAwEAAaOCAdAwggHMMBMGCisGAQQB1nkCBAMBAf8EAgUAME8G
A1UdEQRIMEaCEnd3dy51c3RyYW5zY29tLm1pbIIXcHVibGljMDIudXN0cmFuc2Nv
bS5taWyCF3B1YmxpYzAxLnVzdHJhbnNjb20ubWlsMA4GA1UdDwEB/wQEAwIFoDAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwMwYDVR0fBCwwKjAooCagJIYi
aHR0cDovL2NybC5lbnRydXN0Lm5ldC9sZXZlbDFrLmNybDBLBgNVHSAERDBCMDYG
CmCGSAGG+mwKAQUwKDAmBggrBgEFBQcCARYaaHR0cDovL3d3dy5lbnRydXN0Lm5l
dC9ycGEwCAYGZ4EMAQICMGgGCCsGAQUFBwEBBFwwWjAjBggrBgEFBQcwAYYXaHR0
cDovL29jc3AuZW50cnVzdC5uZXQwMwYIKwYBBQUHMAKGJ2h0dHA6Ly9haWEuZW50
cnVzdC5uZXQvbDFrLWNoYWluMjU2LmNlcjAfBgNVHSMEGDAWgBSConB03bxTP897
1PfNf6dgxgpMvzAdBgNVHQ4EFgQUZxiR8WenF8l1RqSfH8ov+c3+ZkAwCQYDVR0T
BAIwADANBgkqhkiG9w0BAQsFAAOCAQEAf4asxhnKAlpCRlbPXbGSR7I5qSaRFktD
mwnIZB6l6AwBOUqEXSgLw+csE9ODNqQaEzW29ZDiqJ+icJJoYLJf6GaNzCb1JcHN
0lZ4O31iUPRF8sUStF/FLFZ/SWVeC57nYJ+GkQNEsJ4f91bqA97JtvzMa/6CXM7S
cEafic4wDvT/7KjLkIlusSqTM5omz2hEB7J/wDhEG2c6DsgJUhcriw3qbEiBtLIJ
9rTKmxBgEEotXZcdYmouoNCscEyo67BPpQ883CR8QaNztzKFGb90FgExrWOwHNZo
ERJvRVT8d03tPa/aW8ssOGTPoaTiR+ifXcMbJBqLbkSibc4DNIDLdg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltyQ/T0lf4kzJv0AqdOu
cSw1luMTIDS/AEIHyxbUBAcT+Cub546jwabQPwVd6LGSf8NOollp3LzPouEz9DW+
Taiz7ug+pC0Z8auK4oJTi95L1cEO6PfVYBNW6EJ/9jYo8y4KFedViSXHrFRRM/cr
XRROJL3MOlM+ODTKumuuF1S0FXOIObqcHH6Jr2+nuvISw1ppMdrD3mtP592JHxOq
PQbYV+90P/hToz9V7c1enKGTp724FFqZguzcN77cU9Q903mlXcpMYTduOCc+mQLQ
FO7JDUwkrCtd9jpkOvukL5h99++g+qbfSPTffYcRrRVHF2FMCp/VJ4rIUDOIdLtT
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296631547274732667249836442896786241056
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-12 13:15:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-13 13:45:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Belleville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'USTRANSCOM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'USTRANSCOM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ustranscom.mil'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19044511072794785442884174267183302262546657500722334568543187599396877707473604501453731717700322879672340692339270080951311294100150194650833952223794416495073798877056719526383856968114282273462082550277151774623196082964339586050358404806423437641686663280841297802330663821170344710171009948099857732096792025207515101667511775430283062936551439995725774964266868961686529437257858840948994764494194077966754843292440121107132279025929919884605982774337679062932767693817904169103810856397266009701872808907601759053483463535631586606421518258431959362846166980938476266730136832466653934560137257549394112893941
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ustranscom.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'public02.ustranscom.mil'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'public01.ustranscom.mil'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							671891f167a717c97546a49f1fca2ff9cdfe6640
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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