reman.arval.com
- BNP PARIBAS SA -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number 23:8e:65:b0:4f:71:23:69:00:00:00:00:50:eb:54:52 was issued on by Entrust, Inc..
With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
BNP PARIBAS SA
Organization:
BNP PARIBAS SA
Locality:
Montreuil
Country: FR
Country: FR
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 23:8e:65:b0:4f:71:23:69:00:00:00:00:50:eb:54:52Serial Number (int): 47262348498496664017358554429118960722
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId: f7:4f:c2:2c:50:c6:14:5c:2b:80:fb:61:cf:5f:c1:74:c2:0a:05:4a
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): 84:6f:22:ed:74:c3:23:d7:d7:aa:5c:05:f0:a5:16:a3:70:1a:07:f0
Fingerprint (sha256): 15:cf:af:09:d1:26:ed:5c:05:d2:d2:af:48:00:36:55:e1:f0:3d:14:0c:c0:b2:aa:2c:21:26:bf:dd:db:0c:2d
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate reman.arval.com
11
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for reman.arval.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
reman.arval.com
www.reman.arval.com
customer-reporting-v12.arval.com
creditcollection.arval.it
www.turentingonline.es
turentingonline.es
www.turentingonline.com
turentingonline.com
e-services.arval.it
motors.arval.co.uk
www.motors.arval.co.uk
www.reman.arval.com
customer-reporting-v12.arval.com
creditcollection.arval.it
www.turentingonline.es
turentingonline.es
www.turentingonline.com
turentingonline.com
e-services.arval.it
motors.arval.co.uk
www.motors.arval.co.uk
Other certificates including the domain name arval.com
(limited to 100 certificates)
ebizxx.uat.arval.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
expertws-remktg.uat.arval.com
bnp05b.bnpparibas.com
filetransfer.arval.com
broker.trn.arval.it
bnp19b.bnpparibas.com
services.arval.fr
ebizfr.uat.arval.com
privatelease-media.arval.com
bnp01tpc.bnpparibas.com
bnp04s.bnpparibas.com
mediaservices.arval.com
bnp04s.bnpparibas.com
my.uat.arval.com
api.uat.arval.com
huweb.pre.arval.com
wifiguest.arval.com
remktg1.int.arval.com
bnp12b.bnpparibas.com
bnp04s.bnpparibas.com
fte.arval.com
arval.com
bnp12b.bnpparibas.com
arval.com
indexing-octopus.int.arval.com
arval.fr
bnp12b.bnpparibas.com
demoweb.pre.arval.com
bnp05b.bnpparibas.com
motortrade.arval.com
bnp11s.bnpparibas.com
bnp04s.bnpparibas.com
apc-drp.arval.com
bnp12b.bnpparibas.com
customer-reporting.uat.arval.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
services.arval.fr
remktg.pre.arval.com
e-services-it.arval.com
bnp19b.bnpparibas.com
skypeservices.arval.com
services.arval.fr
gep.arval.com
demoweb.pre.arval.com
apps.arval.com
reporting.arval.com
bnp04s.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
bnp17b.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
demoweb.pre.arval.com
bnp04s.bnpparibas.com
bnp04s.bnpparibas.com
arvalreferrals.uat.arval.com
Sharefile.arval.com
services.arval.fr
my.arval.com
arval.com
sharefile.arval.com
arvalreferrals.uat.arval.com
motortrade.arval.com
bnp22b.bnpparibas.com
reman.arval.com
e-services-it.arval.com
fleetview.pre.arval.com
bnp04s.bnpparibas.com
bnp01tpc.bnpparibas.com
omni-oim.int.arval.com
demoweb.pre.arval.com
remktg.arval.com
arval.com
api.uat.arval.com
bnp04s.bnpparibas.com
bnp04s.bnpparibas.com
demoweb.pre.arval.com
remktg.arval.com
demoweb.pre.arval.com
access.arval.com
bnp11s.bnpparibas.com
m.remktg.pre.arval.com
indexing-octopus.arval.com
qc-pre.arval.com
bnp01tpc.bnpparibas.com
bnp19b.bnpparibas.com
deweb.pre.arval.com
cms.int.arval.com
bnp05b.bnpparibas.com
expertws-remktg.uat.arval.com
demoweb.pre.arval.com
remktg.dev.arval.com
bnp04s.bnpparibas.com
demoweb.pre.arval.com
fte.arval.com
bnp04s.bnpparibas.com
apps.pre.arval.com
bnp05b.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
expertws-remktg.uat.arval.com
bnp05b.bnpparibas.com
filetransfer.arval.com
broker.trn.arval.it
bnp19b.bnpparibas.com
services.arval.fr
ebizfr.uat.arval.com
privatelease-media.arval.com
bnp01tpc.bnpparibas.com
bnp04s.bnpparibas.com
mediaservices.arval.com
bnp04s.bnpparibas.com
my.uat.arval.com
api.uat.arval.com
huweb.pre.arval.com
wifiguest.arval.com
remktg1.int.arval.com
bnp12b.bnpparibas.com
bnp04s.bnpparibas.com
fte.arval.com
arval.com
bnp12b.bnpparibas.com
arval.com
indexing-octopus.int.arval.com
arval.fr
bnp12b.bnpparibas.com
demoweb.pre.arval.com
bnp05b.bnpparibas.com
motortrade.arval.com
bnp11s.bnpparibas.com
bnp04s.bnpparibas.com
apc-drp.arval.com
bnp12b.bnpparibas.com
customer-reporting.uat.arval.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
services.arval.fr
remktg.pre.arval.com
e-services-it.arval.com
bnp19b.bnpparibas.com
skypeservices.arval.com
services.arval.fr
gep.arval.com
demoweb.pre.arval.com
apps.arval.com
reporting.arval.com
bnp04s.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
bnp17b.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
demoweb.pre.arval.com
bnp04s.bnpparibas.com
bnp04s.bnpparibas.com
arvalreferrals.uat.arval.com
Sharefile.arval.com
services.arval.fr
my.arval.com
arval.com
sharefile.arval.com
arvalreferrals.uat.arval.com
motortrade.arval.com
bnp22b.bnpparibas.com
reman.arval.com
e-services-it.arval.com
fleetview.pre.arval.com
bnp04s.bnpparibas.com
bnp01tpc.bnpparibas.com
omni-oim.int.arval.com
demoweb.pre.arval.com
remktg.arval.com
arval.com
api.uat.arval.com
bnp04s.bnpparibas.com
bnp04s.bnpparibas.com
demoweb.pre.arval.com
remktg.arval.com
demoweb.pre.arval.com
access.arval.com
bnp11s.bnpparibas.com
m.remktg.pre.arval.com
indexing-octopus.arval.com
qc-pre.arval.com
bnp01tpc.bnpparibas.com
bnp19b.bnpparibas.com
deweb.pre.arval.com
cms.int.arval.com
bnp05b.bnpparibas.com
expertws-remktg.uat.arval.com
demoweb.pre.arval.com
remktg.dev.arval.com
bnp04s.bnpparibas.com
demoweb.pre.arval.com
fte.arval.com
bnp04s.bnpparibas.com
apps.pre.arval.com
bnp05b.bnpparibas.com
Certificate
The complete raw certificate details for reman.arval.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGKDCCBRCgAwIBAgIQI45lsE9xI2kAAAAAUOtUUjANBgkqhkiG9w0BAQsFADCB ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0x ODEyMTcxNDQ4NDhaFw0yMDA5MjUxNTE4NDdaMFQxCzAJBgNVBAYTAkZSMRIwEAYD VQQHEwlNb250cmV1aWwxFzAVBgNVBAoTDkJOUCBQQVJJQkFTIFNBMRgwFgYDVQQD Ew9yZW1hbi5hcnZhbC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8CR2P2cph664HVFMoIwI5L+c4d4a3IBhC9WUNgKKrjPCmNCSzI4foT/mXIChj 4aEheMGUHjUGAGSkWP2k02E53L7yfpzb6RTi/lggBM6cSsvbb/48K0xgbhUqMEkw kimzBKtLkEOVYjbhImBT9L3csnrQypoPMKmWtpsJUg/8sKU7bUHVCL+6sWMEJFvj 1C9tyKZVC+LxcOWRGVJWKPlThbO9QXvl6WyBnIgGAs4nWR9+GUQxVEyP6lTCA1hi //l7Nf9EqJLRfpIdpXfW3gaNheFusrwPQq36jfPWdZjT5wVoGFM5NpNxzV5Vvw1c SaY3PLd9/hwd728tbLDwqSC5AgMBAAGjggKNMIICiTATBgorBgEEAdZ5AgQDAQH/ BAIFADCCAQoGA1UdEQSCAQEwgf6CD3JlbWFuLmFydmFsLmNvbYITd3d3LnJlbWFu LmFydmFsLmNvbYIgY3VzdG9tZXItcmVwb3J0aW5nLXYxMi5hcnZhbC5jb22CGWNy ZWRpdGNvbGxlY3Rpb24uYXJ2YWwuaXSCFnd3dy50dXJlbnRpbmdvbmxpbmUuZXOC EnR1cmVudGluZ29ubGluZS5lc4IXd3d3LnR1cmVudGluZ29ubGluZS5jb22CE3R1 cmVudGluZ29ubGluZS5jb22CE2Utc2VydmljZXMuYXJ2YWwuaXSCEm1vdG9ycy5h cnZhbC5jby51a4IWd3d3Lm1vdG9ycy5hcnZhbC5jby51azAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDMGA1UdHwQsMCowKKAm oCSGImh0dHA6Ly9jcmwuZW50cnVzdC5uZXQvbGV2ZWwxay5jcmwwSwYDVR0gBEQw QjA2BgpghkgBhvpsCgEFMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly93d3cuZW50cnVz dC5uZXQvcnBhMAgGBmeBDAECAjBoBggrBgEFBQcBAQRcMFowIwYIKwYBBQUHMAGG F2h0dHA6Ly9vY3NwLmVudHJ1c3QubmV0MDMGCCsGAQUFBzAChidodHRwOi8vYWlh LmVudHJ1c3QubmV0L2wxay1jaGFpbjI1Ni5jZXIwHwYDVR0jBBgwFoAUgqJwdN28 Uz/Pe9T3zX+nYMYKTL8wHQYDVR0OBBYEFPdPwixQxhRcK4D7Yc9fwXTCCgVKMAkG A1UdEwQCMAAwDQYJKoZIhvcNAQELBQADggEBAG9wzfp9aB9WpZmUNTYUz/iuW+sm qWitS/GHBZTHKa6p5SZxNwBaugevE2cIsK0gLaSD2mu4/5AjXmlzpgqSemslTQzc 8BEwlcdub7SxfnsoMiePw2h/r2Z8mUNRRcfhKtnV6Lye3z+3VE6q2VKuWwUc1W8d I8akM4aqmsjowATCIYJBSha523nDZdOvPkzPT5npRkAA8x52ylKpWVwtYDESIp86 VquzlNJSjicUqnQXi0P0N+yEyf2LMZdgRwOgz1kQYYRUgQJnRUoze6JjcLhqNZPm gCGSPTJXjC+hIKhI84RUvFjCaLugbdVIkIUwGiNYy+gwHRD34Xh2iMG2Ano= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAkdj9nKYeuuB1RTKCMC OS/nOHeGtyAYQvVlDYCiq4zwpjQksyOH6E/5lyAoY+GhIXjBlB41BgBkpFj9pNNh Ody+8n6c2+kU4v5YIATOnErL22/+PCtMYG4VKjBJMJIpswSrS5BDlWI24SJgU/S9 3LJ60MqaDzCplrabCVIP/LClO21B1Qi/urFjBCRb49QvbcimVQvi8XDlkRlSVij5 U4WzvUF75elsgZyIBgLOJ1kffhlEMVRMj+pUwgNYYv/5ezX/RKiS0X6SHaV31t4G jYXhbrK8D0Kt+o3z1nWY0+cFaBhTOTaTcc1eVb8NXEmmNzy3ff4cHe9vLWyw8Kkg uQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 47262348498496664017358554429118960722 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-17 14:48:48 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-25 15:18:47 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montreuil' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'reman.arval.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23737296342483334644577861581717610362722320701598125997167472308521465817553580463622709268879334257824805595303254120532980965164996449263108325723691851128173361873843238196055366898493093853545218090057813459820441397049507429841194255536058043982913052123804842400921274442691612788698562224821144663648679487994186767611830975025900119385891429156707859047230234910191622590314001658052601058223502262117930412219491331303918199182624823552336496079224292958982759515841124461022596638986330140181557230451737331197258570709835099893624997620435429458896329064329482914358567919604680880396490307413656382021817 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (257 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reman.arval.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reman.arval.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer-reporting-v12.arval.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditcollection.arval.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.turentingonline.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turentingonline.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.turentingonline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turentingonline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-services.arval.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motors.arval.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.motors.arval.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f74fc22c50c6145c2b80fb61cf5fc174c20a054a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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