prod.yves-rocher.de

- Laboratoires de Biologie Vegetale Yves Rocher -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 43:e1:96:93:9c:c1:54:70:00:00:00:00:50:f6:b5:7f was issued on by Entrust, Inc..

With 55 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Laboratoires de Biologie Vegetale Yves Rocher

Organization: Laboratoires de Biologie Vegetale Yves Rocher
Locality: Morbihan
Country: FR

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 43:e1:96:93:9c:c1:54:70:00:00:00:00:50:f6:b5:7f
Serial Number (int): 90229596567253520008531004510321423743
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 3d:04:62:98:4e:b8:92:b2:12:b9:38:f1:39:8f:64:2d:e2:7e:ed:99
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 73:9a:0f:09:db:52:e4:26:46:e9:f4:03:eb:e6:d1:66:6b:05:f8:da
Fingerprint (sha256): 16:3f:05:20:d2:13:ec:f9:a4:42:49:a8:f9:41:4e:02:96:e3:10:48:40:4f:c7:2d:6f:18:ff:9f:d6:40:e0:d4

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate prod.yves-rocher.de

55

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.yves-rocher.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

prod.yves-rocher.de
www.prod.yves-rocher.de
prod.yves-rocher.nl
prod.yves-rocher.be
prod.m.yves-rocher.be
jobs.yves-rocher.nl
prod.yves-rocher.se
prod.m.yves-rocher.dk
webservice.yves-rocher.be
csr.yves-rocher.nl
prod.m.yves-rocher.nl
prod.yves-rocher.fi
prod.yves-rocher.dk
jobs.yves-rocher.be
csr.yves-rocher.be
webservice.yves-rocher.nl
prod.m.yves-rocher.se
prod.yves-rocher.no
jobs.yves-rocher.dk
jobs.yves-rocher.no
webservice.yves-rocher.dk
jobs.yves-rocher.fi
csr.yves-rocher.se
prod.m.yves-rocher.fi
jobs.yves-rocher.se
prod.m.yves-rocher.no
webservice.yves-rocher.se
webservice.yves-rocher.fi
webservice.yves-rocher.no
prod.m.yvesrocherusa.com
csr.yves-rocher.dk
webservice.yvesrocherusa.com
prod.yvesrocherusa.com
jobs.yvesrocherusa.com
csr.yves-rocher.fi
csr.yves-rocher.no
webservice.yvesrocher.ca
prod.yves-rocher-kz.com
prod.m.yves-rocher.ua
prod.yves-rocher.ua
csr.yves-rocher.ua
csr-us.yvesrocherusa.com
jobs.yves-rocher.ua
csr-ca.yvesrocher.ca
jobs.yvesrocher.ca
webservice.yves-rocher.ua
jobs.yves-rocher-kz.com
prod.m.yvesrocher.ca
csr.yves-rocher-kz.com
jobs.yvesrocher.com.tr
csr.yvesrocher.com.tr
webservice.yvesrocher.com.tr
prod.m.yvesrocher.com.tr
prod.yvesrocher.com.tr
prod.yvesrocher.ca

Other certificates including the domain name yves-rocher.de

(limited to 100 certificates)
www.yves-rocher.fr
www.yves-rocher.fr
www.yves-rocher.fr
survey.yves-rocher.fr
san-16-s50.tlsprovisioning.exacttarget.com
t-www.yves-rocher.at
prod.yves-rocher.de
search.yves-rocher.at
www.yves-rocher.fr
www.yves-rocher.fr
san-16-s50.tlsprovisioning.exacttarget.com
survey.yves-rocher.fr
www.yves-rocher.de
survey.yves-rocher.fr
survey.yves-rocher.fr
www.yves-rocher.fr
news.yves-rocher.de
t-www.yves-rocher.at
san-16-s50.tlsprovisioning.exacttarget.com
t.nl.yves-rocher.de
search.yves-rocher.de
t-www.yves-rocher.at
survey.yves-rocher.fr
san-16-s50.tlsprovisioning.exacttarget.com
search.yves-rocher.at
versand.yves-rocher.de
san-16-s50.tlsprovisioning.exacttarget.com
t.nl.yves-rocher.de
san-16-s50.tlsprovisioning.exacttarget.com
secureorder.yves-rocher.de
www.yves-rocher.fr
t.nl.yves-rocher.de
www.yves-rocher.fr
survey.yves-rocher.fr
secureorder.m.yves-rocher.fr
survey.yves-rocher.fr
search.yves-rocher.at
news.yves-rocher.de
secureorder.m.yvesrocher.com.tr
secureorder.m.yves-rocher.fr
secureorder.yves-rocher.de
secureorder.yves-rocher.de
www.yves-rocher.fr
www.yves-rocher.fr
www.yves-rocher.fr
san-16-s50.tlsprovisioning.exacttarget.com
www.yves-rocher.de
www.yves-rocher.fr
www.yves-rocher.fr
t.nl.yves-rocher.de
www.yves-rocher.de
nocdn-w.yves-rocher.fr
secureorder.yves-rocher.de
secureorder.yves-rocher.de
search.yves-rocher.at
san-16-s50.tlsprovisioning.exacttarget.com
secureorder.yves-rocher.de
news.yves-rocher.de
news.yves-rocher.de
www.yves-rocher.fr
versand.yves-rocher.de
secureorder.yves-rocher.de
www.yves-rocher.fr
san-16-s50.tlsprovisioning.exacttarget.com
search.yves-rocher.de
secureorder.yves-rocher.de
survey.yves-rocher.fr
news.yves-rocher.de
secureorder.yves-rocher.de
www.yves-rocher.fr
survey.yves-rocher.fr
prod.yves-rocher.de
san-16-s50.tlsprovisioning.exacttarget.com
search.yves-rocher.de
www.yves-rocher.fr
prod.yves-rocher.de
search.yves-rocher.at
www.yves-rocher.fr
san-16-s50.tlsprovisioning.exacttarget.com
www.yves-rocher.fr
san-16-s50.tlsprovisioning.exacttarget.com
certforssl247apiA.yves-rocher.de
secureorder.m.yvesrocher.com.tr
versand.yves-rocher.de
secureorder.yves-rocher.de
t.nl.yves-rocher.de
www.yves-rocher.fr
survey.yves-rocher.fr

Certificate

The complete raw certificate details for prod.yves-rocher.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8cRs/S5AS8RzGTyFx9g/
YydC8tRRGFH1uVX+OXhnj2SqGBvf/pQ0YQEVqk/lxsE0yLluofeKhBjuZUXqUy41
Dj6p8tnLAw7KoXB+CIURfjZ9fV1JOaUm8lSwV9rslxEOgw8DKooZ0xA+L4kUKLCy
RlRwvg566DrZPLVSRf0Zq21fTs1dLZfvftojpC9/IrVoQFfMaUn6U5elnj18mo3Y
sxUaMqR+IM/4Tfp2SovAQw2MBYL/T0wIIEng42bnAPq8usqfZdKDNsuyNOPVlpz6
qy06cnzXpA0y0v+BIY0haiAYXzx822v9cBWExahpQ6GsWQKUDK/lPLD/vecGUfkQ
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 90229596567253520008531004510321423743
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-03 14:41:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-03 15:11:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Morbihan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Laboratoires de Biologie Vegetale Yves Rocher'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.yves-rocher.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30520292638405731574909274778934073855435799761698320953392701169367752877142350461369051826865329883685495953497219284301609621437243955973670481496588855653181614642365505162430363907655089322750450908918802190458505820451606509318481832165686179603598518963639959929504575117767929649578726446062580980021755637679402500906279459031474916354970929743607613505606753822258845142155361243379065828528859892559944152147163668829728870837859905554284371936813301490857018486270148188727844863312352752031318260817472585001505520183007336560688859626849220431540233155435337177575914317296316558455493992749456640512099
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1275 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.yves-rocher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prod.yves-rocher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.yves-rocher.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.yves-rocher.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.m.yves-rocher.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.yves-rocher.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.yves-rocher.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.m.yves-rocher.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webservice.yves-rocher.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csr.yves-rocher.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.m.yves-rocher.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.yves-rocher.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.yves-rocher.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.yves-rocher.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csr.yves-rocher.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webservice.yves-rocher.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.m.yves-rocher.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.yves-rocher.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.yves-rocher.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.yves-rocher.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webservice.yves-rocher.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.yves-rocher.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csr.yves-rocher.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.m.yves-rocher.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.yves-rocher.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.m.yves-rocher.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webservice.yves-rocher.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webservice.yves-rocher.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webservice.yves-rocher.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.m.yvesrocherusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csr.yves-rocher.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webservice.yvesrocherusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.yvesrocherusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.yvesrocherusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csr.yves-rocher.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csr.yves-rocher.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webservice.yvesrocher.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.yves-rocher-kz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.m.yves-rocher.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.yves-rocher.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csr.yves-rocher.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csr-us.yvesrocherusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.yves-rocher.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csr-ca.yvesrocher.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.yvesrocher.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webservice.yves-rocher.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.yves-rocher-kz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.m.yvesrocher.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csr.yves-rocher-kz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.yvesrocher.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csr.yvesrocher.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webservice.yvesrocher.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.m.yvesrocher.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.yvesrocher.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.yvesrocher.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							01690077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016cf7ae6eb50000040300483046022100fc1509344c47437412afb730739b40302a2104a7b8b17e2b2b578224b59f0b22022100b35dea5f7e64550c68637df8b2e5bcd8814465cc47afcf88759fa313dd2cb36f0076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016cf7ae6ed2000004030047304502205686b12efc030dc3522aaefa34ba8de3785dc9db744d6bd400a4dca0b53b668b022100c729994718298c4a1d2ca058d6942f8ecaed2f0b40c94a1e310ad46179f21e30007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016cf7ae6ebb000004030047304502205c6457c8bf7ba84011d3a07bfd636191ff34f42ffd2cc14fb9fc6074b5fe53f0022100831047b9b9f80add3767c61e370096b996149a9561026dc343cb5d4a35dccad7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3d0462984eb892b212b938f1398f642de27eed99
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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