*.uleth.ca

- University of Lethbridge -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 0a:ae:e0:5c:f4:cd:4d:85:00:00:00:00:51:01:f2:d9 was issued on by Entrust, Inc..

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Lethbridge

Organization: University of Lethbridge
State / Province: Alberta
Locality: Lethbridge
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:ae:e0:5c:f4:cd:4d:85:00:00:00:00:51:01:f2:d9
Serial Number (int): 14200290235738926287961738271491486425
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 34:64:85:0a:95:75:a2:4a:9b:ba:27:4d:bd:01:12:ff:e1:ed:c7:86
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 9a:76:00:9a:4f:ac:aa:f3:25:01:3a:eb:d2:64:7c:eb:b0:11:52:7e
Fingerprint (sha256): 18:af:a2:2f:f8:13:46:cd:15:4c:55:16:ed:61:c3:1e:19:cb:d9:77:1a:87:4a:eb:31:73:f8:9c:38:ab:e4:ff

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate *.uleth.ca

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.uleth.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.uleth.ca
uleth.ca
www.uleth.ca

Other certificates including the domain name uleth.ca

(limited to 100 certificates)
login-test.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
oasis.uleth.ca
arrti.uleth.ca
*.uleth.ca
*.uleth.ca
libguides.uleth.ca
digitallibrary.uleth.ca
vpn.uleth.ca
vpn2.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
vpn.uleth.ca
campaigns.uleth.ca
*.uleth.ca
uslims.uleth.ca
vpn.uleth.ca
arrti.uleth.ca
webmail.uleth.ca
*.uleth.ca
login.uleth.ca
login-test.uleth.ca
bookstore.uleth.ca
*.uleth.ca
vpn.uleth.ca
*.uleth.ca
oasis.uleth.ca
*.uleth.ca
acs1.net.uleth.ca
webexchange.uleth.ca
ise.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
idp-test.uleth.ca
oasis.uleth.ca
campaigns.uleth.ca
idp.uleth.ca
*.uleth.ca
*.uleth.ca
expenseclaim.uleth.ca
login-test.uleth.ca
*.uleth.ca
*.uleth.ca
svnhost.cs.uleth.ca
*.uleth.ca
go.uleth.ca
bookstore.uleth.ca
*.uleth.ca
*.uleth.ca
campaigns.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
its-isemnt1-p.uleth.ca
*.uleth.ca
*.uleth.ca
batman-ms.net.uleth.ca
*.uleth.ca
learning.uleth.ca
*.uleth.ca
*.uleth.ca
bookstore.uleth.ca
cwms-admin.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
arrti.uleth.ca
*.uleth.ca
*.uleth.ca
bookstore.uleth.ca
its-iseadm2-p.uleth.ca
*.uleth.ca
*.uleth.ca
millennium.uleth.ca
arrti.uleth.ca
libguides.uleth.ca
*.uleth.ca
its-iseadm2-p.uleth.ca
*.uleth.ca
webexchange.uleth.ca
*.uleth.ca
*.uleth.ca
libguides.uleth.ca
*.uleth.ca
acs2.net.uleth.ca
*.uleth.ca
libguides.uleth.ca
campaigns.uleth.ca
millennium.uleth.ca
digitallibrary.uleth.ca
*.uleth.ca

Certificate

The complete raw certificate details for *.uleth.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHSDCCBjCgAwIBAgIQCq7gXPTNTYUAAAAAUQHy2TANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y
MDA0MDMxNDQ2MjFaFw0yMjA0MjIxNTE2MjBaMGwxCzAJBgNVBAYTAkNBMRAwDgYD
VQQIEwdBbGJlcnRhMRMwEQYDVQQHEwpMZXRoYnJpZGdlMSEwHwYDVQQKExhVbml2
ZXJzaXR5IG9mIExldGhicmlkZ2UxEzARBgNVBAMMCioudWxldGguY2EwggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQz1IqorTZwyPpLmpJJudFTU5XePgt
UZKTOtDwhayNJX931/P6fH4PjGef+C84LvY9DSTzBUUm5JEtUswS30/LlFPPQNJ2
NqUCvMKltAieI66NrR2MG+jmiI2H70ELUsm13627uVEud9zEkL7c90357/mWJybl
AN1WEGyEvbHVBbCVYNMMyBc1CEcPi1KK+0y3DqfQaiLO/LXuQ6lsXIAHryaWH7JC
5CXr+fdkwdA/HOOA1f3DLcbrmRSDzxN2k4WokqkvSQ8XMQi8YOxbLYeD9ms0nEgs
6WVzxVX2dvqLHtmtxzapcd5gn4TgRLyImSTdZY1RtRC+c6ml4a457rhZAgMBAAGj
ggOVMIIDkTAtBgNVHREEJjAkggoqLnVsZXRoLmNhggh1bGV0aC5jYYIMd3d3LnVs
ZXRoLmNhMIIB+AYKKwYBBAHWeQIEAgSCAegEggHkAeIAdwBVgdTCFpA2AUrqC5tX
PFPwwOQ4eHAlCBcvo6odBxPTDAAAAXFAnUvtAAAEAwBIMEYCIQDKVhKwbWEhJK9g
KbFNMrf6SA27CAAHcU35uaKtzNspNAIhAJJhq7ByOb2D3yW/yTWqV1Bgp5rWs31d
ScbpFaCk2ETpAHYAh3W/51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq/16ggw8AAAFx
QJ1MGAAABAMARzBFAiAPqCkWvFzZ3rkUMDqz5AaacW3INyVnn10RF4McIQlY7gIh
AI6A6WZZrtDNxeWTtWCLhWAHRyc+R7qC7ENcLzoCirx0AHcAVhQGmi/XwuzT9eG9
RLI+x0Z2ubyZEVzA75SYVdaJ0N0AAAFxQJ1MIQAABAMASDBGAiEA44qVE/jPY+kf
YfGNBXeB6I1qmzp7HXd6udQAPcKBHGACIQDOgxZlcXwi4yzB0p+Ykz1RDVMyxFeT
0gpOK910eW6J9AB2AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAAB
cUCdS9QAAAQDAEcwRQIgVgyjlFgr0qaktsabVIfBIN3vPky9FyVZQKK+DvP83GkC
IQCo4wFHFA4cr3RRiUCVgcgvzgHlfJmzBgxuwf8VmqFGfzAOBgNVHQ8BAf8EBAMC
BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDMGA1UdHwQsMCowKKAm
oCSGImh0dHA6Ly9jcmwuZW50cnVzdC5uZXQvbGV2ZWwxay5jcmwwSwYDVR0gBEQw
QjA2BgpghkgBhvpsCgEFMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly93d3cuZW50cnVz
dC5uZXQvcnBhMAgGBmeBDAECAjBoBggrBgEFBQcBAQRcMFowIwYIKwYBBQUHMAGG
F2h0dHA6Ly9vY3NwLmVudHJ1c3QubmV0MDMGCCsGAQUFBzAChidodHRwOi8vYWlh
LmVudHJ1c3QubmV0L2wxay1jaGFpbjI1Ni5jZXIwHwYDVR0jBBgwFoAUgqJwdN28
Uz/Pe9T3zX+nYMYKTL8wHQYDVR0OBBYEFDRkhQqVdaJKm7onTb0BEv/h7ceGMAkG
A1UdEwQCMAAwDQYJKoZIhvcNAQELBQADggEBADlwh+5lMlQB30gsHOFE6yz6rH7u
qMutWg1CMa6EzEHv9U8tYAdrXkBwIxECDClVCI59DDZqH47JOxO/TNSAIF/KxfJG
5todS+20i6iA35sznOwAFk4Jnu02mpthWsY5JfKNDW6WdL/xCuGR6sqqyalVx6NK
ADw0E9Pr8Q5EXOqrhWAf6+rpIFMu9AnZuiFzU7B+guYvS6A2SdEZ9Yqp5IhnMZKN
1glnSvtfCraPAIPWFMfG44DYJCA1ozTg6X1Sl4tmOI3mYrZZkQH+UszAXprz4Agi
J9C9366/NoAkRoEkQ+qE0i1NlEj5AyiI3zrpqmRmg1h0vgldsYcTkzGptKs=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkM9SKqK02cMj6S5qSSbn
RU1OV3j4LVGSkzrQ8IWsjSV/d9fz+nx+D4xnn/gvOC72PQ0k8wVFJuSRLVLMEt9P
y5RTz0DSdjalArzCpbQIniOuja0djBvo5oiNh+9BC1LJtd+tu7lRLnfcxJC+3PdN
+e/5licm5QDdVhBshL2x1QWwlWDTDMgXNQhHD4tSivtMtw6n0Goizvy17kOpbFyA
B68mlh+yQuQl6/n3ZMHQPxzjgNX9wy3G65kUg88TdpOFqJKpL0kPFzEIvGDsWy2H
g/ZrNJxILOllc8VV9nb6ix7Zrcc2qXHeYJ+E4ES8iJkk3WWNUbUQvnOppeGuOe64
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14200290235738926287961738271491486425
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-03 14:46:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-22 15:16:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Alberta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lethbridge'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Lethbridge'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.uleth.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18280549692305934777713656440072989318515457720861562554030389223301958938494995213888885496212892017369157804972757055771125859621755800117913861630937655727112451149495842328425638346776626311112489838293405027858829116255991926752802847054116032527448316665851235173868602872898674311015158954661800132496287909106555632351094458047821970492240019385619320044569176317034001182290901919912749077521414532360215699939346148163754075803452277051927459082358906014828987862791762713477648059371070983709476126625180069668137215487950952736555450435587680811168071350503160742552437329351694601949696727935423513278553
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uleth.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uleth.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uleth.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (488 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3464850a9575a24a9bba274dbd0112ffe1edc786
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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