fleetmiles.landolakes.com

- LAND O LAKES INC -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number b1:ad:33:24:e9:a5:5e:9f:00:00:00:00:50:fc:3e:23 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

LAND O LAKES INC

Organization: LAND O LAKES INC
State / Province: Minnesota
Locality: Arden Hills
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): b1:ad:33:24:e9:a5:5e:9f:00:00:00:00:50:fc:3e:23
Serial Number (int): 236172659937870198316508912506501873187
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: e4:0f:7a:17:c4:e6:d9:99:42:fa:e4:3e:5b:25:57:ba:38:24:7d:ec
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): d2:d0:32:a8:01:75:0d:8f:8c:14:51:e7:5f:ca:35:24:02:11:e1:ee
Fingerprint (sha256): 19:fc:70:d1:98:ef:95:dc:94:3a:13:c3:99:06:66:40:12:5d:7d:a7:98:d6:4c:70:f2:67:d4:28:90:5a:9a:5c

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate fleetmiles.landolakes.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fleetmiles.landolakes.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fleetmiles.landolakes.com
www.fleetmiles.landolakes.com

Other certificates including the domain name landolakes.com

(limited to 100 certificates)
smartlabel.landolakes.com
collaboration.landolakes.com
blcom.landolakes.com
loldftst.landolakes.com
sip.landolakes.com
iddcrm.landolakes.com
brandtrademarkqa.landolakes.com
businesslink.landolakes.com
dsimobile.landolakes.com
stage.landolakes.com
workspace.landolakes.com
secure.landolakes.com
portal.landolakes.com
portal.landolakes.com
dairydownloadsqa.landolakes.com
cdmsres.landolakes.com
fleetmiles.landolakes.com
apidv.landolakes.com
collaboration.landolakes.com
azure.landolakes.com
portal.landolakes.com
ssr.landolakes.com
feedlabeling.landolakes.com
collaboration.landolakes.com
expemra2.landolakes.com
kentscorecarddev.landolakes.com
webseriesqa.landolakes.com
ECPrd.landolakes.com
adminstage.landolakes.com
dairydownloads.landolakes.com
partner.landolakes.com
blcom.landolakes.com
adminsmartlabel.landolakes.com
securedev.landolakes.com
carrier.landolakes.com
iddcrm.landolakes.com
specs.landolakes.com
vcs1.landolakes.com
stage.landolakes.com
fleetmiles.landolakes.com
gis.landolakes.com
ftp.landolakes.com
sgpoc.landolakes.com
loltms.landolakes.com
dairycrm.landolakes.com
www.board.landolakes.com
basicresearch.landolakes.com
dev1.landolakes.com
smetrics.landolakes.com
specs.landolakes.com
idd-reporting.landolakes.com
dccstage.landolakes.com
dairydownloads.landolakes.com
ftpqa.landolakes.com
tms.landolakes.com
careers.landolakes.com
blcom.landolakes.com
SIP.landolakes.com
espmysite2013.landolakes.com
extecmcons.landolakes.com
integration.landolakes.com
partner.landolakes.com
idd-time.landolakes.com
dev.landolakes.com
ECPrd.landolakes.com
mpis.landolakes.com
tms.landolakes.com
ftpsqa.landolakes.com
smetrics.landolakes.com
apidv-internal.landolakes.com
ssr.landolakes.com
IMWEB2.landolakes.com
dairydownloads.landolakes.com
extecmcons.landolakes.com
integration.landolakes.com
vpnlab.landolakes.com
www.landolakes.com
portal.landolakes.com
esp.landolakes.com
ftpqa.landolakes.com
rms.landolakes.com
rms.landolakes.com
dcc.landolakes.com
loltms.landolakes.com
bimobile.landolakes.com
ssr.landolakes.com
dairycrm.landolakes.com
secure.landolakes.com
adminsmartlabelstage.landolakes.com
smartlabel.landolakes.com
fleetmilesqa.landolakes.com
dairycrm.landolakes.com
mpoldev.landolakes.com
api.landolakes.com
purinaorderfulfillment.landolakes.com
www.landolakes.com
kentscorecarddev.landolakes.com
dairydownloads.landolakes.com
dfcm.landolakes.com
mpis.landolakes.com

Certificate

The complete raw certificate details for fleetmiles.landolakes.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIaDCCB1CgAwIBAgIRALGtMyTppV6fAAAAAFD8PiMwDQYJKoZIhvcNAQELBQAw
gboxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQL
Ex9TZWUgd3d3LmVudHJ1c3QubmV0L2xlZ2FsLXRlcm1zMTkwNwYDVQQLEzAoYykg
MjAxMiBFbnRydXN0LCBJbmMuIC0gZm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxLjAs
BgNVBAMTJUVudHJ1c3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBMMUswHhcN
MTkxMjI1MDUzMDQzWhcNMjExMjI1MDYwMDQwWjB2MQswCQYDVQQGEwJVUzESMBAG
A1UECBMJTWlubmVzb3RhMRQwEgYDVQQHEwtBcmRlbiBIaWxsczEZMBcGA1UEChMQ
TEFORCBPIExBS0VTIElOQzEiMCAGA1UEAxMZZmxlZXRtaWxlcy5sYW5kb2xha2Vz
LmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALYb7HaUZ9bwyKoo
mR19Q/DkmoeCCIxRtoJ/+SR3cuux5t7qCtYrYyWIdFfuSkGWcyz41FW28fDu1GEp
iYVPVMXlePFbZ/o2RaF4gF0EeHpqWpz19qsBPp7M7EpCl0fI5C1fJaGMlhXdwUqh
iPgO4PAYjJCT819y8MiXsE9V9QImr9aCxbWt7bEL7YhFC+PJ4eGAO6inR8T6mB64
FvKPh0C64/1/GK1mU6Bz8TCRLAD2MgFK9MAF3gEOsTH11geCYycgwJlEZ4/25/yE
Jj2HqI01EkX3yUWKLykbg3xzAFb0r/hFGuDxG5zNHsthfNTR0dqCPw5G3TAgnsw6
eq7ZimqwevcN6mMubYkCNIec+Qc9Ysq4CiV1c5pHlOFcVGe2Wbcn+goojUOcc9kg
CsSv/QjKhoAoZMRLh5SBYEkiezcHhbBO2A5Uy2GxB/HlQzKfVQ6dNDb9TOn2aBMj
w+TDdNyDyRBpwHfHY1X5dqGs704Ok08dy19ab+gkRnmQ/miUUCFhq7nZR95cBnAb
n9aHg1RUMWzrc2hBMO+sorMudZ9gDhZlLXbcvqTCpgPqWO+WnjWgjqWxk5widb0u
wTucE96kFuYGVfJbYWxCmLT/msnCTYXT82T9+krO8yIZ9w4I4p5Qm9+ZeW598Ri5
dkHQZdKT43Y205TXCNT61Bqi5gaHAgMBAAGjggOqMIIDpjBDBgNVHREEPDA6ghlm
bGVldG1pbGVzLmxhbmRvbGFrZXMuY29tgh13d3cuZmxlZXRtaWxlcy5sYW5kb2xh
a2VzLmNvbTCCAfcGCisGAQQB1nkCBAIEggHnBIIB4wHhAHYAh3W/51l8+IxDmV+9
827/Vo1HVjb/SrVgwbTq/16ggw8AAAFvO6SrPAAABAMARzBFAiEAlPr2lZwNkN2I
kMqHOsNof59i9RQl6j7ao20yjOERjxACIDsW2UYLSZgK3kJkhHo9ZJneWMWP0p1O
jOtdENyo5AxIAHcAVYHUwhaQNgFK6gubVzxT8MDkOHhwJQgXL6OqHQcT0wwAAAFv
O6SrZgAABAMASDBGAiEA1pZ4N5p13GUc2brt71huy/FMt6qcC/BhvekNqLaunMoC
IQChfeWLNbHcEmXHJCPThDmjNFUV2SMk5a/gWnSbf5SBfgB2AFYUBpov18Ls0/Xh
vUSyPsdGdrm8mRFcwO+UmFXWidDdAAABbzukq1gAAAQDAEcwRQIgP/5BFSsShBfB
t61RTKMCDXj+JyghZD/m0TP4emj2ocICIQDNW76gbX0vOnUIJOTHhr4VqWU6ReDs
XXBq0bRj0DdweAB2AO5Lvbd1zmC64UJpH6vhnmajD35fsHLYgwDEe4l6qP3LAAAB
bzukq6IAAAQDAEcwRQIhAKxQfgV4EmObiKJdSGWuE3CvnAv4ZMs69S035IwNdhPL
AiAUcLm3EJzjtwoQn0EgVxKXulpqU1JtbY+rOyZ/1XDIZTAOBgNVHQ8BAf8EBAMC
BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDMGA1UdHwQsMCowKKAm
oCSGImh0dHA6Ly9jcmwuZW50cnVzdC5uZXQvbGV2ZWwxay5jcmwwSwYDVR0gBEQw
QjA2BgpghkgBhvpsCgEFMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly93d3cuZW50cnVz
dC5uZXQvcnBhMAgGBmeBDAECAjBoBggrBgEFBQcBAQRcMFowIwYIKwYBBQUHMAGG
F2h0dHA6Ly9vY3NwLmVudHJ1c3QubmV0MDMGCCsGAQUFBzAChidodHRwOi8vYWlh
LmVudHJ1c3QubmV0L2wxay1jaGFpbjI1Ni5jZXIwHwYDVR0jBBgwFoAUgqJwdN28
Uz/Pe9T3zX+nYMYKTL8wHQYDVR0OBBYEFOQPehfE5tmZQvrkPlslV7o4JH3sMAkG
A1UdEwQCMAAwDQYJKoZIhvcNAQELBQADggEBACFKqEbe8MqGkpDZZ9oucG+qW7MT
hJRKVo10wQJ+t3OixPKcVX3wKdhjZFFHa7nS+MqlCjovPm08cx7aUgoTQdbkRQsz
oqq4FJLfTeImc+3J9FbQZ0s2Usl5+jayCDBi8QHeXRI8Ju4EHkbaGkuGZFMYtPUy
hDaXtVUFtPml3CSTpdfStgGKesvf1EvtoPiRh6liVoNSSvwF2WjgYcDLdFpnKoE1
/8PaQDiBClVnGC01xMcA/FHWDtTFLMyIT0TsJZAOQ4ZO3qNBVquajByyRrEQv3aU
VFz801f9rWDWt2ywyzCZ9C4Hcqzam8XrUGPg3+DiUiJ3h8R0fW4vBJ6am7Q=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 236172659937870198316508912506501873187
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-25 05:30:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-25 06:00:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arden Hills'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LAND O LAKES INC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fleetmiles.landolakes.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 742940215275559397644177212571354161889965726599673468256449374480397782441895332944081033283381395542375931530919448409946334743327811245189634147104662295568690618192037378259542060265594581460166613540936412533619804231743284865143647031459395879144830025014861368017695201011966672273752998291028283531484472803508612900256204409812728057185669079655320476894848878361394897551755024207528395753320309212500707508547674312967282805234268363491914579455897412561910982612510079593424089586339587090369494426696226595609590521239705335508136790021200514674697650061528289911505056082574384547913939209957171546594140510398164256798096439279784904859832995315969248981152944557968308184994647004375524644187647068502709780884697404529227314671279596489277422254329901237208354745229348532934293049505760998877227848266814108953623826462975160368841018214178315112714450966877404440723379742692525336964073125609550277694262257401245136955329416979287669365967329745670246408736676526478529581460604955561489797897466364527311602864146537673624932775188315672430819886034534628949068615294094694224761213329062851217274603271435392232043787676031811919834102265004053169153412419532581259103918353639928556569543597750514342110299783
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fleetmiles.landolakes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fleetmiles.landolakes.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e40f7a17c4e6d99942fae43e5b2557ba38247dec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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