access.clarku.edu

- Trustees Of Clark University -

Issued by Entrust Certification Authority - L1M

About this certificate

This digital certificate with serial number 16:c7:4f:5b:f8:96:c8:65:00:00:00:00:54:ce:74:4e was issued on by Entrust, Inc..

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Trustees Of Clark University

Company registration number: 042111203
Organization: Trustees Of Clark University
State / Province: Massachusetts
Locality: Worcester
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 16:c7:4f:5b:f8:96:c8:65:00:00:00:00:54:ce:74:4e
Serial Number (int): 30277892579172624827033033736115352654
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 09:0e:0c:c2:85:6d:f5:d9:06:dd:60:2a:dd:da:b2:2a:64:e2:19:1a
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): 71:ff:56:16:4f:75:b6:db:c4:41:23:1c:8c:84:62:fb:ce:2e:8b:18
Fingerprint (sha256): 1b:54:53:05:19:5a:c5:b3:68:46:84:d3:32:3c:14:02:9f:03:40:08:39:45:98:ee:86:f0:fc:cc:f4:6a:13:ec

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for certificate access.clarku.edu

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for access.clarku.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

access.clarku.edu
sip.clarku.edu
lyncdiscover.clarku.edu
meet.clarku.edu
dialin.clarku.edu
oosext.clarku.edu
sfbws.clarku.edu
webconf.clarku.edu

Other certificates including the domain name clarku.edu

(limited to 100 certificates)
cluster.technolutions.net
isso.clarku.edu
mathcs.clarku.edu
gradstudies.clarku.edu
vpn.clarku.edu
*.goddard40.clarku.edu
prodinb.clarku.edu
goddard.microsearch.net
www.clarku.edu
useastucc5.acquia.com
clarkconnect.clarku.edu
cluster.technolutions.net
cluster.technolutions.net
cluster.technolutions.net
cicada.clarku.edu
biscuits.clarku.edu
gradstudies.clarku.edu
www2.clarku.edu
leep.clarku.edu
itshelp.clarku.edu
srwsus.ad.clarku.edu
cluster.technolutions.net
exchange.clarku.edu
www2.clarku.edu
clarkconnect.clarku.edu
apply.clarku.edu
cluster.technolutions.net
simplek.clarku.edu
www.clarku.edu
cuweb.clarku.edu
commons.clarku.edu
cluster.technolutions.net
apps.clarku.edu
biscuits.clarku.edu
exchange.clarku.edu
webfs.clarku.edu
prodxtender.clarku.edu
clarkconnect.clarku.edu
cluster.technolutions.net
cluster.technolutions.net
biscuits.clarku.edu
ch003.screenshare.clarku.edu
technolutions.com
cluster.technolutions.net
apps.clarku.edu
apply.clarku.edu
cluster.technolutions.net
cluster.technolutions.net
useastucc5.acquia.com
cluster.technolutions.net
store.clarku.edu
clarknet.clarku.edu
Clarktube.Clarku.edu
goddard.microsearch.net
exchange.clarku.edu
clarknet.clarku.edu
crush.clarku.edu
woodhouse.clarku.edu
clarknow.testing.clarku.edu
goddard.microsearch.net
clarknet.clarku.edu
useastucc5.acquia.com
www2.clarku.edu
news.clarku.edu
cluster.technolutions.net
wordpress.test.clarku.edu
snowwhite.ad.clarku.edu
cluster.technolutions.net
adfs.clarku.edu
goddard.microsearch.net
cluster.technolutions.net
planning.clarku.edu
itshelp.clarku.edu
cluster.technolutions.net
cluster.technolutions.net
commons.clarku.edu
cluster.technolutions.net
cluster.technolutions.net
lists.clarku.edu
useastucc5.acquia.com
moodle.clarku.edu
www2.clarku.edu
access.clarku.edu
cluster.technolutions.net
goddard.microsearch.net
canvas.clarku.edu
apply.clarku.edu
clarkconnect.clarku.edu
www.clarku.edu
mathcs.clarku.edu
cluster.technolutions.net
acquia-sites.com
cluster.technolutions.net
discoverer.clarku.edu
access.clarku.edu
gradapply.clarku.edu
webapps.clarku.edu
www.clarku.edu
apply.clarku.edu
titaniumweb.clarku.edu

Certificate

The complete raw certificate details for access.clarku.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuT1MjXy8IW5GacqI0U3T
hol3Byuy7dvHAWue+xcpwppU0PBWNqX1YslMEzHDrEjiwbmf7yToyVhfb7XyUaOY
tU6lCZStscvTJtY6lDt/T84oZ4Zdgi4sUJNAggDrLyQhmLeZjoXHj7hYP+ObCV/y
rm4WTBGk+zC3VJ3jmLEnQzA/RTALZEeCc7YBz9FqeqgimXMSX5gZTD/Dm//wSarL
W5dHkhfVOyZm5x4T2SpQynraPRnpbjLj9DzPpRDSPNLHNzDLG8IbWYYklY17N4YC
RJ+hU4kt44h93A2zbsx8YV6J1X2hf2tNPkzleYvO4MsNtdPv9/0k4o5PbGq3kkDz
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 30277892579172624827033033736115352654
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-03 16:44:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-03 17:14:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Worcester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trustees Of Clark University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '042111203'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'access.clarku.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23384314098949857898907572182748603601356695315471262653470527157677943637454974866242221630106681245719804381815191403239803443926622385061857294685263081827123086964010594859366293069182015167721694303883063256166155069242109583027160998284732581238743180372143531085521977425823345245856771665226657594378264221861151424416805821514079941717377511564562681783397779891134165473255756452856648937230995757021691540792375451419251265168820730425585995649344411271061603327271286590171558363248062543721657832917980606239474547807481946470432016036765785084487620326342818260306860259801737995159699050346119151285167
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (156 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'access.clarku.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.clarku.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.clarku.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.clarku.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.clarku.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oosext.clarku.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfbws.clarku.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webconf.clarku.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							01e00077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016326ff1e3400000403004830460221008111573e13d4f3883cbb3ecc5f569ecb4d75bf27da3c943b98002fe3c3be8dd6022100f97ef8bac3c746f9a0817b80e22d4ff4e6d7598c5f4ff709842eca8bfc1e6452007500ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000016326ff1e24000004030046304402207d67ad3741f0cac8efeb45a6e626f3fbb7eb3840a5b2f693d48be784f9091f8502201230b71a4371cc4866c1ff7b7ef343a9a7947b84e61e506c49a5f1d774e708510076005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000016326ff1e61000004030047304502204394ddebdaf69729350989be51dbf5f029cd1f5c694348c10271cb8e94839f6d022100ef5e1a04002bec6024b8219fc814b25ba7a6005a11c8140513d4bf05f3a22d5b007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016326ff20b50000040300473045022100843047fb626cbb2bb37b592871e08b83a21c8f2babfa4301dddb8378ef401bca02202520fdeedcaf0d0ad76002220b7572105c42a8cbfb26029a14501807bb660ec6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							090e0cc2856df5d906dd602adddab22a64e2191a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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