cns-int.vw.com
- Volkswagen Group of America -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number cc:6f:2a:c8:6f:a9:d7:3d:00:00:00:00:50:e6:93:e0 was issued on by Entrust, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Volkswagen Group of America
Organization:
Volkswagen Group of America
State / Province:
Michigan
Locality: Auburn Hills
Country: US
Locality: Auburn Hills
Country: US
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): cc:6f:2a:c8:6f:a9:d7:3d:00:00:00:00:50:e6:93:e0Serial Number (int): 271739723832814221149898230313414726624
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: d8:11:fc:93:b4:3f:06:ca:13:4b:7a:c5:b4:89:b2:b4:39:22:ff:4f
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): 80:ca:57:23:d8:e2:fe:4f:56:8f:7e:f2:79:f7:06:4a:f8:09:b3:7f
Fingerprint (sha256): 1b:88:6f:48:57:1d:65:18:12:49:b5:2d:a5:e5:be:78:16:b9:b3:12:6d:a9:a9:b9:b8:89:d9:c0:1c:a4:44:c7
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate cns-int.vw.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cns-int.vw.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cns-int.vw.com
www.cns-int.vw.com
www.cns-int.vw.com
Other certificates including the domain name vw.com
(limited to 100 certificates)
Revproxypool1.vw.com
owp-int.vw.com
cnp-qa.vw.com
drivergear.vw.com
mdmac.vw.com
magazine.vw.com
access.vw.com
www.volkswagen.ca
ahshuttle.vw.com
b72e13222821ba90.cajwtsign.dev.vw.com
media.vw.com
www.drivergear.vw.com
view.em.vw.com
Revproxypool1.vw.com
rastc.vwgoasra.com
access.vw.com
akamai-san212.exacttarget.com
b-h-m.spc.us00.p.con-veh.net
qa-deploy.vw.com
imperva.com
update.vw.com
imperva.com
Revproxypool1.vw.com
akamai-san156.exacttarget.com
cnws-qa.vw.com
click.cn.vw.com
ows-int.vw.com
cnws-qa.vw.com
cnws.vw.com
parts.vw.com
drivergear.vw.com
vwdesigns.vw.com
cloud.cn.vw.com
akamai-san156.exacttarget.com
cns-int.vw.com
cnp-int.vw.com
www.vw.com
www.vw.com
vwupgvehicle-vcms-api-prod.vw.com
parts.vw.com
vwgoa.vw.com
erwin.vw.com
go.vw.com
vomscarnet.vw.com
erwin.vw.com
smetrics.vw.com
owp-qa.vw.com
rp.vw.com
Revproxypool1.vw.com
vw.vwag-k-iz-temp.vw.com
st-qa.vw.com
USMIAH1VCSE01.vw.com
smetrics.vw.com
dealers.vwemissionsinfo.ca
newsroom.vw.com
closer.vw.com
view.cn.vw.com
www.vw.com
vwgrouplmc.vw.com
www.volkswagen.ca
ws-gw-na.vw.com
myvw-jwtsign-qa.vw.com
odismail.vw.com
ws-gateway-cert.vw.com
cns.vw.com
www.vw.com
ws-gateway-cert-qa.vw.com
ngw6-prod.vw.com
parts.vw.com
cnp-int.vw.com
imperva.com
newsroom.vw.com
parts.vw.com
access.vw.com
cns.vw.com
smartfleet.erl.vw.com
cns-qa.vw.com
access.vw.com
access.vw.com
USMIAH1VCSE02.vw.com
Revproxypool1.vw.com
appsxdev.vw.com
Revproxypool1.vw.com
go.vw.com
recall-qa.vw.com
deploy.vw.com
vwupgvehicle-acms-api-prod.vw.com
www.drivergear.vw.com
smetrics.vw.com
br2.vw.com
carnet.vw.com
clientupdates.vw.com
newsroom.vw.com
b-h-m.spc.us00.p.con-veh.net
vwgoa.vw.com
go.vw.com
akamai-san199.exacttarget.com
qa2-deploy.vw.com
parts.vw.com
st-qa.vw.com
owp-int.vw.com
cnp-qa.vw.com
drivergear.vw.com
mdmac.vw.com
magazine.vw.com
access.vw.com
www.volkswagen.ca
ahshuttle.vw.com
b72e13222821ba90.cajwtsign.dev.vw.com
media.vw.com
www.drivergear.vw.com
view.em.vw.com
Revproxypool1.vw.com
rastc.vwgoasra.com
access.vw.com
akamai-san212.exacttarget.com
b-h-m.spc.us00.p.con-veh.net
qa-deploy.vw.com
imperva.com
update.vw.com
imperva.com
Revproxypool1.vw.com
akamai-san156.exacttarget.com
cnws-qa.vw.com
click.cn.vw.com
ows-int.vw.com
cnws-qa.vw.com
cnws.vw.com
parts.vw.com
drivergear.vw.com
vwdesigns.vw.com
cloud.cn.vw.com
akamai-san156.exacttarget.com
cns-int.vw.com
cnp-int.vw.com
www.vw.com
www.vw.com
vwupgvehicle-vcms-api-prod.vw.com
parts.vw.com
vwgoa.vw.com
erwin.vw.com
go.vw.com
vomscarnet.vw.com
erwin.vw.com
smetrics.vw.com
owp-qa.vw.com
rp.vw.com
Revproxypool1.vw.com
vw.vwag-k-iz-temp.vw.com
st-qa.vw.com
USMIAH1VCSE01.vw.com
smetrics.vw.com
dealers.vwemissionsinfo.ca
newsroom.vw.com
closer.vw.com
view.cn.vw.com
www.vw.com
vwgrouplmc.vw.com
www.volkswagen.ca
ws-gw-na.vw.com
myvw-jwtsign-qa.vw.com
odismail.vw.com
ws-gateway-cert.vw.com
cns.vw.com
www.vw.com
ws-gateway-cert-qa.vw.com
ngw6-prod.vw.com
parts.vw.com
cnp-int.vw.com
imperva.com
newsroom.vw.com
parts.vw.com
access.vw.com
cns.vw.com
smartfleet.erl.vw.com
cns-qa.vw.com
access.vw.com
access.vw.com
USMIAH1VCSE02.vw.com
Revproxypool1.vw.com
appsxdev.vw.com
Revproxypool1.vw.com
go.vw.com
recall-qa.vw.com
deploy.vw.com
vwupgvehicle-acms-api-prod.vw.com
www.drivergear.vw.com
smetrics.vw.com
br2.vw.com
carnet.vw.com
clientupdates.vw.com
newsroom.vw.com
b-h-m.spc.us00.p.con-veh.net
vwgoa.vw.com
go.vw.com
akamai-san199.exacttarget.com
qa2-deploy.vw.com
parts.vw.com
st-qa.vw.com
Certificate
The complete raw certificate details for cns-int.vw.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHUjCCBjqgAwIBAgIRAMxvKshvqdc9AAAAAFDmk+AwDQYJKoZIhvcNAQELBQAw gboxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQL Ex9TZWUgd3d3LmVudHJ1c3QubmV0L2xlZ2FsLXRlcm1zMTkwNwYDVQQLEzAoYykg MjAxMiBFbnRydXN0LCBJbmMuIC0gZm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxLjAs BgNVBAMTJUVudHJ1c3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBMMUswHhcN MTgwODIzMTMzODI5WhcNMjAwODIzMTQwODI4WjB2MQswCQYDVQQGEwJVUzERMA8G A1UECBMITWljaGlnYW4xFTATBgNVBAcTDEF1YnVybiBIaWxsczEkMCIGA1UEChMb Vm9sa3N3YWdlbiBHcm91cCBvZiBBbWVyaWNhMRcwFQYDVQQDEw5jbnMtaW50LnZ3 LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOIqF7hHSbZwwBHu s6zF/TzuNebL5hnE6BQp/F0mMWPSSdL3nvyJUxtbvc4BCf8A5H6LhXrtRQOvEmUj YOwCIpevCBMlZ0ogLecf0dfby3fMlzwEGFSrY2Ypibo8pI6B7FdNHUgf0QwQ2SH5 LDhrqnJtK8KCvX+x+xjUJzO/o0CIBKNFDtV86ZFjrT/JICvVYq0Ep7wy/7UvvzIC LBxZyECe3i04soboHNhddLBXl3BmgBYFHtftYg7fUMVkQkVW9BhE9p1xqUFrwX62 NtfPZTmCY/OodqZyd2vyilWHCYu/mihViIPM8lG+QD3HyoOQyc51eXcssh0MFkHZ J7ZEyNUCAwEAAaOCA5QwggOQMC0GA1UdEQQmMCSCDmNucy1pbnQudncuY29tghJ3 d3cuY25zLWludC52dy5jb20wggH3BgorBgEEAdZ5AgQCBIIB5wSCAeMB4QB2AId1 v+dZfPiMQ5lfvfNu/1aNR1Y2/0q1YMG06v9eoIMPAAABZWcdejMAAAQDAEcwRQIg Y4yDsU/B40bD39S4+y38MEotHLN0VpmYkgo5l3Xcj6ACIQD4dz6MH1EHdIL8i8AD mY93Y5yFpq5PuNRdQtIKfU9HggB3AFYUBpov18Ls0/XhvUSyPsdGdrm8mRFcwO+U mFXWidDdAAABZWcdelIAAAQDAEgwRgIhAJyt3nVo6KbvzC1t5qiSzSXZpugr0dhJ qgRZtkw2AmAdAiEApdt4tSw96MDImGviqYNbOba9QvyqSFRVCOX/JbCyZ2IAdQBV gdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAWVnHXpVAAAEAwBGMEQC IHi4e1xz5NCnxU3F2Seo4pcm9v/fe3ZDBoHYeE6kEtg4AiAETXh3nGOvbKdY1WHP lAk1IdixMQMaUwlFCfSQOIFRSAB3ALvZ37wfinG1k5Qjl6qSe0c4V5UKq1LoGpCW ZDaOHtGFAAABZWcdejgAAAQDAEgwRgIhANePMoMj2qLp39rgecIjfsbpCNFFHXlt OANzk06CYSEKAiEA6sNMSbdckvCVlw3fDiNQqxZFr51Hd4JcLBMW243FE9UwDgYD VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAzBgNV HR8ELDAqMCigJqAkhiJodHRwOi8vY3JsLmVudHJ1c3QubmV0L2xldmVsMWsuY3Js MEsGA1UdIAREMEIwNgYKYIZIAYb6bAoBBTAoMCYGCCsGAQUFBwIBFhpodHRwOi8v d3d3LmVudHJ1c3QubmV0L3JwYTAIBgZngQwBAgIwaAYIKwYBBQUHAQEEXDBaMCMG CCsGAQUFBzABhhdodHRwOi8vb2NzcC5lbnRydXN0Lm5ldDAzBggrBgEFBQcwAoYn aHR0cDovL2FpYS5lbnRydXN0Lm5ldC9sMWstY2hhaW4yNTYuY2VyMB8GA1UdIwQY MBaAFIKicHTdvFM/z3vU981/p2DGCky/MB0GA1UdDgQWBBTYEfyTtD8GyhNLesW0 ibK0OSL/TzAJBgNVHRMEAjAAMA0GCSqGSIb3DQEBCwUAA4IBAQCRZrI80e16O4cr F48vmFs5el1wUCarcvt/2FcfBBUC+1ilQiRNb2dFg10hZDKpx6T3wofpy1DteMwo 4wsJEnbsiRwN206eMncbe/ow4TuljOvRPWFzlTrLgxB3bQATE68b/NH2CkfYgJ0y ufUAlibSbbuQHtIO7Nwo2pxEC8R0bC0BymLOpQu4s/8ky2twhWVu7QXzt4mkp7Nt FSPzxvk31Qf5aX1o/31BbXNUvkNodKBCJmk0znU5huihlvI00KWcquMBQ7QuY6YP pBo0Z1wVTAvXn3+MF6CGKmSBhOSfqLI56IDf2Kxs1Feo8wPUPadqwT0T9wTdBp/L bIHIqPRo -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ioXuEdJtnDAEe6zrMX9 PO415svmGcToFCn8XSYxY9JJ0vee/IlTG1u9zgEJ/wDkfouFeu1FA68SZSNg7AIi l68IEyVnSiAt5x/R19vLd8yXPAQYVKtjZimJujykjoHsV00dSB/RDBDZIfksOGuq cm0rwoK9f7H7GNQnM7+jQIgEo0UO1XzpkWOtP8kgK9VirQSnvDL/tS+/MgIsHFnI QJ7eLTiyhugc2F10sFeXcGaAFgUe1+1iDt9QxWRCRVb0GET2nXGpQWvBfrY2189l OYJj86h2pnJ3a/KKVYcJi7+aKFWIg8zyUb5APcfKg5DJznV5dyyyHQwWQdkntkTI 1QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 271739723832814221149898230313414726624 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-23 13:38:29 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-23 14:08:28 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Auburn Hills' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Volkswagen Group of America' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cns-int.vw.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28550613584425026817309241575675029857619722636540077126179735143791012051460213075853308323392179976506751077638822228725213155085946135359179579505776629699526372196932174450968141024804896693424508437752120502017377115839231933242059773699816207333989748698144932916089314187519435257850137056685031509561604411123474866299285003403082460890197093917988743073936895260303739253405537266044897194413739654146900785195278108394842788060071312642680825715573056755556641541286255450028080018796227655392542253191858097428555992903043351752215210844061600988344833221479223647335052416665344492828304833899079666026709 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cns-int.vw.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cns-int.vw.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes) 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 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d811fc93b43f06ca134b7ac5b489b2b43922ff4f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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