www.libertyinsurance.com.sg

- Liberty Mutual Group -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 9e:c0:2f:69:b9:41:ea:62:00:00:00:00:51:02:4d:c6 was issued on by Entrust, Inc..

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: GRM East
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 9e:c0:2f:69:b9:41:ea:62:00:00:00:00:51:02:4d:c6
Serial Number (int): 211015905980398244286506442994745494982
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: eb:c1:21:8f:e7:2d:95:51:0b:4e:c0:81:e0:81:1e:65:e5:77:d5:54
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 2a:fc:4b:3c:be:2a:93:20:c9:9f:69:b9:9e:2d:31:ea:a7:89:9b:9a
Fingerprint (sha256): 1b:b6:80:2a:4e:4b:23:6f:35:fc:fb:c4:04:54:30:67:41:85:a9:aa:0f:35:c4:17:e8:da:50:8c:9f:74:d0:a4

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate www.libertyinsurance.com.sg

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.libertyinsurance.com.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.libertyinsurance.com.sg
www.libertyinsurance.com.hk
libertyinsurance-sg.lmig.com
libertyinsurance-hk.lmig.com
nonprod-corp.libertyinsurance.com.sg
nonprod-corp.libertyinsurance.com.hk
nonprod-corp-sg.lmig.com
nonprod-corp-hk.lmig.com
uat.libertyinsurance.com.hk

Other certificates including the domain name libertyinsurance.com.sg

(limited to 100 certificates)
uat.mediedge.com
brmspolicy-uat.libertyinsurance.in
libertymutual.com
digital.libertyinsuranceasia.com
www.libertyseguros.com.br
www.libertyseguros.com.br
www.libertyseguros.com.br
act-dmz.libertyseguros.com.br
sip-kdc-03.libertymutual.com
sip-pdc-03.libertymutual.com
uat.mediedge.com
uat.mediedge.com
digital.libertyinsurance.com.sg
uat.mediedge.com
digital.libertyinsurance.com.sg
uat.mediedge.com
uat.mediedge.com
digital.libertyinsurance.com.sg
uat.mediedge.com
libertymutual.com
libertymutual.com
libertyinsurance.com.sg
nonprod-corp.libertyinsurance.com.hk
brmspolicy-uat.libertyinsurance.in
libertymutual.com
nonprod-easycare.libertymedicalinsurance.com
filetransfer.libertyinsurance.com.sg
uat.mediedge.com
libertymutual.com
libertymutual.com
uat.mediedge.com
libertymutual.com
digital.libertyinsurance.com.sg
online.libertyinsurance.com.sg
pwkipgf-gflnc02.gfab.lmig.com
filetransfer.libertyinsurance.com.sg
nonprod-easycare.libertymedicalinsurance.com
mail-na.lm.lmig.com
digital.libertyinsurance.com.sg
uat.mediedge.com
digital.libertyinsurance.com.sg
digital.libertyinsurance.com.sg
pwwipgf-gflnc01.gfab.lmig.com
uat.mediedge.com
nonprod-easycare.libertymedicalinsurance.com
uat.mediedge.com
libertymutual.com
sg-webmail.libertyinsurance.com.sg
digital.libertyinsurance.com.sg
uat.mediedge.com
nonprod-easycare.libertymedicalinsurance.com
libertymutual.com
www.libertyinsurance.com.sg
digital.libertyinsurance.com.sg
onelink.libertyinsurance.com.sg
libertymutual.com
digital.libertyinsuranceasia.com
uat.mediedge.com
nonprod-easycare.libertymedicalinsurance.com
act-dmz.libertyseguros.com.br
act-dmz.libertyseguros.com.br
libertymutual.com
nonprod-easycare.libertymedicalinsurance.com
brmspolicy-uat.libertyinsurance.in
uat.mediedge.com
www.libertyseguros.com.br
brmspolicy-uat.libertyinsurance.in
nonprod-easycare.libertymedicalinsurance.com
libertymutual.com
uat.mediedge.com
act-dmz.libertyseguros.com.br
libertymutual.com
uat.mediedge.com
www.libertyinsurance.com.sg
libertymutual.com
uat.mediedge.com
nonprod-easycare.libertymedicalinsurance.com
act-dmz.libertyseguros.com.br
ezcare.libertyinsurance.com.sg
www.libertyinsurance.com.sg
act-dmz.libertyseguros.com.br
onelink.libertyinsurance.com.sg
libertymutual.com
uat.mediedge.com
libertymutual.com
act-dmz.libertyseguros.com.br
ezcare.libertyinsurance.com.sg
uat.mediedge.com
nonprod-easycare.libertymedicalinsurance.com
nonprod-easycare.libertymedicalinsurance.com
libertymutual.com
act-dmz.libertyseguros.com.br
pwwipgf-gflnc02.gfab.lmig.com
libertymutual.com
mail-na.lm.lmig.com
pwkipgf-gflnc02.gfab.lmig.com
brmspolicy-uat.libertyinsurance.in
libertymutual.com
nonprod-easycare.libertymedicalinsurance.com
nonprod-easycare.libertymedicalinsurance.com

Certificate

The complete raw certificate details for www.libertyinsurance.com.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGfjCCBWagAwIBAgIRAJ7AL2m5QepiAAAAAFECTcYwDQYJKoZIhvcNAQELBQAw
gboxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQL
Ex9TZWUgd3d3LmVudHJ1c3QubmV0L2xlZ2FsLXRlcm1zMTkwNwYDVQQLEzAoYykg
MjAxMiBFbnRydXN0LCBJbmMuIC0gZm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxLjAs
BgNVBAMTJUVudHJ1c3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBMMUswHhcN
MjAwNDA5MDkxMzU4WhcNMjAxMTI5MDk0MzU3WjCBkjELMAkGA1UEBhMCVVMxFjAU
BgNVBAgTDU5ldyBIYW1wc2hpcmUxEzARBgNVBAcTClBvcnRzbW91dGgxHTAbBgNV
BAoTFExpYmVydHkgTXV0dWFsIEdyb3VwMREwDwYDVQQLEwhHUk0gRWFzdDEkMCIG
A1UEAxMbd3d3LmxpYmVydHlpbnN1cmFuY2UuY29tLnNnMIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEA+W7YUZ6oF898Td16V2MiTyummyW+6Rs2btjnsgKm
Xo3ZOYOK4cWU1xNB1AVOWe3qG4vAxr7beAB+acUeN/ZYielmS2PjU4VApxBS7ncs
WufmRuCVFUU0z0GOy6iIYtjIcBiGnG7Uz4kqIncdv8Rq5XdfvKTz367UTGtvB55y
geckcDIHueHc/eZ5jeGt0gAWsdRCmd8Q/fbdQnkpW0t40p3UT6VvkqXcQ+vsIC8j
fWY8zKb64Zsg/1MbqXKADYlBbS5dA7t1xbZ/4l5MjpxCNEnM0bZokrheObJcwSvC
tXH8AOiWfsGgXUYPn+oe6z1VdODHq8j2gP9dQi6SMFXIWQIDAQABo4ICozCCAp8w
EwYKKwYBBAHWeQIEAwEB/wQCBQAwggEgBgNVHREEggEXMIIBE4Ibd3d3LmxpYmVy
dHlpbnN1cmFuY2UuY29tLnNnght3d3cubGliZXJ0eWluc3VyYW5jZS5jb20uaGuC
HGxpYmVydHlpbnN1cmFuY2Utc2cubG1pZy5jb22CHGxpYmVydHlpbnN1cmFuY2Ut
aGsubG1pZy5jb22CJG5vbnByb2QtY29ycC5saWJlcnR5aW5zdXJhbmNlLmNvbS5z
Z4Ikbm9ucHJvZC1jb3JwLmxpYmVydHlpbnN1cmFuY2UuY29tLmhrghhub25wcm9k
LWNvcnAtc2cubG1pZy5jb22CGG5vbnByb2QtY29ycC1oay5sbWlnLmNvbYIbdWF0
LmxpYmVydHlpbnN1cmFuY2UuY29tLmhrMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwMwYDVR0fBCwwKjAooCagJIYiaHR0cDov
L2NybC5lbnRydXN0Lm5ldC9sZXZlbDFrLmNybDBLBgNVHSAERDBCMDYGCmCGSAGG
+mwKAQUwKDAmBggrBgEFBQcCARYaaHR0cDovL3d3dy5lbnRydXN0Lm5ldC9ycGEw
CAYGZ4EMAQICMGgGCCsGAQUFBwEBBFwwWjAjBggrBgEFBQcwAYYXaHR0cDovL29j
c3AuZW50cnVzdC5uZXQwMwYIKwYBBQUHMAKGJ2h0dHA6Ly9haWEuZW50cnVzdC5u
ZXQvbDFrLWNoYWluMjU2LmNlcjAfBgNVHSMEGDAWgBSConB03bxTP8971PfNf6dg
xgpMvzAdBgNVHQ4EFgQU68Ehj+ctlVELTsCB4IEeZeV31VQwCQYDVR0TBAIwADAN
BgkqhkiG9w0BAQsFAAOCAQEAiqtGdlISs6nEVN+uRLBmBXH+m5UIr1S8vMcCwBUW
8mC7CFhqvTGkItqerdVK9cl4CxU8J6p+58M6GX1fqekp7Ko6g8CzbwqcZPjKt0cW
/Kb95ws93wFCsbHXa5eQ34bYqkMuAjn5Bi6EY1kN9kOGNl/A6e/rFJeSWZyLIim5
0ZoB4goQ5xs1KZDKKXFzWo+iDl/R6kS/Jc3++mDK83YMy/A9qUBTcRyjoXe1SIms
De4tgisdE9uz5T7X/AATQN52PVXtu3mxP8WaBXK7bVHso9wKNa6GqRcLTIxve99z
XyMrKP/2keOCC15UGGD0KzDjkdqukC737XDdgPmPYQohxw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+W7YUZ6oF898Td16V2Mi
TyummyW+6Rs2btjnsgKmXo3ZOYOK4cWU1xNB1AVOWe3qG4vAxr7beAB+acUeN/ZY
ielmS2PjU4VApxBS7ncsWufmRuCVFUU0z0GOy6iIYtjIcBiGnG7Uz4kqIncdv8Rq
5XdfvKTz367UTGtvB55ygeckcDIHueHc/eZ5jeGt0gAWsdRCmd8Q/fbdQnkpW0t4
0p3UT6VvkqXcQ+vsIC8jfWY8zKb64Zsg/1MbqXKADYlBbS5dA7t1xbZ/4l5MjpxC
NEnM0bZokrheObJcwSvCtXH8AOiWfsGgXUYPn+oe6z1VdODHq8j2gP9dQi6SMFXI
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 211015905980398244286506442994745494982
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-09 09:13:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-29 09:43:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GRM East'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.libertyinsurance.com.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31487997640984584139351623680600457697362450129486010998228891578767592036072258697592862847886716261864822084671678797665719323403437227876794471781277126184077956662487132261486628886562649924553996267602513699993068177026142974969534830646099178169383590584279968472171003664183640518731915146152575953666559776017412765796892142653751395371113860506165301664604184644970291243362978358125846354487089939996277399325514576480708101206375618007572606020048647184404485940662445112476308681854342772844229218366704212784275453511039966427785307697308101281643226803714550634538738006139212784785785739784633164613721
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (279 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyinsurance.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyinsurance.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyinsurance-sg.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyinsurance-hk.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonprod-corp.libertyinsurance.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonprod-corp.libertyinsurance.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonprod-corp-sg.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonprod-corp-hk.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.libertyinsurance.com.hk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ebc1218fe72d95510b4ec081e0811e65e577d554
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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